1xwin Privacy Policy
Your Data, Our Responsibility

Throughout this Privacy Policy, the following definitions apply:

• "1xwin", "Platform", "we", "us", "our" refers to the 1xwin online betting and casino service accessible at https://1xwin.vu, including all associated sub-domains and mobile interfaces.
• "User", "you", "your" refers to any individual who registers an account on, accesses, or otherwise interacts with the 1xwin platform, including visitors who have not registered.
• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to your name, date of birth, Pakistani mobile number, email address, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" means the entity that determines the purposes and means by which Personal Data is processed — in this case, 1xwin.
• "Data Processor" means any third party that processes Personal Data on behalf of and under the instruction of 1xwin.
• "KYC Data" means identity verification documents and information submitted by Users in connection with the Know Your Customer verification process, including CNIC copies, passport copies, proof of address, and associated photographs.
• "Cookie" means a small text file placed on your device by a website, used to remember your preferences, session status, and browsing behaviour for analytical and functional purposes.

For the purposes of applicable data protection law, the Data Controller responsible for your Personal Data is 1xwin, the operator of the online betting and casino platform at https://1xwin.vu. The 1xwin platform is operated under an international gaming licence, and data handling practices conform to the data protection obligations imposed by that licensing framework.

All questions, requests, or complaints relating to the processing of your Personal Data by 1xwin should be directed to our dedicated privacy team using the contact details set out in Section 15 of this Policy. We aim to respond to all substantive data-related enquiries within fourteen (14) calendar days of receipt.

1xwin collects the following categories of Personal Data from registered users and, in limited circumstances, from visitors who have not yet registered:

1xwin does not knowingly collect or process special categories of sensitive Personal Data (such as health data, religious beliefs, or biometric data for identification purposes) unless you voluntarily provide such information in the context of a responsible gaming or welfare support request, in which case it is handled with heightened confidentiality protections.

1xwin collects your Personal Data through the following means:

• Direct Submission: Information you provide when completing the account registration form, submitting KYC documents, making deposits, requesting withdrawals, or contacting our support team via live chat or email.
• Automated Technical Collection: Data collected automatically when you access the 1xwin platform, including IP addresses, device identifiers, browser fingerprints, and session logs gathered via server logs and analytics tools.
• Cookies and Tracking Technologies: First-party cookies placed on your device to maintain your login session, remember your platform preferences, and enable core functionality. Analytics cookies used to understand aggregate usage patterns. See Section 7 for full cookie details.
• Payment Processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, limited transactional data is received from the relevant payment processor sufficient to confirm the completion of that transaction and credit your 1xwin PKR account accordingly.
• Third-Party Verification Services: In the course of KYC verification, 1xwin may use accredited third-party identity verification service providers to confirm the authenticity of submitted documents. These providers process your identity data under strict contractual restrictions.

1xwin processes your Personal Data on the following legal grounds, depending on the specific processing activity in question:

• Contractual Necessity: Processing required to fulfil our obligations to you under the 1xwin Terms and Conditions — including account management, transaction processing, bet settlement, and customer support. Without this processing, we cannot provide the service.
• Legal Obligation: Processing required to comply with our obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and gaming licence conditions — including identity verification, transaction monitoring, and record-keeping.
• Legitimate Interests: Processing undertaken in pursuit of 1xwin's legitimate business interests where those interests are not overridden by your rights — including platform security monitoring, fraud prevention, product improvement analytics, and responsible gaming programme management.
• Consent: Processing for optional purposes where we have sought and obtained your specific, informed consent — including direct marketing communications via SMS or email, and the placement of non-essential analytics cookies. You may withdraw consent at any time through your account settings or by contacting us.

1xwin uses the Personal Data collected from Pakistani players for the following specific purposes:

1. Account Administration: Creating and managing your 1xwin player account, processing your PKR deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, authenticating your identity at login, and maintaining the security of your account.
2. Service Provision: Enabling you to access cricket betting markets, PSL fixtures, live casino games, slot titles, racing, and all other 1xwin platform features available to registered users. Your bet history, balance information, and active bonus status depend on accurate processing of your account data.
3. Identity and Age Verification (KYC): Verifying that you meet the 21+ age requirement, confirming your identity to prevent fraud and money laundering, and maintaining records of completed verifications as required by our licensing obligations.
4. Regulatory Compliance and AML Monitoring: Monitoring account activity to detect and prevent suspicious financial behaviour, reporting obligations to applicable regulatory authorities where required, and maintaining transaction records for the minimum legally prescribed retention period.
5. Customer Support: Responding to your enquiries, complaints, and requests via live chat and email, maintaining records of support interactions to ensure consistent service quality, and training support staff using anonymised interaction data.
6. Responsible Gaming: Administering self-exclusion, deposit limit, session limit, and loss limit settings; monitoring account patterns that may indicate problem gambling; and proactively reaching out to users where our systems identify indicators of potential gambling harm.
7. Platform Security and Fraud Prevention: Detecting and investigating suspicious login activity, bonus abuse, multi-account creation, and other conduct prohibited under the 1xwin Terms and Conditions. Technical Data is processed to identify and block automated bots and fraudulent access attempts.
8. Service Improvement: Analysing aggregated and anonymised behavioural data to understand how Pakistani players use the 1xwin platform, identify areas for improvement, test new features, and optimise the mobile experience for Pakistani network conditions.
9. Marketing Communications (with consent only): Where you have opted in to receive marketing communications, sending you information about new 1xwin promotions, cricket betting offers, PSL seasonal bonuses, and platform updates via SMS or email. You can opt out at any time.

The 1xwin platform uses cookies and similar tracking technologies to provide core functionality, maintain your session, and understand how users interact with the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These cookies maintain your login session, remember your currency settings (PKR), and enable core betting and casino features. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, time zone display preferences, and notification configurations. Disabling these cookies may affect the quality of your experience but will not prevent access to core features.
• Analytics Cookies: First-party analytics cookies collect anonymised data about how Pakistani users navigate the 1xwin platform — which pages are most visited, typical session durations, and device types in use. This data informs platform improvement decisions. These cookies require your consent.
• Security Cookies: Help detect fraudulent login attempts and automated bot activity by creating a technical fingerprint of legitimate user sessions that can be used to identify anomalous access patterns.

1xwin does not use third-party advertising or cross-site tracking cookies. Your 1xwin browsing activity is not shared with social media platforms or advertising networks for retargeting purposes.

1xwin does not sell, rent, or trade your Personal Data to any third party. We share your data only in the following specific and limited circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum transactional data necessary to process your deposits and withdrawals. These entities operate under their own privacy policies and are independently regulated financial service providers in Pakistan.
• KYC and Identity Verification Providers: Accredited identity verification service providers may receive your name, date of birth, and copies of identity documents in the course of completing your KYC verification. These providers are engaged under strict data processing agreements that prohibit them from using your data for any purpose other than verification.
• Game Software Providers: Casino game providers whose titles are hosted on the 1xwin platform receive your anonymised player identifier and game activity data necessary to resolve technical disputes and deliver the game experience. They do not receive your name, contact details, or financial information.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, our licensing obligations, a valid court order, or a legitimate request from a law enforcement agency, 1xwin will disclose relevant Personal Data. We will notify you of such disclosures where legally permitted to do so.
• Anti-Money Laundering Reporting: In compliance with AML obligations, 1xwin is required to report suspicious transaction activity to the relevant financial intelligence authority without notifying the account holder in advance, where tipping-off prohibitions apply.
• Professional Advisors: Lawyers, auditors, and insurers engaged by 1xwin in connection with their professional advisory roles may have access to relevant account data subject to strict professional confidentiality obligations.

1xwin retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply:

• Active Account Data: Personal Data associated with an active 1xwin account is retained for the full duration of the account's active period and for a period of five (5) years following permanent account closure, unless a longer retention period is required by law.
• KYC and Identity Documents: Identity verification documents are retained for a minimum of five (5) years from the date of account closure or the date of last transaction, whichever is later, in accordance with anti-money laundering regulatory requirements.
• Financial Transaction Records: Complete records of all PKR deposits, withdrawals, and bet settlements are retained for a minimum of five (5) years from the date of each transaction for regulatory compliance and dispute resolution purposes.
• Support and Communications Records: Records of customer support interactions are retained for three (3) years from the date of the interaction to support quality management, dispute resolution, and training purposes.
• Technical and Log Data: Server log data and technical session data is retained for twelve (12) months from the date of creation for security monitoring and fraud investigation purposes, after which it is automatically deleted or anonymised.
• Responsible Gaming Records: Records of self-exclusion requests and responsible gaming interventions are retained for the full duration of the exclusion period plus five (5) years thereafter, to prevent re-registration during active exclusion periods.

