1win Privacy Policy

Types of personal information collected

The website may collect and process the following categories of personal data:

• Identity details, such as full name, date of birth, and proof of identity or age documents.
• Contact details, such as email address, mobile number, and postal address.
• Account information, such as username, password, profile settings, and communication preferences.
• Transaction data, such as deposits, withdrawals, bets, game history, and payment method details (in tokenised or masked form where possible).
• Technical data, such as IP address, device identifiers, browser type, operating system, app version, and connection logs.
• Behavioural and usage data relating to visits, navigation, and interaction with pages, games, and features.
• Communication records, such as chats with customer support, emails, and complaint submissions.

Collection of personal data is limited to what is necessary to provide and manage online services, comply with legal requirements, and ensure a safe gambling environment.

Purposes of collection

Personal information is collected and used for purposes such as:

• Creating and maintaining user accounts and profiles.
• Verifying age, identity, and eligibility to use services under Indian law.
• Processing payments, withdrawals, and refunds through authorised payment partners.
• Preventing fraud, misuse, money laundering, and other prohibited activities.
• Meeting obligations related to responsible gaming and self-exclusion measures.
• Fulfilling tax, accounting, and record-keeping duties, if applicable.
• Handling queries, complaints, and customer support.
• Improving website functionality, stability, and user experience.

Technical and organisational protection measures

The operator applies reasonable technical and organisational security measures suited to the nature of the personal information processed, including:

• Use of encryption technologies during transfer of payment and login data.
• Firewalls, access controls, and secure server configurations.
• Role-based access to personal information, limited to authorised staff and service providers.
• Internal policies, confidentiality undertakings, and training for employees handling user information.
• Regular review of security systems to reduce the risk of unauthorised access, loss, or alteration.

No online system can guarantee absolute security, but the operator aims to maintain a level of protection appropriate to the type and volume of data processed.

User rights

Subject to applicable data protection and gambling laws in India and the operator's licensing jurisdiction, users generally have the right to:

• Request confirmation whether personal information is being processed.
• Access personal data held, in a commonly used format, where feasible.
• Request correction of inaccurate, incomplete, or outdated details.
• Request deletion or anonymisation of information that is no longer needed for legal, regulatory, or contractual purposes.
• Object to certain forms of processing, such as direct marketing communications.
• Withdraw consent where processing is based solely on consent, without affecting prior lawful processing.

Requests may be subject to verification of identity and may be refused where there is a legal obligation or legitimate interest to retain certain records.

Compliance with India laws

Use of this website by India-based users is subject to applicable Indian laws, including information technology and data protection principles, as well as local state-level rules on online gaming. The operator seeks to align its practices with recognised international data protection standards, such as purpose limitation, data minimisation, and storage limitation, taking into account cross-border elements of online gambling services.

Personal information is processed only for specified, lawful, and legitimate purposes. Main uses include:

Account creation and service delivery

• Registering new user accounts and verifying login credentials.
• Confirming age and eligibility to use gambling services.
• Maintaining account settings, language preferences, and communication choices.

Payments and transactions

• Processing deposits and withdrawals through banks, cards, wallets, and other payment providers.
• Performing security checks and transaction monitoring to identify suspicious or unauthorised activity.
• Complying with anti-money laundering and know-your-customer requirements, where applicable.

Service quality, safety, and responsible gaming

• Monitoring use of services to detect fraud, abuse, or policy violations.
• Enforcing limits, self-exclusion, and other safer gaming tools requested by the user.
• Protecting the integrity and security of games, odds, and betting systems.

Improvement and analytics

• Conducting statistical and analytical studies on aggregated or pseudonymised data to improve platforms, games, and functionality.
• Identifying technical issues, performance bottlenecks, and user experience problems.

Marketing and communication

• Sending service-related communications, such as security alerts, transaction notices, policy updates, and account information.
• Sending promotional or marketing messages, where permitted by law and user preference, through channels such as email, SMS, in-app notifications, or banners.
• Allowing users to adjust or opt out of non-essential marketing at any time through account settings or by using unsubscribe options.

