Member Data Protection & Privacy

Privacy Policy 1bandar – How We Protect Your Data

At 1bandar, member privacy is more than a legal obligation — it is a core value we take seriously. This document transparently explains what data we collect, why we need it, how we use it, and your rights as the owner of that data as a member of our betting platform.

Last updated: 1 January 2026
SSL 256
Data Encryption
PDPA
Malaysia Compliance
0
Sale of Data to Third Parties
480K+
Member Data Protected

Six Ways 1bandar Protects Your Personal Data

Privacy is more than a document — it is a daily practice embedded at every level of 1bandar's operations.

256-bit End-to-End SSL Encryption

All data transmitted between your device and 1bandar's servers is encrypted using 256-bit SSL technology — the same standard used by Malaysia's major banks such as Maybank and CIMB. This means your personal information, passwords, and transaction details cannot be intercepted or read by third parties while in transit.

Banking Standards
Compliance with Malaysia's PDPA

1bandar is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). This means we only collect data that is strictly necessary, store it securely, and never use it for purposes you have not consented to. Your rights as a data subject are protected under applicable Malaysian law.

PDPA 2010
Data Not Sold to Third Parties

1bandar has never and will never sell, rent, or disclose members' personal data to third parties for marketing or commercial purposes. Your data belongs to you. We only share the necessary information with service providers who have signed strict confidentiality agreements with 1bandar.

No Data Sales
Secure & Audited Servers

1bandar member data is stored in data centres secured around the clock. Our servers undergo regular independent security audits to ensure there are no exploitable vulnerabilities. Access to sensitive member data is restricted to staff who genuinely require it and is subject to strict authorisation controls.

Periodic Audits
Data Controls in Your Hands

You have the right to access, correct, and request the deletion of your personal data held by 1bandar. Requests may be submitted by email to our privacy team and will be processed within 14 business days. We believe transparency is the foundation of genuine trust between 1bandar and its members.

Member Rights Protected
Data Breach Notification

In the event of a security breach affecting members' personal data — however unlikely, given the protections we have in place — 1bandar is committed to notifying affected members within 72 hours and taking immediate action to contain the damage and safeguard your data.

Transparent & Accountable
256
SSL encryption bits
72hours
Data Breach Notification
14
Data request processing days
0
Selling data to advertisers
1 Privacy Policy Introduction & Scope

This Privacy Policy document is published by 1bandar and applies to all registered members, unregistered users browsing our platform and any individual who interacts with 1bandar's services in any capacity. This policy sets out in detail how 1bandar collects, processes, stores, protects and, in certain circumstances, shares your personal data.

1bandar takes our responsibilities under Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable legislation seriously. We believe Malaysian players deserve to know exactly what happens to their data — and we have no interest in hiding anything behind complex legal language. That is why we have written this policy in plain language that everyone can understand.

By registering as a 1bandar member or continuing to use our platform after this Privacy Policy has been updated, you are considered to have read, understood and agreed to all terms contained herein. If you do not agree with any part of this policy, please stop using the 1bandar platform and contact us to close your account.

Important: This Privacy Policy covers all 1bandar products and services, including Sports Betting, Live Casino, slots, virtual sports, and all other features available on our platform.
2 Types of Data We Collect

1bandar collects your personal data through several channels — during account registration, through your use of the platform, and automatically via industry-standard tracking technologies. Below is a detailed breakdown of the types of data we collect and how they are gathered.

Data Category Examples of Data Collected How It Is Collected
Identity Data Full name, date of birth, identity card number (for verification purposes) During account registration
Contact Data Malaysian phone number, email address During registration & profile updates
Financial Data EWallet account numbers (Touch 'n Go, GrabPay, etc.), deposit & withdrawal records in MYR During financial transactions
Gaming Data Betting records, game history, wins/losses, games of interest Automatically during gameplay
Technical Data IP address, device type, web browser, operating system, login timestamp Automatically during platform use
Communication Data Customer support conversation records and emails sent to us When contacting support

We never collect sensitive data such as medical information, religious beliefs or political views. We also do not directly collect credit or debit card information — all financial transactions are processed through approved third-party payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u and CIMB Clicks, each of which maintains its own security standards.

