1rokok Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how 1rokok ("we", "us", "our") collects, processes, stores, and discloses personal data in connection with the operation of the online gaming and sports betting platform available at https://1rokok.one ("the Platform"). It applies to all registered players, prospective players who interact with the Platform without registering, and any individual whose personal data is processed in the course of 1rokok's operations.

By registering an account on the 1rokok Platform or by otherwise accessing and using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read together with the Terms & Conditions and the Responsible Gaming Policy.

We are committed to handling your personal data with care and in compliance with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia, as well as any other applicable international data protection standards relevant to our operating jurisdiction.

2. Data Controller

For the purposes of applicable data protection law, 1rokok is the data controller in respect of the personal data it processes about you. Where 1rokok engages third-party service providers to process data on its behalf, such providers act as data processors and are bound by contractual obligations to process data only in accordance with 1rokok's instructions and applicable law.

All data-related enquiries and requests to exercise your data rights should be directed to: [email protected]

3. Personal Data We Collect

1rokok collects and processes the following categories of personal data in connection with your use of the Platform:

• Identity Data: Full legal name, date of birth, gender, nationality, and copies of identity documents (e.g. MyKad, passport) provided during account verification.
• Contact Data: Email address, mobile phone number, and correspondence address.
• Account Data: Username, encrypted password, account preferences, and communication history with 1rokok support.
• Financial Data: Bank account details, FPX reference numbers, DuitNow identifiers, eWallet account references (Touch n Go, Boost), transaction history, deposit and withdrawal records, and bonus history. Note: 1rokok does not store full card numbers or CVV codes.
• Gaming Activity Data: Game play history, bet amounts, game session durations, win/loss records, and responsible gambling tool settings (deposit limits, self-exclusion status).
• Technical Data: IP address, device type, browser type and version, operating system, screen resolution, session timestamps, and referring URLs.
• Usage Data: Pages visited on the Platform, features accessed, navigation paths, and interaction data collected via cookies and analytics tools.
• Communications Data: Content of live chat transcripts, email correspondence, and any other communications you send to 1rokok.

4. How We Collect Your Data

1rokok collects personal data through the following means:

• Direct provision by you: Data you supply during account registration, identity verification, deposit and withdrawal requests, support interactions, and completion of any Platform forms.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including data gathered through cookies, web beacons, and server logs.
• Third-party sources: Data received from payment service providers (e.g. FPX gateway operators, DuitNow processors), identity verification service providers, fraud detection services, and, where applicable, publicly available registers.
• Responsible gambling monitoring: Data flagged by our responsible gambling monitoring systems in connection with account activity patterns.

5. How We Use Your Personal Data

1rokok uses personal data for the following purposes:

• To create, verify, manage, and maintain your account on the Platform
• To process deposits and withdrawals via FPX, DuitNow, Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and card payment networks
• To verify your identity and age in compliance with our 21+ policy and applicable regulatory requirements
• To detect and prevent fraud, money laundering, and other illegal or unauthorised activity
• To administer bonuses, promotions, and loyalty programmes
• To operate and enforce our Responsible Gaming tools, including monitoring for problem gambling indicators and administering self-exclusion requests
• To provide customer support and resolve disputes
• To communicate Platform updates, security notices, and, where you have consented, promotional communications
• To analyse Platform usage and improve our services, game selection, and user experience
• To comply with our legal obligations under applicable law, including obligations to regulatory authorities

6. Legal Basis for Processing

1rokok processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing necessary to comply with applicable law, including anti-money laundering obligations, age verification requirements, and regulatory reporting duties.
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform analytics, and responsible gambling monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where your prior consent has been obtained. You may withdraw such consent at any time by contacting us.

7. Data Sharing & Third Parties

1rokok does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the relevant purpose:

• Payment service providers: FPX gateway operators, DuitNow processors, eWallet providers, and card payment networks require transaction data to process deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC (Know Your Customer) service providers who assist with identity and age verification.
• Game providers: Software providers whose games are integrated into the 1rokok Platform may receive pseudonymised gameplay data for game integrity and technical support purposes.
• Fraud prevention and AML services: Shared as necessary to detect, investigate, and prevent fraud and money laundering.
• Regulatory authorities: Disclosed as required by applicable law, court order, or regulatory demand.
• IT and infrastructure providers: Cloud hosting, cybersecurity, and analytics providers operating under strict data processing agreements.

All third-party processors engaged by 1rokok are contractually required to implement appropriate technical and organisational security measures and to process personal data only as instructed.

8. International Data Transfers

In the course of providing the Platform and its services, personal data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, 1rokok ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent transfer mechanisms — to protect your data to a standard equivalent to that provided under Malaysian data protection law.

9. Data Retention

1rokok retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your account relationship with us and thereafter for such period as is required to comply with our legal obligations (including anti-money laundering record-keeping requirements, which typically mandate retention for a minimum of five (5) years following account closure).

Gaming activity records, transaction histories, and responsible gambling data are retained for the periods prescribed by applicable regulatory requirements. Technical and usage data collected via cookies is retained for shorter periods as specified in our Cookie settings.

Where data is no longer required for any lawful purpose, it will be securely deleted or anonymised in accordance with our data disposal procedures.

10. Cookies & Tracking Technologies

The 1rokok Platform uses cookies and similar tracking technologies to operate the Platform, maintain your logged-in session, detect fraud, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without affecting core functionality, including your login session.
• Functional cookies: Remember your preferences (e.g. language, display settings) to provide a personalised experience.
• Analytics cookies: Collect aggregated, anonymised information about how users interact with the Platform. Used to improve performance and content.
• Security cookies: Assist in fraud detection and account security monitoring.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

11. Your Data Rights

Subject to applicable data protection legislation, you have the following rights in relation to your personal data held by 1rokok:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty (30) days. Identity verification may be required before your request is actioned.

12. Data Security

1rokok implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and the Platform (consistent with the security standards used by Malaysian internet banking providers such as Maybank2u and CIMB Clicks), encryption at rest for sensitive data fields, access controls restricting personal data access to authorised personnel only, regular security assessments and penetration testing, and incident response procedures for data breach management.

No transmission over the internet is entirely secure. While we take all reasonable steps to protect your personal data, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

13. Children's Privacy

The 1rokok Platform is strictly for persons aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person below this age threshold, we will immediately close the associated account, return any funds, and securely delete the relevant personal data. If you believe a minor has registered on the Platform, please notify us immediately at [email protected].

14. Changes to This Policy

1rokok reserves the right to update or revise this Privacy Policy at any time. Where material changes are made, we will notify registered players via the Platform or by email to the address associated with your account. The date of the most recent revision is displayed at the top of this page. Continued use of the Platform after notification of changes constitutes acceptance of the revised Policy.

15. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 1rokok, please contact our support team via the 24/7 live chat facility on the Platform or in writing to: [email protected]

We aim to acknowledge all data-related enquiries within two (2) business days and to resolve them within thirty (30) calendar days, subject to complexity and identity verification requirements.