1 Winning Privacy Policy — How We Handle Your Personal Data

Who We Are

1 Winning operates the online betting and casino platform accessible at https://1winning.app. When this Privacy Policy refers to "1 Winning," "we," "us" or "our," it refers to the operator of the 1 Winning platform in its entirety, including the website, mobile browser experience, and all associated services and communications.

For the purposes of this Privacy Policy, 1 Winning is the data controller — meaning we are responsible for deciding how and why your personal data is collected and used when you interact with our platform as a Pakistani player or as a visitor to our website.

If you have any questions about how 1 Winning handles your personal data, you can reach our data team at any time via support@1winning.app or through the live chat available inside your 1 Winning account.

What Personal Data 1 Winning Collects

1 Winning collects personal data in three main ways: data you provide directly during registration and account use, data generated automatically when you use the platform, and data received from third-party service providers. The table below gives a clear overview.

How 1 Winning Uses Your Personal Data

Every use of your personal data by 1 Winning has a specific, legitimate purpose. Below is a complete list of why your data is processed and what purpose each use serves.

• Account creation and management: To register your account, verify your identity, maintain your player profile and manage your 1 Winning login credentials.
• Processing transactions: To accept deposits, process withdrawal requests and maintain accurate PKR transaction records for your account and for our accounting obligations.
• Providing platform services: To deliver the betting, casino, card game, fishing game and live dealer services that make up the 1 Winning product, including personalising your game lobby and displaying your betting history.
• Customer support: To respond to queries submitted through live chat, email or any other support channel, and to resolve complaints or disputes related to your 1 Winning account.
• Anti-fraud and security: To detect and prevent fraudulent activity, money laundering, identity theft, bonus abuse and any other security threat to the 1 Winning platform or its players.
• Regulatory compliance: To fulfil obligations under applicable anti-money laundering (AML) regulations, including maintaining KYC records and reporting suspicious transactions where legally required.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to make responsible gaming tools available to players who need them.
• Marketing communications: To send you promotional emails or in-platform notifications about bonuses, new games and special offers — but only if you have opted in to receive such communications from 1 Winning.
• Platform improvement: To analyse aggregated, anonymised usage data to identify performance issues, improve game loading times and develop new features that Pakistani players want.

Legal Basis for Processing

1 Winning processes personal data only when there is a valid legal basis for doing so. The legal bases we rely on are as follows.

• Contract performance: Processing necessary to deliver the services you signed up for — account management, transaction processing and platform access — is done under the contract between you and 1 Winning.
• Legal obligation: Certain processing — particularly KYC verification and anti-money laundering record-keeping — is required by law and is carried out to fulfil those legal obligations.
• Legitimate interests: Fraud prevention, platform security, analytics to improve our service, and responsible gaming monitoring are carried out on the basis of 1 Winning's legitimate interests, provided those interests are not overridden by your privacy rights.
• Consent: Marketing communications are sent only where you have given explicit consent. You can withdraw this consent at any time via account settings or by contacting support.

Who 1 Winning Shares Your Data With

1 Winning does not sell your personal data to anyone. However, to deliver our services effectively and comply with legal requirements, we share data with the following categories of third party — all of whom are bound by appropriate data protection obligations.

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processing partners and Visa/Mastercard processing networks receive the transaction data needed to complete your deposits and withdrawals.
• KYC and identity verification providers: When you submit identity documents for KYC verification, those documents are processed by specialist identity verification service providers who confirm their authenticity on 1 Winning's behalf.
• Game and platform technology providers: Third-party game studios and live dealer providers (including Evolution, Ezugi and Pragmatic Play) receive session identifiers and game activity data required to run their games within the 1 Winning platform.
• Analytics and fraud detection tools: Anonymised or pseudonymised technical and usage data may be processed by analytics platforms to help 1 Winning understand platform performance and detect fraudulent patterns.
• Legal and regulatory authorities: Where required by law, or in response to a valid legal request from a regulatory or law enforcement authority, 1 Winning may disclose personal data to the relevant authority.

Payments and KYC Data

Given the financial nature of the 1 Winning platform, payment data and KYC documentation are handled with particular care. The following specific points apply.

• 1 Winning does not store full card numbers on its own servers. Card payment data is tokenised by our payment processing partners and stored in compliance with PCI DSS standards.
• Mobile wallet numbers (Easypaisa, JazzCash) are stored in encrypted form and are used solely for processing transactions on your 1 Winning account.
• CNIC documents and selfie images submitted for KYC are stored securely for the period required by applicable AML regulations and then permanently deleted. You can ask us for the specific retention period by contacting support.
• Financial transaction records — deposit amounts, withdrawal amounts, bet amounts — are retained for a minimum of five years from the date of the transaction to comply with financial record-keeping requirements.
• 1 Winning employs a dedicated anti-money laundering compliance process. In the event of suspicious activity, relevant transaction data may be shared with competent financial authorities as required by law, without prior notice to the account holder.

Cookies and Tracking

1 Winning uses cookies and similar tracking technologies to make the platform work correctly, to remember your preferences and to understand how players use the site. Here is a plain breakdown of the cookies we use.

You can manage optional cookies through your browser settings. Disabling certain optional cookies may affect the personalisation features of your 1 Winning experience but will not prevent you from using the platform's core betting and gaming features.

Data Security

1 Winning takes the security of your personal data seriously and implements the following technical and organisational measures to protect it.

• SSL/TLS encryption: All data transmitted between your device and 1 Winning is encrypted using industry-standard SSL/TLS protocols. Any attempt to intercept the connection produces only unreadable encrypted data.
• Encrypted data storage: Sensitive personal data — including password hashes, mobile wallet numbers and identity document references — is stored in encrypted form on 1 Winning's servers.
• Access controls: Access to player personal data within 1 Winning's internal systems is restricted on a strict need-to-know basis. Staff members can only access the data required to perform their specific role.
• Regular security audits: 1 Winning's platform security is assessed regularly by independent security professionals. Identified vulnerabilities are patched as a priority.
• Two-factor authentication: 1 Winning offers optional 2FA for player accounts and enforces 2FA for all internal staff accounts with access to player data.
• Data breach response: In the event of a confirmed data breach affecting personal data, 1 Winning will notify affected players and relevant authorities within the timeframes required by applicable regulation.

How Long We Keep Your Data

1 Winning retains personal data for only as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The general principles are as follows.

• Active account data: All personal data associated with an active 1 Winning account is retained for the duration of the account's active status plus a standard post-closure period.
• Financial and transaction records: PKR deposit, withdrawal and bet records are retained for a minimum of five years from the transaction date to comply with financial record-keeping requirements.
• KYC documentation: Identity documents submitted for KYC verification are retained for a minimum of five years from the date of submission or from account closure, whichever is later.
• Support communications: Live chat transcripts and email correspondence are retained for up to two years to support dispute resolution and quality assurance.
• Inactive accounts with zero balance: If your 1 Winning account has been inactive for more than two years and holds no balance, we may delete your account data, subject to retaining any records required by law.
• Marketing consent records: Records of your marketing opt-in and opt-out choices are retained indefinitely to demonstrate compliance with consent requirements, even if the underlying personal data is deleted.

Your Privacy Rights as a 1 Winning Player

You have specific rights over the personal data 1 Winning holds about you. These rights can be exercised at any time by contacting 1 Winning support via live chat or email.