1win Privacy Policy

The platform collects personal data to provide and secure the services. This information may include:

• Identity details: full name, date of birth, CNIC/NICOP or passport details, and verification images where required by law and consented by the user.
• Contact information: email address and mobile number.
• Account and transaction records: deposits, withdrawals, wagers, and account history.
• Payment information: masked card or bank details and mobile wallet references processed by authorised payment providers.
• Technical data: IP address, device identifiers, cookies, browser and system settings, language, time zone, and approximate location.

Why this data is collected:

• To create an account and deliver online services.
• To verify age and identity, prevent fraud, and meet anti-money laundering and counter-terrorist financing requirements.
• To process payments and resolve support queries.
• To maintain security, improve service quality, and personalise the user experience.

Protection measures applied:

• Encryption in transit and at rest, strict access controls, multi-factor authentication, and network segmentation.
• Continuous monitoring, logging, vulnerability management, and incident response procedures.
• Employee training, supplier due diligence, data minimisation, and documented retention schedules.

User rights:

• Access, correction, deletion, restriction, portability, objection to direct marketing, and withdrawal of consent.
• These rights may be limited by legal obligations, including AML/CFT rules and record-keeping requirements.

Compliance statement:

• The platform follows international privacy standards similar to GDPR where applicable, and complies with Pakistan’s legal framework including the Prevention of Electronic Crimes Act 2016, the Anti-Money Laundering Act 2010, State Bank of Pakistan requirements for financial transactions, and relevant directions issued by competent authorities.

Personal data is used only for lawful, fair, and transparent purposes:

• Account setup, verification, and customer support.
• Payment processing, refunds, chargeback handling, and transaction monitoring.
• Service delivery, performance optimisation, and safety of the services.
• Personalisation of content and settings.
• Analytics, quality assurance, and research to improve websites and apps.
• Direct marketing based on consent and preference controls.
• Prevention and detection of fraud, abuse, and security incidents.
• Compliance with legal duties, regulatory requests, dispute resolution, and enforcement of agreements involving 1win.

Users can request to access, update, or delete their personal data through account settings or the support channels provided on the website. For security, identity verification may be required before action is taken. The platform aims to respond within 30 days or as permitted by law, and may extend this period for complex requests.

Correction and deletion procedures:

• Correction: inaccurate or incomplete information can be rectified upon request and verification.
• Deletion: data can be erased where no longer required, subject to retention rules for AML/CFT, tax, accounting, or legal claims. Certain records must be kept for at least five years where applicable.

By using 1win, users consent to security checks, sanctions screening, fraud assessments, and processing of payment data by authorised payment service providers.

The services are intended for adults aged 18 and above. The operator does not knowingly collect personal data from minors and cannot confirm age without identity documents. If a parent or guardian informs the operator that a minor has provided information, the account will be reviewed and the personal data will be deleted where legally permitted. Any remaining balance will be handled according to applicable law and AML/CFT obligations.

Personal data may be processed in other countries where technology, payment, verification, and support partners operate. Using the services constitutes consent to such transfers. Confidentiality and security obligations are imposed on all partners through contracts and recognised safeguards, including standard contractual protections and technical controls. Details of key processing locations or providers may be published on the website or made available upon request to 1win, subject to security considerations.

Any disclaimer in this document clarifies the scope and effect of the rules that govern personal data. Where the disclaimer limits or interprets obligations, that clarification applies to the extent allowed by law. The disclaimer becomes effective when the user accepts this Privacy Policy by signature, click-acceptance, or other accession recorded by the system.

Cookies are small text files placed on a device by websites to store and retrieve information. The platform uses cookies for statistics, behaviour analysis, personalisation, and site improvement. Types include essential, functional, analytics, and marketing cookies. Non-essential cookies operate based on consent, which can be withdrawn in the cookie banner or browser settings. Cookie retention is up to 1 year unless a shorter period is stated.

By accessing or using the services, the user fully accepts this Privacy Policy. Continued use after updates signifies acceptance of the revised document. If there is any inconsistency between versions, the current version published on the website prevails for 1win and the user.

Personal data may be shared with third parties where necessary to comply with law, resolve disputes, protect rights, perform agreements, and deliver services. Typical recipients include payment processors, KYC/AML providers, fraud and risk partners, analytics platforms, cloud hosts, professional advisers, and competent authorities. The website may list key third parties; if not listed, the user will be informed of the purpose and scope where required by law. Providing data constitutes consent to such disclosure and use relating to 1win.

The services may include links to external websites that have their own privacy policies. The operator is not responsible for how those websites collect, use, or share information. Users should review the privacy notices of any external site they visit and exercise caution before providing personal data.