Legal and regulatory obligations

• Responding to lawful requests, court orders, or directives from regulatory or law enforcement authorities, where applicable.
• Maintaining records needed for tax, accounting, dispute resolution, and regulatory investigations.

Personal data is not sold for independent commercial use by third parties. Any use of personal information is based on legal grounds, such as user consent, contractual necessity, legal obligation, or legitimate interest compatible with user rights and expectations.

Accessing and updating personal data

Users may access and modify certain personal information directly through their account settings, such as:

• Contact details (email, phone number, address).
• Password and security settings.
• Communication and marketing preferences.

For information that cannot be edited directly, users may submit a request to customer support. The operator may ask for identity and account verification before acting on such requests.

Correction and deletion procedures

• Correction: If a user identifies inaccurate or incomplete personal data, a request can be made to correct or update those records. Supporting documentation may be required for identity-related changes.
• Deletion: Users may request deletion of personal information that is no longer required for contractual, legal, accounting, fraud prevention, or regulatory reasons. Certain data, such as transaction history or identification records, may need to be stored for a defined retention period as mandated by law or for protection of legal rights.
• Restriction: In some cases, instead of deletion, processing of certain data may be restricted while a complaint, dispute, or investigation is ongoing.

Consent to security checks and payment data processing

By registering an account and using services on this website, users acknowledge and consent that:

• Security checks may be carried out to verify identity, age, payment methods, and compliance with terms of use.
• Payment-related information may be processed by authorised payment service providers, banks, card schemes, wallet operators, and other financial intermediaries for the purpose of processing deposits, withdrawals, chargebacks, and fraud investigations.
• The operator and payment providers may share limited personal and transaction information between them where necessary for security, dispute resolution, and regulatory compliance.

Use of the website implies consent to such processing, to the extent allowed by applicable laws and payment network rules.

This website and its gambling services are intended only for persons who are 18 years of age or older, or higher if the local law of the user's state requires a greater minimum age.

• Registration by minors is prohibited.
• Bets, deposits, or gameplay by minors are not permitted.

The operator does not intentionally collect or retain personal information about individuals under the age of 18. Age verification measures may be applied based on risk and regulatory requirements. However, the operator cannot always independently verify the age of every user without valid supporting documents.

If a parent, guardian, or responsible adult becomes aware that a minor has created an account or provided personal information, they should contact customer support promptly. After necessary verification:

• The account of the minor will be suspended or closed.
• Personal data relating solely to the minor will be deleted or anonymised, unless retention is legally required for investigation, fraud prevention, or regulatory purposes.

Users are encouraged to use device-level parental controls and content filters to limit access of minors to online gambling websites and services.

Operation of an online casino and sportsbook often involves infrastructure, servers, and partners located in multiple countries. Personal information of India-based users may, therefore, be transferred to and processed in other jurisdictions where:

• Group companies, technology partners, and hosting providers operate.
• Payment processors, banks, or financial service providers are located.
• Customer support, risk management, or analytics teams are based.

These countries may have data protection laws that are different from, and potentially less strict than, those of India. The operator aims to take reasonable steps to ensure that any such transfers are regulated through suitable contractual safeguards or recognised mechanisms, where feasible.

Use of the website and provision of personal information is treated as consent to such international transfers and processing, subject to applicable legal requirements. The operator expects all third-party partners who receive personal data to:

• Use the information only for the purposes specified.
• Maintain confidentiality and information security in line with their contractual obligations.
• Implement appropriate technical and organisational measures to protect user information against unauthorised access, loss, or misuse.

Further details of specific transfer mechanisms may be provided on request, where required by applicable law.

This Privacy Policy is intended to explain, in a transparent way, how personal information is collected, used, stored, and shared in connection with this website. However, certain disclaimers apply to the scope and effect of its provisions.

• The Policy must be read together with the Terms and Conditions, responsible gaming rules, and any other applicable documents displayed on the website.
• In case of conflict between this Policy and mandatory provisions of law, the legal provisions will prevail.
• Nothing in this Policy creates contractual rights for third parties or limits rights and remedies that the operator may have under law.

