1win Privacy Policy

Personal data we collect

• Identity and contact: name, date of birth, address, email, mobile number
• Account data: username, account preferences, responsible gaming settings
• KYC documents: government ID, address proof, selfie or live verification image
• Payment and transaction information: instrument type, masked card numbers, UPI VPA, wallet identifiers, amounts and timestamps
• Technical information: device identifiers, IP address, browser type, operating system, app version, log data
• Usage data: pages viewed, time spent, interactions, referral sources
• Cookies and similar technologies: preferences, analytics, advertising identifiers
• Communications: chat transcripts, support tickets, call recordings where permitted by law

Why we collect and process this information

• To register and service accounts and deliver online services
• To verify age and identity, and to meet KYC/AML obligations
• To process deposits, bets, and withdrawals, and to prevent fraud
• To provide support and respond to user requests
• To improve websites, apps, and features through analytics
• To personalise content and manage responsible gaming tools
• To meet legal, regulatory, tax, and dispute requirements

Protection measures

• Encryption of data in transit and at rest, secure key management
• Network segregation, firewalls, intrusion monitoring, anti-malware
• Strict access controls, role-based permissions, background checks for authorised staff
• Regular audits, vulnerability testing, and incident response procedures
• Payment processing aligned to PCI DSS by certified providers

User rights (subject to law and verification)

• Access: obtain a copy of personal information and processing details
• Correction: request updates to incomplete or inaccurate information
• Deletion: request erasure where retention is not required by law or legitimate use
• Consent management: withdraw consent for optional processing
• Grievance: raise concerns through the Help Centre or designated Grievance Officer

Compliance statement

• Handled in line with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and applicable rules, along with international good-practice standards.

Data retention

• Stored for the life of the account and for a period required by law or legitimate purposes such as fraud prevention and accounting.

We process personal data for lawful, fair, and transparent purposes:

• Account servicing: registration, authentication, preferences, responsible gaming settings
• Transactions: deposits, bets, withdrawals, payment reconciliation, chargeback handling
• Security and integrity: fraud detection, risk scoring, AML screening, sanctions checks
• Customer care: resolving tickets, quality assurance of support interactions
• Service improvement: analytics, performance monitoring, error diagnostics
• Personalisation: remembering choices, tailoring content and notifications
• Marketing: sending permitted communications; users can opt out of non-essential messages
• Legal compliance: responding to lawful requests, tax and accounting, dispute resolution

Processing relies on consent, performance of a contract, compliance with legal duties, and other grounds permitted under Indian law and applicable international norms.

How users can access or update information

• Use account settings to review profile, contact details, and preferences
• Submit a request via the Help Centre to obtain a copy of stored information

Correction and deletion

• Request corrections for inaccurate or incomplete records
• Ask for deletion of personal data that is not required for legal, regulatory, or legitimate purposes
• Verification is required before we act on requests; responses are provided within a reasonable time as per law

Security checks and payments

• By using 1win, users consent to security reviews, identity verification, and processing of payment information by regulated providers for fraud control and compliance purposes.

• Services are for persons aged 18 years and above.
• Age cannot be confirmed without identity documents; verification may be requested.
• If a parent or guardian believes a minor has provided information, contact Support through the channels on the website to request deletion. After verification, such information will be removed, subject to legal retention duties.

• Personal data may be stored or processed in countries where 1win partners, service providers, or group entities operate.
• Use of the site and services indicates consent to such international transfers.
• We implement contractual and technical safeguards to protect confidentiality, integrity, and availability.
• Partners are required to follow strict confidentiality obligations and industry-standard security controls.
• Transfers are conducted in line with Indian law and any government notifications on permitted or restricted destinations.

• A disclaimer in this document may limit or clarify the scope or effect of certain rules where permitted by law.
• The disclaimer applies from the moment the user accepts this policy through any legally valid act, including signature, online acceptance, or accession by continuing to use the services.
• Nothing in this policy limits rights that cannot be limited under applicable law, and nothing overrides mandatory legal duties.

What cookies are

• Cookies are small text files stored on a device to remember settings and recognise a browser. Similar tools include SDKs, pixels, and local storage.

How we use them

• Essential operation and security
• Statistics and analytics on site and app performance
• Behaviour analysis to improve features and fix issues
• Personalisation of content and remembering preferences
• Advertising measurement where permitted by consent

Retention and control

• Standard retention is up to 1 year, or shorter where possible.
• Users can manage or delete cookies in browser or device settings and through in-product controls for optional categories. Blocking some cookies may affect functionality.

• Use of 1win indicates full acceptance of this Privacy Policy and any updates posted on the website or app.
• The current version published at the time of use prevails over any earlier version.
• Continued use after an update indicates acceptance of the revised terms, subject to applicable consent requirements.

• Personal data may be shared with third parties when required by law, for dispute handling, fraud prevention, contract performance, or to provide requested services.
• Typical recipients include payment processors, banks, card networks, UPI and wallet providers, KYC/AML vendors, fraud and risk platforms, cloud hosting, analytics tools, customer support platforms, and professional advisers.
• 1win may publish a list or category description of such recipients on the website. If not listed, users will be informed of the purpose and scope where required by law.
• Providing information for these purposes constitutes consent to such sharing, subject to confidentiality and security obligations.

• The website and app may contain links to third-party websites or services that have their own privacy policies.
• 1win is not responsible for how external websites collect, use, or protect information.
• Users should review the privacy practices of any external site and exercise caution when leaving our domains.