1win Aviator Privacy Policy

Personal data collected

• Identity and contact: full name, date of birth, address, email, mobile number.
• Account and verification: KYC documents such as PAN, Aadhaar or other government ID, proof of address, selfies for liveness checks.
• Payment and transaction: masked card details or tokenised instrument IDs, UPI VPA, wallet identifiers, deposit and withdrawal records, payout confirmations.
• Technical information: IP address, device details, browser, operating system, mobile advertising identifiers, cookies, approximate location, log files.
• Usage information: login time, session activity, game and bet history, responsible gaming settings, communications with support.
• Compliance and risk: sanctions and PEP screening results, fraud signals, dispute records.

Why information is collected

• To create and service accounts, provide online services, and process transactions.
• To perform age verification and KYC, support responsible gaming tools, and prevent fraud.
• To provide customer support and communicate service updates or policy changes.
• To improve services, run analytics, and personalise user experience.
• To meet legal obligations and enforce terms.

Protection measures

• Encryption in transit and at rest, hardened networks, and continuous monitoring.
• Role-based access control, multi-factor authentication, and least-privilege principles.
• Secure development lifecycle, periodic vulnerability testing, and independent audits.
• Alignment to ISO/IEC 27001 good practices and PCI DSS standards for payment processing.
• Data minimisation, pseudonymisation where feasible, and resilient backup procedures.

User rights

• Access: obtain a copy of personal information and details of processing.
• Correction: update inaccurate or incomplete data.
• Deletion: request erasure where legally permissible.
• Portability: ask for a structured, commonly used copy where feasible.
• Objection/Restriction: limit certain processing, including direct marketing.
• Consent: withdraw consent at any time, without affecting prior lawful processing.
• Grievances: raise issues to the Grievance Officer and complain to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.

Compliance statement

• Processing follows Indian laws, including the Digital Personal Data Protection Act, 2023; the Information Technology Act, 2000; the SPDI Rules, 2011; and applicable directions for payment and security issued by relevant regulators. State-specific requirements on gaming and age limits are observed.

Information is used to:

• Register users, authenticate logins, and manage profiles.
• Process deposits, bets, and withdrawals, and confirm transactions.
• Conduct KYC, age checks, sanctions screening, and responsible gaming monitoring.
• Provide customer support and handle complaints.
• Improve services, troubleshoot issues, and develop new features based on aggregated analytics.
• Send service communications and, where permitted, marketing messages that users can opt out of.
• Prevent fraud, manage risk, ensure security, and investigate misuse.
• Comply with legal obligations, respond to lawful requests, and enforce terms.

Processing is lawful, fair, and transparent. No decision that produces legal or similarly significant effects is taken solely by automated means without an avenue for human review where required by law.

How to access and update

• Use account settings to view and edit profile, contact details, and preferences.
• For other data, submit a request through the Help Centre or the contact channels published on the website. Identity verification may be required.

Correction and deletion

• Incorrect information can be corrected upon request.
• Deletion can be requested where no lawful basis requires continued retention. Certain records must be kept for legal, tax, fraud prevention, or dispute purposes.
• Requests are acknowledged promptly and usually completed within 30 days, subject to lawful extensions.

Security checks and payments

• By using 1win, the user consents to security checks, KYC verification, sanctions screening, and the processing of payment data by payment providers and banks for transaction execution and risk control.

• Services are intended for persons aged 18 years and above. Registration by minors is not allowed.
• The operator cannot confirm age in all situations without identity documents.
• If a parent or guardian believes a minor has provided personal information, a request for deletion can be submitted. Upon verified proof of guardianship, the account will be closed and the data erased where legally permissible.

• Personal information may be stored and processed outside India in countries where technology, payment, KYC, support, or analytics partners operate.
• Use of the site constitutes consent to such transfers, subject to contractual and technical safeguards that ensure comparable protection.
• Confidentiality obligations bind all partners, and access is limited to the purpose of providing services or meeting legal duties.
• Transfers will respect any restrictions notified by the Government of India or applicable regulators.

• This privacy document may include disclaimers that clarify, limit, or qualify how certain rules apply in practice, for example where law requires retention or disclosure despite a deletion request.
• The disclaimer applies once the user accepts this Privacy Policy by electronic acceptance, registration, or other form of accession recognised under applicable law.
• If any part of this document conflicts with mandatory local law, the mandatory law prevails to the extent of the conflict.
• This document forms part of the overall legal terms published on the website.

What cookies are

• Cookies are small text files placed on a device by websites to store settings and recognise the browser.

How cookies are used

• Essential cookies: sign-in, security, and core site functions.
• Performance and analytics: statistics, error diagnostics, and service improvement.
• Functional: remember preferences and personalise content.
• Advertising: frequency capping and measuring campaign reach, where consented.

Retention and control

• Cookie identifiers are typically retained for up to 1 year unless a shorter lifespan is needed.
• Users can manage cookies through browser settings and the on-site cookie controls. Blocking some cookies may impact certain functions.

• Use of this website and apps signifies full acceptance of the current Privacy Policy.
• The version posted on the website is the governing version. Continued use after changes indicates acceptance of the updated terms.
• Users who do not agree should discontinue use or adjust settings to limit optional processing where available.

Sharing of personal information

• Categories of third parties: payment processors and banks; KYC and sanctions-screening vendors; fraud and risk management providers; cloud hosting and IT support; customer service platforms; analytics providers; advertising partners where consented; professional advisers and auditors; regulators, courts, and law enforcement.
• Personal information is shared to satisfy contracts, deliver services, resolve disputes, enforce rights, prevent fraud, and comply with law.
• A list of key vendors and partners is displayed on the website or provided on request. Where a list is not shown, users are informed of purpose and scope at the point of collection.
• Providing personal information constitutes consent to such sharing to the extent necessary to provide services and meet legal requirements.

• The website and apps may contain links to external websites that have their own privacy practices.
• The operator is not responsible for how those websites collect, use, or disclose information.
• Users should review the privacy policies of external websites and exercise caution when providing personal information there.