1win Privacy Policy

Personal data collected may include:

• Account details: name, date of birth, email, mobile number, address, and nationality.
• Identity and verification records: national ID or passport, proof of address, and verification images.
• Transaction information: deposits, withdrawals, payment method identifiers, and audit logs.
• Technical data: IP address, device and browser information, operating system, language, and time zone.
• Usage data: login times, pages visited, game and bet history, preferences, and interaction logs.
• Communications: support chats, emails, call recordings, and complaint records.

Purposes for collection include providing services, managing accounts, processing payments, age and identity checks, fraud prevention, responsible gambling tools, analytics, customer support, and legal compliance.

Protection measures include TLS encryption in transit, strong access controls, least privilege, multi-factor authentication for staff, activity logging, vendor due diligence and contracts, data minimisation, and retention schedules. Incident response and breach notification will be applied as required by law.

Users have the right to access, correct, delete, restrict processing, object to direct marketing, withdraw consent where relied upon, and receive a copy of their personal information in a portable format. Users may lodge a complaint with the Office of the Data Protection Commissioner in Zambia.

The operator acts in accordance with the Data Protection Act No. 3 of 2021, the Cyber Security and Cyber Crimes Act, and other applicable Zambian regulations, while aligning to recognised international principles on privacy.

Personal information is used for the following purposes:

• Account creation, management, and provision of online services.
• Identity verification, age checks, and ongoing due diligence.
• Processing payments, withdrawals, refunds, chargebacks, and accounting.
• Fraud detection, risk management, anti-money laundering checks, and sanctions screening.
• Improving services, quality assurance, training, troubleshooting, and support.
• Analytics and statistics to improve websites performance and user experience.
• Personalisation of content and settings based on user preferences.
• Marketing communications where consent is given, with the option to opt out at any time.
• Fulfilling legal obligations, regulatory reporting, and responding to lawful requests.

Processing is lawful, fair, and transparent. Personal information is not sold.

Users can request access to their data, seek corrections of inaccurate details, or request deletion. Requests should be made through the contact channels published on the websites or account settings where available. The operator may ask for identity verification before acting on a request. If deletion is not possible due to legal obligations, only the minimal information required will be retained.

Correction procedures include updating account details and providing supporting documents where necessary. Deletion requests are actioned once regulatory retention duties are met.

By using 1win, users consent to security checks, including identity and age verification, anti-money laundering screening, and processing of payment information by banks, card schemes, mobile money operators, and payment processors to complete transactions and prevent fraud.

The services are intended for persons aged 18 and above. The operator cannot confirm age without reliable documents. If an account is found to belong to a minor, access will be blocked and personal information will be deleted, except where retention is required by law. A parent or legal guardian may request deletion by contacting the support channels shown on the websites and providing proof of authority.

Personal information may be processed outside Zambia where 1win partners or service providers operate. Using the site constitutes consent to such transfers, subject to appropriate safeguards. Contractual protections and confidentiality commitments are applied, and access is limited to authorised parties for defined purposes.

Where required, standard contractual clauses or equivalent safeguards are implemented to protect information during transfer and processing.

This policy forms part of the broader terms that govern the services. A legal disclaimer may clarify or limit the scope or effects of certain rules. The disclaimer applies once the user accepts the policy by signing where applicable, by acceptance during registration, or by accession through continued use of the services.

Nothing in this policy limits rights that cannot be limited under Zambian law.

Cookies are small text files stored on a device when visiting websites. They are used for statistics, behaviour analysis, personalisation, and to improve site performance.

• Types: strictly necessary, preferences, analytics, and advertising cookies.
• Retention: non-essential cookies are retained for up to 1 year. Some essential cookies may operate per session or up to 1 year.
• Control: users can manage cookie settings in their browser and, where available, through on-site controls. Non-essential cookies are used based on consent.

Using 1win signifies full acceptance of this Privacy Policy and the processing of personal information described in it. If the policy is updated, the current version published on the websites prevails from the date of publication.

Material changes may be notified through the site or by other reasonable means.

Personal information may be shared with third parties when required by law, to comply with regulatory duties, to resolve disputes, to enforce agreements, or to provide services such as payments, identity checks, hosting, analytics, customer support, and communications. Service providers and categories of recipients are listed on the websites where applicable. Where not listed, notice of purpose and scope will be provided where feasible.

Providing information for a feature or service may constitute consent to share data for that specific purpose. Third parties maintain their own privacy policies and are responsible for their processing activities.

The websites may contain links to external sites or apps that operate under their own privacy policies. The operator is not responsible for how those sites collect, use, or disclose information. Users should review the privacy statements of any external site visited and proceed with caution.