Privacy Policy

1angpao ("we", "us", "our", "the Company") operates the online casino and sports betting platform accessible at https://1angpao.cam (the "Platform"). We are committed to protecting and respecting the privacy of all individuals who access or use our Platform, including registered players, visitors, and prospective users (collectively, "you", "your", "Data Subject").

This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. Please read this document carefully. By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions, which govern the contractual relationship between you and 1angpao. In the event of any inconsistency between this Policy and the Terms & Conditions with respect to privacy matters, this Policy shall prevail.

For the purposes of this Policy, the following terms have the meanings set out below:

1angpao acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, we determine the purposes for which your data is processed and are responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

Where we engage third-party service providers — including payment processors, identity verification platforms, fraud prevention services, and analytics providers — those parties act as Data Processors operating under our instruction and bound by data processing agreements that restrict their use of your data to the specific purposes for which it is shared.

We collect the following categories of Personal Data in connection with your use of the Platform:

We do not intentionally collect data from minors under 21 years of age. If we discover that data has been collected from an individual under 21, we will delete it promptly and close the associated account.

We collect Personal Data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or updating your account profile.
• Automated collection: Technical and device data collected automatically when you visit or interact with the Platform, including data gathered via cookies, web beacons, and server logs.
• Third-party sources: Identity verification data received from our KYC partners, fraud signals from payment processors, and publicly available information used for AML screening purposes.
• Gaming activity: Data generated as a natural result of your use of our games, betting markets, and promotional features.

We process your Personal Data only where we have a lawful basis for doing so. The following table sets out the primary purposes of our data processing and the corresponding legal basis:

1angpao does not sell or commercially transfer your Personal Data. We share data only in the following specific circumstances:

• Payment service providers: We share financial data with payment processors operating the Malaysian payment rails you use — including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating banks such as Maybank, CIMB, Public Bank, and Hong Leong — solely to facilitate your transactions.
• Identity verification (KYC) partners: We share identity documents and selfie images with accredited verification services to confirm your identity and age as required by our operating obligations.
• Fraud prevention and AML services: We may share data with third-party screening platforms to identify and prevent fraudulent activity and to meet our anti-money laundering obligations.
• Game studios and content providers: Anonymised or pseudonymised session data may be shared with game providers to facilitate gameplay and resolve technical disputes. No directly identifiable personal data is shared for this purpose.
• Legal and regulatory authorities: We will disclose Personal Data to law enforcement agencies, regulators, or courts where we are legally required or compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of 1angpao, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.

Some of our Data Processors operate infrastructure or personnel in jurisdictions outside Malaysia. Where Personal Data is transferred internationally, we take appropriate safeguards to ensure an equivalent level of protection, including the use of standard contractual clauses or transfers to processors operating in jurisdictions recognised as providing adequate data protection.

By using the 1angpao Platform, you acknowledge that your data may be processed in countries outside Malaysia, including but not limited to locations where our technology infrastructure, game providers, or identity verification partners are based. In all such cases, the safeguards described in this Policy remain in effect.

We retain Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained for the duration of your account and for a period of five (5) years following account closure, to meet regulatory and dispute resolution obligations.
• Transaction records: Retained for a minimum of seven (7) years in compliance with anti-money laundering regulations.
• KYC documents: Retained for five (5) years from the date of verification, or longer where required by applicable law.
• Support communications: Retained for three (3) years from the date of the final communication, unless the matter remains subject to ongoing dispute.
• Marketing consent records: Retained for three (3) years from the date consent was granted or most recently renewed.
• Technical and log data: Typically retained for 12 months from the date of generation, subject to security and fraud investigation requirements.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to you as an individual.

1angpao uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files placed on your device by your browser when you visit our website. We use the following types:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication tokens and security cookies. They cannot be disabled without impairing your use of the Platform.
• Functional cookies: Used to remember your preferences, such as language settings and previously chosen payment methods, to provide a more personalised experience.
• Analytics cookies: Used to collect aggregated, anonymised data on how players navigate the Platform, which pages are most visited, and where technical issues occur. This information helps us improve the Platform.
• Security cookies: Used to detect and prevent fraudulent logins, detect bot activity, and protect the integrity of gaming sessions.

You may manage cookie preferences through your browser settings. Disabling certain cookies may limit the functionality available to you on the Platform. We do not use third-party advertising cookies or permit external ad networks to place cookies on our Platform.

1angpao implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit AES encryption of data at rest on all production databases;
• TLS 1.3 encryption for all data in transit between your browser and our servers;
• Multi-factor authentication options for account access;
• Regular penetration testing and vulnerability assessments conducted by independent third parties;
• Access controls restricting Personal Data access to staff with a demonstrable operational need;
• Intrusion detection systems and 24/7 security monitoring of our infrastructure;
• Staff training on data protection obligations and security protocols.

While we take all reasonable steps to protect your data, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorised access to your account.

The 1angpao Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21, and we do not permit anyone under 21 to register an account or participate in any gambling activities on the Platform.

All account registrations are subject to KYC age verification. In cases where our automated verification systems flag an account as potentially belonging to an individual under 21, the account will be suspended pending manual review. If verification confirms that the account holder is under 21, the account will be permanently closed, all gaming activity will be voided, and deposited funds (net of any received bonuses) will be returned to the verified payment source.

If you believe that a minor has registered an account on 1angpao, please contact our support team immediately at [email protected]. We will investigate and take appropriate action promptly.

Subject to applicable data protection law, you have the following rights in respect of your Personal Data held by 1angpao:

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within thirty (30) calendar days. In complex cases, we may extend this period by a further thirty days, in which case we will notify you of the extension and the reason for it.

We may need to verify your identity before processing a data rights request, to ensure that Personal Data is not disclosed to an unauthorised party. Identity verification will not be used to delay or obstruct a legitimate request.

With your consent, 1angpao may send you promotional communications regarding new games, platform features, special offers, bonuses, and other marketing material by email or in-platform notification. You may indicate your communication preferences at the time of registration or subsequently through your account settings.

You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings, or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to the withdrawal, nor does it affect your ability to use the Platform.

Please note that even after opting out of marketing communications, we will continue to send you transactional and service messages — such as account verification emails, withdrawal confirmations, and security alerts — as these are necessary for the operation of your account and cannot be disabled.

1angpao reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or operational requirements. Where changes are material, we will notify you by email to your registered address or via a prominent notice on the Platform at least seven (7) days prior to the changes taking effect.

We encourage you to review this Policy periodically. The "Last Reviewed" date at the top of this page indicates when the most recent changes were made. Your continued use of the Platform following any revision constitutes your acceptance of the updated Policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your Personal Data is being processed, please contact our Data Protection team through the following channel:

We take all privacy-related communications seriously. Our team will acknowledge your message promptly and provide a substantive response within the applicable timeframe. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.