1xwin Privacy Policy — How We Protect Your Data in Pakistan

This Privacy Policy explains how 1xwin collects, uses, stores, shares and protects the personal data of individuals who use the 1xwin platform at 1xwin.wine. It applies to all registered players, prospective players who browse the platform and any individual who contacts 1xwin through any channel.

By creating a 1xwin account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, please do not register an account or continue using the 1xwin platform.

This Policy should be read alongside the 1xwin Terms and Conditions and Responsible Gaming Policy, which together form the complete framework governing your use of the platform.

1xwin collects personal data in several categories. The table below summarises what we collect and why.

1xwin does not collect sensitive data such as religious beliefs, political opinions, health records or biometric data beyond what is required for standard identity verification (photograph on CNIC). We do not collect or store your full bank account or card numbers — only masked identifiers that allow our payment processors to route transactions.

1xwin collects personal data through the following methods:

• Direct submission: Information you provide when registering your 1xwin account, completing verification, making a deposit, contacting support or filling in any form on the platform.
• Automated collection: Technical data (IP address, device identifiers, browser type, session data) collected automatically as you use the 1xwin platform, through server logs and first-party analytics.
• Payment processors: Transaction confirmation data received from Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT) or card networks when you deposit or withdraw PKR.
• Identity verification partners: Confirmation data received from our KYC verification service when you submit identity documents for your 1xwin account.
• Cookies and similar technologies: Session and functional cookies used to maintain your logged-in state, remember preferences and analyse platform usage. See Section 10 for full cookie details.

Every use of your personal data at 1xwin has a documented purpose. We do not use your data for anything that isn't covered by this Policy. The primary purposes for which 1xwin uses your personal data are:

• Account registration and management: Creating and maintaining your 1xwin account, verifying your identity and age, communicating account-related information and processing your VIP tier status.
• Payment processing: Facilitating PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and Visa/Mastercard. Matching payment method ownership to account holder identity.
• Game and betting services: Recording and settling bets, processing game results, maintaining game history and resolving disputes about outcomes at 1xwin.
• Bonus and promotion administration: Verifying eligibility for bonuses and free bets, tracking wagering requirements and distributing VIP Club rewards.
• Security and fraud prevention: Detecting and preventing unauthorised account access, bonus abuse, money laundering, duplicate accounts and other prohibited conduct described in the 1xwin Terms and Conditions.
• Responsible gaming: Monitoring for signs of problem gambling patterns, administering deposit limits, loss limits and self-exclusion requests, and complying with responsible gaming obligations.
• Customer support: Handling support enquiries, complaints and disputes. Maintaining records of support interactions to ensure consistent service quality.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the 1xwin platform experience, optimise performance and develop new features.
• Legal compliance: Meeting obligations under applicable anti-money laundering (AML), know-your-customer (KYC) and data retention requirements.

1xwin processes your personal data on the following legal bases:

• Contract performance: Processing necessary to deliver the 1xwin gaming services you have registered to use — including account management, payment processing and game delivery.
• Consent: Where you have explicitly consented to specific processing activities, such as receiving promotional communications from 1xwin. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Legal obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements and data retention obligations.
• Legitimate interest: Processing for fraud detection, security monitoring and platform improvement, where our legitimate interest in protecting the 1xwin platform and its players does not override your privacy rights.

1xwin takes the security of financial data with particular seriousness. When you deposit or withdraw PKR using Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or a Visa/Mastercard bank card, the following applies:

• Full payment credentials (full card numbers, full bank account numbers, full wallet credentials) are never stored by 1xwin directly. All payment processing is handled by our PCI-DSS compliant payment partners.
• 1xwin stores masked payment identifiers (e.g., the last 4 digits of a card, partial wallet account numbers) to allow your withdrawal requests to be routed to the correct method and to comply with anti-money-laundering requirements.
• Transaction history (amounts, dates, payment method types, transaction status) is stored in your 1xwin account record and is accessible to you through your account dashboard at any time.
• Payment data is shared with payment processors solely to the extent necessary to execute your requested transaction. It is not used for any other purpose.

