1win Privacy Policy

1win collects personal data so that it can provide online casino and sportsbook services in a secure and compliant manner for users in India.

Types of personal data collected

1win may collect the following categories of information:

• Identification data: name, date of birth, gender, nationality, identity document details (such as PAN, Aadhaar, passport, driving licence, or similar KYC documents).
• Contact details: residential address, email address, mobile number, and other communication details.
• Account data: username, encrypted password, account preferences, responsible gaming settings, and communication choices.
• Financial and transaction data: payment method details (for example, UPI ID, bank account details, card details in tokenised form, wallet identifiers), deposits, withdrawals, betting history, bonus usage, and transaction records.
• Technical data: IP address, device identifiers, browser type, operating system, language, access times, approximate location data, and log files.
• Usage data: pages visited, clicks, game and sports selections, session duration, referral information, and interaction records.
• Verification and compliance data: documents and information submitted for age verification, address verification, source-of-funds checks, and anti-money laundering (AML) reviews.

The website collects this data directly from the user (for example, in forms, uploads, or communications), through automatic technical collection (such as cookies and similar tools), and from trusted service providers such as payment partners and verification providers.

Purposes for collecting personal information

Personal data is collected and processed for the following purposes:

• Creating, operating, and administering user accounts.
• Providing access to games, sports betting, and related services.
• Processing deposits, withdrawals, bonuses, and other financial transactions.
• Meeting legal obligations relating to identity checks, age restrictions, AML and combating financing of terrorism (CFT), fraud prevention, and record-keeping.
• Supporting responsible gaming measures and self-exclusion.
• Providing customer support, responding to requests, and resolving disputes.
• Improving the performance, security, design, and content of the online platform and mobile applications.
• Conducting analytics, reporting, and risk management for lawful business needs.
• Sending service-related messages and, where permitted, marketing communication in line with user preferences.

Processing is carried out on the basis of one or more lawful grounds, such as user consent, performance of a contract, compliance with legal obligations, and legitimate interests that do not override user rights.

Technical and organisational protection measures

1win uses a combination of technical and organisational safeguards to protect personal information from unauthorised access, misuse, loss, alteration, or disclosure, including:

• Encryption of data in transit using industry-standard protocols (such as TLS/SSL).
• Secure storage systems and restricted access to databases containing personal data.
• Role-based access controls so that only authorised personnel can handle sensitive information.
• Regular security testing, monitoring, and logging of system access and transactions.
• Use of secure payment gateways and tokenisation where supported by payment providers.
• Internal policies, confidentiality obligations, and training for staff and contractors handling user data.

No online system can guarantee absolute security, but 1win takes reasonable and appropriate measures based on industry practice and regulatory expectations.

User rights regarding personal data

Subject to applicable laws and technical limitations, users in India have the right to:

• Request access to their personal information held by 1win.
• Request correction of inaccurate or incomplete personal data.
• Request deletion or anonymisation of personal information, where legally permissible.
• Object to certain forms of processing, or request restriction of processing in specific cases.
• Withdraw consent for processing that is based solely on consent, without affecting processing that has already taken place lawfully.
• Request information on the sources, purposes, and categories of data being processed.

Requests can be made through the contact details provided in the website or support channels. 1win may need to verify the identity of the requester and may retain limited information where required by Indian law, taxation rules, AML/CFT standards, or other regulatory obligations.

Compliance with laws in India

1win aims to manage personal data in line with applicable laws in India related to information technology, data protection, consumer protection, and gaming, including the Information Technology Act, 2000, relevant rules such as the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and any other applicable standards or government directions.

Where international best practices apply, such as transparency, data minimisation, purpose limitation, and security safeguards, 1win strives to align its internal procedures to those expectations while still following Indian law and any local restrictions on online gaming and betting services.

Personal information collected from users is used only for lawful purposes and in a manner that is fair and transparent.

Core service delivery and account management

1win may use personal data to:

• Register and maintain user accounts.
• Authenticate logins and secure access to the platform.
• Enable participation in online casino and sportsbook services.
• Manage account balances, bets, game participation, and winnings.
• Process deposits, withdrawals, refunds, and payment confirmations.

