1win Privacy Policy

• What data is collected
  • Identity and contact: name, date of birth, residential address, email, mobile number, nationality.
  • Account details: username, preferences, responsible gaming settings, communication choices.
  • Verification data: KYC records such as PAN card, passport, driving licence, and proof of address as permitted by law.
  • Payment and transaction data: payment method, UPI VPA, masked card or bank details processed by payment providers, deposit and withdrawal history.
  • Technical and usage data: IP address, device identifiers, operating system, browser type, app telemetry, approximate location, log data, and cookie identifiers.
• Why this data is collected
  • To provide and administer services, verify identity, prevent fraud, and protect accounts.
  • To process payments and comply with anti-money laundering and countering financing of terrorism requirements.
  • To meet legal obligations, resolve disputes, and maintain records.
  • To improve website and app performance through analytics and service quality monitoring.
• Protection measures
  • Encryption in transit and at rest, strict access controls, and multi-factor administrative access.
  • Network monitoring, logging, and regular security testing and audits.
  • Vendor due diligence, contractual safeguards, and PCI DSS compliant payment processing.
  • Data minimisation, purpose limitation, and retention aligned to legal and operational needs.
• User rights
  • Access: users can request a copy of personal information processed.
  • Correction: users can update inaccurate or incomplete data.
  • Deletion: users may request deletion where permitted by law and subject to statutory retention.
  • Consent choices: users may withdraw marketing consent or adjust permissions at any time.
• Compliance Processing follows the Digital Personal Data Protection Act, 2023 and applicable rules, the Information Technology Act, 2000 and SPDI Rules to the extent in force, and relevant payment standards. 1win also applies internationally recognised privacy principles for cross-border users.

• Service delivery and account management: registration, login, profile management, and responsible gaming tools.
• Transactions: deposits, withdrawals, refunds, chargeback handling, and payment reconciliation through authorised providers.
• Verification and security: KYC checks, fraud prevention, risk assessments, and incident response.
• Support and communication: resolving queries, service notices, and operational messages.
• Personalisation and analytics: improving user experience, site performance, and content relevance using aggregated insights.
• Marketing: sending offers or updates based on user consent, with simple opt-out options.
• Compliance: meeting legal reporting duties, record keeping, and dispute resolution.

Processing remains lawful, fair, and transparent, limited to purposes notified at the time of collection.

• Access and updates
  • Users can review or edit profile details in account settings or by submitting a request through the website support channels.
  • Identity verification may be required before actioning a request.
• Deletion and retention
  • Users may request deletion of personal data that is no longer necessary for the purposes collected.
  • Some records must be retained for legal, taxation, fraud prevention, and regulatory purposes for statutory periods before deletion.
• Procedure
  • Submit a data request through the in-account support chat or the privacy contact provided on the website.
  • A response will be provided within a reasonable timeframe in line with applicable law.
• Security checks and payments
  • By using 1win, users consent to identity checks, sanctions screening, and processing of payment information by authorised providers for transaction purposes.

• Services are intended for adults aged 18 years and above.
• The operator does not knowingly collect personal data from minors and cannot confirm age without suitable documents.
• If personal information of a minor is discovered, the account will be restricted and the information will be deleted subject to legal requirements.
• Parents or guardians may contact the website support channels to request review and removal of a minor’s data.

• Personal data may be stored or processed in India and in other countries where service partners operate.
• Cross-border transfers are carried out using contractual safeguards, encryption, access controls, and risk assessments consistent with applicable laws.
• Using the website and apps signifies consent to such transfers and processing.
• Each partner is required to maintain confidentiality and protect personal information to standards comparable to this policy and legal requirements.

• This disclaimer forms part of the policy and may affect the scope or application of certain rules described in this document.
• The policy applies after user acceptance, including digital signature, click-acceptance during registration, or accession through continued use of the services.
• The operator may update the policy to reflect legal or operational changes, and the latest version published on the website will govern processing from its effective date.

• Cookies are small text files placed on a device by websites to store information and recognise the browser.
• Purpose of use
  • Essential cookies: enable core functions such as security and session management.
  • Statistics and performance: measure traffic, diagnose errors, and improve online services.
  • Behaviour analysis and personalisation: remember preferences and tailor content.
  • Advertising: measure reach and frequency where permitted by user consent.
• Retention: cookies are generally stored for up to 1 year unless a shorter or longer period is required for security or legal reasons.
• Control: users can manage cookie settings in the browser and through the cookie banner; disabling some cookies may impact site functionality.

• Use of the website or apps constitutes full acceptance of this Privacy Policy and any updates from time to time.
• In case of differences between versions, the current version published on the website prevails.
• Continued use after changes take effect indicates agreement to the revised terms by the user.

• Personal information may be shared with third parties for purposes such as payment processing, KYC verification, fraud prevention, customer support, analytics, dispute resolution, audits, or as required by law and regulators.
• Only the minimum data required for the stated purpose is shared, under confidentiality and data protection obligations.
• A list or category description of service providers is made available on the website where practicable; if not listed, users will be informed of the purpose and scope at the point of collection.
• Providing data for a specific service is treated as consent to share it for that service. Each third party may have its own privacy policy.

• The website may contain links to external websites or services that are not operated by the operator.
• Those websites have their own privacy policies and security practices.
• The operator is not responsible for how external sites collect, use, or disclose information.
• Users should review the privacy policy of any external website before providing personal data.