Official Data Protection Document

1rokok Privacy Policy – Malaysia Member Personal Data Protection

Your privacy is our priority. This document clearly explains how 1rokok collects, uses, stores, and protects your personal information at all times.

256-bit
SSL Encryption
0
Sale of Data to Third Parties
24/7
Security Monitoring
PDPA
Malaysian Act Compliance
Last Updated: 1 January 2026

1rokok's Commitment to Member Privacy

At 1rokok, we understand that member trust is the foundation of everything we do. When you register and play on our platform, you entrust us with sensitive personal information. We take this responsibility seriously — not merely to comply with the law, but because we genuinely care about the well-being of every member.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international online gambling industry standards. It clearly explains what data we collect, why we need it, how we use it, and your rights as the owner of that data.

We adopt a "privacy by design" approach — meaning data protection is not an afterthought, but built into every aspect of the 1rokok platform from the development stage. From how we design registration forms to how we process financial transactions, privacy is always a core consideration.

By using the 1rokok platform, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please contact our support team before continuing to use the platform.

This policy may be updated from time to time in line with legal changes or platform practices. Any material updates will be communicated via a notice on the website or by email to registered members.

How We Protect Your Information

Six core pillars that shape 1rokok's commitment to privacy protection for every member in Malaysia.

End-to-End Encryption

All data transmitted between your device and 1rokok servers is protected by 256-bit SSL encryption. Your personal and financial information cannot be intercepted by any party while in transit.

Secure Data Storage

Member data is stored on servers protected by strict, multi-layered access controls. Only authorised personnel may access this information, and all access is logged and continuously monitored.

KYC Identity Verification

Our KYC process is designed to protect your identity from misuse. Submitted documents are stored securely, used solely for verification purposes, and never shared with third parties without a legitimate reason.

No Data Sales

1rokok has never and will never sell members' personal information to any third party for marketing purposes. Your data belongs to you — we use it solely to manage your account properly.

24/7 Monitoring

Our security systems operate around the clock to detect any suspicious activity. Should any threat to data security arise, we will respond immediately and notify the affected members.

Malaysia PDPA Compliance

All our data handling practices are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the right to know, access, and correct your personal data at any time.

Detailed Privacy Policy

1 Information We Collect

1rokok collects your personal information only when necessary and only to the extent required for the stated purposes. The following are the categories of data we collect:

Account Registration Information:

  • Full name as per identity card
  • Date of birth (for age verification)
  • Active email address
  • Mobile phone number
  • Passwords (stored as irreversible hashes)
  • Country and residential address

Identity Verification (KYC) Information:

  • Copy of Malaysian Identity Card (MyKad) or passport
  • Proof of address documents such as a recent utility bill or bank statement
  • Bank account details for withdrawal processing

Financial Transaction Information:

  • Deposit and withdrawal history
  • Payment method used
  • Betting and gaming activity records

Technical & Usage Information:

  • IP address and device information
  • Browser type and operating system
  • Session data and platform activity logs
  • Cookies and related tracking data (details in Section 5)

We do not collect credit/debit card information directly. All payment transactions are handled through integrated third-party payment processors that comply with PCI-DSS security standards.

2 How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. Below is a summary of how your data is used:

Data Type Purpose of Use Legal Basis
Registration information Account management, login, service communications Contract performance
KYC Documents Identity verification, fraud prevention, AML compliance Legal obligation
Transaction data Deposit/withdrawal processing, financial records Contract performance
Technical data Platform security, fraud detection, service improvement Legitimate interest
Game records Dispute resolution, audits, responsible gaming Legal obligation & contract
Contact information Service notices, promotions (with consent), customer support Consent / legitimate interest

We will not use your data for purposes not listed above without first obtaining your additional consent.

3 Information Sharing with Third Parties

1rokok does not sell, rent, or disclose members' personal information to third parties for their own commercial purposes. However, in the course of operating our platform, there are limited situations where information may be shared:

  • Payment Service Providers: Transaction information required to process deposits and withdrawals is shared with payment processors that have been vetted and are bound by strict confidentiality agreements.
  • Game Providers: Minimal username and session data is shared with third-party game providers solely to deliver the gaming experience. They do not receive your full identifying information.
  • Regulatory Authority: We fully comply with any lawful requests from Malaysian authorities with legal jurisdiction, including for the purposes of criminal investigation or anti-money laundering (AML) compliance.
  • Identity Verification Services: KYC documents may be verified through integrated third-party verification services that comply with PDPA and international data security standards.

