1year Privacy Policy – Personal Data Protection for Malaysia Platform Members

Welcome to the 1year Privacy Policy. This document is issued by the 1year platform ("we", "1year", "Company") to explain how we handle the personal data of our members – registered users of the 1year online casino platform operating at 1year.my.

We take your privacy very seriously. In today's digital world, a member's trust in an online platform depends not only on game quality or withdrawal speed — it also hinges on confidence that their personal information is in responsible, secure hands. That core principle underpins every data-handling decision we make at 1year.

This Privacy Policy applies to all information collected through the 1year.my website, including all sub-domains, game pages, registration forms, verification processes, financial transactions and customer support interactions. It also applies to information we may receive from third parties in connection with our services to you.

This Privacy Policy is governed by and complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all regulations contained therein. We are committed to ensuring ongoing compliance with applicable Malaysian data protection laws.

1year only collects the personal data necessary to deliver its online casino platform services to you in a secure, fair and effective manner. The data we collect falls into several key categories:

1year collects members' personal data through various channels, depending on how you interact with our platform. Generally, data is collected in the following ways:

• Account Registration: When you register a 1year account, you provide basic identity and contact information required to set up your account.
• KYC Verification Process: During the Know Your Customer (KYC) process required prior to your first withdrawal, you may be asked to upload a copy of your MyKad or other valid identification document along with proof of your current address.
• Financial Transactions: Information related to the payment methods you use for deposits and withdrawals is automatically collected at the time of the transaction through certified payment providers.
• Platform Interactions: While you play games, browse pages or interact with features on the 1year platform, our systems automatically record these activities for security, record-keeping and service improvement purposes.
• Support Communications: When you contact the 1year support team via live chat, email or any other communication channel, the content of that interaction is stored for quality control purposes and future reference.
• Cookies and Tracking Technologies: The 1year platform uses cookies and similar tracking technologies to collect technical and behavioural data while you use our website. Further details on cookie usage are covered in Section 8.
• Certified Third Parties: In some circumstances, we may receive your personal data from third-party service providers working with 1year, such as payment providers or identity verification agencies, for specified purposes and with your consent.

The personal data we collect is used solely for the legitimate purposes stated below. 1year will not use your data for any unrelated purpose without obtaining your consent beforehand:

• Account Setup & Management: Creating, verifying and managing your 1year account, including the secure login process and two-factor authentication.
• Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, with winnings withdrawn to your preferred payment method within 5 minutes.
• Identity Verification (KYC): Conduct identity checks required by law and online gambling regulations to verify your eligibility and to prevent fraud and money laundering.
• Gaming Service Provision: Enables you to access and enjoy all games on the 1year platform, including slots, French Roulette, Double Bonus Poker and other table games, as well as saving your game history and statistics.
• Customer Support: Providing technical assistance, resolving complaints, answering enquiries and ensuring your gaming experience at 1year runs smoothly and satisfactorily.
• Security & Fraud Prevention: To identify, investigate, and prevent fraudulent activity, multi-account usage, money laundering, and any breach of terms of use that may harm the 1year platform or its other members.
• Legal Compliance: Fulfilling our legal obligations under Malaysia's PDPA and other applicable laws, including responding to lawful directives from relevant authorities.
• Service Communications: Sending important account notifications such as transaction confirmations, security alerts and 1year platform policy updates. Marketing materials will only be sent with your explicit consent.
• Platform Improvement: Analysing aggregated, anonymised usage patterns to improve the functionality, performance and overall user experience of the 1year platform for member satisfaction.

1year takes a highly limited and cautious approach to sharing members' personal data with third parties. As a matter of principle, we does not sell, does not rent and does not disclose your personal data to any external party for their own commercial or marketing purposes.

However, in the normal operation of the 1year platform, there are limited situations where some data may need to be shared with specific parties acting as data processors on our behalf, namely:

• Payment Providers: The transaction information required is shared with payment providers such as FPX, Touch 'n Go, GrabPay and DuitNow for the purpose of securely processing your deposits and withdrawals. These providers are subject to strict financial security standards.
• Game Service Providers: Minimal technical data may be shared with game software providers that supply slots, French Roulette and table game content on the 1year platform, for technical and licensing compliance purposes.
• Identity Verification Provider: KYC documents may be processed by certified third-party identity verification service providers to assist us in meeting our compliance obligations.
• Legal Authorities: We are legally required to disclose certain information to legitimate Malaysian authorities upon receipt of a valid official directive, including in cases involving financial crime investigations, money laundering, or lawful court orders.

