Privacy Policy aone1 – Malaysia Platform Personal Data Protection

This Privacy Policy is published by aone1 ("Platform", "we") and applies to all individuals who use the aone1 website, the aone1 mobile app, and any related services provided by our platform. It covers all your interactions with aone1 — from the moment you first visit our website through to your time as an active member.

We respect every individual's privacy and are committed to ensuring that your personal data is handled responsibly, securely, and transparently. Every data collection process we carry out has a clear purpose, is limited to legitimate operational needs, and is never used for undisclosed purposes without your consent.

This policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. In the event of any conflict between a translated version and the original Bahasa Melayu version of this document, the Bahasa Melayu version shall govern.

Aone1 collects your personal data through various methods depending on how you interact with our platform. Below are the categories of data we collect and the purposes for collection:

Every piece of data we collect is used solely for the stated and legitimate purposes. aone1 will not use your personal data for any other purpose without notifying you in advance. The following are the primary purposes for which your personal data is used:

• Member account management – registration, identity verification, and maintenance of your account profile
• Financial transaction processing – processes deposits, withdrawals, and transaction reconciliation accurately and securely
• KYC & AML Compliance – fulfills Know Your Customer and anti-money laundering requirements in line with Malaysia's financial regulations
• Platform security – detects, investigates, and prevents fraud, unauthorized access, and suspicious activity
• Customer support – responds to inquiries, resolves complaints, and provides technical support
• Service improvement – analyzes platform usage patterns to improve the overall member experience
• Marketing communications – sends promotional information, bonus offers, and platform updates (only if you have consented to receive such communications)
• Legal compliance – meets legal obligations and responds to valid requests from relevant authorities

You have the right to withdraw consent for any secondary purpose, such as marketing communications, at any time by contacting our support team. Withdrawal of consent will not affect any processing carried out prior to that withdrawal.

Aone1 does not sell, rent, or trade members' personal data to any third party for commercial purposes. However, in certain limited situations, we may need to share your data with the following parties:

• Payment service provider – licensed financial institutions and payment processors responsible for securely processing your deposit and withdrawal transactions
• Platform technology provider – gaming software companies and technology infrastructure providers supporting platform operations, subject to strict confidentiality agreements
• Law enforcement authorities – when required by law, court order, or valid request from a Malaysian or international government agency
• Regulatory and licensing authorities – for compliance audit purposes, license renewal, or related official investigations
• Affiliated companies within the same group – for internal operational purposes and integrated service improvement only, with strict access controls

Every third party that receives your data is required to comply with security and privacy standards equivalent to our Privacy Policy. They are not permitted to use that data for any purpose other than those specified in their service agreement with aone1.

The security of your personal data is aone1's highest priority. Our platform implements multiple layers of technical and organisational protection to ensure your data remains safe from unauthorised access, breaches, or misuse.

• 256-bit SSL Encryption – all data transmitted between your device and aone1 servers is encrypted using the latest TLS 1.3 protocol, ensuring no third party can intercept your information in transit
• Encryption of data at rest – personal data stored in our databases is encrypted using AES-256 standards, ensuring protection even in the event of unauthorized physical access
• Two-factor authentication (2FA) – additional security layers are available to protect your account from unauthorized access
• 24/7 security monitoring – an active intrusion detection system monitors all platform activity at all times to identify security threats
• Regular security audits – independent security assessments are conducted periodically by accredited third parties to identify and address any vulnerabilities
• Internal access controls – only aone1 staff who require access to your data to perform their duties are authorized to do so, with full audit logging

While we implement comprehensive security measures, no system can guarantee 100% absolute security. We encourage you to play your part in keeping your account safe by using a strong, unique password and not sharing your login details with anyone.

Aone1 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you on future visits and understand how you use our platform.

We use four main categories of cookies:

• Essential Cookies – required for core platform functions such as secure login, session management, and account security. These cookies cannot be disabled
• Performance Cookies – collects anonymous information about how members use the platform to help us improve speed and usability
• Functional Cookies – remembers your personal preferences such as language, display settings, and game preferences to provide a more tailored experience
• Analytics Cookies – helps us understand overall platform usage patterns for the purpose of continuous service improvement

You can manage your cookie settings through your web browser settings at any time. Please note that disabling essential cookies may affect certain features of the aone1 platform and your gaming experience.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by aone1. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact our customer support team. We will process your request within 21 business days. Some requests may require additional identity verification before they can be processed.

Aone1 does not retain your personal data longer than necessary to fulfill the purposes stated in this Privacy Policy. Our data retention periods are as follows:

• Active account data – retained for the duration your account remains active and for a defined period following account closure for audit purposes
• Financial transaction records – retained for a minimum of seven (7) years in accordance with Malaysia's financial and tax regulatory requirements
• KYC and identity verification data – retained for the period specified by the relevant regulatory authority, typically a minimum of five (5) years
• Support communication log – retained for two (2) years for reference and dispute resolution purposes
• Platform analytics and performance data – stored anonymously for a maximum of two (2) years

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

Aone1 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, relevant legislative changes, or improvements in the way we handle personal data.

When significant changes occur, we will notify you via:

• Clear notice on the aone1 platform homepage
• Message in your account upon next login
• Email notification to the address registered in your account (for major changes requiring renewed consent)

The "Last Updated" date at the top of this document will always reflect the latest version. We encourage you to review this page periodically. Your continued use of the aone1 platform after any changes are published will be considered acceptance of the updated privacy terms.

If you have any questions, concerns, or complaints regarding our Privacy Policy or how we handle your personal data, our Data Protection Officer (DPO) team is ready to assist.

You can reach us through the customer support channels available on the platform. The official email address for privacy inquiries is [email protected]. We commit to responding to all privacy-related inquiries within five (5) business days.

If you are not satisfied with our response, you have the right to file a complaint with the Malaysia Department of Personal Data Protection or the relevant regulatory body in your region. We remain open to working collaboratively to resolve any privacy concerns raised in a fair and transparent manner.