1xwin works with a small number of carefully selected third-party service providers to deliver the platform. These providers process your data on our behalf and are contractually bound to handle it only as instructed by 1xwin, in accordance with this Privacy Policy. The categories of third-party processors 1xwin uses include:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and Visa/Mastercard acquiring banks — for processing PKR deposits and withdrawals.
• Identity verification providers: KYC and document verification services that validate CNIC documents and selfie verification for account security and compliance.
• Game suppliers: Licensed casino game providers (e.g., Evolution Gaming, Pragmatic Play, Ezugi) who provide live dealer and RNG game software. These providers receive anonymised session data only — they do not receive your full personal profile.
• Cloud infrastructure: Secure cloud server providers who host the 1xwin platform infrastructure. Data is stored on servers protected by enterprise-grade physical and logical security controls.
• Analytics: First-party analytics tools that process anonymised, aggregated usage data to help 1xwin improve platform performance. No individual player profiles are built from this data.

1xwin does not engage advertising networks, data brokers or social media platforms as data processors. Your 1xwin account data is not shared with any such entities.

1xwin retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply at 1xwin:

• Active account data: Retained for the duration of your 1xwin account and for a period of 5 years after permanent account closure, to meet our legal and compliance obligations.
• Transaction and betting records: Retained for 5 years from the date of each transaction, in line with standard financial record-keeping requirements.
• Identity verification documents: Retained for the duration of your account and for 5 years after closure. Copies are deleted on request once the mandatory retention period has expired.
• Support interaction records: Retained for 3 years from the date of the interaction to allow for dispute resolution and quality review.
• Technical and session data: Retained for up to 12 months, after which it is anonymised or deleted.
• Self-exclusion records: Retained for a minimum of 7 years to ensure the exclusion can be enforced even if a player later attempts to re-register.

When data is no longer required and the retention period has expired, it is securely deleted or permanently anonymised so that it can no longer be associated with any individual player.

As a 1xwin player, you have the following rights over your personal data. To exercise any of these rights, please contact us at support@1xwin.wine with your account username and a description of the right you wish to exercise. We will respond within 10 business days.

1xwin uses cookies and similar technologies to operate the platform correctly and to understand how players use it. We use the following categories of cookies:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and game lobby filters. These improve your 1xwin experience but are not essential to platform operation.
• Analytics cookies: Used to collect anonymised data about how players navigate the 1xwin platform — which pages are visited most, where players encounter issues, and how long sessions last. This data is used exclusively to improve the platform and is never linked to individual player profiles for commercial purposes.

1xwin does not use advertising cookies or third-party tracking cookies that share data with advertising networks. You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of your 1xwin account.

The 1xwin platform is strictly for adults aged 18 and above. 1xwin does not knowingly collect personal data from individuals under 18 years of age. If we become aware that personal data has been collected from an underage individual, it will be deleted immediately and the associated account closed.

Parents and guardians who believe their child has accessed the 1xwin platform should contact us immediately at support@1xwin.wine. We will investigate and take appropriate action within 24 hours of receiving a verified report. We strongly encourage parents to use parental control software to prevent minors from accessing online gaming platforms.

1xwin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 1xwin servers.
• Encrypted storage for personal data and identity documents at rest on 1xwin infrastructure.
• Access controls — personal data is accessible only to authorised 1xwin staff with a documented need to access it (e.g., compliance officers and payment processors).
• Two-factor authentication (2FA) available and recommended for all 1xwin player accounts.
• Fraud detection systems that monitor for unusual account activity and flag potential security incidents in real time.
• Regular security reviews of platform infrastructure, conducted by internal and external security professionals.
• Incident response plan — in the event of a data breach, 1xwin has documented procedures to contain the breach, assess the impact and notify affected players and relevant authorities as required.

No online platform can guarantee 100% security — but 1xwin operates to industry-leading standards and continuously improves its security posture in response to the evolving threat landscape.

1xwin reviews and updates this Privacy Policy periodically to reflect changes in our data practices, new platform features, or changes in applicable law. When material updates are made, we will notify registered players by email and by displaying a prominent notice on the 1xwin platform at least 7 days before the changes take effect.

The date at the top of this page reflects when the policy was last updated. We recommend checking this page periodically. Your continued use of the 1xwin platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes.

If any update to this Policy requires your explicit consent for a new processing activity, we will request that consent separately before proceeding with the new processing. You will never find that 1xwin has silently started using your data in a new way without telling you.

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data at 1xwin, please use the contact details below. We aim to respond to all privacy-related enquiries within 5 business days.