1win Privacy Policy – User Data Protection, Security, and Transparency

Table of content

Last Updated: 21.03.25

This Privacy Policy (“Policy”) explains in detail how 1win (“we”, “our”, “us”) collects, uses, discloses, and protects information about you when you visit and use our website and services (collectively, the “Services”). We are committed to safeguarding your personal data and ensuring that your privacy is respected at all times. By accessing or using our Services, you agree to the terms of this Policy. Please read this document carefully to understand our practices regarding your personal data, the rights you have, and how you can exercise them. If you do not agree with our policies and practices, please do not use our Services.

Introduction At 1win, we value the trust you place in us by providing your personal information, and we are committed to maintaining the highest standards of privacy and data security. This Policy applies to all personal data collected on or in connection with our website and Services. We have designed this Policy to be comprehensive, transparent, and easy to understand so that you can be fully informed about how your information is handled. In this Policy, “personal information” refers to any information that can be used to identify you as an individual. We encourage you to review this Policy periodically because we may update it from time to time to reflect changes in our practices or relevant laws.
Information We Collect We collect various types of information to provide and continually improve our Services. The information we collect is categorized as follows:

a. Personal Information: When you register for an account or use our Services, we may collect personal details such as your name, email address, postal address, telephone number, date of birth, and any government-issued identification information. This information is necessary for account creation, identity verification, and providing you with a personalized experience.

b. Financial Information: In order to process payments, deposits, and withdrawals, we collect financial details such as credit card numbers, bank account information, and payment service provider data. This information is transmitted securely via third-party payment gateways and is used solely for transaction purposes. We do not store full credit card numbers or sensitive financial information on our servers beyond what is required for compliance with regulatory requirements.

c. Usage Information: We automatically gather information about how you interact with our Services, including your browsing history, the pages you visit, the links you click, and the duration of your visits. This usage data, which includes your IP address, browser type, operating system, referring URLs, and device identifiers, is collected via cookies, web beacons, and similar tracking technologies. We use this data to analyze trends, administer the site, improve user experience, and customize our Services.

d. Log Data: Our servers automatically record information that your browser sends whenever you visit our website. This includes log data such as your IP address, access times, browser type, referring/exit pages, and the pages you viewed. We use log data for diagnostic purposes, performance monitoring, and to detect and resolve technical issues.

e. Location Information: If you enable location services on your device, we may collect precise or approximate geographical information such as GPS data or derived location data. This information is used to tailor content and services to your geographic location and to provide localized experiences.

f. Communication Data: When you contact us via email, live chat, or other communication channels, we record the details of your correspondence. This data is used to respond to your inquiries, provide customer support, and resolve any issues you might have.

g. Cookies and Tracking Technologies: We use cookies and similar technologies to collect data about your interactions with our Services. Cookies are small text files stored on your device that help us remember your preferences, analyze website traffic, and enhance your overall experience. You can manage your cookie preferences through your browser settings; however, disabling cookies may limit your ability to use certain features of our Services.

How We Use Your Information We use the information we collect for various purposes to ensure the smooth operation of our Services and to enhance your user experience. Our uses include:

a. Account Management: Personal information is used to create, maintain, and manage your account. This includes verifying your identity, providing customer support, and updating your account information as needed.

b. Transaction Processing: Financial information is used to process deposits, withdrawals, and other payment transactions securely. This includes facilitating the transfer of funds and ensuring compliance with financial regulations.

c. Service Improvement: We analyze usage, log, and location data to understand how our Services are used, identify trends, and implement improvements to enhance functionality and user satisfaction.

d. Personalization: Information about your preferences and usage behavior allows us to personalize your experience, tailor content, and deliver targeted offers that match your interests.

e. Marketing and Communications: With your consent, we may use your contact information to send you newsletters, promotional emails, and other communications related to our Services. You may opt out of receiving these communications at any time by following the unsubscribe instructions in our emails or by contacting us.

