At rokok1, we take the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you hold as a Malaysian user of our platform. Please read this document carefully before using the rokok1 gaming services.
This Privacy Policy is published by rokok1 ("the Platform", "we", "us", "our") and applies to all personal data collected, processed, stored, or transmitted in connection with your registration and use of the rokok1 online gaming platform, accessible at rokok1.cam.
rokok1 is committed to protecting the personal data of all registered Members and visitors, including those accessing the Platform from Kuala Lumpur, Penang, Petaling Jaya, Shah Alam, Johor Bahru, and all other locations across Malaysia. We process personal data in accordance with applicable data protection principles and this Privacy Policy.
By registering an Account or using the rokok1 Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. This Privacy Policy should be read together with our Terms & Conditions and Responsible Gambling Policy.
rokok1 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data sharing is limited to operational necessity and legal compliance, as detailed in Section 6 of this Policy.
In this Privacy Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, identification number, contact details, financial data, and online identifiers. |
| "Processing" | Any operation or set of operations performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion. |
| "Data Controller" | rokok1, which determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Subject" | The individual whose Personal Data is being collected or processed — in the context of this Policy, this is the registered Member or Platform visitor. |
| "Third Party" | Any natural or legal person other than rokok1 and the Data Subject — including payment processors, KYC providers, and technical service partners. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement by which the Data Subject accepts the processing of their Personal Data. |
When you create a rokok1 Account, we collect the following information as part of the registration process: full legal name; date of birth (to verify the mandatory21+ age requirement); Malaysian mobile number; email address; preferred currency (MYR); and a username and password created by you. This information is required to establish your Account and cannot be omitted.
To comply with our anti-money laundering (AML) and responsible gambling obligations, and to process withdrawals above defined thresholds, we may request identity verification documents including: a copy of your Malaysian MyKad (National Identification Card) or passport; proof of address (utility bill, bank statement, or official correspondence dated within 90 days); and documentation confirming the ownership of any payment method linked to your Account (bank statement, e-wallet screenshot, or equivalent).
We collect records of all deposits and withdrawals made through your Account, including: transaction amounts MYR; payment method details (e-wallet identifiers for Touch'n Go eWallet, Boost, GrabPay; bank account identifiers for Maybank, CIMB, Public Bank, Hong Leong, RHB; and cryptocurrency wallet addresses for USDT TRC20 and BTC transactions); timestamps; and transaction reference numbers.
We record your gaming behaviour on the Platform for operational, responsible gambling, and fraud prevention purposes. This includes: game session logs; wager amounts; win and loss records; bonus utilisation history; sports betting markets accessed; and game type preferences. This data is used to improve the Platform, personalise your experience, and identify potential problem gambling indicators.
When you access the Platform, we automatically collect certain technical information including: IP address; device type and operating system; browser type and version; referring URL; pages visited and time spent; session duration; and login timestamps. This information is used for security monitoring, fraud prevention, and technical optimisation of the Platform.
If you contact our customer support team — whether via live chat or email at [email protected] — we retain a record of those communications, including the content of messages, timestamps, and any resolution actions taken. This is necessary for quality assurance and dispute resolution.
rokok1 uses the personal data we collect for the following purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, KYC documents |
| Identity and age verification (21+) | MyKad / passport, date of birth |
| Payment processing and withdrawal authorisation | Financial transaction data, KYC documents |
| Fraud detection and AML compliance | Transaction data, device data, IP address |
| Responsible gambling monitoring | Gaming activity data, transaction history |
| Customer support and dispute resolution | Communications data, Account history |
| Platform security and technical maintenance | Device data, session logs |
| Personalisation of gaming experience | Gaming activity data, preferences |
| Sending promotional communications (where consented) | Email address, mobile number |
| Legal and regulatory compliance | All categories as required |
rokok1 will not use your personal data for purposes materially different from those listed above without providing prior notice and, where required by law, obtaining your renewed consent.
rokok1 processes personal data on the following legal bases:
rokok1 does not sell or rent your personal data to third parties. We may share your data with the following categories of third parties only to the extent necessary for the purposes described in this Policy:
We share the minimum necessary financial and identity data with payment processing partners to facilitate deposits and withdrawals. This includes Malaysian e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), banking partners connected via DuitNow and FPX, and cryptocurrency processing services for USDT TRC20 and BTC transactions. These providers are bound by confidentiality obligations and may not use your data for their own marketing purposes.
For KYC and age verification purposes, we may share relevant identity documents and personal data with accredited third-party identity verification service providers. These providers operate under strict data processing agreements and use your data solely for the purpose of verification.
rokok1 may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction where required by law, court order, or where disclosure is necessary to protect the rights, property, or safety of rokok1, its Members, or third parties.
We may share technical data with hosting, cloud infrastructure, cybersecurity, and analytics providers who support the operation of the Platform. These partners act as data processors under binding contractual obligations and may not use your data for any purpose other than providing their contracted services to rokok1.