3 How We Use Your Data

1bandar uses collected personal data solely for legitimate purposes necessary to deliver quality services to our members. We do not use your data for any other purpose without informing you in advance and obtaining your consent where required.

  • Account management — creating, verifying and maintaining your 1bandar member account
  • Transaction processing — securely and accurately handling deposits and withdrawals in MYR
  • Identity verification — ensuring only eligible individuals (aged 18 and above) can access the platform
  • Fraud prevention — detecting and preventing fraudulent activity, money laundering, and account abuse
  • Legal compliance — fulfilling reporting obligations to relevant Malaysian authorities
  • Service improvement — analysing usage patterns to enhance the user experience on 1bandar
  • Customer support — providing effective and relevant assistance whenever you contact us
  • Responsible gambling — monitoring gameplay patterns to identify members who may need support
  • Service communications — sending important notifications about your account, transactions, and policy changes
Regarding Marketing: 1bandar will only send you marketing communications if you have given explicit consent during registration or through the marketing preferences settings in your account. You may withdraw this consent at any time via your account settings or by contacting us directly.
4 Sharing Data with Third Parties

1bandar does not sell, rent, or trade members' personal data to third parties for marketing purposes. However, in the course of operating the platform, there are certain situations where we need to share data with specific parties. All such data sharing is carried out under strict controls and only to the extent necessary.

  • Payment providers — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u and CIMB Clicks receive the transaction information required to process your deposits and withdrawals
  • Game providers — Evolution Gaming, Pragmatic Play, PG Soft and other providers receive the data necessary to operate casino games and slots properly
  • IT service providers — companies providing technical infrastructure, cybersecurity and server hosting for 1bandar, subject to strict confidentiality agreements
  • Legal authorities — Malaysian authorities such as the Financial Intelligence Unit (FIU) or the police may request specific data pursuant to a court order or applicable legal compliance requirements
  • Independent auditors — audit firms that verify the fairness of our games and operational compliance, under binding confidentiality agreements

Every third party that receives 1bandar member data is required to sign a data processing agreement obligating them to protect that data to a standard no less stringent than our own. We regularly review and audit third-party compliance with their privacy obligations.

Should a third-party data breach occur that affects 1bandar member information, we will take appropriate legal action and notify affected members in accordance with our obligations under the PDPA.
5 Data Storage, Security & Retention Period

All 1bandar member personal data is stored on servers located within fully secured data centres. These servers use encryption at rest, in addition to the in-transit encryption mentioned earlier. Physical access to the data centres is restricted to authorised personnel through a multi-layered access control system.

On the digital security front, 1bandar employs multiple layers of protection, including next-generation firewalls, intrusion detection systems, 24/7 suspicious activity monitoring and regular penetration testing conducted by independent cybersecurity experts. Member passwords are never stored in plain text — all passwords are hashed using an irreversible algorithm.

Data Retention Period:

  • Active account data is retained for the duration of the account and for 7 years following closure
  • Financial transaction records are retained for a minimum of 7 years for Malaysian legal compliance purposes
  • Customer support communication records are retained for 3 years
  • Technical log data is retained for 12 months and then deleted or anonymised
  • Data related to active investigations is retained until the investigation is fully resolved
Data Deletion: Once the retention period has expired, your data will be securely deleted or anonymised so it can no longer be linked to your identity. The deletion process follows NIST standards for secure data erasure.
6 Cookies & Tracking Technologies

The 1bandar platform uses cookies and similar tracking technologies to ensure the platform functions correctly and to enhance the user experience. Cookies are small data files stored on your device when you visit our website. They help us recognise you when you return, maintain your login session, and understand how you use our platform.

Types of Cookies We Use:

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect the functionality of the 1bandar platform, including your ability to log in and use core platform features.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a 1bandar member have certain rights regarding the personal data we hold about you. 1bandar is committed to respecting and facilitating the exercise of these rights in a practical and straightforward manner.