f. Security and Fraud Prevention: We use your data to monitor for suspicious activities, prevent fraud, and ensure the security of our Services. This includes detecting and responding to potential threats, protecting user accounts, and preventing unauthorized access.

g. Legal Compliance: We use your information to comply with applicable laws and regulations, respond to legal requests, and enforce our terms and policies. This includes cooperating with law enforcement agencies and regulatory bodies when required.

h. Research and Analytics: Data collected through cookies and tracking technologies is used for statistical analysis, market research, and to improve our website performance and Services. This analysis helps us understand user behavior and optimize our offerings accordingly.

i. Third-Party Services: We may share aggregated, non-identifiable data with third-party service providers to assist with analytics, marketing, and technical support. Such third parties are bound by confidentiality agreements and are not permitted to use your information for any purpose other than to provide services to us.

Sharing Your Information We do not sell or rent your personal information to third parties. However, under certain circumstances, we may share your information as follows:

a. Service Providers: We may share your information with trusted third-party service providers who assist us in operating our website, processing transactions, delivering marketing communications, and performing other services. These providers are contractually obligated to maintain the confidentiality and security of your data and to use it only for the purposes for which it was provided.

b. Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred as part of the transaction. In such cases, we will notify you of any change in ownership or control of your personal data and any choices you may have regarding its use.

c. Legal Requirements: We may disclose your information if required to do so by law, regulation, or legal process. This includes responding to subpoenas, court orders, or other legal requests from governmental authorities.

d. Protection of Rights: We may disclose information to protect the rights, property, or safety of 1win, our users, or the public. This includes sharing information with law enforcement or regulatory agencies to investigate or prevent illegal activities or fraud.

e. Aggregated Data: We may share aggregated or anonymized information that does not directly identify you with third parties for research, analysis, or reporting purposes. Such data is aggregated in a manner that prevents the identification of individual users.

Data Security We are committed to ensuring the security of your personal data and have implemented various measures to protect it from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

a. Encryption: We use industry-standard encryption protocols to secure the transmission of sensitive data between your device and our servers. This includes the use of SSL/TLS encryption for web-based communications.

b. Access Controls: Access to personal data is restricted to authorized employees, contractors, and agents who require the information to perform their job functions. We enforce strict internal policies and procedures to ensure that access to personal data is limited and monitored.

c. Secure Servers: Our website is hosted on secure servers with robust firewall protection and other security measures. We regularly update our hardware and software to mitigate the risks of security vulnerabilities.

d. Regular Audits and Assessments: We perform periodic security audits, vulnerability assessments, and penetration tests to evaluate the effectiveness of our security measures and to identify and address potential weaknesses.

e. Data Backup and Recovery: We implement regular data backup and recovery procedures to ensure that your information is not lost in the event of a technical failure, natural disaster, or other unexpected event. Our backup systems are maintained in secure facilities and are subject to strict access controls.

f. Employee Training: We provide regular training to our employees regarding data security, privacy best practices, and regulatory compliance. This ensures that everyone handling your data is aware of their responsibilities and the importance of safeguarding your information.

Data Retention We retain your personal information for as long as necessary to fulfill the purposes outlined in this Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. The retention period for your data depends on factors such as the nature of the data, how it is used, and any applicable legal or regulatory requirements. Once your information is no longer needed, we will securely delete or anonymize it in a manner that prevents its recovery or further use.
International Data Transfers 1win operates globally, and your personal data may be transferred to, stored, and processed in countries outside of your country of residence. These countries may have different data protection laws than those in your home country. By using our Services, you consent to the transfer of your data to countries that may not have equivalent data protection laws. We take appropriate measures, such as entering into data transfer agreements and using standard contractual clauses, to ensure that your data is adequately protected when transferred internationally.
Cookies and Tracking Technologies We use cookies, web beacons, and similar tracking technologies to collect information about your interactions with our website and Services. Cookies are small text files stored on your device that help us remember your preferences, analyze user behavior, and enhance your experience. We use cookies for several purposes, including:

a. Personalization: Cookies allow us to customize your experience by remembering your preferences and providing content that is tailored to your interests.

