1roko Privacy Policy – How We Protect the Personal Data of Malaysian Players

At 1roko, your privacy is not an afterthought — it is a core responsibility. This document clearly explains what data we collect, why we need it, how we protect it, and your rights as a Malaysian player over your personal information.

Last updated: 1 January 2026 Malaysia PDPA 2010 256-bit SSL
Policy Summary
Data stored securely
No sale of data to third parties
Data access & deletion rights
Clear cookie policy
Marketing communication controls
PDPA 2010 Compliance
By using the 1roko platform, you agree to the privacy practices set out in this document.

1roko's Six Data Protection Commitments to You

Before reading the full policy, here is the core of how 1roko respect and protect the privacy of every Malaysian player.

256-bit SSL Encryption

All data transmitted between your device and the 1roko is protected with 256-bit SSL encryption — the same standard used by international-grade banking institutions. Your login credentials, personal data, and transaction details cannot be intercepted by any party during transmission.

No Sale of Data to Third Parties

Your personal data — including your name, phone number, email address, and payment details — is never sold, rented, or shared with any third-party company for marketing purposes. Your information is used solely for account operations and verification purposes directly related to your experience at 1roko.

Full Control Over Your Data

As a Malaysian player, you have the right to access, correct, transfer, and request the deletion of your personal data stored at 1roko. These rights are protected under Malaysia's Personal Data Protection Act 2010 (PDPA) and we uphold them in full.

Malaysia PDPA 2010 Compliance

All data management practices 1roko comply with Malaysia's Personal Data Protection Act 2010. This means we only collect data that is genuinely necessary, retain it for a reasonable period only, and ensure it is protected at all times from unauthorised access.

Full Control Over Marketing Communications

You may choose to receive or unsubscribe from marketing communications from 1roko at any time from your account settings. Opting out of marketing communications will not affect your core account services — important security and transaction notifications will continue to be sent.

Secure Servers & 24/7 Monitoring

Your data is stored on servers protected by enterprise-grade firewalls, intrusion detection systems, and round-the-clock security monitoring. Our cybersecurity team 1roko always on the lookout to detect and respond to any threats to player data.

1roko's Privacy Commitment: We regard your privacy as a fundamental right, not merely a legal obligation. This policy is written in plain language so you know exactly how your data is handled — no confusing legal jargon.

1. Introduction and Scope of This Policy

This Privacy Policy is issued by 1roko ("we", "platform", or "1roko") and applies to all personal information collected when you use our website, mobile app, or any services provided by our platform.

As an online casino platform operating for Malaysian players, 1roko collect personal data in the course of delivering our services. We recognise that your trust depends on how we handle this information, and we take that responsibility very seriously.

This policy sets out in detail the types of data we collect, the purposes for collection, how it is stored and protected, who may access it, and your rights as a data subject under Malaysian law. It forms part of the overarching commitment of 1roko to the transparency and trust we have built with every member since 2019.

This Privacy Policy is to be read together with Terms & Conditions and Responsible Gaming Policy 1roko. By using our platform, you agree to the data processing practices described in this document.

2. Types of Personal Data We Collect

1roko only collects data that is genuinely necessary to provide a safe, legitimate, and quality service. The categories of data we collect are as follows:

2.1 Personal Identification Data
  • Full name as per identity card or passport
  • Date of birth for age verification (18 years and above)
  • Identity card number (MyKad) or passport number for the KYC process
  • Residential address in Malaysia
  • Identity document image when required for enhanced KYC
2.2 Contact Data
  • Malaysian phone number that is active and registered in your name
  • Email address valid and active
2.3 Financial Data
  • Malaysian bank account details for withdrawal processing via DuitNow or FPX
  • EWallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay) for deposits and withdrawals
  • Deposit and withdrawal transaction history records
  • Important note: We do not store credit or debit card numbers — all card transactions are processed directly by licensed payment processors
2.4 Game Activity Data
  • Game session records — start time, end time, games played
  • Betting history and winnings
  • Bonus and promotion usage data
  • Responsible gaming limit settings you have selected
2.5 Technical Data
  • IP address at login
  • Device type and operating system (Android/iOS/Windows)
  • Web browser type used
  • Associated cookie and session data
  • Access time logs and account activity

3. How We Collect Your Data

1roko collects personal data through several channels, all directly related to providing services to you:

3.1 Directly From You
  • During account registration — you provide your name, phone number, and email
  • During the KYC process — you upload your identity document when required
  • When making a deposit or withdrawal — you provide payment method information
  • When contacting customer support — live chat conversations or emails containing personal information
  • When completing feedback forms or surveys — your choice entirely
3.2 Automatically
  • Server log data when you visit the website or use the app 1roko
  • Cookies and similar tracking technologies that help us understand how you use the platform
  • Game activity data automatically recorded by the gaming system
3.3 From Legitimate Third Parties
  • Identity verification service providers we use for the KYC process
  • Payment processors to verify the successful completion of deposit and withdrawal transactions
  • Fraud prevention agencies that assist us in identifying suspicious activity

