Privacy Policy 1 Rokok –
Personal Data Protection for Malaysian Players

Welcome to the Privacy Policy page 1 Rokok. This document constitutes an important agreement between you as a user of our platform and 1 Rokok as the responsible data controller. We want you to have a clear understanding — in plain language, not legal jargon — of how your information is managed.

This Privacy Policy applies to all personal information collected by 1 Rokok via the website https://1rokok.biz, our mobile application (where available), and all services we offer including Sports Betting, Live Casino, digital lottery, virtual sports, and more.

By registering an account or using any of the services 1 Rokok, you hereby acknowledge that you have read and understood this Privacy Policy and agree to the manner in which we handle your personal data as described herein.

1 Rokok only collects personal data that is strictly necessary to deliver our services safely and effectively. We do not collect excessive or irrelevant data. Below are the categories of data we collect and the purposes for which they are used:

Data is collected through various means, including: online registration forms, platform usage, communications with our support team, and automatically via cookie technology and server logs.

1 Rokok using your personal data solely for lawful and relevant purposes. We do not use your data for any other purpose without notifying you in advance. The primary uses of your personal data are as follows:

• Account Management: Registering and verifying your identity, managing your user account, and processing any changes to your account information;
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and FPX; as well as processing withdrawal requests to your account;
• Betting Services: Conducting all sports betting activities (Malaysia Super League football, EPL, badminton), Live Casino, lottery, virtual sports, and other games on the platform 1 Rokok;
• Fraud Prevention & AML: Detecting, investigating, and preventing fraudulent activity, money laundering, and any other illegal activity related to your account;
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance;
• Platform Improvements: Analysing usage patterns to improve platform performance, usability, and features 1 Rokok;
• Marketing Communications: Sending information about promotions, bonuses, and new offers – only if you have given your consent to receive them.

We will not use your data to make automated decisions that have a significant impact on you without human intervention, except in specific cases required by law such as AML risk assessments.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, 1 Rokok processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to perform the contract between you and 1 Rokok — for example, processing deposits and withdrawals, or settling bets you have placed;
• Compliance with Legal Obligations: Processing required under Malaysian law, including AML/CFT requirements, tax reporting, and regulatory compliance;
• Legitimate Interests: Processing necessary for legitimate business interests 1 Rokok, such as fraud prevention, security analysis, and service improvement — provided these interests do not override your rights and freedoms;
• Consent: For marketing communications and certain types of optional data use, we require your explicit consent. You may withdraw this consent at any time.

1 Rokok does not sell your personal data to any third party. This is a core principle we do not compromise on. However, we may share your data in the following limited circumstances:

• Service Providers: Third parties that assist us in delivering our services, such as payment processors (Touch 'n Go, GrabPay, DuitNow, FPX), IT service providers, and licensed game operators — all of whom are bound by strict confidentiality agreements;
• Legal Requirements: If required by a court, regulatory body, or authorised Malaysian law enforcement agency through valid legal process;
• Crime Prevention: To the relevant Malaysian authorities where we have reasonable grounds to suspect fraudulent activity, money laundering, or financial crime;
• Business Transfers: In the event of a merger, acquisition, or asset transfer – you will be notified and given appropriate options.

In all data-sharing arrangements, we ensure that receiving parties have adequate data protection measures in place and use the data only for permitted purposes.

The security of your personal data is our top priority 1 Rokok. We invest seriously in security infrastructure to ensure your information remains protected at all times. Key security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your browser and our servers 1 Rokok encrypted using the same 256-bit SSL/TLS technology used by Malaysian banking institutions;
• Encrypted Data Storage: All sensitive personal data is stored in encrypted form in our database. Passwords are stored as one-way hashes and cannot be decrypted;
• Strict Access Controls: Access to members' personal data is restricted to staff 1 Rokok who genuinely require such access to perform their duties, and all access is logged and monitored;
• Two-Factor Authentication (2FA): Available to all member accounts and required for certain financial transactions;
• 24/7 Monitoring: Continuous security monitoring to detect and respond to any threats or suspicious activity;
• Regular Security Audits: Independent security assessments are conducted on a regular basis to identify and address any vulnerabilities.

While we take all reasonable precautions, no information system can be guaranteed 100% secure. You are also responsible for keeping your account login credentials safe 1 Rokok yourself.

1 Rokok does not retain your personal data for longer than is necessary for the original purpose of collection, or longer than required under Malaysian law.

• Active Account Data: Retained for the duration your account remains active and for 7 years after account closure, to comply with legal and audit requirements;
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering and tax legislation;
• Support Communication Logs: Retained for 3 years from the date of the last communication;
• Marketing Data: Retained until you withdraw your consent or for 2 years from the last interaction, whichever comes first;
• Technical Data (Logs, IP): Retained for 90 days for security purposes and technical troubleshooting.

Once the retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be associated with you.

Under Malaysia's PDPA 2010, you have the following rights with respect to your personal data held by 1 Rokok. We are committed to respecting and facilitating the exercise of these rights:

Platform 1 Rokok uses cookies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

You may manage or delete cookies through your web browser settings at any time. However, deleting essential cookies may affect certain features of the platform 1 Rokok.

Platform 1 Rokok is intended exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If you are a parent or guardian and you believe your minor child has registered an account at 1 Rokok, please contact us immediately at support@1rokok.biz. We will investigate the matter and take appropriate action, including prompt account closure and data deletion.

1 Rokok reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the technologies we use.

When significant changes are made, we will notify you via an in-platform notification, an email to your registered address, or a prominent notice on our website. The "Last Updated" date shown at the top of this page will always reflect the date the current version came into effect.

Continued use of the platform 1 Rokok following notification of changes to the Privacy Policy will be deemed as your acceptance of the amended policy.

If you have any questions, concerns, or complaints regarding how 1 Rokok manage your personal data, or wish to exercise any of your rights as a data subject, please contact us:

• Privacy Email: privacy@1rokok.biz
• General Support Email: support@1rokok.biz
• Live Chat: Available 24 hours via the 1 Rokok platform
• Target Response Time: 3 business days for privacy enquiries, 21 days for formal data access requests
• Language of Service: Bahasa Melayu and English

You also have the right to lodge a complaint with Personal Data Protection Department (JPDP) Malaysia if you are not satisfied with how we handle your personal data. Further information is available on the official JPDP Malaysia website.

For related reading, visit the Terms & Conditions and Responsible Gaming us.