b. Analytics: We use cookies to collect data about website usage, such as the number of visitors, the pages visited, and the duration of visits. This information helps us identify trends and improve our Services.

c. Marketing: Cookies enable us to deliver targeted advertisements and promotional offers that are relevant to you. You may opt out of targeted advertising by adjusting your browser settings or using opt-out mechanisms provided by advertising networks.

d. Functionality: Some cookies are essential for the proper functioning of our website, allowing you to navigate our site and use its features securely and efficiently.

You can control or delete cookies through your browser settings, but please note that disabling cookies may affect the functionality and performance of our website.

Your Rights and Choices Depending on your jurisdiction, you may have certain rights regarding your personal data. These rights may include the right to access, correct, update, or delete your personal information; the right to restrict or object to certain types of processing; and the right to data portability. To exercise any of these rights, please contact us at the contact details provided below. We will respond to your request in accordance with applicable laws and regulations. If you believe that our processing of your data violates your rights, you may also have the right to lodge a complaint with a supervisory authority.
Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we update our Privacy Policy, we will post the revised version on our website and update the “Last Updated” date. We encourage you to review this Privacy Policy periodically so that you are aware of any changes. Your continued use of our Services after the posting of any updates constitutes your acceptance of the updated Privacy Policy.
Contact Us If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following details: Email: privacy@1win.com Postal Address: 100 Galle Face, Colombo 00100, Sri Lanka Telephone: +94-11-2345678
Legal Basis for Processing Your Data We process your personal data only when we have a valid legal basis to do so. The legal bases for our processing activities include: a. Consent: We may process your data if you have given your explicit consent for specific purposes. b. Contractual Necessity: Processing may be necessary for the performance of a contract with you, such as providing our Services. c. Legal Obligation: We may process your data to comply with legal requirements or regulatory obligations. d. Legitimate Interests: In certain cases, processing may be necessary for our legitimate interests, provided that such interests are not overridden by your rights and interests.
Data Protection Officer To ensure that we comply with data protection laws and best practices, we have appointed a Data Protection Officer (DPO). The DPO is responsible for overseeing our data protection strategy and ensuring that our practices align with regulatory requirements. If you have any questions about our data practices or wish to exercise your rights under this Privacy Policy, please contact our DPO at dpo@1win.com.
Data Breach Notification In the unlikely event of a data breach affecting your personal information, we will notify you and any relevant regulatory authorities in accordance with applicable laws. Our data breach response plan includes measures to identify, contain, and remediate any breaches as quickly as possible. We are committed to transparency and will provide you with timely and accurate information regarding any breach that may affect your data.
Third-Party Analytics and Advertising We work with third-party service providers for analytics and advertising purposes. These providers may use cookies and other tracking technologies to collect data about your online activities over time and across different websites. This information is used to measure the effectiveness of our marketing campaigns and to deliver targeted advertisements. These third-party providers are obligated to maintain the confidentiality and security of your data and to use it only for the purposes specified by us. You may opt out of third-party tracking by adjusting your browser settings or using opt-out tools provided by the respective third parties.
Children's Privacy Our Services are not intended for children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal data from a child under 18, we will take steps to delete such information as soon as possible. If you believe that we have collected information from a minor, please contact us immediately so that we can investigate and take appropriate action.
Data Minimization and Purpose Limitation We are committed to collecting only the data that is necessary for the specific purposes for which it is processed. We implement data minimization principles to ensure that we do not collect excessive or irrelevant information. Additionally, the data we collect is used only for the purposes explicitly stated in this Privacy Policy and in accordance with your consent or applicable legal requirements. Once the data is no longer needed, we securely delete or anonymize it to prevent further use.
Transparency and Accountability At 1win, we believe in maintaining transparency about our data practices. We keep detailed records of our processing activities and are accountable for complying with data protection laws and regulations. This Privacy Policy is one of the ways we ensure transparency and allow you to understand how your personal information is handled. We are committed to continuous improvement and regularly review our policies and procedures to ensure that they meet the highest standards of data protection.