Customer support and communication

Data is used to:

• Respond to queries, complaints, and support requests.
• Notify users of important changes to terms, rules, privacy practices, and technical updates.
• Keep records of communications for quality control, legal, and training purposes.

Service improvement and analytics

1win may process usage and technical data to:

• Analyse performance of the website and apps.
• Identify and resolve technical issues.
• Improve design, navigation, and usability of services.
• Understand how users engage with games, sports events, and features.
• Prepare aggregated, anonymised statistics for business reporting.

Such analysis is usually done on a de-identified or aggregated basis whenever possible.

Marketing and personalisation

Where permitted by law and user preferences:

• Contact details may be used to send information on new features, updates, promotions, or responsible gaming tools.
• Behavioural and transaction data may be used to personalise content, such as showing relevant sports events, games, or language options.

Users can manage marketing preferences in account settings or by using opt-out links in communication, subject to reasonable processing time.

Security, fraud prevention, and compliance

1win may process personal information in order to:

• Verify identity, age, and location to comply with legal and regulatory requirements.
• Conduct AML/CFT checks and monitor suspicious activity and high-risk transactions.
• Prevent and detect fraud, account misuse, bonus abuse, account sharing, and prohibited betting patterns.
• Enforce terms and conditions, prevent violation of house rules, and protect the integrity of sports and gaming activities.
• Cooperate with law enforcement, regulators, courts, and other public authorities as required by applicable law.

Legal bases for processing

Processing of personal information is based on one or more of the following legal grounds, as applicable under Indian law and relevant international principles:

• Consent provided by the user.
• Performance of a contract or steps taken at the user’s request prior to entering into a contract.
• Compliance with legal obligations, such as AML/CFT, tax, or record-keeping requirements.
• Legitimate interests, such as improving services, maintaining security, and defending legal claims, balanced against user rights and expectations.

1win does not sell personal data to third parties. Any sharing of data is limited to the purposes and categories of recipients described in this Privacy Policy.

Users have control over much of their personal information and can exercise rights in accordance with this Privacy Policy and applicable law.

Accessing and updating personal data

Users may:

• Log in to their account to review and update certain personal details such as contact information, password, and preferences.
• Contact customer support to request access to additional data that is not directly visible in the account.

1win may ask for identity verification before providing access to or changing sensitive information.

Correction and rectification

If personal data is inaccurate, incomplete, or outdated, users may request correction or completion. 1win will:

• Review the request and the supporting documentation.
• Update the records where the request is justified and permitted by law.
• Inform the user if certain data cannot be changed due to legal or regulatory retention requirements.

Deletion and restriction

Users may request deletion of their personal information or closure of their account. Such requests will be handled subject to:

• Legal obligations to retain information for a minimum period (for example, under AML/CFT, tax, or dispute resolution requirements).
• The need to keep limited records for prevention of fraud, self-exclusion enforcement, or legal defence.

Where full deletion is not possible, 1win may:

• Anonymise data so that it no longer identifies the user; or
• Restrict processing of specific data fields to certain purposes only.

Security checks and payment data processing

By using the 1win website, mobile applications, or related services, and by creating an account, the user:

• Consents to reasonable security checks, identity verification, and risk assessments that use personal and transaction information.
• Acknowledges that payment data may be collected and processed by authorised third-party payment providers, banks, card schemes, wallet services, UPI facilitators, and similar entities.

These providers handle payment information under their own security standards and legal obligations. 1win receives only the parts of payment data that are required to confirm transactions, manage accounts, and meet compliance requirements.

How to exercise rights

To exercise access, correction, deletion, or other data rights, users may contact support through the communication channels mentioned on the website. Responses will be provided within a reasonable time frame, considering the complexity of the request and legal requirements. Certain requests may be declined or limited where permitted or required by law, in which case 1win will provide the main reasons subject to legal restrictions.

1win is committed to protecting minors from accessing online gambling and betting services.

Age restriction

• The platform, games, and sports betting services are intended only for users who are 18 years of age or older, or any higher age required by the law of the user’s jurisdiction.
• Registration, deposits, or real-money play by persons under the legal age are strictly prohibited.

