1win Privacy Policy

• Personal data we collect
  • Identity details such as full name, date of birth, nationality, and government identification during verification
  • Contact details such as email, phone number, and address
  • Account information such as username, settings, and responsible gaming limits
  • Transaction records such as deposits, withdrawals, bets, wins, losses, currency, and payment method details
  • Technical data such as IP address, device identifiers, browser type, operating system, language, and approximate location derived from IP
  • Usage information such as pages viewed, session logs, feature interactions, and cookies data
  • Communications such as support chats, emails, and call recordings where permitted by law
• Why we collect and process information
  • To create and manage the account and deliver services
  • To verify age and identity and to meet KYC, AML and CFT obligations
  • To process payments, refunds, and chargebacks
  • To prevent fraud, secure systems, and investigate incidents
  • To comply with legal requests and resolve disputes
  • To maintain, improve, and personalise websites and applications, subject to preferences
  • To produce statistics and analytics for service quality
• Protection measures
  • Encryption in transit and at rest using industry-standard protocols
  • Strict access controls, role-based permissions, and least-privilege practices
  • Network segmentation, firewalls, continuous monitoring, and audits
  • Vendor due diligence and confidentiality obligations
  • Incident response and breach notification procedures
  • Data minimisation and documented retention schedules
• User rights
  • Access, correction, deletion, restriction, objection, and portability where applicable
  • Withdrawal of consent at any time without affecting prior processing
  • Complaint submission to an appropriate authority where available
  • Requests can be made through in-account support or the help centre
• Compliance
  • Operations align with applicable laws of Bangladesh, including ICT and Digital Security requirements, and AML and CFT obligations issued by relevant authorities
  • International privacy principles, including GDPR-style fairness, purpose limitation, and security, guide processing

• Service and account operations, including registration, authentication, and account administration
• Payments and financial transactions, including processing, reconciliation, refunds, and chargebacks
• Customer support and service quality, including troubleshooting and incident management
• Identity verification, sanctions screening, and compliance checks under KYC, AML, and CFT rules
• Security and fraud prevention, including risk scoring and misuse detection
• Improving online services and websites, including analytics and performance measurement
• Personalisation of content and settings, subject to consent and preferences
• Marketing communications based on consent, with the option to opt out at any time
• Research, statistics, and reporting using aggregated or anonymised data
• Meeting legal obligations, enforcing agreements, and managing disputes

Processing is lawful, fair, and transparent, and it follows stated purposes.

• Access and copies
  • Users can access certain information in account settings
  • For a full copy of personal data, submit a request through the in-site support channel; identity verification may be required
• Correction and updates
  • Incorrect or incomplete information can be corrected through account settings or by submitting a request
  • Requests are handled within a reasonable period, typically within 30 days where feasible
• Deletion and restriction
  • Users may request deletion of personal data
  • Data may be retained where required by law, including AML, tax, accounting, fraud prevention, and legal claims
• Portability and preferences
  • A machine-readable export can be requested where technically feasible
  • Preferences for cookies and communications can be managed in settings
• Security checks and payment processing consent
  • By using 1win, the user consents to security reviews, identity checks, and processing of payment data by verification and payment providers as needed for service and compliance

• The services are intended for persons aged 18 and above
• The operator cannot verify age without documents and may request proof during verification
• If a minor’s account is identified, access is blocked and personal data is removed subject to legal retention duties
• A parent or legal guardian may request deletion of a minor’s data by contacting support and providing proof of relationship and identity

• Personal data may be stored or processed in other countries where group companies, payment providers, cloud hosts, and verification partners operate
• Use of the site constitutes consent to such international transfers and processing
• Safeguards include contractual obligations, confidentiality, access limitation on a need-to-know basis, and technical security controls
• Where required by applicable law, standard data protection clauses or equivalent safeguards are used for cross-border transfers

• The privacy disclaimer clarifies how the rules apply to personal data and may limit or extend their effects where permitted by law
• The disclaimer applies once the user accepts this policy by signature, affirmative acceptance in the interface, or other accession method
• In case of inconsistency, the version of this policy published on the site governs, subject to any mandatory local legal requirements
• Performance issues caused by factors outside reasonable control do not waive data protection duties set out in this document

• Cookies are small text files stored on a device to recognise the browser, keep preferences, and improve online services
• Purposes
  • Statistics and analytics to understand usage and performance
  • Behaviour analysis to detect fraud and improve security
  • Personalisation of content and settings subject to consent
  • Site improvement through measurement and diagnostics
• Retention
  • Cookies are retained for up to 1 year from the last visit, unless a shorter period is necessary for essential operation
• Control
  • Users can manage cookies in browser settings or the site’s cookie panel
  • Blocking cookies may limit some functions of the websites
  • Third-party cookies may be used by analytics and advertising partners subject to their policies

• Use of 1win signifies full acceptance of this Privacy Policy and related processing of personal data as described in this document
• The current version posted on the site prevails over any prior versions
• Updates may be made from time to time, and continued use after posting the update constitutes acceptance
• Users who do not accept the updated policy should stop using the services

• Personal data may be shared with third parties in these cases
  • To comply with law, regulation, court orders, and lawful requests by authorities
  • To process payments, perform identity verification, and conduct AML and CFT screening
  • To provide core services such as hosting, customer support tools, analytics, and communication delivery
  • To enforce terms, prevent fraud, and resolve disputes or chargebacks
• The categories or list of service providers may be presented on the site or supplied upon request; where not listed, users are informed of the purpose and scope when required by law
• Providing data and using relevant features constitutes consent to such sharing in line with this policy
• Third parties operate their own privacy practices; confidentiality and data protection obligations are imposed through contracts

• The websites may include links to external websites or services that have their own privacy policies and practices
• 1win is not responsible for how external sites collect, use, or protect personal information
• Users should review the privacy policy of each external site and exercise caution when providing personal data