Data Portability If you request, we will provide you with your personal data in a structured, commonly used, and machine-readable format, and we will transfer it to another organization if technically feasible, in accordance with applicable data protection laws. Data portability is an important right that enables you to manage your information and move it between services. To request data portability, please contact us using the details provided in section 11.
Consent Management We provide you with options to manage your consent for various types of data processing. You can update your preferences and withdraw consent for certain processing activities at any time. Consent management tools are available in your account settings, and you can also contact us directly if you wish to modify your consent. Please note that withdrawing consent may affect your ability to use certain features of our Services.
Retention of Data for Legal and Regulatory Purposes We may retain certain data for longer periods if required to do so by law, regulation, or contractual obligations. This includes retaining information necessary to comply with tax, accounting, and regulatory requirements, as well as for the prevention, investigation, and resolution of disputes. Data retained for these purposes will be stored securely and will only be used in accordance with applicable laws and this Privacy Policy.
Data Protection Impact Assessments We conduct Data Protection Impact Assessments (DPIAs) for processing activities that pose a high risk to the rights and freedoms of individuals. DPIAs help us identify potential risks and implement measures to mitigate them before launching new projects or processing activities. Our commitment to proactive risk management ensures that your data is handled responsibly at all times.
International Compliance and Cross-Border Data Transfers As a global platform, 1win processes data from users around the world. We ensure that all international data transfers are carried out in compliance with applicable data protection laws. When transferring data across borders, we use appropriate safeguards such as standard contractual clauses, binding corporate rules, or other legally recognized mechanisms to protect your data. Your use of our Services constitutes your consent to such cross-border transfers.
Data Anonymization and Aggregation To protect your privacy while still benefiting from valuable analytics, we sometimes anonymize or aggregate the data we collect. Anonymized data cannot be used to identify you as an individual and may be used for research, analysis, and the improvement of our Services. Aggregated data, which combines information from many users, is also used to generate insights and trends without revealing individual details.
Monitoring and Compliance Audits We regularly monitor our data processing activities and conduct internal and external audits to ensure compliance with this Privacy Policy and applicable laws. Our audits help us identify areas for improvement and ensure that our security measures and data handling practices remain robust and effective. We take corrective action when necessary to address any issues or deficiencies that are identified.
Data Protection Training and Awareness All employees, contractors, and partners who have access to personal data receive regular training on data protection principles, privacy policies, and security practices. Our training programs are designed to ensure that everyone involved in processing personal data is aware of their responsibilities and the importance of safeguarding your information. We continually update our training programs to reflect changes in laws, regulations, and industry best practices.
Handling Data Subject Requests If you have any requests regarding your personal data—such as access, correction, deletion, or restriction of processing—you can submit your request by contacting us at privacy@1win.com. We will verify your identity and respond to your request in accordance with applicable data protection laws. In cases where we are unable to fulfill your request, we will provide you with an explanation and information on how you can escalate your request.
Data Breach Response and Notification In the event of a data breach affecting your personal information, we have a comprehensive response plan in place. Our breach response procedures include immediate containment, investigation, and remediation of the breach. We will notify you and the relevant regulatory authorities promptly, providing details of the breach, the data affected, and the measures we are taking to address the issue. Our commitment to transparency and accountability means that we will keep you informed throughout the process.
Use of Social Media and Third-Party Platforms When you interact with us on social media or through third-party platforms, additional privacy considerations may apply. This Privacy Policy does not govern the practices of these external platforms. We encourage you to review the privacy policies of any social media or third-party platforms you use. Information you choose to share publicly on these platforms may be visible to others and may be collected by those platforms independently of our Services.