Right of Access

Request a copy of the personal data we hold about you. Processed within 14 business days via email to support@1bandar.net.

Right to Rectification

Request the correction of inaccurate or incomplete data — for example, a misspelled name or an outdated phone number.

Right to Erasure

Request the deletion of your personal data under certain circumstances, subject to applicable legal data retention obligations.

Right to Object

Object to the processing of your data for direct marketing purposes. Such requests will be actioned immediately, no questions asked.

Right to Restrict Processing

Request that we restrict how we use your data in certain circumstances, such as while the accuracy of the data is under review.

Right to Data Portability

Request your data in a machine-readable format for transfer to another service provider of your choice.

How to Exercise Your Rights

To exercise any of the rights above, please contact our privacy team at support@1bandar.net with the email subject "Privacy Rights Request — [Your Name]". Include your member ID and a brief description of your request. We will verify your identity before processing any request to ensure your data is not disclosed to unauthorised parties.

8 Child Data Protection

The 1bandar platform is strictly for individuals aged 18 and above. We do not knowingly collect, process or store any personal data from individuals under the age of 18. This is a firm policy with no exceptions.

During registration, 1bandar requires age verification and reserves the right to request additional verification documents at any time. If we determine that data collected belongs to an individual under the age of 18, the account in question will be closed immediately and all associated data will be deleted as soon as technically and legally practicable.

If you are a parent or guardian who believes your child under the age of 18 has registered with 1bandar without your consent, please contact us immediately at support@1bandar.net. We will take prompt action to close the account and delete all associated data.
9 Changes to This Privacy Policy

1bandar may update this Privacy Policy from time to time to reflect changes in our data practices, the technologies we use, applicable legal requirements or evolving business circumstances. The date of the most recent update is always displayed at the top of this document.

For changes deemed material — meaning changes that significantly affect how we use your data or your rights — 1bandar will notify active members via their registered email address and/or an in-platform notification at least 14 days before the changes take effect. This gives you time to review the changes and decide whether you wish to continue using the 1bandar platform.

For minor changes that do not affect your fundamental rights, we may not send individual notifications but will always update the date at the top of this document. We encourage you to review this page periodically.

Archive of Previous Versions: Previous versions of the 1bandar Privacy Policy are available upon request. Contact our team at support@1bandar.net if you wish to review an earlier version for comparison purposes.
10 Contact the 1bandar Privacy Team

If you have any questions, concerns or requests regarding this Privacy Policy or how 1bandar handles your personal data, we encourage you to reach out to us directly. Our privacy team is ready to assist and committed to providing clear, helpful responses within a reasonable timeframe.

You can reach us by email at support@1bandar.net. For privacy-related requests, please include "Privacy Request" in your email subject line so it can be routed promptly to the right team. We aim to respond to all privacy enquiries within two business days.

Alternatively, you may use the live chat feature within the 1bandar platform for general privacy enquiries that do not involve the transfer of sensitive data. For formal requests relating to data access, correction, or deletion, the email channel is recommended to ensure a complete and secure written record.

  • Privacy enquiry email: support@1bandar.net (subject: Privacy Request)
  • Target response time: two business days for general enquiries
  • Data rights request processing time: maximum 14 business days
  • In-platform live chat: for general privacy questions that do not require the transfer of sensitive data
Related Documents

This Privacy Policy forms part of 1bandar's overall member protection framework. Please also read Terms & Conditions and Responsible Gambling Policy us for a full overview of your rights and responsibilities as a platform member.

Your Data Is Safe with 1bandar

Bet with Confidence — Your Privacy is Always Protected at 1bandar

Over 480,000 Malaysian members have entrusted their data to 1bandar. With 256-bit SSL encryption, PDPA compliance, and a strict no-data-sale policy, you can focus on what matters — the best betting experience in Malaysia.

18+ only. By registering, you agree to our Terms & Conditions and our Privacy Policy.

Bahasa Melayu