1win Privacy Policy

Personal data collected may include:

• Identity and contact details: name, date of birth, email, phone, residential address, and government-issued ID such as CNIC or passport when required for verification.
• Account and usage information: username, preferences, logs, device data, IP address, and cookies or similar technologies.
• Financial information: payment method details processed by payment providers, transaction records, and verification outcomes.
• Compliance data: results of age checks, KYC, sanctions screening, and fraud prevention signals.

Purposes for collection and processing:

• Provide and maintain the services, manage the user account, and deliver support.
• Verify identity and age, process payments and withdrawals, and prevent fraud.
• Meet legal obligations under Pakistan laws and international compliance standards.

Protection measures:

• Encryption in transit, strong access controls, multi-factor authentication, and network segmentation.
• Vendor due diligence, contractual safeguards, and periodic security assessments.
• Payment data handled in line with industry security practices such as PCI DSS by certified providers.

User rights:

• Access personal information and request a copy.
• Request correction of inaccurate or incomplete data.
• Request deletion, restriction, or objection to certain processing, subject to legal retention.
• Withdraw consent for processing that relies on consent.

Compliance statement:

Processing is conducted in accordance with applicable laws of Pakistan, including PECA 2016 and related regulations, and aligned to recognised international privacy principles such as GDPR where relevant.

Data is used for lawful, fair, and transparent purposes, including:

• Account creation, authentication, and service delivery.
• Processing deposits, bets, winnings, and withdrawals through payment providers.
• Customer support, dispute handling, and service quality monitoring.
• Personalisation of online experience and interface settings.
• Marketing communications based on consent, with easy opt-out options for the user.
• Analytics, performance measurement, and service improvement.
• Security, fraud detection, and prevention of misuse.
• Compliance with AML/CFT rules, tax reporting, and other legal obligations.
• Record keeping and audit trail maintenance for a defined retention period.

Users can:

• Review and update account details in profile settings where available.
• Submit a data request through the in-account support channel or the website contact form.
• Provide proof of identity for security before access, correction, or deletion.

Correction and deletion procedures:

• Incorrect personal information can be rectified upon request.
• Deletion requests are honoured where legally permitted and not in conflict with retention duties for fraud prevention, financial reporting, or dispute resolution.
• Responses are provided in a reasonable time, typically within 30 days, depending on request scope.

By using 1win, the user consents to necessary security checks and the processing of payment data by authorised providers to complete transactions and verify identity.

The services are intended for persons aged 18 years and above under Pakistan law. The operator cannot confirm age without receiving appropriate documents during verification. If personal data of a minor is identified, the account will be closed and the information deleted, except where retention is required for legal claims or investigations. Parents or legal guardians may request deletion by contacting support and providing proof of relationship.

Personal data may be stored or processed outside Pakistan in locations where hosting, payment, verification, or support partners operate. Use of the websites and services constitutes consent to such transfers. Confidentiality and security are ensured through contractual obligations, strict access controls, and technical safeguards such as encryption. Additional measures, including appropriate transfer mechanisms under international standards, are applied where required.

This disclaimer may limit, interpret, or modify the scope or effect of the rules in this document to the extent permitted by applicable law. It applies once the user accepts the Privacy Policy through a click-accept process, continued use, or accession by signature where relevant. Updates may be issued to reflect legal or operational changes, and the updated text takes effect on publication. Continued use after publication signifies acceptance of the revised terms.

Cookies are small text files that a website stores on a device to remember the user and improve services. These files are used for statistics, behaviour analysis, personalisation, and site improvement. Types include essential, performance, analytics, and advertising cookies. The standard retention period for non-essential cookies is up to 1 year. Users can manage or block cookies in browser settings, though certain features may not function without essential cookies.

Use of 1win indicates full acceptance of this Privacy Policy and any related data processing notices. If there is any difference between versions, the current version published on the website prevails. Users who do not agree should stop using the services and may submit requests regarding personal information and account closure through support.

Personal data may be shared with third parties where necessary to provide services, comply with law, handle disputes, or perform agreements. Typical recipients include payment processors, identity and KYC providers, fraud prevention and analytics vendors, hosting and IT support, auditors, regulators, and law enforcement on lawful request. These parties process information under contracts that impose confidentiality and security duties. A current list of core payment and verification partners is available on the website or on request. Providing data for such services constitutes consent to the described sharing and processing.

The websites may contain links to external websites or applications that have their own privacy policies. The operator does not control and is not responsible for how those parties handle personal information. Users should review the privacy policy of each external site and proceed with caution before sharing any data.