The legal disclaimer and the rest of this Policy apply from the moment the user accepts the Privacy Policy. Acceptance can occur by:

• Clicking acceptance during registration or account verification.
• Using or continuing to use the services after a notice of updated terms.
• Signing any offline or electronic document that refers to this Policy or implies accession to it.

Users who do not agree to the terms should not register, deposit, or use the gambling services offered on this website.

What cookies are

Cookies are small text files stored on a user's device by the browser when visiting websites or using online services. Similar technologies such as web beacons, pixels, and local storage may also be used for related purposes.

How cookies are used on this website

The website uses cookies and similar tools to process technical and behavioural information for purposes such as:

• Collecting statistics about visits, page views, and technical performance.
• Analysing how users navigate and interact with games, odds, and features.
• Remembering login details, language, and display preferences, where permitted.
• Personalising content, such as showing relevant pages or game categories.
• Improving security, detecting unusual activity, and preventing misuse.

Cookie retention and control

• Standard cookies used for analytics, preferences, and performance are typically stored for up to 1 year, unless a shorter or longer period is required by technical design or legal obligations.
• Some session cookies are deleted when the user logs out or closes the browser.

Users may manage cookies through browser or device settings by blocking, deleting, or limiting some or all cookies. However:

• Blocking essential cookies may affect the ability to log in, place bets, or use certain functions.
• Preferences may need to be re-entered if cookies are deleted.

Information collected through cookies may be combined with other account data to improve service quality and security, but it is not used to identify individuals beyond what is necessary for these purposes.

By creating an account, accessing, or using services on this website, the user confirms that they have read, understood, and accepted this Privacy Policy, along with related terms displayed on the website.

• Continued use of the website after any update will be treated as acceptance of the revised Policy, subject to applicable law.
• If at any time the user disagrees with the terms, they should stop using the services and may request account closure, subject to settlement of outstanding obligations.

From time to time, the operator may revise this document to reflect legal, technical, or operational changes. The version displayed on the website at the time of use is the governing version. Historic versions may be recorded for compliance and audit purposes.

Users are encouraged to review this Policy periodically to stay informed about the handling of personal information.

Sharing of personal data with third parties

Personal information may be disclosed to carefully selected third parties where necessary for lawful and legitimate purposes, such as:

• Payment service providers, banks, card schemes, wallet operators, and financial institutions involved in deposits, withdrawals, refunds, and chargebacks.
• Identity verification and risk management service providers that assist in age checks, KYC, fraud prevention, and responsible gaming.
• Technology partners providing hosting, security, analytics, customer support tools, and game content.
• Professional advisers, such as auditors, legal counsel, and consultants, engaged for compliance and business support.
• Law enforcement agencies, courts, regulators, and government bodies, in response to lawful orders, investigations, or statutory obligations.

A list or category description of major third-party partners may be provided on the website or upon reasonable request, subject to security and confidentiality constraints.

Responsibilities of third parties

Third parties who receive personal data are expected to:

• Use information only for the agreed purposes and not for their own independent marketing, unless separate consent is obtained from the user.
• Apply appropriate safeguards to protect confidentiality and security of data.
• Comply with applicable data protection and financial regulations in their own jurisdictions.

User consent

By providing personal information and using services on this website, the user consents to:

• Sharing of their information with such third parties, to the extent needed for the functioning of the services, payment processing, risk management, dispute resolution, and compliance.
• Possibility that those third parties will process data in accordance with their own privacy policies, in addition to this Policy.

Users are advised to review relevant third-party privacy policies where practical, in particular those of payment providers and external verification services used for their account.

The website may contain links, banners, or references to other websites, apps, or services that are operated by independent third parties. These external resources are provided for information or convenience.

• Third-party websites are not controlled or managed by this operator.
• Each such website or app is responsible for its own privacy practices, terms of use, and security standards.

When a user clicks a link and leaves this website, the Privacy Policy described in this document no longer applies to any information provided on the external site. Users should:

• Review the privacy policies, cookie notices, and terms of use of every external site or app before sharing personal or payment details.
• Exercise caution while entering sensitive information on unfamiliar or unverified platforms.

The operator is not responsible or liable for collection, use, security, or disclosure of personal data by third-party websites or services that are accessed through such links.