Emerging Technologies and Future Developments As technology evolves, so do our data processing practices. We continuously assess emerging technologies, such as artificial intelligence and blockchain, and their potential impact on your privacy. When implementing new technologies or features that involve data processing, we conduct thorough impact assessments and update our Privacy Policy accordingly. Our commitment to innovation goes hand in hand with our dedication to protecting your personal data.
Transparency Reports We periodically publish transparency reports that provide insight into how we process personal data, respond to government requests, and manage data protection incidents. These reports are designed to enhance trust and demonstrate our commitment to transparency. By reviewing our transparency reports, you can gain a better understanding of our data processing practices and our efforts to safeguard your information.
Data Protection and Privacy Culture At 1win, privacy is not just a regulatory requirement—it is a core value that shapes our culture and influences every aspect of our operations. We foster a culture of accountability, transparency, and respect for individual privacy. Our commitment to protecting your data is reflected in our policies, our practices, and the dedication of our team. We continually seek ways to improve our privacy measures and to ensure that your personal data is handled with the utmost care.
Cooperation with Regulatory Authorities We cooperate fully with data protection authorities and regulatory bodies in all jurisdictions where we operate. When requested, we provide the necessary documentation and evidence of our data processing practices and security measures. Our goal is to ensure that our operations are fully compliant with applicable data protection laws and that we maintain the highest standards of accountability and transparency.
Privacy by Design and Default We incorporate privacy by design and by default into all our systems, processes, and services. This means that data protection is considered at every stage of development and that the highest level of privacy is maintained as a default setting in our products and services. Our commitment to this principle ensures that your personal data is protected from the outset and that privacy is an integral part of our operational framework.
Continuous Improvement and Feedback We are committed to continuously improving our privacy practices and data security measures. Your feedback is invaluable in helping us identify areas for improvement. If you have any suggestions or concerns about our data protection practices, please do not hesitate to contact us at privacy@1win.com. We take every comment seriously and use your input to refine and enhance our policies and procedures.
Legal Basis for Data Processing Our processing of your personal data is based on several legal grounds, including your consent, the necessity to perform a contract with you, compliance with legal obligations, the protection of your vital interests, and our legitimate interests. We carefully evaluate the legal basis for each processing activity to ensure that we act in accordance with applicable data protection laws. If you have any questions about the legal basis for our data processing, please contact us for further clarification.
Your Consent and Control By using our Services, you consent to the collection and processing of your personal data as described in this Privacy Policy. You have control over your data and can exercise your rights by contacting us. You may withdraw your consent at any time, but please note that withdrawing consent may affect your ability to use certain features of our Services. We strive to provide you with clear and accessible mechanisms to manage your privacy preferences.
Data Protection in Mergers and Acquisitions In the event that 1win undergoes a merger, acquisition, or other corporate restructuring, your personal data may be transferred to the new entity as part of the transaction. In such cases, we will ensure that the new entity is bound by data protection obligations that are substantially similar to those in this Privacy Policy. We will notify you of any material changes in the way your data is handled as a result of such transactions.
Transparency in Data Processing Practices We are committed to being transparent about our data processing practices. This Policy provides you with detailed information on how we collect, use, and safeguard your personal data. We also make available additional information upon request, and we encourage you to reach out to us if you have any questions or require further clarification about any aspect of our privacy practices.
Final Provisions This Privacy Policy constitutes the entire agreement between you and 1win regarding your personal data and supersedes all prior or contemporaneous communications, agreements, or understandings relating to data protection and privacy. If any part of this Policy is found to be invalid or unenforceable by a court of law, the remaining provisions will continue in full force and effect. Our failure to enforce any right or provision of this Policy does not constitute a waiver of such right or provision.

By using our Services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. We are committed to protecting your privacy and ensuring that your personal data is processed securely, responsibly, and in accordance with applicable laws.

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@1win.com or call +94-11-2345678. You can also write to us at 100 Galle Face, Colombo 00100, Sri Lanka.