Privacy Policy aone —
Your Data, Our Responsibility

Aone Full Privacy Policy

This Privacy Policy describes how aone collects, uses, discloses, and protects your personal information when you use our platform at aone.onl. By registering or continuing to use the aone platform, you agree to the terms outlined in this policy. We encourage you to read this document carefully and contact us if you have any questions.

1. Information We Collect

Aone only collects information that is strictly necessary to provide a quality, secure, and legally compliant service. The information we collect falls into two main categories:

1.1 Information You Provide Directly

This is information you voluntarily provide when interacting with our platform:

• Registration Information: Full name, date of birth, identity card or passport number, email address, phone number, and residential address.
• Financial Information: Bank account number, account holder name, and related details for deposit and withdrawal processing purposes.
• KYC Documents: A copy of your identity document (MyKad), passport, or other official document required for identity verification.
• Communications: Messages, complaints, or feedback you send to our support team via live chat or email.

1.2 Information Collected Automatically

When you use the aone platform, certain technical information is automatically collected to ensure the platform operates correctly and securely:

• Device Data: Device type, operating system, phone model, screen resolution, and app version.
• Network Data: IP address, browser type, internet service provider (ISP), and time zone.
• Usage Data: Pages visited, session duration, games played, login frequency, and in-platform actions.
• Cookies: A small cookie file stored on your device to maintain your login session and personalize your experience.

2. Purpose of Data Use

Aone uses collected personal information for the purposes listed below. We will not use your data beyond the scope stated here without first obtaining your consent:

3. Sharing Information With Third Parties

Aone does not sell, rent, or disclose your personal information to third parties except in the circumstances stated below. Any data sharing is carried out on the basis of legitimate operational necessity and is subject to binding confidentiality agreements.

3.1 Service Partners

Aone works with carefully selected third-party service providers to operate the platform, including:

• Payment Providers: DuitNow, FPX, TNG eWallet, Boost, and GrabPay to process your financial transactions.
• Game Providers: Licensed game studios that provide gaming content on our platform.
• Cloud Services: Server infrastructure provider that stores data in a secure and controlled environment.
• Analytics Services: Analytics tools that help us understand platform usage patterns in an aggregated and anonymised manner.

All of these partners are required to handle your data in accordance with security standards no lower than aone's own.

3.2 Disclosure Under Legal Requirements

Aone may be required to disclose your personal information to the relevant authorities if mandated by law, court order, criminal investigation, or valid regulatory requirement. In such situations, we will notify you in advance unless doing so is prohibited by law.

4. Data Security

Protecting your personal information is aone's highest priority. We implement multiple layers of security to ensure your data is always under the best protection:

• 256-bit SSL Encryption: All communications between your device and our servers are protected with the same industry-standard encryption used by banking institutions.
• Two-Factor Authentication (2FA): An additional security layer for account login that prevents unauthorized access even if your password is compromised.
• 24/7 Monitoring: An automated monitoring system that operates around the clock to detect any suspicious activity or intrusion attempts.
• Internal Access Control: Only aone staff with a legitimate operational need who have passed background checks may access members' personal data.
• Regular Security Audits: The aone platform undergoes independent security audits on a regular basis to identify and address any potential vulnerabilities.
• Data-at-Rest Encryption: Sensitive information such as passwords is stored in encrypted form using an irreversible hashing algorithm.

5. Data Retention and Deletion

Aone does not retain your personal data longer than necessary. Data retention periods are determined based on operational requirements and applicable legal obligations:

• Active Account Data: Retained for the duration your account is active and for the required period following account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable Malaysian financial legal requirements.
• Communication Logs: Customer support interaction records are retained for 2 years for reference and dispute resolution purposes.
• Analytics Data: Anonymised usage data is retained indefinitely as it can no longer be linked to any specific individual.

Once the retention period expires, your data will be securely deleted using data removal procedures that ensure no recovery is possible.

6. Your Rights as a Data Subject

As an aone platform member, you have the following rights regarding your personal data. We are committed to helping you exercise these rights without unnecessary obstacles:

• Right to AccessYou have the right to obtain a copy of the personal information we hold about you at any time.
• Right to RectificationIf your personal information is inaccurate or out of date, you have the right to request an immediate correction.
• Right to ErasureYou may request deletion of your personal data, subject to legal retention obligations that may prevent full erasure.
• Right to ObjectYou have the right to object to the processing of your data for direct marketing purposes at any time, and we will stop immediately.
• Right to Data PortabilityYou have the right to receive your data in a structured, machine-readable format for transfer to another service provider.
• Right to Restrict ProcessingUnder certain circumstances, you may request that we restrict the processing of your data while an issue is being resolved.

To exercise any of the above rights, please contact our Privacy team by email at [email protected] or via live chat on the platform. We will process your request within 14 business days.

7. Cookies and Tracking Technologies

Aone uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. The following types of cookies are used:

7.1 Essential Cookies

These cookies are required for the platform to function and cannot be disabled. They include login session cookies, security cookies, and language preference cookies. Without these cookies, certain parts of the platform will not work correctly.

7.2 Analytics Cookies

Analytics cookies help us understand how members use the platform by collecting information such as the most frequently visited pages, time spent on the platform, and navigation paths. All data is collected in aggregate and contains no personally identifiable information.

7.3 Preference Cookies

These cookies allow the platform to remember your preferences such as language, time zone, and display settings so you do not need to reconfigure them every time you log in.

8. Cross-Border Data Transfers

In the course of platform operations, some data may be processed or stored on servers located outside Malaysia. aone ensures that any cross-border data transfer is carried out in accordance with applicable legal requirements and that recipients outside Malaysia provide a level of protection equivalent to Malaysia's PDPA standards.

Measures taken to protect data during cross-border transfers include legally binding data processing agreements, encryption during transfer, and periodic audits of overseas partners.

9. Children's Privacy

The aone platform is exclusively for users aged 18 and above. aone does not knowingly collect personal information from individuals under the age of 18. If we discover that information has been collected from a minor, the relevant account will be immediately closed and the information will be deleted in accordance with our security procedures.

If you believe that someone under the age of 18 has registered on our platform, please notify us immediately at [email protected].

10. Privacy Policy Updates

Aone reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. Any significant changes will be communicated to you via:

• Notifications within the aone platform
• Email to your registered address
• A clear notice on this Privacy Policy page

We encourage you to review this page regularly. The latest update date is always displayed at the top of this document. Continued use of the platform after changes are published constitutes your acceptance of the updated policy.

11. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the aone Privacy team is here to help: