1win Privacy Policy

What Personal Data is Collected

The platform collects personal data that users provide directly during registration, verification, and account usage. The categories of data collected include:

• Full name and date of birth
• Contact details such as email address and phone number
• Government-issued identification documents for verification purposes
• Financial details including payment method information
• Device identifiers, IP addresses, and browsing activity on the platform
• Communication records submitted through support channels

Purpose of Collection

Personal data is collected to:

• Verify user identity and confirm eligibility to use the platform
• Process deposits, withdrawals, and other financial transactions
• Provide access to platform services and maintain account functionality
• Comply with legal and regulatory obligations applicable under Indian law
• Detect and prevent fraudulent activity, money laundering, and other unlawful conduct

Technical and Organisational Protection Measures

The platform applies a combination of technical and organisational measures to safeguard personal data against unauthorised access, loss, or misuse. These include:

• Encryption of data in transit and at rest
• Access controls limiting data availability to authorised personnel only
• Regular security assessments and system monitoring
• Contractual obligations imposed on all third-party service providers who handle user data

User Rights

Users whose personal data is processed by the platform hold the following rights:

• Right of Access: Users may request confirmation of whether their data is being processed and obtain a copy of that data.
• Right of Correction: Users may request correction of inaccurate or incomplete personal data.
• Right of Deletion: Users may request deletion of their data, subject to any legal retention obligations.

Compliance with Indian Law

The platform processes personal data in accordance with the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Where applicable, the platform also follows guidance issued by competent Indian regulatory authorities.

Personal data collected through the platform is used for specific, clearly defined purposes. The platform does not process user data in ways that go beyond what is necessary for those purposes.

Purposes of Data Use

• Account Services: Personal data is used to create, manage, and maintain user accounts, including authentication and communication.
• Transaction Processing: Financial data is used to process deposits, withdrawals, and to resolve any payment-related queries.
• Service Improvement: Aggregated and anonymised data may be analysed to improve platform functionality, user interface design, and service offerings.
• Marketing Communications: With user consent, contact information may be used to send promotional offers, updates, and relevant notifications. Users may opt out of such communications at any time through account settings.
• Analytics: Behavioural and usage data is analysed to understand how users interact with the platform and to identify areas for improvement.
• Legal Compliance: Personal data is used to meet obligations under applicable law, including anti-money laundering requirements, fraud prevention, and responsible gambling obligations.

Lawful Basis for Processing

All personal data is processed on a lawful basis, including:

• Consent provided by the user at the time of registration or at a subsequent stage
• The necessity of processing to fulfil contractual obligations to the user
• Legal obligations imposed on the platform by applicable Indian and international law

Data is never sold to third parties for commercial purposes unrelated to the delivery of platform services.

Accessing and Updating Personal Data

Users may access the personal data held about them by logging into their account and navigating to the account settings section. In cases where the required information cannot be updated directly through the platform interface, users may submit a formal request to the support team.

Requests should include:

• The user’s registered name and account identifier
• A clear description of the data to be accessed, updated, or deleted
• A copy of a valid government-issued identity document, where required for verification

Correction Procedures

Where personal data held on record is found to be inaccurate or outdated, users are entitled to request a correction. The platform will process such requests within a reasonable time and notify the user upon completion.

Deletion Procedures

Users may request deletion of their personal data by contacting the support team. Deletion requests will be processed subject to the following conditions:

• Data required to be retained under applicable Indian law or regulatory requirements will not be deleted until the mandatory retention period has expired.
• Data linked to ongoing investigations or unresolved disputes may be retained until those matters are concluded.

Consent to Security Checks and Payment Processing

By using the platform, users consent to the verification of their identity through security checks, including document verification. Users further consent to the processing of their payment data by authorised payment service providers engaged by the platform to facilitate financial transactions. These providers are bound by confidentiality obligations and are not permitted to use the data for any purpose other than processing the relevant transaction.

The platform is intended exclusively for individuals who are 18 years of age or older. Access to, and participation in, any services offered is strictly prohibited for persons below this age threshold.

Age Verification Limitations

The platform does not have the technical capability to independently verify the age of every individual who accesses the site without the submission of appropriate identity documentation. Users are required to confirm their age during the registration process, and identity verification documents may be requested at any stage to confirm this declaration.

Handling of Data Belonging to Minors

In the event that a parent or legal guardian identifies that a minor has registered on the platform or submitted personal data without authorisation, they are requested to contact the support team without delay. Upon receipt of such a notification and following appropriate verification:

• The minor’s account will be suspended immediately.
• All personal data associated with that account will be permanently deleted from the platform’s records.
• Any transactions conducted through the account may be reviewed in accordance with applicable legal obligations.

The platform takes the protection of minors’ data with utmost seriousness and will act promptly upon receiving a verified parental or guardian request.

The platform operates with the assistance of partners and service providers who may be located in countries outside India. As a result, personal data collected through the platform may be transferred to, stored in, or processed in jurisdictions other than India.

User Consent to International Transfers

By accessing and using the platform, users expressly consent to the transfer of their personal data to countries where the platform’s partners and service providers maintain operations. This consent covers all categories of personal data submitted during registration, verification, account use, and any subsequent interaction with the platform.

Confidentiality Obligations of Partners

All third-party partners and service providers who receive personal data in the course of providing services to the platform are contractually required to:

• Maintain the confidentiality of all personal data received
• Process personal data solely for the purpose for which it was shared
• Apply data protection standards no less stringent than those applied by the platform itself
• Refrain from disclosing personal data to any further party without prior authorisation

The platform takes reasonable steps to ensure that international data transfers are conducted in a manner consistent with applicable data protection obligations.

This Privacy Policy constitutes a legally binding document that governs the relationship between the platform and its users with respect to the collection, processing, and protection of personal data.

Scope and Effect of the Disclaimer

The legal disclaimer contained within this policy may alter the scope or effect of the rules and obligations set out herein. Users are advised to review all disclaimer provisions carefully, as they may affect the extent of the platform’s obligations and the rights available to users in particular circumstances.

Acceptance and Application

The disclaimer applies from the moment a user accepts this Privacy Policy. Acceptance may occur through one or more of the following actions:

• Electronic or physical signature of a relevant agreement
• Active acceptance of the policy during the registration or onboarding process
• Formal accession to the terms of this document

Once accepted, the provisions of this policy, including any applicable disclaimer provisions, are binding on both the user and the platform. Users who do not agree with any provision of this policy are advised to discontinue use of the platform.

What Cookies Are

Cookies are small text files that are placed on a user’s device when they visit a website. These files store certain information about the user’s interaction with the site and are retrieved during subsequent visits to enable a more consistent experience.

How the Platform Uses Cookies

The platform uses cookies for the following purposes:

• Statistical Analysis: To collect aggregate data on how the platform is used, including the number of visitors, pages viewed, and session duration.
• Behavioural Analysis: To observe how users navigate through the platform and identify patterns that may inform service improvements.
• Personalisation: To store user preferences and settings so that these are applied consistently across sessions.
• Platform Improvement: To identify technical issues, measure the effectiveness of features, and guide the development of new services.

Cookie Retention Period

Cookies placed by the platform are retained on the user’s device for a period of up to one year from the date of their creation, unless deleted by the user beforehand.

Managing Cookies

Users may manage or disable cookies through their browser settings at any time. However, disabling certain cookies may affect the functionality of the platform and limit access to some services. The platform is not responsible for any reduction in service quality resulting from user-initiated changes to cookie settings.

By accessing or using the platform in any capacity, users are deemed to have read, understood, and fully accepted the terms of this Privacy Policy. This acceptance is effective from the first instance of use and extends to all subsequent interactions with the platform.

Current Version Prevails

The Privacy Policy may be updated or amended from time to time to reflect changes in applicable law, regulatory requirements, or platform operations. The version published on the platform at any given time constitutes the current and operative version. Users are encouraged to review the policy periodically to remain informed of any changes.

In the event of any inconsistency between a previously published version and the current version, the current version shall take precedence. Continued use of the platform following the publication of an updated policy constitutes acceptance of the revised terms.

When Personal Data is Shared with Third Parties

Personal data held by the platform may be disclosed to third parties in the following circumstances:

• Legal Obligations: Where disclosure is required by applicable law, court order, or the direction of a competent regulatory authority in India or another relevant jurisdiction.
• Dispute Resolution: Where disclosure is necessary to resolve a dispute involving the user or to protect the legitimate interests of the platform.
• Contractual Arrangements: Where third-party service providers engaged by the platform require access to personal data to fulfil their contractual obligations.

Identification of Third Parties

A list of categories of third parties with whom personal data may be shared is available on the platform. In cases where a specific third party is not identified on the platform, users will be informed of the purpose and scope of the data transfer prior to disclosure, wherever legally permissible.

Consent to Data Sharing

By submitting personal data to the platform and continuing to use its services, users consent to the disclosure of their data to third parties in the circumstances described above. This consent is given on the understanding that all third parties are bound by appropriate confidentiality and data protection obligations.

The platform may contain hyperlinks to third-party websites that are independent of the platform and are not under its control. These external websites maintain their own privacy policies and data handling practices, which may differ significantly from those set out in this document.

Absence of Responsibility for External Sites

The platform does not accept responsibility for the personal data practices of any third-party website, regardless of whether that website is accessed through a link appearing on the platform. Users who choose to visit external websites do so at their own discretion and assume full responsibility for reviewing the privacy policies of those sites before submitting any personal information.

Caution Advised

Users are advised to exercise caution when navigating away from the platform to any external website. The presence of a link on the platform does not constitute an endorsement of, or representation regarding, the content or data practices of the linked site.