1win Privacy Policy

This document explains how personal data is collected, the purposes of collection, how processing occurs, and how information is protected during storage, disclosure, and eventual deletion. The policy applies to all online services provided on the websites and mobile applications. Use of the platform is based on informed consent and lawful grounds. The platform aims to provide transparent information on rights and responsibilities for users in Bangladesh.

Privacy and Data Protection

  • Personal data collected
    • Identification and contact information such as name, date of birth, address, email, and phone
    • Account and usage information such as username, preferences, game activity, bets, and support history
    • Verification information for KYC and AML screening such as ID documents and proof of address
    • Transaction information such as deposits, withdrawals, and payment method details
    • Technical information such as IP address, device data, browser type, cookies, and approximate location
  • Why data is collected
    • To provide and maintain services, create accounts, and process transactions
    • To verify identity, prevent fraud, support responsible play, and meet AML or sanctions requirements
    • To offer customer support and improve the online experience
    • To comply with legal obligations and resolve disputes
  • Protection measures
    • Encryption in transit and at rest for sensitive information
    • Access controls based on least privilege and staff confidentiality obligations
    • Continuous security monitoring, vulnerability management, and periodic audits
    • Vendor due diligence, contractual safeguards, and data minimisation practices
  • User rights
    • Access: request a copy of personal information
    • Correction: update inaccurate or incomplete data
    • Deletion: request erasure where permitted by law and retention rules

Compliance statement: Practices are designed to align with applicable laws in Bangladesh, such as the Cyber Security Act 2023, and internationally recognised standards including GDPR principles where required.

Use of Collected Information

  • Account and service delivery
    • Create and manage user accounts
    • Authenticate logins and secure sessions
    • Process payments, withdrawals, and refunds
  • Safety and integrity
    • Verify identity, conduct KYC and AML checks, and prevent fraud
    • Enforce terms, investigate misuse, and protect the platform and users
  • Service improvement and personalisation
    • Analyse usage for performance, reliability, and feature improvements
    • Tailor content and settings based on preferences
  • Communications and marketing
    • Send service notices and policy updates
    • Send marketing communications only where lawful and consented, with opt-out options
  • Analytics and compliance
    • Produce aggregated statistics to improve online services
    • Meet legal obligations, tax and regulatory reporting, and dispute resolution

Processing is based on consent, contract performance, legal obligations, and legitimate interests. The platform aims for lawful, fair, and transparent processing throughout the data lifecycle.

Access to Information

  • How to access and update
    • Use account settings to view and edit profile information
    • Submit a request through in-account support or the website contact form for additional records
  • How to correct and delete
    • Request corrections for inaccurate information using support channels
    • Request deletion where permitted by law, subject to retention duties under AML, tax, and dispute requirements
  • Verification and timelines
    • The platform may ask for proof of identity before acting on a request
    • Responses are provided in a reasonable time based on request complexity

By using 1win, the user consents to security checks for identity, fraud, and AML screening, and to the processing of payment data by payment service providers for transactions and compliance purposes.

Protection of Children’s Privacy

  • Services are intended for adults aged 18 and above only
  • The operator cannot confirm age without official documents provided during verification
  • If a minor’s information is identified, the account will be closed and personal data will be deleted where legally permitted
  • Parents or guardians may contact support to request deletion of a minor’s data

International Data Transfers

  • Personal data may be processed outside Bangladesh in locations where partners, processors, or data centres operate
  • Using the website or mobile applications signifies consent to these international transfers
  • Confidentiality and security are ensured by contracts, strict access controls, and technical safeguards such as encryption and segregation of environments
  • When required, additional safeguards are applied to maintain equivalent protection standards

Use of Cookies

  • Cookies are small text files stored on a device by websites to remember settings and understand usage
  • Purposes
    • Statistics and analytics to improve site performance
    • Behaviour analysis to understand service usage
    • Personalisation of content and preferences
    • Security and fraud prevention
  • Retention: non-essential cookies are stored for up to 1 year unless deleted earlier
  • Management: most browsers allow blocking or deleting cookies. Some features may not function if cookies are disabled

Acceptance of Privacy Policy

Using 1win or related online services constitutes full acceptance of this Privacy Policy. The current version published in this document prevails over any previous versions. Continued use after updates indicates acceptance of the revised policy. Users should review the latest revision date shown in the policy area of the websites or applications.

Third-Party Privacy Practices

  • Personal information may be shared in limited cases
    • Payment service providers to process deposits and withdrawals
    • Identity verification, AML, sanctions screening, and fraud prevention partners
    • Hosting, cloud, analytics, and customer support providers
    • Legal authorities and regulators when required by law or for dispute handling
    • Auditors, advisors, and entities involved in a corporate transaction where permitted by law
  • Where feasible, the list of processors and categories of recipients is made available on the websites. If not published, the purpose and scope of sharing are communicated when required by law
  • Providing information to the platform indicates consent to such sharing for the stated purposes and in line with contractual safeguards

Updated: