Table of Contents
- Methods of Data Collection
- Legal Bases for Data Processing
- Uses of Personal Data
- Sharing of Personal Data
- International Data Transfers
- Security Measures
- Data Retention
- Your Rights
- Use of Google Analytics
- SSL Encryption
Gaining a comprehensive understanding of how 1win online safeguards your personal data is of paramount importance. This Privacy Policy summary aims to elucidate the stringent measures and protocols we adhere to in order to ensure the security of your data across all our platforms, be they online or mobile. For simplicity, we shall refer to these platforms collectively as our “Websites” and “Services.” Personal Data encompasses information that can directly identify you, such as your name, email address, phone number, payment details, support queries, betting history, and chat comments. Should the data be anonymized and no longer able to identify you, this Policy does not apply.
We periodically revise this Policy, with significant amendments communicated via notifications on our Websites or through email.
Methods of Data Collection
When you engage with our Websites or utilize our Services, we collect and process your Personal Data through a variety of methods, including:
Direct Information Collection
During interactions with specific segments of our Websites and Services, we may request you to provide Personal Data. This can occur during registration, verification, anti-money laundering procedures, anti-fraud checks, or when you seek support.
Automatic Data Collection
Certain information is automatically gathered when you access our Websites or use our Services. This includes your IP address, operating system, device type and settings, browser type and settings, crash reports, system activity, and the date, time, and referrer URL of your request. Such information helps us understand usage patterns and enhance your experience. Browser information, for example, assists in determining your language preference. Data is also collected through cookies, tracking technologies, and tools like Google Analytics. We additionally record transaction details and account activities.
Third-Party Information Collection
Occasionally, we gather Personal Data from other sources, such as publicly available information or trusted third parties like payment providers. This supplements the Personal Data we already hold, enhancing our Services and verifying the data you provide.
Legal Bases for Data Processing
We process Personal Data only when legally justified under applicable data protection laws. The legal bases include:
Performance of a Contract
Processing your Personal Data is necessary for fulfilling contractual obligations, such as registration on the Website or facilitating transactions.
Legal Obligation
Certain laws and regulations necessitate the processing of your Personal Data to comply with requirements like anti-money laundering legislation and responsible gaming regulations.
Legitimate Interests
We, our group companies, or third parties may process your Personal Data for legitimate business interests.
Consent
In specific instances, we process your Personal Data based on your consent, such as for direct marketing purposes.
Uses of Personal Data
We utilize Personal Data for various purposes:
- Website and Service Operations: Ensuring the proper functioning of our Websites and delivering requested Services (Performance of a contract, Legitimate interest).
- Verification: Checking eligibility for certain Services, such as age, location, identity, or self-exclusion status, and managing your account (Performance of a contract, Legitimate interest).
- Legal Compliance: Fulfilling legal duties and preventing illegal activities (Legal obligation).
- Support Provision: Offering support, including resolving technical or payment issues (Performance of a contract).
- Improvement and Optimization: Enhancing our Websites and Services, testing new features, and performing technical analysis (Legitimate interest).
- Crime and Fraud Prevention: Detecting and reporting crime, protecting users, ensuring security, and preventing fraud (Legal obligation, Legitimate interest, Performance of a contract).
- Data Analysis: Analyzing and aggregating data, preparing statistics, and producing reports (Legitimate interest).
- Financial Transactions Management: Managing financial transactions (Performance of a contract, Legitimate interest).
- Risk Management: Assessing fraud risk and verifying credentials with third parties (Legal obligation, Performance of a contract, Legitimate interest).
- Responsible Gaming: Evaluating gambling activity (Legal obligation, Legitimate interest, Performance of a contract).
- Risk and Odds Management: Monitoring betting activity and managing risk and odds (Legitimate interest, Performance of a contract).
- Exercising Rights: Exercising rights under agreements with you (Performance of a contract).
- Internal Disclosures: Disclosing information within our group for internal purposes (Legitimate interest).
- Communication Management: Managing our relationship and communicating with you, including operational communications, marketing, and required information (Performance of a contract, Legitimate interest, Consent).
Sharing of Personal Data
We may share your Personal Data with:
- Group Companies: Other companies within our group.
- Service Providers and Partners: Third-party service providers and partners supporting our Websites and Services.
- Regulators and Legal Entities: Regulators, law enforcement, government bodies, courts, fraud prevention agencies, licensing bodies, and other third parties to comply with laws or defend legal rights.
- Affiliates and Introducers: Affiliates and introducers.
- Others with Consent: Others with your consent.
International Data Transfers
Data processing and sharing may involve transfers to countries with different laws. Safeguards are implemented to protect your Personal Data during these transfers. For EEA residents, data may be transferred outside the EEA, with compliant transfer mechanisms in place, such as the European Commission’s Standard Contractual Clauses.
Security Measures
We are committed to protecting your Personal Data through various measures, including:
- Data Encryption: All data between you and us is encrypted using TLS, protecting personal and financial information. Data is also encrypted when stored and transferred between data centers.
- Limited Access: Access to personal information is restricted to necessary personnel.
- Network Protection: Multiple security layers protect our environment, including firewalls and intrusion protection systems. We partner with industry-leading security vendors for global threat intelligence.
- Secure Data Centers: Servers are housed in facilities with robust physical security controls, including 24/7 monitoring and regular audits.
- Security Monitoring: Continuous monitoring of security systems and alerts to manage threats.
Data Retention
Data retention varies:
- Deletable Data: You can delete certain data, such as by editing your profile or deleting your account.
- Automatic Deletion: Some data is deleted automatically.
- Retained Data: Data may be retained longer to meet legal obligations or for business reasons, such as protecting against fraud or complying with financial regulations.
Your Rights
You have rights regarding your Personal Data, including:
- Data Access: Knowing what data we hold.
- Data Correction: Correcting inaccurate data.
- Data Copy: Accessing and requesting a copy of your data.
- Processing Objection: Objecting to processing based on legitimate interests.
- Data Erasure: Requesting data erasure in certain circumstances.
- Processing Restriction: Restricting processing in specific situations.
- Consent Withdrawal: Withdrawing consent where applicable.
- Direct Marketing Objection: Objecting to direct marketing and related profiling.
- Complaints: Complaining to your local data protection authority.
You can exercise these rights by adjusting your account settings or contacting security@1win.xyz. Proof of identity may be required for certain actions.
Use of Google Analytics
We use Google Analytics to gather information about Website usage. Google Analytics collects data such as visit frequency, visited pages, and referring sites. It collects only the IP address assigned on the visit date. Information from Google Analytics is not combined with Personal Data. You can prevent Google Analytics from recognizing you on future visits by disabling cookies in your browser. For more details, visit Google Analytics and Google's cookie policy.
SSL Encryption
All critical communications between users and the Website are encrypted using SSL with a 256-bit key.