1win Privacy Policy

• Personal data collected
  • Identification and contact details: name, date of birth, address, email, phone.
  • Account and verification data: username, credentials, KYC documents (ID, proof of address), selfies for liveness checks.
  • Payment and transaction information: deposits, withdrawals, payment method type; full card numbers are not stored by the operator.
  • Technical data: device identifiers, IP address, browser, operating system, language, approximate location from IP.
  • Usage data: login times, session logs, gameplay and betting history, responsible gaming settings.
  • Communications and preferences: support messages, marketing choices, consent records.
• Why the data is collected
  • To provide and operate the account and services.
  • To process payments, verify identity, prevent fraud, and meet anti-money laundering requirements.
  • To deliver support, resolve disputes, and administer responsible gaming tools.
  • To improve websites and apps through analytics and service optimization.
  • To meet legal obligations in Somalia and other applicable jurisdictions.
• Protection measures
  • Encryption in transit and at rest, strong access controls, multi-factor authentication for staff, and least-privilege access.
  • Network segmentation, logging and monitoring, vulnerability management, and incident response procedures.
  • Vendor security due diligence and contractual confidentiality obligations.
  • Staff training on privacy and information security.
• Retention and deletion
  • Personal data is kept only as long as needed for the purposes above.
  • Account, payment, and AML records may be retained for up to five years after account closure or longer if required by law or for legal claims.
  • Data is securely deleted or anonymized when retention ends.
• User rights
  • Access: request a copy of personal data.
  • Correction: ask to update inaccurate information.
  • Deletion: request erasure where permitted by law.
  • Restriction and objection: limit or object to certain processing.
  • Portability: receive certain data in a machine-readable format.
  • Withdraw consent: for processing based on consent, without affecting past lawful use.
• Compliance
  • Processing follows applicable laws of Somalia to the extent they regulate data protection, and applies international standards such as the EU General Data Protection Regulation (GDPR) as a benchmark for transparency and user rights.

• Account and services
  • Create and manage accounts, authenticate users, provide gaming and betting services, and deliver support.
• Transactions
  • Process deposits and withdrawals, confirm payments, detect fraud, and conduct AML/CTF screening.
• Service improvement and analytics
  • Monitor performance, analyze trends, fix issues, and improve user experience across online platforms.
• Personalization and responsible gaming
  • Remember settings, tailor content, and provide safer gambling tools such as limits and self-exclusion.
• Marketing
  • Send updates and offers subject to user consent and preferences; users can opt out at any time.
• Compliance and risk management
  • Meet legal requirements, respond to lawful requests, enforce terms, and protect the integrity and security of the services.

Processing is lawful, fair, and transparent, based on consent, performance of a contract, legal obligations, or legitimate interests where appropriate.

• How to make a request
  • Submit data access, correction, or deletion requests through the support channels listed on the website. The request may require identity verification to protect account security.
• Response time and outcomes
  • Requests are handled without undue delay. If a request cannot be fulfilled due to legal or regulatory duties, the user will receive an explanation.
• Deletion process
  • When deletion is permitted, personal data will be erased or anonymized. Certain records may be retained to comply with AML, fraud prevention, tax, or accounting rules.
• Consent to security checks and payments
  • By using 1win, the user consents to security reviews, identity checks, and processing of payment information by authorized payment providers for transactions and fraud prevention.

• Access is limited to persons aged 18 or older. Registration by minors is prohibited.
• The operator cannot confirm age without suitable identification documents.
• If a parent or guardian learns that a minor has provided personal information, they should contact support through the website. Upon verification, the account will be closed and the child’s data deleted, subject to legal retention duties.

• Personal data may be processed in countries outside Somalia where operational partners, payment providers, verification services, or hosting providers are located.
• Using the services constitutes consent to such cross-border transfers, subject to appropriate safeguards.
• All partners are bound by confidentiality and security obligations. Where required, standard contractual clauses or comparable safeguards are applied to protect personal data during transfer.

• This Privacy Policy is a legal document that governs data collection, use, and protection. A disclaimer within this document may specify exceptions or clarify how the rules apply in practice and can alter the scope or effects of certain provisions to the extent permitted by law.
• The disclaimer applies when the user accepts this policy through signature, affirmative acceptance during registration, or accession by continuing to use the services.
• If any part of the policy is held invalid by a competent authority, the remaining parts continue to apply.

• Definition
  • Cookies are small files stored on a device by websites to remember settings and understand how the site is used.
• Purposes
  • Statistics and analytics: measure visits, performance, and errors.
  • Behavior analysis: understand how users interact with pages and features.
  • Personalization: remember preferences such as language and odds format.
  • Site improvement and security: keep sessions stable and protect accounts.
• Retention
  • Cookies are generally stored for up to 1 year, after which they expire or are refreshed if consent persists.
• Control
  • Users can manage cookies through browser settings and consent tools on the website. Disabling certain cookies may affect functionality.

• Using 1win means full acceptance of this Privacy Policy and any updates published on the website.
• The current version posted online prevails over previous versions. Continued use after changes indicates agreement to the updated document.

• Sharing circumstances
  • Personal information may be shared when required by law, to handle disputes, to enforce agreements, to process payments, to perform identity checks, to prevent fraud, or to provide core services.
• Types of recipients
  • Payment service providers, KYC/AML vendors, data hosting and security providers, analytics services, customer support systems, auditors, legal and professional advisers, and competent authorities.
• Transparency
  • Where a public list of processors and partners is provided on the website, that list defines the scope of sharing. If a partner is not listed, users will be informed of the purpose and extent of sharing before or at the time of processing when feasible.
• Consent and responsibility
  • Providing data for a specific feature may constitute consent to share it for that purpose. Each third party has its own privacy policy for its independent processing.

• The websites and apps may include links to external sites that operate under their own privacy policies.
• 1win does not control and is not responsible for how those sites collect, use, or protect information.
• Users should review the privacy notices of external services before providing personal data.