Privacy Policy

1 Introduction

OneBet2U ("we", "us", "our", "the Platform") operates the online gaming platform accessible at onebet2u.cam and associated sub-domains. We act as the data controller in respect of personal data collected from players and visitors ("you", "your", "Data Subject") who access or use our services.

This Privacy Policy describes our practices regarding the collection, use, storage, sharing, and protection of your personal information in connection with your use of the OneBet2U platform, including our website, mobile web interface, customer support channels, and promotional communications.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy. By registering an account or continuing to use the Platform, you confirm that you have read and understood this Privacy Policy and agree to the data practices described herein.

OneBet2U serves players across Malaysia, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions. Our data practices comply with applicable international data protection standards and any applicable provisions of Malaysian law, including the Personal Data Protection Act 2010 (PDPA).

2 Definitions

For the purpose of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, location data, and online identifiers.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. OneBet2U is the Data Controller for data collected from its players and platform visitors.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller under a written contractual arrangement, such as payment processors, KYC providers, and customer support systems.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, erasure, or combination of data.
• "KYC" — Know Your Customer; the identity verification process requiring submission of government-issued identification documents and supporting materials.
• "Cookies" — small data files placed on your device by a website to store session information, preferences, and analytics data.
• "PDPA" — Malaysia's Personal Data Protection Act 2010, which governs the processing of personal data of individuals in Malaysia.

3 Data We Collect

OneBet2U collects the following categories of personal data depending on your level of interaction with the Platform:

3.1 Registration Data

When you create an account, we collect: full name, username, email address, mobile phone number, date of birth, preferred currency (MYR by default), and country of residence.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) regulations and to verify your identity, we collect copies of: valid Malaysian identity document (MyKad, Passport, or Driver's Licence), proof of address (utility bill or bank statement dated within three months), and a selfie or liveness check image. This data is handled with enhanced security controls and strict access limitations.

3.3 Financial & Transaction Data

We collect data related to your deposits and withdrawals, including: payment method type (e.g., Touch 'n Go eWallet, DuitNow, CIMB Clicks, Maybank2u, Public Bank, FPX, BTC, USDT), transaction reference numbers, amounts in MYR or cryptocurrency equivalent, timestamps, and account balance information. We do not store full payment card numbers or full bank account numbers.

3.4 Gaming Activity Data

We record your betting and gaming history, including: game titles accessed, bet amounts, wager outcomes, session duration, sport markets accessed (e.g., Liga Super Malaysia, EPL, UFC), and bonus usage records. This data is required for regulatory compliance, dispute resolution, and responsible gambling monitoring.

3.5 Device & Technical Data

We automatically collect: IP address, device type and model, operating system and version, browser type and version, screen resolution, unique device identifiers, and session logs. This data is used for security monitoring, fraud prevention, and platform optimisation.

3.6 Communications Data

Records of your interactions with our customer support team via live chat, email, or other channels, including message content, timestamps, and resolution notes.

4 How We Collect Your Data

We collect personal data through the following mechanisms:

• Directly from you — during account registration, KYC submission, deposit and withdrawal requests, support communications, and promotional opt-ins.
• Automatically — through cookies, session tokens, server logs, and analytics tools as you browse and interact with the Platform.
• From third parties — identity verification providers, payment processors (such as those operating DuitNow, FPX, and e-wallet networks), fraud prevention partners, and publicly available sources where permitted by law.

5 Legal Basis for Processing

We process your personal data on the following legal grounds, in accordance with applicable data protection law including the Malaysian PDPA 2010:

• Contractual necessity — processing required to fulfil our obligations to you under the Terms & Conditions, including account management, payments, and service delivery.
• Legal obligation — processing required to comply with applicable laws, including anti-money laundering legislation, age verification requirements, and regulatory reporting obligations.
• Legitimate interests — processing carried out in pursuit of OneBet2U's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gambling compliance, where such interests are not overridden by your rights.
• Consent — where required by law or where we have sought and received your explicit consent, such as for optional marketing communications. You may withdraw consent at any time by contacting us or updating your account preferences.