We do not share members' personal data with advertising companies, data brokers, or any third party that is not directly involved in delivering 1year's services to you.

Protecting members' personal data is a responsibility that 1year takes extremely seriously. We continuously invest in the latest technologies and procedures to ensure your data remains safe and secure at all times. Our implemented security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and 1year's servers is encrypted using Transport Layer Security (TLS) with 256-bit keys — the same encryption technology used by leading financial institutions in Malaysia.
• Static Data Encryption: Sensitive personal data stored in 1year's databases is encrypted at rest using AES-256 encryption standards, ensuring data remains unreadable even in the event of unauthorised physical access.
• Strict Access Controls: Access to members' personal data within 1year's systems is restricted to staff with a legitimate business need, based on the principle of least privilege. All access is logged and continuously monitored.
• Two-Factor Authentication (2FA): 1year supports and encourages the use of 2FA for all member accounts. Internal systems that access sensitive data are also required to use multi-factor authentication.
• 24/7 Security Monitoring: An automated security monitoring system operates around the clock to detect and respond to any threats or suspicious activity that could potentially compromise 1year members' data security.
• Regular Security Testing: 1year conducts regular penetration testing and security audits carried out by qualified independent third parties to identify and address any system vulnerabilities before they can be exploited.

1year retains members' personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. Our retention policy is as follows:

• Active Account Data: For as long as your account remains active and you are a 1year member, your relevant personal data will be retained to enable us to provide our services to you effectively.
• Financial & Transaction Data: Financial transaction records are retained for a minimum of 7 years after account closure, in accordance with Malaysian accounting and financial legislation relating to anti-money laundering requirements.
• KYC Documents: Identity verification documents are retained for a minimum of 5 years after the business relationship ends, or for as long as required by applicable law.
• Security Logs: Access logs and security activity are retained for 2 years for incident investigation purposes should the need arise.
• Support Communication Data: Customer support interaction records are retained for 2 years from the date of the last interaction, for reference purposes and to assist in resolving any complaints that may arise at a later stage.

Once the applicable retention period has expired, data will be securely deleted or fully anonymised in accordance with secure, irreversible data deletion procedures.

The 1year platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security and analyse overall platform usage. Cookies are small text files stored on your device when you visit the 1year website.

1year uses several types of cookies:

• Mandatory Strictly Necessary Cookies: These cookies are essential for the basic operation of the 1year website and cannot be disabled. They include login session cookies, security tokens and cookies that remember your security preferences. Without these cookies, the 1year platform cannot function properly.
• Mandatory Performance Cookies: These cookies collect information about how you use the 1year website – pages visited most often, error messages received, and so on. All information collected is aggregated and anonymised, used solely to improve platform performance for all members.
• Options Functional Cookies: These cookies allow 1year to remember your preferences — such as your preferred language, last betting limit or favourite games — in order to provide a more personalised experience. You may disable these cookies, but some features may not function fully as a result.
• Options Analytics Cookies: 1year uses web analytics that allow us to understand overall platform usage patterns in an aggregated and anonymised form. This data helps us make better decisions about platform improvements for the benefit of all members.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect your ability to log in or use certain features of the 1year platform properly.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and 1year's Privacy Policy, you have the following rights with respect to the personal data we hold about you:

The 1year platform is intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

During the registration process, you are required to confirm that you are 18 years of age or older. Should 1year discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will take the following steps immediately:

• Immediately suspend the account in question.
• Permanently delete all personal data associated with that individual from our systems.
• Returning any remaining deposit balance in the account.
• Reporting incidents to the relevant authorities where required under Malaysian law.

1year reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements to how we protect your data. We are committed to keeping you informed of any material changes in a clear and timely manner.

When there are material changes to this Privacy Policy, we will notify you through:

• An email notification sent to the registered email address on your 1year account at least 14 days before the changes take effect.
• A prominent notice displayed on the 1year platform homepage for a period of at least 30 days.
• An in-account reminder message when you first log in after an amendment takes effect, with a link to the updated document.

Continued use of the 1year platform after any amendments take effect will be considered acceptance of the revised Privacy Policy. If you do not agree with the changes, please close your account before the effective date by contacting the 1year support team.