Privacy Policy

This Privacy Policy ("Policy") is issued by 1owin ("we", "us", "our", "the Platform") and applies to all personal data collected from users ("you", "User", "Player") of the 1owin online sports betting and casino platform, accessible at https://1owin.cam/ and associated applications or services operated under the 1owin brand.

We take the privacy and security of your personal data seriously. This Policy explains in plain terms what data we collect from Pakistani and international players, how that data is processed, under what legal basis, how long it is retained, and what rights you have in respect of your own data.

By registering an account on 1owin, making a deposit, or otherwise using the Platform, you confirm that you have read this Policy and consent to the data practices described herein. If you do not agree to this Policy, you must not use the Platform.

In this Policy, unless the context otherwise requires, the following terms shall bear the meanings assigned below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, including name, email address, IP address, financial data and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, 1owin.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller, subject to contractual obligations.
• "KYC" means Know Your Customer verification, including identity document checks and address verification required by the Platform's operating standards.
• "AML" means Anti-Money Laundering procedures applied to detect and prevent financial crime.
• "Cookie" means a small text file stored on your device by the Platform to support its functionality, analytics or session management.
• "Consent" means freely given, specific and informed agreement by a data subject to the processing of their Personal Data for a stated purpose.

The Data Controller for Personal Data collected through the 1owin platform is the entity operating 1owin under its applicable licence. Contact details for data-related enquiries are available through our support team at the email address shown in Section 15 of this Policy.

Where data processing activities are carried out by third-party processors (including KYC providers, payment processors and game studio partners), those processors act under data processing agreements that impose equivalent data protection obligations on those parties.

We collect the following categories of Personal Data, depending on your interactions with the Platform:

A. Identity & Contact Data

• Full legal name, date of birth, nationality and gender (where required for KYC).
• Email address, phone number and residential address.
• Government-issued identity document details (passport, national ID, CNIC) submitted during KYC verification.
• Proof of address documentation (utility bill, bank statement or equivalent).

B. Financial Data

• Payment method identifiers (partial card numbers, wallet account identifiers, bank account references). We do not store full card numbers.
• Deposit amounts, withdrawal requests, transaction history and account balance records.
• Source of funds documentation where requested as part of enhanced due diligence.

C. Technical & Device Data

• IP address, geographic location (country/city level), browser type, operating system and device identifiers.
• Session timestamps, login history, pages visited and time spent on Platform sections.
• Cookies and similar tracking technologies (see Section 11).

D. Wagering & Activity Data

• Sports betting and casino game activity including markets bet on, wager amounts, outcomes, bonus use and responsible gambling tool settings.

E. Communication Data

• Correspondence with our support team via live chat or email, including support ticket records and any attachments you provide.

We process your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing required to deliver our platform services, manage your account, process deposits and withdrawals, and fulfil our obligations under the Terms & Conditions.
• Legal obligation: Processing required to comply with KYC/AML obligations, respond to lawful requests from regulatory or law enforcement authorities, and meet data retention requirements under applicable law.
• Legitimate interests: Processing for fraud detection and prevention, platform security, abuse monitoring, and service improvement analytics — where those interests are not overridden by your fundamental rights.
• Consent: Processing for non-essential cookies and, where applicable, direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Your Personal Data is used for the following purposes:

• To create, operate, maintain and secure your 1owin account.
• To verify your identity and age in accordance with KYC requirements and our eligibility criteria (18+, or higher where applicable).
• To process deposits, withdrawals and related financial transactions.
• To comply with AML obligations, including transaction monitoring and source-of-funds checks.
• To provide customer support, respond to queries and resolve disputes.
• To enforce our Terms & Conditions, detect fraud, and prevent unauthorised access.
• To operate responsible gambling tools, including deposit limit enforcement, session reminders and self-exclusion management.
• To send you account-related communications, including security alerts, transaction confirmations and service updates.
• To improve Platform performance and user experience through anonymised analytics.
• To send promotional communications where you have opted in — you may unsubscribe at any time.

