Effective Date: February 19, 2026
At 1Win (hereinafter referred to as “we”, “us”, “our” or the “Company”), we are committed to protecting your privacy and handling your personal data responsibly, transparently, and in compliance with applicable laws. We operate under the Curacao license No. 8048/JAZ2018-040 and apply international data protection standards, including principles similar to those in GDPR where relevant, while respecting local regulations in jurisdictions like Malaysia.
This Privacy Policy explains how we collect, use, store, share, protect, and process your personal information when you access our website (1win.com or regional mirrors), mobile applications, online casino games, sports betting services, or any related features (collectively, the “Services”).
By using our Services, registering an account, making deposits/withdrawals, or interacting with the platform, you consent to the practices described in this Policy. If you do not agree, please do not use the Services.
1. Information We Collect
We collect only the data necessary to provide, improve, and secure the Services, verify your identity, prevent fraud, comply with legal obligations, and process transactions.
Personal Data You Provide Voluntarily:
- Full name, date of birth, gender
- Email address, phone number
- Account login credentials, password
- Verification documents (passport/ID card, selfie, proof of address, source of funds proof — required for withdrawals and anti-money laundering compliance)
- Payment information (bank card details, e-wallet info such as Touch ‘n Go, DuitNow, AstroPay, Malaysian bank accounts, cryptocurrency wallet addresses)
- Promo codes, referral information, preferences
Automatically Collected Data:
- Device and technical information: IP address, device type/model, operating system, browser type/version, unique device identifiers
- Usage data: pages visited, time spent, clicks, games played, bets placed, deposit/withdrawal history
- Geolocation data (approximate, derived from IP — used for regulatory compliance and service personalization)
- Cookies and similar technologies: session IDs, preferences, analytics (see Cookies section below)
Data from Third Parties:
- Payment processors (confirmation of transactions)
- Identity verification services (for KYC/AML checks)
- Marketing/analytics partners (with your consent where required)
We do not knowingly collect data from individuals under 18 years old. If we discover such data, it will be deleted immediately.
2. How We Use Your Personal Data
We process your data for the following lawful purposes:
- To create and manage your account, provide access to Services
- To process deposits, withdrawals, bonuses, and transactions
- To verify identity, prevent fraud, money laundering, and underage gambling (KYC/AML compliance)
- To offer personalized gaming/betting experience, promotions, and customer support
- To send service-related communications (account updates, transaction confirmations, security alerts)
- With consent: marketing offers, newsletters, personalized bonuses
- To analyze usage trends, improve Services, detect bugs, and develop new features
- To comply with legal obligations, respond to court orders, or protect our rights
3. Legal Basis for Processing
- Performance of contract (account creation, service delivery, transactions)
- Legal obligations (AML/KYC, gambling regulations)
- Legitimate interests (fraud prevention, security, service improvement — balanced against your rights)
- Consent (marketing, certain cookies)
You can withdraw consent for marketing at any time without affecting core Services.
4. Sharing Your Personal Data
We do not sell or rent your personal data. We may share it only in limited cases:
- With group companies or affiliates for operational purposes
- With trusted service providers (payment processors, hosting, analytics, verification services, cloud providers) bound by strict confidentiality agreements
- With regulators, authorities, or law enforcement when required by law (e.g., Curacao Gaming Authority, anti-fraud bodies)
- In case of merger, acquisition, or asset sale (with notification where feasible)
- To protect our rights, safety, or property (e.g., investigating violations)
International transfers may occur (e.g., to servers in Europe or other regions). We use safeguards like Standard Contractual Clauses or equivalent measures to ensure adequate protection.
5. Data Retention
We retain your data only as long as necessary:
- Account data: while account is active + up to 5–10 years after closure (for legal/tax/AML purposes)
- Transaction records: 5–10 years (regulatory requirement)
- Marketing data: until consent withdrawn
- Logs/analytics: up to 2 years
After retention period, data is anonymized or securely deleted.
6. Security of Your Personal Data
We implement robust technical and organizational measures:
- SSL/TLS encryption for data in transit
- Firewalls, access controls, regular security audits
- Secure storage with pseudonymization where possible
- Staff training on data protection
Despite our efforts, no system is 100% secure. We will notify you of any material breach as required by law.
7. Cookies and Tracking Technologies
We use cookies, pixels, and similar tools to enhance functionality, analytics, and advertising.
- Essential cookies: required for site operation (login, preferences)
- Analytics cookies: usage stats (Google Analytics, etc.)
- Marketing cookies: personalized ads (with consent)
You can manage cookies via browser settings or our cookie banner. Disabling may limit functionality.
8. Your Rights
Depending on your location and applicable law, you may have rights including:
- Access to your data
- Correction of inaccurate data
- Deletion (subject to legal retention)
- Restriction of processing
- Objection to processing (e.g., marketing)
- Data portability
- Withdraw consent
To exercise rights, contact us at [email protected] or via account settings. We respond within 30 days (extendable if complex).
9. Children’s Privacy
Our Services are not directed to persons under 18. We do not knowingly collect data from minors. If discovered, data will be deleted.
10. Changes to This Policy
We may update this Policy. Changes will be posted here with updated effective date. Significant changes may be notified via email or site notice. Continued use constitutes acceptance.
11. Contact Us
For questions, complaints, or rights requests:
We aim to resolve concerns promptly. If unsatisfied, you may contact relevant data protection authorities.
Thank you for trusting 1Win. Your privacy matters to us — play responsibly!