One Win Privacy Policy — How We Protect Your Data

1 Introduction

One Win ("we", "us", "the Platform") is committed to protecting the personal information of our players. This Privacy Policy describes how we collect, use, store and share data when you visit onewin.bar, use the One Win app or interact with any of our services — including sports betting on cricket and PSL, live casino, slot games, fish games and VIP programme features.

We recognise that Pakistani players share personal and financial details with us when they register, deposit and withdraw using methods like JazzCash, Easypaisa, Raast and bank transfer. That information is handled with care, stored securely and used only for the purposes described in this policy.

If you have questions about this policy or how your data is handled, please contact our support team through live chat. We are available around the clock and happy to explain anything that is not clear.

2 Data We Collect

The information we collect falls into three broad categories: information you give us directly, information collected automatically when you use the platform, and information received from third parties involved in payment processing and identity verification.

Information you provide directly:

• Full legal name and date of birth (required for account registration and age verification).
• Pakistani mobile number and email address.
• Username and encrypted password.
• Payment account details — JazzCash or Easypaisa mobile numbers, bank account details for Raast or bank transfer. We do not store full card numbers.
• Identity verification documents — such as a CNIC or passport scan — when requested as part of our verification process.
• Communications you send us via live chat or email support.

Information collected automatically:

• Device information — device type, operating system, browser type and version.
• IP address and approximate location data derived from it.
• Session data — pages visited, time spent on each section, features used and bets or games accessed.
• App usage data when you use the One Win mobile app.
• Cookie data as described in Section 6.

Information from third parties:

• Identity and age verification results from our KYC (Know Your Customer) service providers.
• Fraud screening signals from our payment processing partners.
• Technical signals related to device integrity and connection type.

Summary of data types collected:

3 How We Use Your Data

Every piece of data collected by One Win is used for a specific purpose. We do not use data in ways that are not listed here, and we do not hold data beyond what is needed for these purposes.

• Account management: Creating and maintaining your player account, verifying your identity and age, and processing your registration details.
• Payment processing: Handling PKR deposits and withdrawals via JazzCash, Easypaisa, Raast and bank transfer, and maintaining records of all transactions on your account.
• Platform operation: Enabling you to place bets on cricket, PSL, T20 matches, football and esports, play slot games, fish games and live casino, and access all other platform features.
• Security and fraud prevention: Detecting and preventing unauthorised access, bonus abuse, money laundering and other prohibited activity.
• Customer support: Responding to your queries, resolving disputes and processing complaints through our live chat and email support channels.
• Communications: Sending transaction confirmations, security alerts, and — where you have opted in — promotional messages about bonuses, VIP rewards and platform updates.
• Platform improvement: Analysing usage patterns to improve the design, performance and features of onewin.bar and the One Win app.
• Responsible gaming: Monitoring activity to identify patterns that may indicate a player needs support, and enforcing self-exclusion or deposit limit requests.

4 Legal Basis for Processing

We process your personal data on the following legal grounds depending on the purpose:

• Contractual necessity: Processing your registration, verifying your identity, handling deposits and withdrawals, and settling bets are all necessary to perform the contract between you and One Win.
• Legitimate interests: Fraud prevention, security monitoring, platform analytics and improving our services represent legitimate business interests that do not override your rights.
• Consent: Sending marketing messages and promotional communications about bonuses, VIP offers and PSL promotions is done on the basis of your consent, which you can withdraw at any time.
• Legal obligation: Retaining transaction records, identity verification documents and other data may be required to comply with applicable anti-money laundering and financial record-keeping obligations.

5 Data Sharing

One Win does not sell your personal data. We share it only in the limited circumstances described below, and only with parties who are contractually obligated to keep it secure and to use it only for the specific purpose for which it was shared.

• Payment processors: JazzCash, Easypaisa, Raast and our bank transfer partners receive the financial information necessary to process your PKR deposits and withdrawals. These partners operate under their own privacy policies and security standards.
• Identity verification providers: Our KYC partners receive identity documents and personal details required to verify your age and identity before your first withdrawal is processed.
• Fraud prevention services: Technical and transactional data is shared with fraud screening partners to detect and prevent financial crime and bonus abuse.
• Game software providers: Game providers whose titles are available on One Win may receive pseudonymised session data necessary to deliver and maintain their games on our platform.
• Legal and regulatory authorities: We may disclose data when required to do so by a valid legal order or to protect the rights and safety of One Win, our players or others.

6 Cookies and Tracking

One Win uses cookies and similar technologies on onewin.bar and in the One Win app. Cookies are small text files stored on your device that help the platform function correctly and allow us to understand how it is being used.