Age verification

• 1win may request identity documents or other evidence to confirm age and eligibility.
• In the absence of such documents, it is not always possible to verify the user’s age at the time of registration or first access.
• Where doubt arises, accounts may be suspended pending verification.

Accounts and data of minors

If it comes to the attention of 1win that a user is a minor or that an account has been created or used by an underage person:

• The account will be suspended or closed as soon as reasonably practical.
• Wagering activity may be cancelled in line with applicable rules and legal requirements.
• Personal data related to the minor will be deleted or anonymised, except where retention is required for legal, regulatory, or dispute purposes.

Parents or legal guardians who believe that a minor has provided personal information or accessed the services should contact support without delay. Upon verification of guardianship and the minor’s age, 1win will take appropriate steps to close the account and remove personal information in accordance with applicable laws and record-keeping obligations.

Users are encouraged to use parental control tools and device-level restrictions to prevent minors from accessing gambling and betting websites.

Online services often rely on technology and partners located in multiple jurisdictions. Personal data of users in India may therefore be processed outside India.

Where data may be processed

Personal information may be transferred to and processed in:

• Countries where 1win group entities are established.
• Countries where servers, hosting providers, data centres, or cloud service providers are located.
• Countries where payment processors, banks, card schemes, verification services, or other trusted partners operate.

These locations may have different data protection laws from those in India. In such cases, 1win aims to apply comparable safeguards and contractual protections.

Safeguards for international transfers

To protect personal information when it is transferred across borders, 1win:

• Limits transfers to partners who need the data to provide services, support security, or fulfil legal and contractual duties.
• Enters into appropriate agreements and confidentiality obligations with such partners.
• Requires them to implement technical and organisational security measures consistent with their legal and industry obligations.

User consent to cross-border processing

By using the website, mobile applications, or related services, or by providing personal information, the user:

• Consents to the transfer of personal data outside India for the purposes described in this Privacy Policy.
• Acknowledges that such data may be stored and processed in foreign jurisdictions where different data protection rules may apply.

All partners and service providers who receive personal information are required to treat it confidentially and to use it only for authorised purposes related to providing services to 1win and its users.

This Privacy Policy is intended to describe how personal information is handled, but it does not limit any rights or obligations that arise under applicable law, court orders, or regulatory guidance.

Scope of the Privacy Policy

• In case of conflict between this document and mandatory legal requirements, the legal requirements will prevail.
• If any part of this Privacy Policy is held invalid or unenforceable, the remaining sections will continue to apply to the extent permitted by law.

Changes and updates

1win may update or revise this Privacy Policy from time to time to reflect:

• Changes in legal or regulatory requirements.
• Adjustments in services, technology, or internal processes.
• Feedback from users, authorities, or industry bodies.

The updated version will apply from the date it is published on the website, unless a different effective date is specified.

Acceptance and applicability

The disclaimer in this section, and this Privacy Policy as a whole, apply where the user:

• Creates or uses an account on the website or mobile applications.
• Accesses or uses any of the online services, whether or not a bet or transaction is placed.
• Provides personal information in any form to 1win or its authorised partners.

By continuing to use the services after any update, the user is deemed to have accepted the current Privacy Policy and the associated disclaimers, subject to rights available under applicable law.

Cookies and similar technologies are used to make the online services work properly, to improve performance, and to understand how users interact with the website.

What cookies are

Cookies are small text files that are stored on a user’s browser or device when visiting websites. They contain information that allows the site to recognise the device, remember preferences, and analyse user behaviour over time.

Types of cookies and similar tools

1win may use the following types of cookies and tools:

• Strictly necessary cookies: required for basic functions such as navigation, login, security, and access to protected areas.
• Preference cookies: store settings such as language, region, and display options.
• Performance and analytics cookies: collect aggregated data about how users access and use the website, such as pages viewed, click patterns, and error reports.
• Functionality cookies: remember choices to provide enhanced features.
• Advertising and marketing cookies: where permitted, help deliver more relevant content and measure the effectiveness of campaigns.