4. How We Use Your Personal Data

1roko only use your personal data for legitimate purposes directly related to the provision of our services. Below is a full summary of those purposes:

Purpose of Use Data Involved Legal Basis
Member account management and verification Name, email address, phone number, MyKad Service agreement
Processing of deposits and withdrawals Bank details/eWallet, transaction records Service agreement
Age verification and KYC Date of birth, ID document Legal obligation
Fraud prevention and security IP address, activity logs, technical data Legitimate interest
AML (Anti-Money Laundering) Compliance Financial data, transaction records Legal obligation
Customer support Communication records, account data Service agreement
Responsible gaming Gaming activity data, betting history Public & legitimate interest
Product improvement and analytics Anonymised usage data Legitimate interest
Marketing communications (with consent) Email, phone number Your consent

Your data will not be used for any purposes other than those listed above without prior notice and your consent.

5. Data Sharing With Third Parties

1roko does not sell or rent your personal data to any third party. However, in the course of operating our services, we may share necessary data with the following parties — all under strict confidentiality agreements:

5.1 Trusted Service Providers
  • Payment processors — to facilitate deposits via DuitNow, FPX (Maybank2u, CIMB Clicks and others), Touch 'n Go eWallet, GrabPay, Boost, ShopeePay
  • KYC service providers — required for identity and age verification
  • Cloud infrastructure provider — which store and process data under strict data processing agreements
  • Game providers — such as Pragmatic Play, PG Soft, and other partners, for game technical purposes only
  • Fraud prevention agencies — to detect and prevent fraudulent activity that could harm you
5.2 Legal Obligations

In certain cases, 1roko may be required to disclose your personal data to Malaysian government authorities or relevant regulatory bodies where mandated by law, court order, or to fulfil legal compliance obligations. In all such cases, we will disclose only the minimum data necessary.

All third parties with whom we share data are required to protect it to a standard at least equivalent to our own. They are not permitted to use your data for their own purposes outside the scope of the services they provide to us.

6. Data Retention & Security Measures

1roko continuously invests in the latest security infrastructure to ensure your personal data remains protected throughout the lifetime of your account.

6.1 Technical Security Measures
  • 256-bit SSL Encryption for all data transmissions between your browser/app and our servers
  • At-rest data encryption for all sensitive data stored in our databases
  • Two-factor authentication (2FA) available and encouraged for all accounts
  • Role-based access control — only staff who require the data to perform their duties are permitted to access it
  • 24/7 security monitoring by a dedicated cybersecurity team
  • Penetration testing (penetration testing) conducted periodically by independent third parties
  • Encrypted data backups stored in geographically separate locations
6.2 Data Retention Periods

Your personal data is retained for as long as your account remains active on 1roko. Following account closure:

  • Financial transaction data is retained for 7 years to comply with Malaysian legal and tax requirements
  • KYC records and identity verification documents are retained for 5 years after account closure to meet AML compliance requirements
  • Customer support communication logs are retained for 2 years
  • Technical data and system logs are retained for 1 year
  • Marketing data is deleted immediately upon unsubscription or account closure

Once the retention period expires, data is securely deleted using irreversible data deletion procedures.

7. Cookies & Tracking Technologies

Platform 1roko uses cookies and similar tracking technologies to enhance your user experience and ensure the platform functions correctly.

7.1 Types of Cookies We Use
  • Essential Cookies (Required) — required for core platform functions such as login verification, session security, and language preferences. These cookies cannot be disabled
  • Functional Cookies — saves your preferences such as game settings, selected language, and display preferences for a more personalised experience
  • Analytics Cookies — collects anonymised usage data to help us understand how players use the platform and improve our products
  • Security Cookies — helps detect and prevent fraudulent activity and unauthorised access
7.2 Managing Your Cookies

You can manage and delete cookies through your web browser settings. Disabling certain cookies may affect platform functionality — for example, disabling essential cookies will require you to log in again on every visit. For analytics and non-essential cookies, you may opt out via the privacy settings page in your account.

1roko do not use cookies to track your activity on other websites outside our platform. Our cookies are strictly limited to your experience within the 1roko platform only.

8. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding the personal data we hold. 1roko fully respects and facilitates the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.

Right to Rectification

If the data we hold is inaccurate or outdated, you have the right to request a correction at any time through your account settings or by contacting customer support.

Right to Erasure

You may request the deletion of your personal data when it is no longer needed for its original purpose, subject to any applicable statutory retention obligations.

