Privacy Policy a1play — Our Commitment to Your Data

01 Introduction & Scope of This Policy

Welcome to the a1play Privacy Policy. This document clearly and transparently explains how a1play collects, processes, stores and protects your personal data when you use our online sports betting and casino platform at a1play.net.

This Privacy Policy applies to all users who access the website, mobile app, and all services operating under the a1play brand. It also applies to all your interactions with our platform, including account registration, deposits, withdrawals, betting, casino games, customer support inquiries, and all other forms of communication with our team.

By registering an account or continuing to use the a1play platform, you confirm that you have read, understood, and agreed to this Privacy Policy. If you disagree with any part of this policy, please stop using the platform and contact us to close your account.

A1play takes our responsibilities as a data controller seriously, and we comply with all applicable data protection laws and regulations in the jurisdictions where we operate.

02 Personal Data We Collect

A1play collects your personal data through several channels — directly from you, automatically through your use of the platform, and in some cases, from trusted third-party sources. Here is a full breakdown of the data we collect:

Data You Provide Directly:

• Identity Information: Full name, national identification number (MyKad) or passport number, date of birth, gender and nationality during the KYC process.
• Contact Information: Email address, active Malaysia phone number, and current residential address.
• Financial Information: Bank account number, bank name and digital wallet details (Touch 'n Go eWallet, GrabPay) for deposit and withdrawal processing purposes.
• Verification Documents: A copy of your MyKad or passport, proof of address such as a utility bill or bank statement, and a selfie for identity verification.
• Support Information: Any information you share when communicating with our customer support team via live chat or email.

Automatically Collected Data:

• Technical Data: IP address, browser type and version, device type, operating system, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, session duration, in-platform actions, betting history, game records and account settings preferences.
• Location Data: Country and region-level geographic location derived from IP address for area verification and legal compliance purposes.
• Cookie Data: Session information, language preferences, platform performance data and information related to the user experience. See Section 5 for more details.

03 How We Use Your Data

The personal data we collect is used responsibly for the following purposes, and nothing beyond that:

• Account Management: Create and manage your user account, process registrations and maintain accurate account records.
• Transaction Processing: Process deposits, withdrawals and all financial transactions securely and efficiently through your chosen payment method.
• Identity Verification: Conduct the necessary KYC checks to meet legal compliance obligations and prevent financial fraud.
• Service Provision: Provide access to all platform features including Sports Betting, Live Casino, Slots, Fish Shooting Games and all other gaming products.
• Customer Support: Respond to your enquiries, resolve technical issues and provide the assistance you need through our support channels.
• Platform Security: Detect and prevent fraud, money laundering, unauthorised access and activities that violate our Terms and Conditions.
• Continuous Improvement: Analyse usage patterns in aggregate to improve platform features, technical performance and the overall user experience.
• Marketing Communications: Send information about promotions, bonus offers and platform updates — only if you have agreed to receive such communications.
• Legal Compliance: Fulfil our obligations under applicable law, including financial reporting requirements and anti-money laundering (AML) compliance obligations.

04 Data Sharing & Disclosure

A1play does not sell or rent your personal data to any third party for marketing purposes. However, in the course of operating the platform, we may need to share your information with the following parties under limited and controlled circumstances:

• Payment Processors: Selected payment service providers such as FPX, Touch 'n Go eWallet and GrabPay receive the transaction information required to process your deposits and withdrawals. They are bound by strict confidentiality agreements.
• Game Service Providers: Third-party gaming software providers may receive the minimum game session data required to deliver a seamless gaming experience. This data does not include your personal financial information.
• KYC Services: Approved third-party identity verification providers receive a copy of your documents during the initial verification process. All such providers adhere to strict data security standards.
• Relevant Authorities: a1play will disclose required information to legal authorities, law enforcement or regulatory bodies when mandated by law or a valid court order.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred to the relevant parties. Users will be notified before any such transfer takes place.

All third parties we work with are bound by data processing agreements that require them to protect your information to a standard equal to or higher than a1play's own.