Upon expiry of the applicable retention period, your Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

1xwin implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security: All data in transit between your device and 1xwin servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption, ensuring that your login credentials, payment information, and personal data cannot be intercepted in transit.
• Data Encryption at Rest: Personal Data and financial records stored on 1xwin servers are encrypted at rest, meaning that even in the event of a physical server breach, stored data cannot be read without the encryption keys.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. 1xwin staff members are granted access only to the data necessary for their specific role. All internal access is logged and subject to regular audit.
• Two-Factor Authentication Infrastructure: The 1xwin platform supports Two-Factor Authentication for user accounts, significantly reducing the risk of unauthorised account access even in the event that login credentials are compromised.
• Penetration Testing: The 1xwin platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response Plan: 1xwin maintains a documented data breach incident response plan that is reviewed and tested annually. In the event of a security incident, the plan ensures a structured and timely response to contain the breach and notify affected users.

While 1xwin takes every reasonable precaution to protect your data, no security system is impenetrable. You are also responsible for maintaining the security of your 1xwin account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

Subject to applicable data protection law and certain legal exceptions, you have the following rights in relation to the Personal Data held about you by 1xwin:

1. Right of Access: You may request a copy of the Personal Data that 1xwin holds about you, along with information about how it is being processed. We will respond to access requests within fourteen (14) calendar days.
2. Right to Rectification: If you believe that any Personal Data held by 1xwin is inaccurate or incomplete, you have the right to request that it be corrected. Basic personal information such as your email address and mobile number can be updated directly in your account settings.
3. Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to 1xwin's legal retention obligations under AML and gaming licence frameworks, which may prevent full erasure.
4. Right to Restrict Processing: You may request that 1xwin temporarily suspend the processing of your Personal Data in certain circumstances, such as while the accuracy of data is being contested.
5. Right to Object: You have the right to object to processing based on our legitimate interests, and an absolute right to object to processing for direct marketing purposes. Marketing communications can be opted out of at any time through your account settings.
6. Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that your Personal Data be provided to you in a structured, commonly used, and machine-readable format.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit your request in writing to [email protected] with the subject line "Data Rights Request". We may require you to verify your identity before processing your request. All requests will be acknowledged within 72 hours and substantively addressed within fourteen (14) calendar days.

The 1xwin platform is strictly an adults-only service. Individuals under the age of 21 are prohibited from registering or using any 1xwin service. 1xwin does not knowingly collect Personal Data from individuals under the age of 21.

Age verification is conducted at the point of registration and, where triggered by account activity, through our KYC verification process. Where 1xwin discovers or has reasonable cause to believe that an account has been created by or for an individual under the age of 21, the account will be immediately suspended, all Personal Data will be deleted consistent with applicable law, and any deposits will be returned to the originating payment method. No winnings accrued on an underage account will be paid.

The 1xwin platform may reference or be accessed in conjunction with third-party services including payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) and casino game software providers. Each of these third-party services operates under its own privacy policy, which governs any Personal Data collected or processed directly by that service.

1xwin is not responsible for the privacy practices of any third-party service provider. Where we engage Data Processors on your behalf, we do so under written data processing agreements that require those processors to implement appropriate security measures and to process your data only on 1xwin's documented instructions and for no other purpose.

1xwin does not embed social media plugins, third-party advertising networks, or cross-site tracking pixels on the 1xwin platform that would cause your browsing activity to be shared with social media companies or advertising networks.

1xwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new service features, or evolving legal and regulatory obligations. The current version of the Privacy Policy is always accessible on the 1xwin website, identified by the "Last Updated" date displayed in the hero section of this page.

Where amendments are material — meaning they significantly change how we collect, use, or share your Personal Data — registered 1xwin users will be notified via the mobile number or email address registered to their account not less than seven (7) calendar days prior to the amended Policy taking effect.

Your continued use of the 1xwin platform following the effective date of an amended Privacy Policy constitutes your acknowledgement of the amended policy. If you do not accept the revised Policy, you must discontinue use of the platform and may request account closure in accordance with Section 4.4 of the 1xwin Terms and Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to make a complaint about 1xwin's handling of your Personal Data, please contact us using the following details:

• Privacy & Data Rights Enquiries: [email protected] (subject line: "Privacy Policy Enquiry" or "Data Rights Request")
• General Support: Live chat available within the 1xwin platform, 24 hours a day, 7 days a week
• Response Commitment: Data-related enquiries acknowledged within 72 hours; substantive response within 14 calendar days

If you are not satisfied with 1xwin's response to your privacy complaint after following our internal process, you have the right to escalate your complaint to the data protection supervisory authority applicable under our licensing framework. Details of the relevant supervisory authority are available from our Data Protection Officer on request.