What this privacy document covers
This Privacy Policy explains how personal data is collected, the purposes of processing, the protection applied, circumstances of disclosure, and secure deletion.
The processing of user information is grounded in consent obtained during registration and through in-product choices.
Additional lawful bases may apply, such as fulfilling a contract or meeting legal obligations.
Users can rely on transparent handling throughout their online journey on 1win.
The policy applies to all services offered to India users.
What data we collect and how we protect it
- Types of personal information collected
- Identity and verification: name, date of birth, nationality, KYC details, and verification documents (e.g., government ID, address proof) provided by the user.
- Contact details: mobile number, email, postal address.
- Account and usage: username, preferences, responsible gaming settings, communication history, log-in timestamps.
- Transaction and payment: deposit and withdrawal records, instrument type, masked card or UPI details, and billing information processed by payment providers.
- Technical data: IP address, device identifiers, browser type, OS, language, and cookies.
- Why this data is collected
- To create and manage the account, deliver services, and support responsible play.
- To process payments, verify identity, prevent fraud and money laundering, and comply with legal requirements.
- To improve website performance, personalise experience, and provide customer support.
- Security measures
- Transport-layer encryption (TLS) and encryption at rest for sensitive records.
- Strict access controls, least-privilege policies, and multi-factor authentication for internal systems.
- Segmented networks, continuous monitoring, and regular vulnerability assessments.
- Secure development standards and periodic audits.
- Payment processing aligned to PCI DSS where applicable.
- User rights under India laws (subject to verification and lawful exceptions)
- Access: obtain a copy or summary of personal data and processing information.
- Correction: update inaccurate or incomplete records.
- Deletion: request erasure when data is no longer needed or consent is withdrawn.
- Withdraw consent: stop processing based on consent, without affecting prior lawful processing.
- Grievance redressal: raise concerns through the in-app support channel listed in the Help Centre.
- Complaint: escalate to the Data Protection Board of India, if and when fully operational.
Compliance statement: Processing follows the Digital Personal Data Protection Act, 2023 (as notified), the Information Technology Act, 2000, relevant rules on reasonable security practices, and applicable RBI/CERT-In directions for security.
How we use your information
- Service delivery and account management
- Create and maintain the account, enable log-in, and provide user support.
- Process deposits, bets, game participation, and withdrawals.
- Verification, safety, and compliance
- Conduct KYC checks, age verification, fraud prevention, AML/CFT screening, sanctions checks, and risk assessments.
- Enforce platform rules and protect the integrity of services.
- Service improvement and personalisation
- Monitor performance, fix errors, and enhance online features.
- Tailor content and settings based on user preferences.
- Analytics and reporting
- Aggregate statistics to analyse usage and improve the website.
- Marketing (consent-based)
- Send offers or updates according to preferences; opt-out is available at any time.
Processing is lawful, fair, and transparent. The basis may include consent, performance of a contract, compliance with legal obligations, and legitimate interests that do not override user rights.
How to access, correct, or delete your data
- Access and updates
- Review and edit profile details in account settings where available.
- For additional access requests, use the Help Centre support channel after identity verification.
- Correction and deletion
- Submit correction or deletion requests via in-app support. A response is provided in a reasonable time, typically within 30 days, subject to legal retention duties.
- Some records (e.g., transaction logs) may be retained for tax, AML, or dispute purposes as required by law.
- Consent and security checks
- Using the services indicates consent to verification steps, including KYC and ongoing risk screening.
- Payment information is processed by authorised payment providers, and by proceeding, the user consents to such processing under their terms.
Minors and age restrictions
- The site is intended only for persons aged 18 years and above.
- Age cannot be verified without documents; KYC may be required at any stage.
- If a minor’s information is identified, the account will be closed and personal data deleted, subject to statutory retention.
- Parents or guardians may request deletion by contacting support and providing proof of relationship and identity.
International transfers of personal data
- Personal data may be stored or processed outside India in locations where partners, processors, or infrastructure providers operate.
- By using the services, the user consents to such transfers in line with applicable cross-border rules.
- Confidentiality and protection are ensured through contractual safeguards, access controls, encryption, and audits.
- Transfers occur only for defined purposes such as payment processing, cloud hosting, analytics, and customer support.
Legal notices and policy precedence
- This Privacy Policy is part of the broader terms that govern use of the services.
- A legal disclaimer may define or limit how certain provisions apply in specific scenarios, as permitted by law.
- The provisions apply when the user signifies acceptance by registering, selecting “I agree”, or continuing to access the services (accession).
- Where conflicts arise, the most recent version of this document prevails, subject to mandatory legal requirements.
Cookies and similar technologies
- Definition
- Cookies are small text files stored on a device to remember settings, recognise a browser, and improve performance.
- How cookies are used
- Statistics and analytics: measure traffic and usage patterns.
- Behaviour analysis: understand navigation and troubleshoot issues.
- Personalisation: remember preferences and language.
- Site improvement and security: enhance stability and detect misuse.
- Retention
- Most analytics and preference cookies are retained for up to 1 year, unless deleted earlier by the user.
- Control
- Users can manage or block cookies in browser settings. Some functions may not operate if certain cookies are disabled.
Your acceptance of this policy
- By accessing or using the services, the user confirms full acceptance of this Privacy Policy.
- The current version published on the website will apply to all processing of personal information.
- Continued use after updates signifies consent to the revised policy, where required by law.
Sharing information with third parties
- Situations where sharing may occur
- To service providers: payment processors, KYC/AML vendors, fraud prevention tools, analytics, hosting, customer support, and communication platforms.
- For legal and compliance needs: responding to lawful requests, enforcing rights, preventing harm, and managing disputes.
- Under contracts: when fulfilling services agreed by the user.
- Transparency
- Categories of partners are listed on the website or within product notices, where available. If a specific list is not displayed, users will be informed about the purpose and scope of sharing when relevant.
- Providing personal data to enable a feature indicates consent to its disclosure for that purpose.
- Independent practices
- Third parties may have their own privacy practices. Users should review their policies to understand processing of information.
Links to external websites
- The website may contain links to external websites or services that operate under their own privacy policies.
- The operator is not responsible for how those external parties process or secure personal information.
- Exercise caution and review the privacy notice of any external website before sharing data.
Updated: