- Introduction
This Privacy Policy applies to all Websites owned and operated by the Company and all services provided by the Company, including online and mobile services and products. Throughout this Policy they will be referred to as “Websites” and “Services”.
The term “Personal Data” means personally identifiable information such as your name, email address, address, telephone number, payment profile details, payment information, support requests, betting history, chat comments, etc. In the event that your identity cannot be established this Policy does not apply. For example, Personal Information is aggregated and anonymized.
This Policy is subject to change from time to time. In the event of significant changes, we will notify you by posting a notice on the Website or sending an email.
- What data we collect and how
When you visit our Website or use our Services, we collect and process your Personal Data. The ways in which we collect data can be categorized as follows:
Information you provide to us directly
When you visit our Website or use any part of it and/or our Services, we may ask you to provide us with Personal Data. For example, we ask you to provide contact information or certain documents in the course of registration, verification and anti-money laundering or anti-fraud screening procedures, or when you contact us with questions or support requests.
Information is collected automatically
We automatically collect certain information about you when you visit our Website, such as your IP address, operating system, device type and settings, browser type and settings, trouble reports, system activity, and the date, time and URL of the page from which you accessed our Website. This information is useful to us because it helps us better understand how you use our Website and Services to help us provide the best level of service. For example, using information from your browser, we can determine what language you speak.
Some of this information is collected using cookies, similar tracking technologies and third party tools such as Google Analytics.
We also collect data about transactions you have made with us and your account activity.
Information received from third parties
Sometimes we may collect your Personal Information from other sources, such as publicly available materials or trusted third parties, such as our payment service providers. We use this information to refine your Personal Information to better inform, personalize and improve our Services, and to verify the Personal Information you provide.
- Legal Basis for Processing Personal Data
When we collect Personal Data, we will only process it if there are legal grounds for such processing as set out in the relevant data protection laws. Such legal grounds are:
Performance of a contract
We may process your Personal Data if it is necessary for the performance of a contract. For example, when you register on the Websites, you enter into an agreement with us or when we take actions relevant to the contract, in particular to conduct transactions on the Websites.
Legal obligation
Various laws and regulations impose certain obligations on us. We need to process your Personal Data to comply with these obligations, for example, to comply with anti-money laundering legislation, responsible gambling requirements and the terms of our gambling license.
Legitimate interests
Your Personal Data may be processed if we, other companies in our group of companies or third parties have a business or commercial reason to process your Personal Data.
Your consent
In certain limited circumstances, we process your Personal Data on the basis of your consent, for example where it is necessary for direct marketing purposes.
- How we use Personal Data
To operate our Websites, to ensure the proper functioning of our Websites and Services and to provide the Services you have ordered (Contract Performance, Legitimate Interests).
To verify whether you can use certain Services, including verifying your age, geographical location, identity or self-exclusion status, and to establish and operate your account (Performance of Contract, Legitimate Interests).
To comply with legal obligations, responsibilities and duties, to comply with laws and requirements relevant to us and the terms of our gambling license, and to prevent illegal activities, including money laundering and match-fixing (Legal Obligation).
For customer support, including assistance in resolving technical and payment problems or other issues relating to the Websites or Services (Contract Performance).
To enhance our Websites and Services, test and develop new features and perform technical analysis of our Websites and Services to optimize your interaction with our Websites and provide you with better tools (Legitimate Interests).
To prevent, detect and report crime, to protect you, other users and us, for example, to ensure network and information security, to mitigate risks, to detect and prevent any fraudulent or malicious activity, and to ensure fair use of our Websites and Services and compliance with the Agreement (Legal Obligation, Legitimate Interests, Performance of Contract).
To analyze and summarize data, to produce statistics, in particular to create aggregated and anonymized analytics and reports for internal use, public distribution or for third parties (Legitimate Interests).
To conduct, manage and validate financial transactions (Performance of Contract, Legitimate Interests).
To analyze your risk of fraud and validate your data with a third party, including financial institutions, identity verification agencies and credit information bureaus (Legal Obligation, Performance of Contract, Legitimate Interests).
To assess your gaming activities to ensure responsible gaming (Legal Obligation, Legitimate Interests, Fulfillment of Contract).
To monitor your gaming activity and manage our risks and chances (Legal Obligation, Legitimate Interests, Fulfillment of Contract).
To enforce our rights under the Agreement or other agreements with you (Performance of Contract).
To disclose information to our Group companies following a restructuring or for internal administrative purposes (Legitimate Interests).
To manage our relationship and communication with you. This may include operational communications such as notifying you of changes to our Websites or Services, information about new features, bonuses and promotions, security updates or assistance on how to use our Websites and Services, marketing communications and providing you with information you have requested or information we are obliged to tell you (Performance of Contract, Legitimate Interests, your consent).
- How we may transfer your Personal Data
We may need to share your Personal Data with a third party. We may disclose your Personal Data to:
To other companies within our group of companies:
To third party service providers and partners who assist us in providing the Websites and Services you have requested, such as those who provide access to or operation of the Websites or Services or who promote our Websites and Services
To regulatory, law enforcement, governmental authorities, courts, fraud prevention agencies, licensing authorities, cyber sports self-governing bodies or other third parties as we believe is necessary to comply with relevant laws and requirements or to exercise, establish and protect our legal rights (we will notify you of such disclosures where possible and appropriate);
To partners or other persons who have introduced you to us;
To other persons, subject to your consent.
- International transfer of data
When information is processed and transferred, it may be transferred and processed in countries other than the country in which you reside. The laws of these countries may be different from those you are familiar with. When we process Personal Data in another country, we take precautions to protect your Personal Data.
For individuals in the European Economic Area (EEA), this means that your data may be transferred outside the EEA. Where your data is transferred outside the EEA, it is transferred to countries where we have appropriate transfer mechanisms in place to protect your Personal Data, in particular the application of the European Commission’s Standard Contractual Clauses to contracts with the organizations to which the information is transferred.
- Security
We are committed to protecting your Personal Data and taking appropriate technical and organizational measures, including:
Data Encryption. To protect your Personal and Financial Data, we encrypt all data exchanged with you using the industry standard TLS (Transport Layer Security) (Transport Layer Security Protocol). Your data is also stored on our servers and transmitted for backup and replication purposes between data centers in encrypted form.
Access Restriction. Only our employees, contractors and agents who need to process this information have access to Personal Data.
Network Security. Access to our network space, both externally and internally, is protected by a multi-layered security system that includes firewalls, intrusion protection systems and network segmentation. Our security systems are configured, managed and maintained according to best practices. We partner with leading security vendors, utilizing their expertise and the threat intelligence they collect, to protect our systems.
Secure Data Centers. Our servers are located in industrial-grade hosting facilities that utilize robust security systems to prevent physical access to protected servers. These security systems include 24-hour continuous monitoring and surveillance, on-site security personnel and regularly scheduled security audits. We use geographically isolated copies of data to minimize the risk of data loss or disruption.
Security Monitoring. Our security team continuously monitors security, event logs, notifications and alerts from all systems to identify and address threats.
- Data Storage
Some of the data you can delete at any time, some of the data is deleted automatically, and some of the data we retain for an extended period of time if necessary. When data is erased, we ensure that your data is securely and completely deleted from our servers or stored exclusively in anonymized form. The information is stored until you delete it.
We offer a number of services that allow you to correct or delete data associated with or stored in your account. For example, you can:
Change information about yourself.
Delete a chat replica.
Delete the account completely.
In accordance with regulatory requirements and legal obligations and to avoid any claims against us, we will retain your account data until it is closed and thereafter for five years after your account is closed (where applicable) or after your last contact with us.
Information is retained for extended periods of time for limited purposes. In some cases, business and legal requirements may require us to retain certain information for specific purposes for extended periods of time. For example, if an individual has self-excluded from our Services, we will retain their Personal Information for longer, as required by responsible gaming.
Reasons why we may keep some data for longer include:
Protecting you, others and us from fraud, abuse, criminal activity and unauthorized access, such as when we suspect someone of committing fraud, engaging in match-fixing or money laundering.
Complying with tax laws, anti-money laundering measures and other financial requirements, performing bookkeeping or facilitating the resolution of disputes, for example when you are involved in financial transactions, including receiving your deposit and disbursing your money.
Complying with an applicable law, regulation, legal process or executive governmental request or the need to enforce agreements, including investigating potential violations.
Providing continuity of our Services to you and other users.
In the event that you contact us directly, such as through a support channel or by submitting feedback or error reports.
We are committed to protecting the confidentiality of your personal data, collecting, using and/or storing it in accordance with applicable data protection laws and requirements and, in particular, the provisions of (country) data protection laws and other applicable International Data Protection Regulations such as EU Regulation 2016/679 General Data Protection Regulation (GDPR) (“Data Protection Laws”).
- Your Rights
You have certain rights in relation to your Personal Data:
To know what Personal Data we hold about you.
To correct or ask us to correct inaccurate Personal Data about you.
To access your Personal Data and request a copy of it in machine-readable form. For example, if you wish to have a backup copy of it.
Object to the processing of your Personal Data, where we are guided by our legitimate interests. Please note that we may continue to process your Personal Data where there are other relevant legitimate grounds or where there are compelling reasons to continue processing the data for our legitimate interests over which your rights, interests and freedoms do not override.
Ask us to erase your Personal Data, including deleting your account, only if (1) we no longer have a need to process it, (2) you have withdrawn your consent to processing and your consent was the legal basis for processing your data, (3) you have exercised your right to object and there are no overriding legitimate grounds for continuing to process the data, (4) your Personal Data has been processed unlawfully, (5) or the erasure of your Personal Data is required to comply with a legal obligation. Please note that we will not erase and will continue to retain data, in particular if the retention of Personal Data is required to fulfill our legitimate interests that override your request, to comply with a legal obligation, or if it is necessary for the formation, exercise or defense of legal claims.
To ask us to restrict the processing of Personal Data in certain circumstances.
Withdraw consent previously given if your consent was necessary for the processing of Personal Data. Please note that we may continue to process your Personal Data if we have other relevant legal grounds to do so.
Object to direct marketing and customer personality profiling (insofar as it relates solely to direct marketing). In relation to marketing messages, you can ask us to stop sending you at any time – simply follow the instructions in the marketing message or send a request to support@1win.social.
Complain to your local data protection authority.
Please note that not all of the above rights are absolute.
You can exercise your rights at any time by changing your account settings or by sending an email to support@1win.social.
You will be required to confirm your identity in order to perform the actions you have requested.
If you are dissatisfied with the way we process your Personal Data, please notify support@1win.social. We will consider your complaint and endeavor to respond to you within a reasonable time.
- Use of Google Analytics
Use of Google Analytics
We use Google Analytics to collect information about your use of this Website. Google Analytics collects the following information: your visit to the Website, what pages you view when you do so, and what other sites you use before coming to our Website. Google Analytics only collects the IP address assigned to you on the day you visited the Website, not your name or other identifying information. We do not combine the information collected through Google Analytics with your Personal Information. Although Google Analytics places a persistent cookie on your web browser to identify you as a unique user the next time you visit this Website, this cookie cannot be used by anyone other than Google. Google’s ability to use and share information about your visits to the Website collected by the Google Analytics tool is limited by the Google Analytics Terms of Use and Google’s Privacy Policy. You can prevent Google Analytics from recognizing you when you revisit the Website by disabling cookies on your browser.
If you wish, you can disable cookies in your browser settings. For more information about Google Analytics, please visit http://www.google.com/analytics/ . To learn more about how Google uses cookies, please visit https://policies.google.com/technologies/cookies .
- SSL encryption
All critical correspondence between the user and the Website is encrypted over Secure Socket Layer (SSL) using a 256-bit key.