We do not sell your Personal Data to any third party. We share Personal Data only where strictly necessary for the purposes described in this Policy or as required by law. Categories of third parties who may receive your data include:

• KYC/AML verification providers: Identity verification platforms that process your documents to confirm your eligibility and comply with anti-financial-crime obligations.
• Payment processors: Companies facilitating deposits and withdrawals. They receive only the minimum data necessary to execute transactions. References to familiar Pakistani payment methods such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are for user context only — their processing of your data is governed by their own privacy policies.
• Game and technology partners: Licensed game studios, live dealer providers and sports data suppliers who may receive session-level data to deliver their services within the Platform.
• IT infrastructure and hosting providers: Cloud hosting and security service providers operating under data processing agreements.
• Regulatory and law enforcement authorities: Where we are legally compelled to disclose data by a court order, regulatory request or applicable law, we will comply while limiting disclosure to what is strictly required.

All third-party data processors engaged by 1owin are required to process Personal Data only on our documented instructions and to maintain appropriate technical and organisational security measures.

As an internationally operating online platform, 1owin and its third-party processors may transfer Personal Data to, or access it from, countries outside Pakistan and outside the jurisdiction where the Platform's operational licence is held. This may include countries that do not have equivalent data protection laws to the licensing jurisdiction.

Where such transfers occur, we implement appropriate safeguards to protect your data, which may include contractual data protection clauses with the receiving party, or reliance on an applicable adequacy decision or equivalent recognised transfer mechanism.

By using the Platform, you acknowledge that your data may be transferred internationally as described in this section.

We retain Personal Data for as long as is necessary for the purposes for which it was collected, and as required to comply with applicable legal, regulatory, tax and accounting obligations. Our retention approach includes:

• Active account data: Retained for the duration of your account and for a defined period following account closure, to meet KYC/AML and financial record-keeping requirements.
• Transaction records: Financial transaction data is retained for the period required by the Platform's licensing jurisdiction, which may be a minimum of five years.
• Support correspondence: Support ticket records are retained for a defined operational period and then deleted or anonymised.
• Technical logs: IP address and access logs are retained for security and fraud detection purposes for a limited defined period.

When Personal Data is no longer required and no legal hold applies, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

1owin implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration or destruction. Key measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and our servers.
• Encrypted storage of sensitive data at rest, including identity documents and financial records.
• Role-based access controls limiting internal access to Personal Data to authorised personnel on a strict need-to-know basis.
• Regular security assessments and monitoring for suspicious or anomalous activity on Platform systems.
• Two-factor authentication options available to account holders to enhance account security.
• Contractual security obligations imposed on all third-party processors handling Personal Data.

While we apply all reasonable security measures, no system is completely immune to breach. In the event of a data breach that is likely to result in significant risk to your rights, we will notify affected users and, where required, relevant supervisory authorities, in accordance with applicable obligations.

1owin uses cookies and similar technologies to operate the Platform, remember your preferences, analyse usage patterns and support security functions. We do not use cookies to sell or share your data with advertising networks.

The following categories of cookies are used on the Platform:

To manage cookies, you can adjust settings in your web browser. Most browsers allow you to refuse new cookies, delete existing cookies and set preferences for specific sites. Note that disabling essential or security cookies will impair your ability to use the Platform.

Subject to applicable law and certain legal exceptions (including obligations under KYC/AML legislation that may require us to retain data regardless of your request), you have the following rights in respect of your Personal Data held by 1owin:

To exercise any of these rights, contact our support team using the details in Section 15. We will respond to verified requests within a reasonable timeframe. Identity verification may be required before a request is actioned to protect against unauthorised access to your data.

The 1owin platform is strictly for adults aged 18 and above (or the higher minimum age required by the operator's license jurisdiction). We do not knowingly collect Personal Data from individuals under the applicable minimum age. If we become aware that a minor has provided Personal Data or registered an account, we will delete that data and close the account promptly.

If you are a parent or guardian and believe that a minor under your care has accessed or registered on the Platform, please contact our support team immediately at the address provided in Section 15. We take age verification obligations seriously and apply KYC procedures accordingly.

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, we will notify registered users by email or by a prominent notice on the Platform before the changes take effect.

The version number and review date at the top of this Policy reflect the most recent revision. Your continued use of the Platform after a revised Policy has been published constitutes acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform.

Prior versions of this Policy may be obtained by contacting support. We recommend reviewing this Policy periodically to stay informed about how your data is handled.

For all data protection queries — including requests to exercise your rights under Section 12, concerns about how your data is being processed, or to report a potential data breach — please contact the 1owin data team via our support channel:

For responsible gambling concerns or self-exclusion requests, please visit our Responsible Gambling page. For general terms of service, see our Terms & Conditions.