Purposes of cookies

Cookies and similar technologies are used for:

• Generating statistics about usage, traffic, and performance of the website.
• Analysing user behaviour to improve layout, navigation, and content.
• Personalising certain aspects of the user experience, such as remembering login details or preferences.
• Preventing fraud, enhancing security, and managing session time-outs.

Retention period

• Certain session cookies are temporary and are deleted when the browser is closed.
• Other cookies may remain on the device for up to 1 year, or a shorter period where required by applicable law or technical settings.

Managing cookies

Users may manage or delete cookies using browser settings or device options. However:

• Blocking or deleting some cookies may impact the functioning of the website.
• Essential cookies that are required for security and basic operation may not be disabled without affecting access to services.

By continuing to use the website without changing cookie settings, the user consents to the use of cookies and similar technologies as described in this section, subject to options provided in the browser or device.

This Privacy Policy forms part of the general terms governing use of the online platform and related services.

Implied and express acceptance

By:

• Visiting or browsing the website or mobile applications,
• Creating or using an account,
• Placing bets, participating in games, or conducting any transaction; or
• Providing personal information in any manner,

the user is deemed to accept this Privacy Policy in full, subject to rights available under applicable law in India.

Where the platform provides options such as checkboxes, click-through agreements, electronic signatures, or similar online confirmations, the user’s action in accepting or proceeding through such prompts will be treated as explicit acceptance and accession to this Privacy Policy.

Current version

• The version of the Privacy Policy published on the website at the time of use is the version that applies to that use, subject to applicable law.
• Historical versions may be retained for record purposes, but the latest published version will prevail in case of any inconsistency, except to the extent otherwise required by law or regulatory directions.

Users are encouraged to review this document periodically to stay informed about how their personal information is handled.

Certain services depend on third parties who assist in providing, securing, and improving the online platform. Personal data may be shared with such third parties only where there is a lawful basis and a defined purpose.

Situations where data may be shared

1win may share personal information in the following circumstances:

• To comply with applicable laws, court orders, government directions, or law enforcement requests.
• To resolve disputes, respond to legal claims, and protect legal rights.
• To enforce terms and conditions, investigate potential violations, and manage risk.
• To process payments through banks, card schemes, UPI providers, wallets, or other payment service providers.
• To carry out identity verification, age checks, AML/CFT screenings, fraud monitoring, and risk assessments.
• To engage technical, hosting, analytics, or customer support providers who assist in operating the website and mobile applications.

The categories or names of certain partners may be listed on the website or in service descriptions where appropriate. Where partners are not listed by name, the user may request general information about the type of partner and the purpose of data sharing.

Responsibilities of third parties

Third parties receiving personal information are required to:

• Use the data only for specified and lawful purposes.
• Implement reasonable security measures and confidentiality protections.
• Process data in line with applicable laws, contractual terms, and industry standards.

However, these entities may have their own privacy policies that govern how they handle information. Users are encouraged to review those policies, particularly in relation to payment and verification providers.

User consent to third-party sharing

By providing personal information, conducting transactions, or using services that involve third-party tools or links, the user:

• Consents to the sharing of relevant personal data with such third parties for the purposes described in this Privacy Policy.
• Acknowledges that such third parties may be located within or outside India and may process data according to the laws of their respective jurisdictions, subject to contractual safeguards.

1win does not authorise third parties to use personal data for their independent marketing purposes without separate consent from the user.

The website and mobile applications may contain links, banners, or references to external websites, applications, or services that are operated by third parties.

Independent privacy policies

• Third-party websites and services have their own terms of use and privacy policies.
• Those policies govern how such parties collect, use, process, and protect any personal information provided by users on their platforms.

1win does not control and is not responsible for the content, security, or privacy practices of any external websites, applications, or services that are not operated by it.

Use of external websites

When users click on a link or interact with third-party content:

• They leave the environment controlled by 1win and enter a service that may apply different rules concerning data protection and security.
• Information submitted to those sites, including personal and payment details, is subject to the privacy practices of the respective operators.

Users are advised to:

• Review the terms and privacy policies of external websites before providing any personal information or completing transactions.
• Exercise caution while sharing data on platforms that are not directly managed by 1win.

The inclusion of any external link does not imply endorsement of the content, services, or data practices of the linked website.