Privacy Policy

This Privacy Policy (hereinafter referred to as the "Policy") sets out how 1rokok (hereinafter referred to as "1rokok", "we", "us", or "our"), the operator of the online gaming platform accessible at https://1rokok.cam (the "Platform"), collects, uses, stores, shares, and protects the personal data of individuals who register for, access, or interact with the Platform (each a "User", "Player", or "you").

We are committed to handling your personal data responsibly and in accordance with applicable data protection laws and the principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability.

By creating an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must cease using the Platform immediately.

This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy, which together form the complete agreement between you and 1rokok governing your use of the Platform.

For the purposes of this Policy, the following terms shall have the meanings set out below:

1rokok collects the following categories of personal data, depending on the nature of your interaction with the Platform:

We do not intentionally collect personal data from individuals under the age of twenty-one (21). If we become aware that personal data has been collected from an underage individual, we will take steps to delete such data promptly and close the associated account.

We collect personal data through the following means:

1. Direct Submission: Information you provide when creating an account, completing the KYC process, making a deposit or withdrawal request, contacting support, or participating in a promotion.
2. Automated Collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser type, session duration, and page interaction data via cookies and server logs.
3. Third-Party Sources: Identity verification data returned by our licensed KYC service providers; transaction confirmation data provided by payment processors including banks operating FPX and DuitNow rails; fraud screening signals from our risk management partners.
4. Responsible Gambling Tools: Data generated when you interact with self-exclusion, deposit limit, or reality check features, which is recorded to ensure those tools function correctly and cannot be circumvented.

1rokok processes personal data on the following legal bases, each of which applies to one or more categories of data described in Section 3:

Personal data collected by 1rokok is used for the following purposes:

• Account Management: Creating, maintaining, and securing your registered account, including password resets, email verification, and session management.
• Payment Processing: Facilitating deposits and withdrawals in MYR via your chosen payment method, reconciling transaction records, and resolving payment disputes.
• Identity Verification: Confirming your identity, age, and the legitimacy of payment methods in compliance with our licensing and anti-money laundering obligations.
• Fraud & Risk Management: Detecting and preventing fraudulent activity, collusion, bonus abuse, and other conduct that violates our Terms & Conditions or applicable law.
• Responsible Gambling Compliance: Monitoring gameplay patterns to identify indicators of problem gambling behaviour; administering self-exclusion orders and deposit limit restrictions; maintaining records required to enforce cooling-off periods and exclusion requests.
• Platform Improvement: Analysing aggregated usage data to improve game selection, payment method performance, and the overall user experience on the Platform.
• Customer Support: Responding to enquiries, processing complaints, and managing the dispute resolution procedure described in our Terms & Conditions.
• Legal & Regulatory Compliance: Retaining records and responding to lawful requests from regulatory bodies, law enforcement agencies, or courts of competent jurisdiction.
• Marketing Communications (with consent): Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications. Players may opt out at any time by contacting support.

1rokok does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:

1. Payment Processors: We share transaction data with licensed payment service providers that process your deposits and withdrawals, including those operating the FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20 payment rails. Each provider is contractually bound to process your data only for the purpose of completing your transaction.
2. KYC & Identity Verification Partners: Identity documents and biometric data submitted during the KYC process may be processed by a licensed third-party verification provider. Such providers are contractually prohibited from using your data for any purpose other than identity verification on our behalf.
3. Game Software Providers: Game-session technical data (such as game round IDs, bet amounts, and RNG seed values) may be shared with the relevant third-party game provider for purposes of game integrity verification and dispute resolution. This data does not include your name or contact details.
4. Fraud & Security Service Providers: We share IP addresses, device fingerprints, and transaction metadata with specialist fraud prevention and risk management providers to protect the Platform and its Players.
5. Legal & Regulatory Authorities: We may disclose personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where we are required to do so by applicable law, court order, or our licensing obligations.
6. Business Transfers: In the event of a merger, acquisition, or sale of all or a substantial part of 1rokok's business, personal data held on our systems may form part of the transferred assets. Affected Players will be notified in advance where practically possible.

All third-party Data Processors engaged by 1rokok are required to maintain appropriate technical and organisational measures to protect personal data and to process it only in accordance with 1rokok's documented instructions.

The Platform uses cookies and similar tracking technologies to deliver core functionality, enhance the user experience, and analyse platform usage. The following categories of cookies are in use:

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary and responsible gambling cookies cannot be disabled without impacting your ability to use the Platform safely and as intended.

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable law. The following general retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years from the date of account closure, to satisfy anti-money laundering record-keeping obligations and to facilitate the resolution of any late-arising disputes.
• Transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in line with standard financial record-keeping requirements applicable to licensed gaming operators.
• KYC documents: Retained for a minimum of five (5) years from the date of verification completion or account closure, whichever is later.
• Customer support correspondence: Retained for three (3) years from the date of the final communication in the relevant support thread.
• Marketing consent records: Retained for as long as necessary to demonstrate the existence and withdrawal of any marketing consent, subject to a minimum of two (2) years from the relevant consent event.
• Self-exclusion and responsible gambling records: Retained for the duration of the exclusion period plus a minimum of five (5) years thereafter, to prevent re-registration during an active exclusion and to maintain an auditable record of responsible gambling measures applied.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.

1rokok implements a combination of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform's servers;
• Encryption at rest for stored personal data and financial records;
• Role-based access controls limiting staff access to personal data to those with a verified operational need;
• Multi-factor authentication requirements for internal administrative system access;
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security professionals;
• Documented incident response procedures to ensure timely containment and notification in the event of a data breach.

Notwithstanding the above, no method of electronic transmission or storage is completely secure. While we take all reasonable precautions, we cannot guarantee the absolute security of your personal data. You are responsible for keeping your account credentials confidential and for notifying us promptly if you suspect any unauthorised access to your account.

Subject to applicable law and any overriding legal obligations on our part, you have the following rights in respect of the personal data we hold about you:

1. Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
2. Right of Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
3. Right of Erasure: In certain circumstances, you may request the deletion of your personal data. Please note that we may be required by law to retain certain data (e.g., transaction records and KYC documentation) for minimum statutory periods notwithstanding such a request.
4. Right to Restrict Processing: You may request that we temporarily restrict the processing of your personal data in certain circumstances, for example while a dispute regarding the accuracy of your data is being resolved.
5. Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
6. Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.
7. Right to Object: You may object to processing based on our legitimate interests where you believe your rights and interests override those interests.

The Platform is strictly for individuals aged twenty-one (21) and above. We do not knowingly collect, process, or retain personal data relating to persons under the age of twenty-one (21). Age verification is conducted as part of the account registration and KYC processes.

If you are a parent or guardian and believe that a minor has accessed the Platform and submitted personal data without your knowledge, please contact our support team immediately. We will take prompt steps to investigate and, where confirmed, to delete the relevant personal data and close the associated account.

As an internationally operated platform, personal data collected by 1rokok may be transferred to, stored on, or processed by systems located outside of Malaysia, including in the jurisdiction in which 1rokok holds its primary operating licence and in the countries where our third-party Data Processors maintain their infrastructure.

Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place, including but not limited to: contractual data processing agreements incorporating standard data protection clauses, verification that recipient jurisdictions maintain an adequate level of data protection, and limiting the scope of any transfer to what is strictly necessary for the stated processing purpose.

The Platform may contain references to third-party game providers and payment services. Where you interact directly with a third-party payment gateway (for example, completing a transaction through a Maybank, CIMB, or Public Bank portal via FPX), that interaction is governed by the third party's own privacy policy and terms of service. 1rokok is not responsible for the privacy practices of third-party services accessed via or in connection with the Platform.

We encourage you to review the privacy policies of any third-party services with which you share personal data in connection with your use of the Platform.

1rokok reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our licensing obligations. Where amendments are material, we will provide advance notice to registered Players via the email address associated with their account or by displaying a prominent notice on the Platform.

The effective date of the current version of this Policy is displayed at the top of this page. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. We recommend that you review this page periodically to remain informed of how we handle your personal data.

If you have any questions, concerns, or formal requests regarding this Privacy Policy or the handling of your personal data, please contact 1rokok through the following channels:

For questions relating to the terms of your account, bonus conditions, or gameplay rules, please refer to our Terms & Conditions. For responsible gambling tools and support resources, please visit our Responsible Gambling page.