Privacy Policy at 1win – Safe, Secure & Transparent

Types of Data We Collect and the Process for Collecting It

1win gathers and uses your personal information when you use our services or visit our websites. Our methods of gathering it may be roughly divided into the following categories:

Details that you give us directly. We may request personal information from you when you visit or use certain sections of our websites and/or services. For instance, we request your contact details or specific documents when you register, when you contact us with inquiries or support requests, or during verification, anti-fraud, and anti-money laundering processes;
Data that’s gathered automatically. When you visit our Websites or use our Services, we automatically collect certain information about you, including your IP address, device type, operating system, browser settings, crash reports, system activity, and the date, time, and referrer URL of your request. This information helps us better understand how you use our Websites and Services, which helps us improve your experience over time;
We also gather information about your account activity and the transactions you make with us;
Data that we obtain from other sources. We may occasionally gather personal information about you from other sources, including publicly accessible documents or reliable third parties, such as our payment processors. We use this data to confirm the personal information you give us, to better inform, customize, and enhance our services, and to complement the personal data we already have about you.

Legal Grounds to Process Personal Data

Where we collect Personal Data, we will only process it when we have the legal basis for the processing set out in applicable data protection laws. Such legal bases are:

The performance of a contract. We may handle your Personal Data when it’s essential for fulfilling a contract. This includes situations such as when you register on our Website, enter into agreements with us, or when we take actions necessary to support and process transactions that occur on our platform;
A legal responsibility. Different legislation and rules place duties on us. To comply with them, we must handle your Personal Data, for example, anti-money laundering laws, responsible gaming rules, and the terms of our gambling license;
Justifiable interests. Your private information may be handled if we, other companies in our group, or third parties have a legitimate business or commercial motive to do so;
Your consent in specific limited situations. We treat your Personal Data with your consent, such as when it is necessary for direct marketing reasons.

How We Use Personal Data

We only handle your data according to a legal basis. Here’s how your data contributes to a secure, fair, and enjoyable experience on the platform:

To run and provide services successfully;
To create accounts and confirm your eligibility (age, location, identity, and self-exclusion);
To perform your legal obligations, abide by the law, and stop unlawful activity.
To offer assistance with payment or technical problems;
To test and analyze websites and services to make them better and more efficient;
To detect and connect fraudulent and illicit activities to protect both the platform and its users;
To measure and enhance security;
To generate statistics, analyze data, and create anonymized and aggregated analytics and reports that we may use internally, publish publicly, or distribute to other parties;
To assist, oversee, and validate financial transactions;
To evaluate your gaming habits for the sake of responsible gaming;
To keep an eye on wagering activity and control our odds and risk;
To use the rights outlined in our contracts or other agreements with you;
To share information among businesses in our group after a reorganization or for internal management needs;
To manage and improve our communication with you, which includes offering you relevant bonuses, promotions, notifying about updates, providing assistance, and more.

Third-Party & Data Transfers

Sometimes we’ll have to give your personal information to outside parties. To whom we will divulge your personal information:

Other businesses within our association;
Affiliates and other individuals who present us to you;
Third-party vendors and strategic partners who we trust to help us provide the Websites and Services you use. Our partners may provide technical infrastructure, customer service, functionality improvements, payment processing, promotional activities, or other services required to support your ability to access and enjoy our site;
Governmental authorities — such as regulatory authorities, law enforcement agencies, government agencies, courts, fraud prevention agencies, licensing authorities, or recognized governing bodies of esports — when we believe it is appropriate to comply with legal obligations, respond to legal requests, or protect our legal rights. Where legally permitted and advisable, we will make reasonable efforts to inform you of such disclosures;
Other people with whom we have your permission.

International Data Transfers

Data processing and sharing may involve transfers to and processing in nations other than your own. The legislation in these nations can differ from those in your home country. We have precautions in place to guarantee your personal data is safeguarded when it is handled in another nation. This implies that if you are an individual living in the European Economic Area (EEA), your data could be transferred outside of the EEA. If your personal information is moved outside of the European Economic Area (EEA), it will go to nations where we have legal transfer procedures in place to safeguard it, especially by adding the European Commission’s Standard Contractual Clauses to the agreements with the third parties.

Security

We have the necessary organizational and technical safeguards in place because we are dedicated to protecting your personal data, including:

Encryption of data. To safeguard your financial and personal information, we use industry-standard TLS (Transport Layer Security) to encrypt all data that is exchanged between you and us. Additionally, your data is secured throughout storage on our servers and during data center transfers for replication and backup;
Restricted accessibility. Only our employees, contractors, and agents that require the information to process it are granted access to personal data;
Network protection. We use industry best practices while configuring, monitoring, and maintaining our security services. We collaborate with top security providers to safeguard our systems by utilizing their knowledge and worldwide threat intelligence;
Secure data centers. Our servers are housed in exceptional maintenance centers that use strong physical security measures to keep anybody from physically accessing the servers. These safeguards include on-site security personnel, continuous security audits, and round-the-clock monitoring and surveillance. We keep globally dispersed data copies to reduce the possibility of interruptions or data loss;
Security monitoring. To recognize and address dangers our security staff constantly keeps an eye on event logs, security systems, and warnings and alerts from every system.

