Privacy Policy

By consenting to this privacy policy, users agree that 1win may collect and process their personal data in accordance with the terms described herein.

The following categories of personal data may be collected:

• Full name, date of birth, and nationality;
• Email address, phone number, and residential address;
• Government-issued identity documents, such as a PAN card, Aadhaar card, or passport, submitted for identity verification;
• Financial details, including bank account information, UPI identifiers, and transaction records;
• Login credentials and account activity history;
• Device identifiers, IP addresses, browser type, and operating system data;
• Geolocation data collected at the point of access;
• Communication records, including support chat transcripts and email correspondence;
• Behavioural data related to navigation patterns and service usage on the platform.

All purposes for processing personal data are grounded in 1win’s legal obligations, contractual requirements, and legitimate commercial interests.

Personal data is processed for the following specific purposes:

• Creating and managing user accounts, including verification of eligibility and identity;
• Processing deposits, withdrawals, and all associated financial transactions;
• Complying with anti-money laundering (AML) regulations and Know Your Customer (KYC) requirements applicable under Indian law;
• Detecting, investigating, and preventing fraudulent activity, unauthorised access, and other security threats;
• Personalising the user experience based on individual preferences and usage patterns;
• Sending transactional communications, including account notifications, security alerts, and policy updates;
• Conducting internal analytics to improve platform performance, product offerings, and service quality;
• Responding to user inquiries, complaints, and support requests;
• Fulfilling reporting obligations to competent regulatory authorities;
• Enforcing the platform’s Terms and Conditions and other applicable policies.

1win does not sell or unlawfully transfer personal data to any third party under any circumstances.

User data may be disclosed to third parties only under the following specific and lawful conditions:

• Compliance with applicable Indian laws, regulations, or enforceable court orders;
• Fulfilment of obligations arising from valid requests by competent governmental or regulatory authorities;
• Provision of essential services by authorised third-party processors, including payment service providers, identity verification partners, and IT infrastructure suppliers, who operate under binding data processing agreements;
• Prevention or investigation of fraud, security breaches, or other unlawful activities in coordination with law enforcement agencies;
• Protection of the legal rights and interests of 1win in the context of legal proceedings;
• Transfer of data in connection with a corporate restructuring, merger, or acquisition, subject to equivalent data protection obligations being assumed by the receiving entity.

Before any disclosure occurs, 1win strictly verifies that all third parties meet the required data protection and security standards applicable under relevant law.

The 1win platform may contain links to third-party websites and external online resources. 1win exercises no control over the content, data collection practices, privacy policies, or security standards of those external sites. Users who choose to follow such links and interact with third-party platforms do so entirely at their own risk. 1win accepts no liability for any loss, damage, or misuse of personal information that may result from visiting or transacting with external websites, and users are encouraged to review the privacy documentation of any third-party resource before submitting personal details or financial information to it.

Users in India who have concerns regarding the handling of their personal data may raise a formal complaint directly with the 1win support team through the designated communication channels available on the platform, including live chat and the official support email address. Upon receipt of a complaint, the internal review process is initiated, and users can expect an acknowledgement within 72 hours and a substantive response within 30 calendar days. In cases where a complaint remains unresolved or the response provided is deemed unsatisfactory, users retain the full right to escalate the dispute to the relevant regulatory authority or data protection supervisor in India, including the Ministry of Electronics and Information Technology (MeitY) or any competent adjudicating authority designated under applicable Indian data protection legislation.