We use the following types of cookies:

• Essential cookies: Required for core platform functions — keeping you logged in during a session, remembering your language preference and maintaining the security of your account. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Help us understand which pages and features are most used, how long players spend on different sections of the platform, and where technical issues occur. This data is aggregated and anonymised.
• Preference cookies: Remember your settings such as odds format, notification preferences and display options so you do not have to reset them each visit.

One Win does not use third-party advertising or tracking cookies. We do not allow external ad networks to place cookies on our platform.

You can manage cookie settings through your browser. Note that disabling essential cookies will affect your ability to use certain features of the platform. For the One Win app, cookie and tracking preferences can be managed in your device's app settings.

7 Data Retention

We keep your personal data for as long as your account is active and for a period after closure as required by our operational and legal obligations. Specific retention periods by data type are as follows:

• Account and identity data: Retained for the lifetime of your account and for a minimum period after closure to meet record-keeping obligations related to financial transactions.
• Transaction records: All PKR deposit and withdrawal records are retained for a minimum of five years from the date of the transaction.
• Support communications: Live chat transcripts and email exchanges are retained for up to two years to support dispute resolution.
• Usage and analytics data: Anonymised and aggregated after 12 months and retained indefinitely in that form for platform improvement purposes.
• Marketing consent records: Retained for as long as needed to demonstrate the basis on which communications were sent, even after marketing preferences are withdrawn.

When the retention period expires and there is no longer a legal or operational reason to hold your data, it is securely deleted or anonymised.

8 Your Rights

As a player on One Win, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or email. We will respond within a reasonable timeframe and may need to verify your identity before processing your request.

• Right of access: You can request a copy of the personal data we hold about you, including what categories of data we have, why we hold it and who it has been shared with.
• Right to rectification: If any data we hold is inaccurate or incomplete, you can ask us to correct or update it.
• Right to erasure: In certain circumstances you can ask us to delete your personal data. This right is not absolute — we may need to retain some data to meet legal obligations even after account closure.
• Right to restrict processing: You can ask us to pause processing of your data while a complaint or correction request is being resolved.
• Right to withdraw consent: Where processing is based on your consent — such as marketing messages — you can withdraw that consent at any time through your account settings or by contacting support. Withdrawal does not affect any processing that took place before the withdrawal.
• Right to object: You can object to processing carried out on the basis of legitimate interests, including profiling for platform personalisation.

9 Security Measures

One Win takes the security of your personal and financial data seriously. We have implemented a range of technical and organisational measures to protect the information we hold from unauthorised access, accidental loss, alteration or disclosure.

• Encryption: All data transmitted between your device and our servers is encrypted using TLS. Sensitive data stored on our systems is encrypted at rest.
• Access controls: Access to personal data is restricted to authorised One Win staff who need it to perform their specific role. Access logs are maintained and reviewed regularly.
• Payment security: We do not store full payment card numbers or full JazzCash and Easypaisa account credentials on our own servers. Payment processing is handled by PCI-DSS compliant partners.
• Fraud monitoring: Automated systems monitor account and transaction activity in real time to detect and flag suspicious behaviour.
• Security testing: Our platform and infrastructure undergo regular security assessments to identify and address vulnerabilities.

While we take every reasonable precaution, no online platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password and do not share your login details with anyone. If you notice anything unusual on your account, contact our support team immediately.

10 Children's Privacy

One Win is an adult platform intended exclusively for players aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we discover that an account has been created by or on behalf of a minor, the account will be closed immediately and any funds will be returned to the original payment method used.

If you are a parent or guardian and believe a minor in your household has registered on One Win, please contact our support team without delay. We will investigate and take appropriate action promptly.

We also recommend using device-level parental controls to prevent minors from accessing gambling platforms, including onewin.bar and the One Win app. Visit our Responsible Gaming page for more guidance on keeping gaming safe and age-appropriate in your household.

11 Updates to This Policy

One Win may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer or applicable obligations. When we make material changes, registered players will be notified by email or through a prominent notice on the platform before the changes take effect.

The "Last Updated" date shown at the top of this page reflects when the policy was most recently revised. We encourage you to review this page periodically — particularly at the start of a new PSL season or after a major platform update — to stay informed about how your data is being handled.

Continued use of One Win after a policy update has been published constitutes your acceptance of the revised terms. If you disagree with any update, you should stop using the platform and contact support to close your account.

12 Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your information has been handled, please get in touch with the One Win support team. We take privacy concerns seriously and aim to respond to all enquiries promptly.

• Live Chat: Available 24/7 through onewin.bar and the One Win app — the quickest way to reach us.
• Email: [email protected] (for reference — live chat is recommended for the fastest response).

When raising a data-related request, please include your registered username and a clear description of your request. For erasure or access requests, we may ask you to verify your identity before we can proceed. We aim to acknowledge all data rights requests within a few business days and to resolve them as quickly as possible.