SSL

All important user-website communications are encrypted using Secure Socket Layer technology (SSL) and a 256-bit key.

Data Retention

Certain records are automatically erased, some data is kept for longer periods of time when required, and some data is destroyed anytime you want. We ensure that your data is securely and totally erased from our systems throughout the deletion process, or that it is only kept in an anonymized form. Information is stored until you delete it. We provide a number of options that let you update or remove information linked to or kept in your account. For instance, you can:

Edit or update personal details;
Erase your message in chat;
Terminate your personal account completely.

In order to fulfill our obligations under the law and protect ourselves from any claims made after your account has been closed (if applicable) or after your last interaction with us, we will retain this information in your account for a period of five years and until it is not closed.

Reasons for Retaining Data for Longer Periods

Sometimes we must keep particular records for specific reasons for a long time due to legal and commercial demands. For instance, we will keep a person’s personal data for extended lengths of time if they self-exclude from our services, as needed for responsible gaming. Here’s why we can keep your data for longer:

To safeguard you, other people, and us from fraud, abuse, unlawful behavior, and unauthorized access, such as when we suspect someone is engaging in money laundering, match-fixing, or fraud;
For instance, when we are a party to a financial transaction, such as when we receive your deposits and pay you, we may need to do accounting or assist in resolving disputes in order to adhere to tax, anti-money laundering, and other financial rules;
When we are obligated to enforce the agreements, including looking into possible breaches, or to comply with any relevant laws, regulations, legal processes, or other enforceable governmental requests;
To guarantee that our services will continue to be available to you and other users;
If you have been in touch with us directly, for instance, by sending us a bug report, feedback, or through a customer service channel.

We commit to protecting your privacy regarding your personal information and any extra data that it collects, uses, and/or keeps in compliance with applicable data security legislation and rules, particularly those found in national data protection laws and other pertinent international data protection regulations, like the General Data Protection Regulation of 2016/679 (GDPR) (henceforth referred to as the “Data Protection Laws”).

Your Rights

As a customer, you have certain rights that relate to your Personal Data and how we use it:

To request a full description of which data of yours we hold;
To correct or update your personal details. Note: we may ask for a prove if your personal data have changed;
To view your personal information and ask for a copy in a machine-readable format, for instance, in case you need to backup it;
To protest the processing of your personal data where it serves our legitimate purposes. We may nevertheless handle your personal data if there are other legitimate reasons for doing so or if we have strong reasons to do so in our own best interests, which do not conflict with your rights, interests, or freedoms;
To request that your personal information, including your account, be deleted in the following situations: (1) it is no longer needed for processing; (2) you have withdrawn consent and no other legal basis applies; (3) you have objected and no overriding legitimate grounds exist; (4) the data was processed unlawfully; or (5) deletion is mandated by law. Note that we could nevertheless keep certain information if it’s required to protect our legal rights, serve our legitimate interests, or support, assert, or defend legal claims;
To request that we limit how your personal data is processed under specific conditions;
To revoke any permission you have already given where processing personal data has needed it. Please be aware that we may nevertheless handle your personal data if we have other legitimate justifications to do so;
To opt out from being an object to direct marketing and to any profiling. If you wish, you can stop receiving marketing materials. Email us at [email protected] for details;
To file a complaint with the data protection authorities in your area.

Note that not all of the rights listed above are universal.

Managing Your Preferences

You can contact us at [email protected] or immediately update your personal data preferences through your account settings. Before completing some requests, we can ask for identification to protect your privacy and security.

We are dedicated to finding a quick and equitable solution to any problems you may have with our handling of your personal data, so please contact us with any questions or comments.

Google Analytics

We gather data on how the site is used using Google Analytics. Data like how frequently you visit the website, which pages you see when you do so, and which other websites you visited before arriving at the website are all gathered by Google Analytics. Instead of collecting your name or other identifiable information, Google Analytics merely gathers the IP address that was allocated to you on the day you visited the website. Your personal data is not combined with data gathered from Google Analytics. In order to recognize you as a particular user the next time you access the website, Google Analytics places a persistent cookie on your browser. Yet, only Google may utilize this cookie. According to the Google Analytics Terms of Use and Google Privacy Policy, Google is limited in how it can use and disclose information about your website visitors. If you disable cookies on your web browser, Google Analytics won’t recognize you when you return to the website. You can opt out by disabling cookies in your browser’s options. Visit www.google.com/analytics for further information on Google Analytics. See https://policies.google.com/technologies/cookies for more information on how Google uses cookies.