onebet2u Privacy Policy

1. Controller Identity and Contact Details

The data controller responsible for your personal data processed in connection with your use of the onebet2u platform ("onebet2u," "we," "us," or "our") is the entity operating the onebet2u online gaming platform at onebet2u.club. For all privacy-related enquiries, requests, or complaints, you may contact onebet2u's Data Protection Officer at the following address: [email protected]. Please include "Privacy Request" in the subject line of your correspondence to ensure prompt routing to the appropriate team.

2. Personal Data We Collect

onebet2u collects personal data in the categories described in the table below. The specific data points collected may vary depending on the products and services you use and the jurisdiction in which you are located.

onebet2u does not collect special category data (such as racial or ethnic origin, religious beliefs, or health data) except where required by law or with your explicit consent for responsible gaming purposes (e.g., voluntary problem gambling disclosures to facilitate self-exclusion).

3. How We Collect Personal Data

onebet2u collects personal data through the following means:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys or promotions.
• Automated Collection: Technical data collected automatically when you access the platform, including IP address, device identifiers, and session activity logs, collected via server logs, cookies, and similar tracking technologies.
• Third-Party Sources: Data received from identity verification service providers, payment processors, fraud detection services, and (where applicable) publicly available databases used for KYC and AML compliance purposes.

4. Legal Basis for Processing

onebet2u processes personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform the contract with you (i.e., provide the gaming and betting services you have registered to use), including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulatory obligations, including KYC, Anti-Money Laundering (AML), age verification, and licensing compliance requirements.
• Legitimate Interests: Processing carried out for onebet2u's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent, including direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. How We Use Your Personal Data

onebet2u uses the personal data collected for the following purposes:

• Creating and managing your onebet2u account, including verifying your identity and age;
• Processing deposits and withdrawals via your chosen payment methods (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Hong Leong Bank, Public Bank, 7-Eleven Cliqq, USDT TRC20);
• Delivering the gaming and sportsbook services you request, including live casino, slots, and sports betting;
• Providing customer support and responding to enquiries, complaints, and dispute resolutions;
• Complying with KYC, AML, and responsible gaming regulatory requirements;
• Detecting and preventing fraud, money laundering, collusion, and other prohibited conduct;
• Monitoring gaming patterns for responsible gaming purposes and applying protective measures where appropriate;
• Sending account-related communications, including transaction confirmations, security alerts, and policy updates;
• Sending marketing and promotional communications where you have provided consent or where permitted by applicable law;
• Improving the onebet2u platform through analytics, product development, and user experience research;
• Enforcing our Terms and Conditions and this Privacy Policy.

6. Disclosure to Third Parties

6.1 Service Providers

onebet2u engages third-party service providers who process personal data on our behalf as data processors under contractual data processing agreements. These include: payment processing companies, identity and age verification providers, cloud hosting and infrastructure providers, fraud and AML screening services, customer support platform providers, and analytics service providers. These parties are contractually required to process data only on onebet2u's documented instructions and to maintain appropriate security measures.

6.2 Regulatory and Law Enforcement Disclosure

onebet2u may disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies, or courts where required to do so by law, court order, or regulatory requirement, or where onebet2u reasonably believes disclosure is necessary to prevent or detect crime or fraud.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of onebet2u's assets, personal data held by onebet2u may be transferred to the relevant successor entity, subject to equivalent data protection commitments. Members will be notified of any such transfer via the platform or registered contact details.

6.4 No Sale of Personal Data

onebet2u does not sell, rent, or trade personal data to any third party for that party's own commercial marketing or advertising purposes, under any circumstances.

7. International Data Transfers

Some of onebet2u's service providers operate from outside Malaysia. Where personal data is transferred to recipients in countries that may not provide an equivalent level of data protection to that available under applicable Malaysian law, onebet2u ensures that such transfers are protected by appropriate safeguards, such as standard contractual clauses, binding corporate rules, or the recipient's certification under an applicable data protection framework. You may request details of the safeguards applicable to specific international transfers by contacting our Data Protection Officer.

8. Cookies and Tracking Technologies

onebet2u uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the platform to function, including session management, login state persistence, and security token validation. These cannot be disabled.
• Functional Cookies: Used to remember your preferences (such as language settings and display preferences) to improve your experience.
• Analytics Cookies: Used to collect aggregate, anonymised data about platform usage patterns to help us understand how the platform is being used and to identify areas for improvement.
• Security Cookies: Used for fraud detection and to identify unusual or potentially malicious access patterns.

You can manage cookie preferences via your browser settings; however, disabling strictly necessary cookies will affect platform functionality. Analytics and functional cookies may be declined through your browser settings without material impact on your ability to use the platform.

9. Data Security

onebet2u implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• TLS/SSL encryption for all data transmitted between your browser or app and the onebet2u platform;
• AES-256 encryption for personal data stored in databases;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Multi-factor authentication for administrative access to systems holding personal data;
• Regular security audits, penetration testing, and vulnerability assessments;
• Incident response procedures with defined escalation paths and notification timelines.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, onebet2u will notify affected members without undue delay in accordance with applicable law.

10. Data Retention

onebet2u retains personal data for the periods described below, after which data is securely deleted or irreversibly anonymised:

• Active Account Data: Retained for the duration of the account relationship and for a period of up to five (5) years following account closure, to satisfy AML record-keeping requirements and to respond to regulatory enquiries;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in accordance with applicable financial record-keeping obligations;
• KYC Documentation: Retained for five (5) years following the end of the business relationship or the last transaction, whichever is later;
• Marketing Preference Data: Retained until you withdraw consent or object to processing, after which it is deleted within 30 days;
• Technical and Log Data: Retained for up to 12 months from collection for security and fraud detection purposes, after which it is deleted or anonymised.

11. Your Rights and How to Exercise Them

Subject to applicable law, you have the following rights in relation to your personal data held by onebet2u:

• Right of Access: You may request a copy of the personal data we hold about you and information about how it is being processed;
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or completed;
• Right to Erasure: You may request deletion of your personal data in circumstances where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. This right is subject to legal retention obligations;
• Right to Restrict Processing: You may request that processing of your personal data be restricted in certain circumstances (e.g., where you contest the accuracy of the data or have objected to processing);
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, including profiling, and to the use of your data for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Request." onebet2u will respond to all valid requests within thirty (30) calendar days. We may request identity verification before processing your request.

12. Children and Minors

The onebet2u platform is strictly intended for use by individuals who are 21 years of age or older. onebet2u does not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been created by or personal data has been collected from a person under 21, we will take immediate steps to close the account and delete the associated personal data. If you believe a minor has registered an account on the onebet2u platform, please contact us immediately at [email protected].

13. Changes to This Privacy Policy

onebet2u reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or operational requirements. Where changes are material, we will provide advance notice via the platform, your registered mobile number, or other appropriate communication channel, no less than 14 days before the changes take effect. The "Last Updated" date at the top of this Policy indicates when it was last revised. Your continued use of the onebet2u platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

14. Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or onebet2u's personal data handling practices, please contact our Data Protection Officer:

Email: [email protected] (subject line: "Privacy Request")
Live Chat: Available 24/7 through the onebet2u platform.

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. Malaysian residents may refer complaints to the relevant personal data protection authority under the Personal Data Protection Act 2010 (PDPA).