05 Cookies, Tracking & Similar Technologies

A1play uses cookies and similar tracking technologies to keep the platform running smoothly, enhance user experience, and analyze platform performance. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management, security, and navigation. These cookies cannot be disabled as the platform will not function without them.
• Functional Cookies: Save your preferences such as language, time zone and display settings to deliver a more personalised experience when you return.
• Performance & Analytics Cookies: Collect information about how you use the platform — pages frequently visited, time spent and any errors encountered — to help us improve our service.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and keep your account safe from unauthorized access.

06 Data Security Measures

A1play invests seriously in data security infrastructure to ensure your information is protected at every stage — during transmission, processing, and storage. The technical and organizational measures we implement include:

• Transmission Encryption: All communications between your device and a1play's servers use TLS 1.3 protocol with 256-bit SSL encryption — the same standard used by leading banking institutions.
• Storage Encryption: Sensitive data is stored using AES-256 encryption, meaning it remains unreadable even if someone gains access to our storage systems.
• Layered Access Controls: Access to user data is strictly limited using the principle of least privilege — staff can only access the data they need to carry out their specific duties.
• Two-Factor Authentication: Our internal systems require two-factor authentication for all staff access to the user database.
• Periodic Auditing: We conduct regular internal and external security audits to identify and address vulnerabilities before they can be exploited.
• Continuous Monitoring: Our intrusion detection system operates 24 hours a day, 7 days a week to monitor for any suspicious or unusual activity on the platform.
• Incident Response Plan: We have a clear incident response procedure in place. Should a data breach occur that affects you, we will notify you within the timeframe required by applicable law.

07 Your Rights as a User

As an a1play user, you have the following rights regarding your personal data. We are committed to making it easy for you to exercise these rights without unnecessary hassle:

To exercise any of the above rights, contact our data protection team via live chat or email at [email protected]. We may need to verify your identity before processing your request to protect the security of your account.

08 Data Retention Period

A1play retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable law.

• Active Account Data: Retained for the duration your account is active and for the prescribed period after account closure to meet legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with applicable financial and tax legal requirements.
• KYC Documents: Retained for 5 years after account closure, or longer if required by anti-money laundering regulations.
• Support Communication Logs: Retained for 2 years for reference and service improvement, then deleted or anonymized.
• Technical Log Data: System and access logs are retained for 90 days for technical diagnostics and security purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

09 Child Protection

A1play is a platform designed exclusively for adults aged 18 years and above. We do not provide services to minors, and we do not knowingly collect personal data from individuals under the legal age.

We use multiple mechanisms to prevent underage access, including age verification during registration and a KYC process that requires official identification documents. If we find that we have collected data from someone under 18 years of age, we will:

• Terminate the relevant account immediately
• Delete all related data as quickly as possible
• Cancel all transactions that have been made and refund the original deposit
• Take the necessary steps to prevent similar incidents in the future

10 Amendments to the Privacy Policy

A1play reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. We are committed to notifying you of any material changes in the following ways:

• Email Notifications: Active users will receive an email notification at least 14 days before any material changes take effect.
• In-Platform Notifications: A notification banner or pop-up will be displayed on your platform upon login until you confirm that you have read the update.
• Last Updated: The "Updated" date at the top of this page always reflects the most current version of the Privacy Policy.

Continued use of the a1play platform after the effective date of any amendment constitutes your acceptance of the latest version of this Privacy Policy. If you do not agree with the changes, you have the right to close your account before the effective date.

All previous versions of the Privacy Policy are kept in our archive and can be requested from our support team for reference purposes.

11 Contact Us About Privacy

If you have any questions, concerns or complaints regarding how a1play handles your personal data, or if you wish to exercise any of the rights stated in this Privacy Policy, please contact our team:

For more formal requests relating to your data rights, please clearly state in your message: the type of request (access, correction, deletion, etc.), your full name and the email address registered to your account, and your account number if applicable. This helps us process your request more quickly and accurately.

We value every piece of privacy feedback as it helps us improve our data protection practices for all a1play users in Malaysia.