Right to Object

You have the right to object to the processing of your data for specific purposes such as direct marketing — with immediate effect and without needing to provide a reason.

Data Portability Rights

You may request a machine-readable copy of your data for transfer to another platform if you wish.

Right to Restriction of Processing

Under certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved or verification is being carried out.

To exercise any of the above rights, contact our privacy team at support@1roko.com or via 24/7 Live Chat. We will verify your identity before processing any request, to protect your privacy from unauthorised submissions.

9. Special Protections for Minors

Platform 1roko is strictly limited to individuals aged 18 and above. We do not knowingly collect, process, or store personal data from underage individuals.

If we discover that personal data of someone under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect their child or ward may have registered at 1roko is encouraged to contact us immediately at support@1roko.com.

If you suspect that someone under the age of 18 is using the platform 1roko, please report it to us immediately. We are committed to responding to such reports within 24 hours.

10. Cross-Border Data Transfers

In conducting global operations, 1roko may transfer your personal data to service providers operating outside Malaysia — for example, international game providers, global cloud infrastructure, or international payment processing platforms.

When we transfer data outside Malaysia, we ensure that:

  • The recipient country or organisation maintains adequate data protection standards
  • Comprehensive data processing agreements are in place to safeguard your data
  • Transfers are limited to the minimum data necessary for service purposes only
  • All recipient parties are subject to strict confidentiality and security obligations

All cross-border data transfers comply with the requirements of Malaysia's Personal Data Protection Act 2010. Further details regarding specific data transfers relating to your account are available upon request through our contact channels.

11. Marketing Communications & Your Choices

1roko may send you marketing communications about the latest promotions, new bonuses, special offers, and platform updates — but only with your consent.

11.1 Types of Marketing Communications
  • Promotional emails — information on bonuses, seasonal promotions, and exclusive member offers
  • SMS notifications — brief notifications about limited-time offers or important updates
  • In-app notifications — messages displayed within the platform when you log in
11.2 How to Manage Communication Preferences

You can manage your marketing communication preferences easily at any time:

  • Click the "unsubscribe" link in any promotional email you receive from 1roko
  • Update your notification preferences in your account settings under "Communication Preferences"
  • Contact our support team via Live Chat and request to be removed from the marketing list

Opting out of marketing communications will not affect your receipt of important account-related communications, such as transaction confirmations, security alerts, changes to terms, and critical service notifications.

1roko will never sell or rent our members' email lists or phone numbers to third-party advertisers for their own marketing purposes. This is an unwavering commitment.

12. Amendments to the Privacy Policy

1roko reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or developments in the services we offer.

Every amendment will be published on this page with an updated "Last Revised" date. For material changes — those that significantly alter how we process your data or reduce your rights — we will:

  • Sending email notifications to all registered members at least 14 days before amendments take effect
  • Displaying a clear notice on the platform's main page 1roko during the notice period
  • Requires active acknowledgment of receipt for highly material amendments

Continued use of the platform 1roko after the amended Privacy Policy takes effect will be considered acceptance of the revised terms. If you do not agree with the amendments, you have the right to close your account and request deletion of the relevant data.

13. How to Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how 1roko handling your personal data, we are here to help:

24/7 Live Chat

The fastest way. Click the Live Chat button on our website to speak with an agent in Bahasa Melayu.

Privacy Email

Send your privacy enquiries to support@1roko.com with the subject line "Privacy Inquiry". Response within 2 business days.

Formal Request

For data access, correction, or deletion requests, please submit a written request to the email above along with proof of identity.

We are committed to responding to all privacy inquiries within a reasonable timeframe — typically within 2 business days for email and almost immediately via Live Chat. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

Privacy Is More Than a Document — It's a Core Value at 1roko

Many assume that a privacy policy is just a lengthy document nobody reads — drafted by lawyers to satisfy legal requirements and buried where it's hard to find. At 1roko, we see it differently. This privacy policy is our promise to you — and we want it to be understood, not just blindly accepted.

As an online casino player, you place a great deal of trust in 1roko every time you register, make a deposit, or play. You provide your name, phone number, bank details, and information about your financial activity. This is highly sensitive data, and we are fully aware of the weight of responsibility that comes with that trust.

What Sets 1roko's Privacy Approach Apart

From day one 1roko operating since 2019, privacy has been built into the foundation of our platform — not bolted on as an afterthought. We design our systems on the principle of privacy by design, meaning privacy protection is embedded into every feature and process from the ground up, not added as an extra layer after the product is complete.

This means that when our engineering team 1roko building new features, privacy considerations are part of the design checklist. When selecting new service providers, their privacy practices are a key evaluation criterion. When collecting data, we always ask ourselves — do we genuinely need this data to deliver a better service, or are we collecting it simply because we can?