All Third Parties with whom rokok1 shares personal data are required to implement appropriate technical and organisational security measures and to handle your data only in accordance with our instructions and applicable data protection requirements.
rokok1 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general data retention approach is as follows:
Following the expiry of applicable retention periods, personal data will be securely deleted or anonymised in manner that prevents reconstruction of the original data.
rokok1 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files placed on your device when you access the Platform. We use the following categories of cookies:
You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. rokok1 does not use cookies to serve third-party advertising.
rokok1 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security infrastructure includes:
Whilst rokok1 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are also responsible for maintaining the confidentiality of your Account credentials and for ensuring that your device is adequately secured. If you suspect that your Account has been compromised, please contact our support team immediately.
The rokok1 Platform may utilise cloud infrastructure, payment processing systems, or technology service providers whose servers are located outside Malaysia. Where personal data is transferred internationally, rokok1 takes appropriate steps to ensure that your data receives an equivalent level of protection to that which it would receive in Malaysia.
These steps may include: entering into standard data processing agreements with service providers that incorporate appropriate data protection clauses; ensuring that receiving parties implement equivalent technical security measures; and limiting the scope of data transferred to the minimum necessary for the relevant service.
Where cross-border data transfers involve payment processing (for example, in connection with Boost, Touch 'n Go eWallet, GrabPay, or international banking rails), such transfers are subject to the privacy policies and data handling standards of those respective payment service providers in addition to this Policy.
As a Data Subject, you hold the following rights with respect to the personal data that rokok1 holds about you. You may exercise any of these rights by submitting a written request to our Data Privacy team via the contact details set out in Section 15 of this Policy.
Request a copy of the personal data rokok1 holds about you and information about how it is being used.
Request correction of inaccurate or incomplete personal data held by rokok1.
Request deletion of your personal data where there is no overiding legal reason for retention.
Request that we limit how we use your data while a dispute or correction is being resolved.
Request your personal data in a structured, machine-readable format for transfer to another provider.
Object to processing based on legitimate interests or for direct marketing purposes, at any time.
rokok1 will respond to all valid data rights requests within a reasonable timeframe, typically within 30 days of receipt of a verifiable request. In some cases — particularly where erasure requests conflict with mandatory legal retention obligations — we may be unable to fully comply and will explain the reasons for any limitations.
The rokok1 Platform is strictly for adults aged21 years and above. We do not knowingly collect, use, or store personal data belonging to individuals below the age of 21. Age verification is a mandatory component of the Account registration process, and rokok1 actively employs identity verification procedures to enforce this requirement.
If rokok1 becomes aware that personal data has been collected from an individual below the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated Account. Any funds associated with an underage account will be handled in accordance with applicable legal requirements.
If you are a parent or guardian and believe that your child may have accessed or registered on the rokok1 Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.
The rokok1 Platform may reference or facilitate access to third-party payment services (such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX-connected banking platforms). These third-party services operate under their own privacy policies and data handling practices, which are independent of this Privacy Policy.
rokok1 is not responsible for the privacy practices of third-party payment providers, game studio partners, or any other external services. We recommend that you review the privacy policies of any third-party services you use in connection with the rokok1 Platform. rokok1's Privacy Policy governs only data collected and processed directly by the Platform itself.
Game content provided by third-party studio partners is subject to technical data exchanges necessary to deliver the game experience (for example, passing session tokens and bet results between rokok1's Platform and the game server). These exchanges are governed by data processing agreements between rokok1 and the relevant studio partners and are limited to operationally necessary data.
rokok1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, data protection standards, or the Platform's data processing activities. The date of the most recent revision is displayed at the top of this document.
Where changes are material — for example, where we introduce a new category of data collection, a new purpose for processing, or a new category of data sharing — we will notify registered Members via their registered email address or through a prominent notice on the Platform prior to the changes taking effect.
Your continued use of the Platform following the effective date of any amended Privacy Policy constitutes acceptance of the updated terms. If you do not agree with any changes, you may request voluntary Account closure as described in the rokok1 Terms & Conditions.
If you wish to exercise any of your data rights, raise a concern about how rokok1 handles your personal data, or request further information about our data processing practices, please contact our Data Privacy team through the following channels. All data-related requests should be submitted in writing to enable accurate and timely processing.
All personal data transmitted between your device and the rokok1 Platform is protected by 256-bit SSL/TLS encryption — the same standard used by major Malaysian banks and financial institutions.
rokok1 does not sell, rent, or trade your personal data to third parties for commercial purposes. Data sharing is strictly limited to operational necessity — payment partners, KYC providers, and legal obligations only.
Age verification is mandatory at Account registration and may be required again at withdrawal. We do not knowingly collect or retain personal data from individuals below 21 years of age, and any such data will be immediately deleted if identified.
Malaysian Members hold clear rights to access, correct, delete, and port their personal data. All data rights requests submitted to rokok1 are processed within 30 days and handled by a dedicated privacy team.
rokok1 applies a data minimisation principle — we collect only the information that is genuinely necessary for the purposes described in this Policy. Unnecessary data collection is avoided as a matter of operational policy.
This Privacy Policy is reviewed and updated regularly to ensure it accurately reflects our current data processing activities and remains aligned with applicable data protection standards. Material changes are communicated to registered Members in advance.
Your privacy and data security are our priority. Join over 850,000 Malaysian players who trust rokok1 for fast MYR payouts, 3,500+ games, and transparent data practices.
21+ only. Please gamble responsibly. Responsible Gambling Policy