6 How We Use Your Personal Data

OneBet2U uses your personal data for the following specific purposes:

• Creating and managing your OneBet2U account and player profile
• Processing deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, BTC, USDT, and ETH
• Processing withdrawal requests to verified payment methods
• Verifying your identity and age (21+ requirement) in accordance with KYC obligations
• Detecting and preventing fraud, money laundering, and other illicit activity
• Monitoring gaming activity to identify signs of problem gambling and to provide responsible gambling interventions
• Communicating with you regarding your account, transactions, promotions, and platform updates
• Providing customer support in English, Bahasa Melayu, and Chinese
• Improving Platform functionality based on aggregated usage analytics
• Complying with regulatory reporting obligations
• Sending you promotional communications where you have opted in and not subsequently withdrawn consent

7 Data Sharing & Disclosure

OneBet2U does not sell or rent your personal data to any third party. We may share your data only in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers to assist in operating the Platform. These include: KYC and identity verification providers; payment processing networks (including those supporting Malaysian e-wallets and bank transfer services); customer support platform operators; fraud detection and anti-money laundering screening services; cloud hosting and infrastructure providers; and email and communications delivery services. All such providers are bound by contractual data processing agreements and are prohibited from using your data for any purpose other than delivering services to OneBet2U.

7.2 Regulatory and Legal Disclosure

We may be required to disclose your personal data to regulatory authorities, law enforcement agencies, courts, or other government bodies where required to do so by applicable law, court order, or regulatory directive. In such cases, we will disclose only the minimum data necessary to comply with the legal obligation.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of OneBet2U or its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to data handling practices.

7.4 Aggregated and Anonymised Data

We may share aggregated, anonymised, or de-identified data — from which individual players cannot be identified — with third parties for industry research, platform benchmarking, and analytics purposes.

8 Cookies & Tracking Technologies

OneBet2U uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use include:

• Strictly Necessary Cookies — essential for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core functionality.
• Functional Cookies — remember your preferences such as language selection (English, Bahasa Melayu, or Chinese), currency display (MYR), and previously viewed game categories.
• Analytics Cookies — collect aggregated data about how players navigate and use the Platform, allowing us to identify performance issues and improve user experience. Data is anonymised prior to analysis.
• Security Cookies — support our fraud detection systems by identifying unusual access patterns, suspicious IP addresses, and potential bot activity.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. We do not use cookies to track your activity across third-party websites.

9 Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter as required by our legal and regulatory obligations. Specific retention periods are as follows:

• Account and registration data — retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering retention obligations.
• KYC identity documents — retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later.
• Transaction records — retained for a minimum of five (5) years from the date of the relevant transaction.
• Customer support communications — retained for up to three (3) years from the date of the relevant interaction.
• Analytics and technical data — retained in anonymised form for up to twenty-four (24) months.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

10 Data Security

OneBet2U implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and our servers
• Encrypted storage of sensitive personal data at rest using AES-256 encryption
• Role-based access controls limiting data access to authorised personnel only
• Multi-factor authentication required for all administrative access to data systems
• Regular penetration testing and third-party security audits
• Real-time intrusion detection and anomaly monitoring
• Comprehensive staff data protection training and confidentiality obligations

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and applicable regulatory authorities within the timeframes required by applicable law.

11 International Data Transfers

OneBet2U operates as an international platform and some of the service providers we engage may be located outside Malaysia. Where personal data is transferred outside Malaysia, we ensure that appropriate safeguards are in place, including contractual data transfer agreements consistent with applicable data protection standards, to ensure your data receives an equivalent level of protection regardless of where it is processed.

We do not transfer personal data to jurisdictions that do not provide adequate data protection without first implementing the safeguards described above.

12 Your Rights as a Data Subject

Subject to applicable law, including the Malaysian Personal Data Protection Act 2010, you have the following rights in respect of your personal data held by OneBet2U:

To exercise any of the above rights, please contact our Data Protection team via live chat or by email at [email protected]. We will respond to verified requests within thirty (30) days. Requests may require identity verification before they can be processed.

Where you believe your data protection rights have been infringed, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

13 Children's Privacy

The OneBet2U Platform is strictly intended for individuals aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual under 21, we will take immediate steps to delete such data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has registered on OneBet2U, please contact our support team immediately via live chat or at [email protected].

14 Third-Party Links

The OneBet2U Platform may contain references to third-party payment providers such as Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, and DuitNow. While these are integrated as payment methods within our Platform, each of these providers maintains its own privacy policy and data handling practices, which are independent of this Privacy Policy. We encourage you to review the privacy policies of any payment provider you use.

OneBet2U is not responsible for the privacy practices or content of any third-party platform or service.

15 Amendments to This Privacy Policy

OneBet2U reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where required by applicable law or where changes materially affect your rights, notify registered players via email or in-platform notification.

Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We recommend reviewing this page periodically to stay informed of how we protect your data.

16 Contact Us & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or OneBet2U's data handling practices, please contact us through the following channels:

We aim to resolve all privacy-related queries within thirty (30) days of receipt. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.