Aoneplay Privacy Policy – Our Commitment to Malaysian Player Data Security

Aoneplay collects various types of information depending on how you interact with our platform. This collection occurs directly from you, automatically through your use of the platform, or occasionally through trusted third parties.

Aoneplay uses collected personal data solely for legitimate and necessary purposes in order to operate the platform effectively. Every use of data is proportionate to actual operational needs:

• Account Management: Creating, verifying, and managing user accounts, including KYC processes and age eligibility checks.
• Transaction Processing: Processing deposits, withdrawals, and bonus payments securely and efficiently through integrated payment methods.
• Service Delivery: Providing access to all games, promotions, and platform features available to you.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and activities that violate our terms of use.
• Continuous Improvement: Analyzing usage patterns in aggregate (not at an individual level) to improve platform performance and user experience.
• Service Communications: Sending important notifications related to your account, security, and platform changes that affect you.
• Marketing Communications: With your consent only, to send you promotional information and the latest offers relevant to your gaming interests.
• Legal Compliance: Fulfilling legal obligations and reporting requirements set by the relevant authorities.

We never use your data to make automated decisions that materially affect your rights without human oversight.

Aoneplay processes your personal data on the basis of one or more lawful grounds under Malaysia's Personal Data Protection Act 2010 (PDPA) and its related regulations:

• Contract Fulfillment: Processing necessary to carry out the service agreement between you and aoneplay — including all account activity, transactions, and game access.
• Legitimate Interest: Processing for platform security, fraud prevention, and service improvement purposes that do not excessively impact your privacy rights.
• Legal Obligation: Processing required by Malaysian law, including anti-money laundering requirements and reporting to authorities.
• Consent: For marketing communications and other optional data processing that requires your explicit consent.

Aoneplay does not sell, rent, or trade your personal data to any third party. However, there are limited situations where sharing information is necessary to operate the platform:

• Payment Processors: Transaction information is shared with approved payment providers (such as FPX processors and e-wallets) solely to process your transactions. All payment processors are bound by strict data protection agreements.
• Game Providers: Minimum required technical information is shared with licensed game providers to enable game access and resolve technical issues.
• Technology Service Providers: Companies that provide technical infrastructure for our platform — such as cloud services and security monitoring — may process your data as third-party data processors under our strict oversight.
• Authority: When required by law or a valid court order, aoneplay will disclose the necessary information to the relevant authorities.

All third parties that receive aoneplay user data are bound by data protection agreements and are not permitted to use that data for any purpose other than those specified.

The security of your data is our technical and operational priority. aoneplay implements multi-layered security measures to protect your information:

• Transmission Encryption: All data transmitted between your device and our servers is protected by TLS 1.3 protocol with a 256-bit SSL certificate.
• Storage Encryption: Sensitive data stored in our databases is protected with an additional layer of AES-256 encryption at the storage level.
• Access Control: Access to user data is restricted to staff who genuinely require it for their role, with the principle of least privilege applied.
• Regular Security Audits: Our systems undergo regular security reviews and penetration testing by independent auditors.
• 24/7 Monitoring: An automated monitoring system operates around the clock to detect and address any suspicious activity in real time.

Data Retention Period: aoneplay retains your personal data for as long as your account is active. After account closure, data is kept for the minimum period required by law (typically 7 years for financial records) before being securely deleted.

Aoneplay uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. There are several categories of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how users interact with the platform — such as frequently visited pages and load times — to help us improve performance.
• Preference Cookies: Saving your preferences such as language, theme, and display settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Used to understand aggregated usage patterns for the purpose of continuous platform improvement. This data is processed anonymously.

You can manage or disable most cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the aoneplay platform.

Under Malaysia's Personal Data Protection Act 2010 and best-practice privacy principles, you have the following rights regarding your personal data at aoneplay:

To exercise any of the above rights, contact our support team via live chat or email at [email protected]. We will process your request within 30 business days.

Aoneplay is a digital entertainment platform designed exclusively for individuals aged 18 and above. We do not allow, encourage, or accept registrations from any individual under the age of 18.

If we discover that a child's personal data has been collected without our knowledge — possibly as a result of false information provided during registration — we will take the following steps immediately:

• Closing and blocking the relevant account without prior notice.
• Deleting all related personal data from our systems as promptly as possible.
• Taking appropriate action in accordance with applicable Malaysian law.

In operating a platform that uses global technology infrastructure, your personal data may be processed or stored on servers located outside Malaysia. aoneplay ensures that all cross-border data transfers are handled with adequate safeguards:

• Transfers only occur to countries or entities with data protection standards equivalent to or higher than those in Malaysia.
• Appropriate data transfer agreements — including standard contractual clauses — are used where required.
• All cross-border data transfers are subject to the same security measures as data stored locally.

By using the aoneplay platform, you agree to the data transfers described in this section, provided they are carried out with adequate safeguards as stated.

Aoneplay reserves the right to update or amend this Privacy Policy at any time in line with changes in law, technology, or our business practices. Whenever there are material changes to this policy:

• The "Updated" date at the top of this page will be changed to reflect the date of the latest revision.
• You will be notified via in-platform notification or email of any material changes.
• Continued use of the platform after the policy has been updated means you accept the new terms.

We recommend checking this page periodically, especially when you receive an update notification.

If you have any questions, concerns, or complaints regarding how aoneplay handles your personal data, our team is ready to assist:

• Live Chat: The fastest method — available 24 hours a day, 7 days a week in the aoneplay app and website.
• Privacy Email: [email protected] — please use "Data Privacy Enquiry" as your email subject for faster processing.
• Response Time: We are committed to responding to all privacy-related inquiries within 5 business days, and to data rights requests within 30 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.