Your Data Is Never Sold — That Is Our Absolute Commitment

In today's digital industry, many companies generate revenue by selling user data to advertisers or data brokers. 1roko does not do this, and never will. Our business model is built entirely on delivering the best possible casino experience to our players — not on trading user data.

Your data belongs to you. We are merely a responsible temporary custodian, entrusted to keep it safe for as long as it is needed to provide our services. When you close your account or request data deletion, we honour that request — subject to the minimum retention periods required by Malaysian law for financial and KYC records.

How Data Security Protects Your Money

Privacy and security are two sides of the same coin at 1roko. When we protect your login credentials with strong encryption, we are also protecting your account from unauthorised access. When we monitor transaction patterns to detect suspicious activity, we are safeguarding the funds in your account.

The two-factor authentication (2FA) system we provide adds an extra layer of security — even if your password is compromised, an attacker would still need access to your phone to log in to your account. We encourage all members 1roko to enable 2FA from your account settings, as this is one of the most effective steps you can take to protect your own account.

PDPA 2010 & Your Rights as a Malaysian Player

Malaysia's Personal Data Protection Act 2010 (PDPA) grants you clear rights over your personal data. As a platform operating in Malaysia for Malaysian players, 1roko comply with all obligations under the PDPA — including registering as a data processor, notifying the Personal Data Protection Commissioner of the categories of data we process, and ensuring all staff who handle personal data have been trained on PDPA requirements.

If you believe that 1roko has violated your privacy rights under the PDPA 2010, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia. That said, we always encourage you to reach out to us first, as most issues can be resolved faster and more effectively through our internal support channels. 1roko.

In closing, your privacy is not merely a legal obligation for 1roko — it is part of why we exist. The trust of Malaysian players is our most valued asset, and we protect it to the best of our ability. If you have any questions or concerns about how we handle your data, our door is always open — reach us via Live Chat or email at any time.

Frequently Asked Questions About Data Privacy at 1roko

Clear answers to the questions Malaysian players ask most about their privacy and data security.

No. 1roko does not store your credit or debit card number. If you use a card to make a deposit, the transaction is processed directly by a certified payment processor that complies with PCI-DSS (Payment Card Industry Data Security Standard). We only receive a transaction success confirmation — not the card details themselves. For routine deposits, we recommend DuitNow, FPX, or a Malaysian eWallet, which are both more secure and faster.

Yes, this is your right under Malaysia's PDPA 2010. You can submit a data access request by contacting us at support@1roko.com with the subject line "Data Access Request". Please include your account number and a copy of your ID for identity verification. We will process the request within 21 business days and provide a summary of the data we hold about you in a readable format. This service is free for the first request within a year.

When you close your account, your personal data is archived and access is discontinued. It is no longer used for marketing or any active purpose. However, Malaysian law requires us to retain financial records for 7 years and KYC records for 5 years following account closure for tax compliance and AML purposes. Once these statutory retention periods expire, all your data will be permanently deleted using secure, irreversible deletion procedures.

You can manage your cookie settings in two ways — first, through your web browser settings (Chrome, Firefox, Safari, Edge) under privacy and security. Second, non-essential cookies (analytics and marketing) can be controlled via the privacy settings page within your 1roko account. Please note that disabling essential cookies will affect platform functionality — you may need to log in again each time you visit, as sessions cannot be maintained without them.

No, 1roko does not share your personal data with other gaming companies for marketing or any other purposes. Game providers such as Pragmatic Play or PG Soft only receive the minimum technical data required to run the games (such as a session ID) — not your name, phone number, or financial information. All game providers we work with have their own privacy policies and data processing agreements that bind them to use such data solely within the scope of their technical services.

There are three easy ways to stop promotional emails from 1roko. First, click the "unsubscribe" link at the bottom of any promotional email we send — this is the quickest method and takes effect immediately. Second, log in to your account and go to Settings > Communication Preferences, then uncheck the box for marketing emails. Third, contact our support team via Live Chat and request to be removed from the marketing list. Requests will be processed within 3 business days.
Data Privacy & Responsible Gaming

Your game activity data at 1roko is also used to monitor signs of problem gambling and to help us provide proactive responsible gaming support. This includes deposit limit usage, play frequency, and betting patterns. Data used for this purpose is solely in the interest of your wellbeing and will not be used for marketing.

This platform is intended for users aged 18 years and above only. For information on responsible gambling tools and support resources, visit Responsible Gaming page ours.

Your Data Is Safe with 1roko — Join Us Today

Play on an online casino platform that truly respects your privacy and protects your personal data. Register for free and enjoy over 500 games with complete peace of mind.

256-bit SSL PDPA 2010 Compliant No Data Selling 24/7 Support
Bahasa Melayu