All third parties working with 1rokok are contractually bound to protect your data and use it only for specified purposes. We do not permit them to use your data for their own needs.

4 Data Security & Protection Measures

We implement a comprehensive set of technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

  • 256-bit SSL Encryption for all data in transit between your browser and our servers.
  • Data encryption at rest — sensitive data such as identity card numbers and banking information is stored in encrypted form.
  • Role-based access control — staff may only access data that is relevant to their specific duties.
  • Regular security audits by independent parties to identify and address any vulnerabilities.
  • Real-time threat monitoring using advanced intrusion detection systems.
  • Secure data backups to ensure service continuity and data recovery in the event of an incident.
  • Regular security training for all staff who handle members' personal data.

While we do our best, no system is 100% completely secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities within the timeframe required by law.

5 Cookies & Tracking Technologies

The 1rokok website and app use cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
  • Functional Cookies: Stores your preferences such as language, display settings, and session information for a seamless browsing experience.
  • Analytics Cookies: Helps us understand how users interact with the platform so we can continuously improve our services. This data is collected in aggregate and does not personally identify you.
  • Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account.

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect platform functionality. Continued use of our platform is considered consent to the use of cookies in accordance with this policy.

6 Data Retention Period

We retain your personal data for as long as necessary to fulfill the purposes stated in this policy, or as required by applicable law:

  • Active account data: Retained for as long as your account remains active on the 1rokok platform.
  • Closed account data: Retained for a minimum of 5 years after account closure for AML compliance and audit requirements.
  • Financial transaction records: Retained for 7 years in accordance with Malaysia's financial legal requirements.
  • KYC documents: Retained for the period specified by regulatory authorities, typically 5 years after the business relationship ends.
  • Support communication logs: Retained for 2 years for dispute resolution purposes.
  • Anonymous analytics data: Can be retained indefinitely as it contains no personally identifiable information.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with established procedures.

7 Your Rights as a Data Subject

Under Malaysia's PDPA and 1rokok's policy, you have the following rights regarding your personal data:

Right of Access

You have the right to obtain a copy of the personal data we hold about you. Requests can be made through our support team.

Right to Rectification

If any of your data is inaccurate or out of date, you may request a correction at any time via your account settings or our support team.

Right to Restrict Processing

In certain circumstances, you may request that we restrict how we process your data while a dispute is being resolved.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time by contacting us.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal retention obligations.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another service where applicable.

To exercise any of the above rights, contact the 1rokok support team. We will process your request within 30 business days. Identity verification may be required before your request is processed.

8 Child Data Protection

The 1rokok platform is intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

If you believe we have inadvertently collected data from someone under the age of 18, please contact us immediately. We will take steps to delete that information as quickly as possible and terminate the account in question without delay.

Parents and guardians concerned about potential use of this platform by their children are encouraged to use parental control tools on their devices and home networks to prevent unauthorised access.

9 Changes to This Privacy Policy

1rokok reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements.

When material changes are made, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Displaying a clear notice on the platform's home page for an appropriate period.
  • Sending email notifications to all registered members if the changes directly affect how we handle their data.

Your continued use of the 1rokok platform after any changes take effect constitutes your acceptance of the updated Privacy Policy.

10 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or 1rokok's handling of your personal data, our team is ready to assist.

You may contact our Data Protection Officer via:

  • Email: [email protected]
  • Live Support: Via the live chat function within the 1rokok platform or app
  • Response Time: We aim to respond to all privacy-related enquiries within 3 business days.

Your trust is our most valuable asset. Do not hesitate to contact us if anything about how we handle your information is unclear. We are always ready to provide straightforward and honest answers.

Join 1rokok with Complete Confidence

Your privacy and data security are fully protected on our platform. Register a free account today and enjoy a safe, trusted, and responsible online entertainment experience with the 1rokok Malaysia community.

Bahasa Melayu