1win IN

Privacy Policy

This Privacy Policy (“Policy”) outlines how our online gaming platform collects, processes, stores, and protects personal information from users in India and other jurisdictions. We are committed to safeguarding your privacy and ensuring transparency in all data handling practices. This Policy applies to all users who access our services, create accounts, participate in gaming activities, or interact with our platform in any manner. By using our services, you acknowledge that you have read and understood the terms contained herein.

1. Information We Collect

Our platform collects various categories of personal and non-personal information to deliver optimal gaming experiences and comply with regulatory requirements in India and internationally. The types of information we gather include identification details provided during registration, such as your full name, date of birth, nationality, email address, and phone number. We also collect financial information necessary for transactions, including bank account details, payment card information, cryptocurrency wallet addresses, and transaction history.

Additionally, we gather device and usage information automatically through cookies, web beacons, and similar tracking technologies. This includes your IP address, browser type, operating system, device identifiers, pages visited, time spent on the platform, games played, and betting patterns. We may also request documentation for identity verification purposes, including government-issued identification, proof of address, and bank statements. Communications you send to our support team, including emails, chat messages, and complaint submissions, are also retained as part of our service records.

  1. Identity and contact information
  2. Financial and payment data
  3. Device and technical information
  4. Gaming activity and betting records
  5. Verification documents and compliance materials
  6. Customer service communications
  7. Geolocation data based on IP address
  8. Third-party information for fraud prevention

2. Purpose of Data Processing

We process your personal information for multiple legitimate purposes essential to operating our gaming platform and maintaining compliance with Indian regulations, including the Information Technology Act, 2000, and rules thereunder. Primary purposes include account creation and management, which requires verification of your identity and age to ensure you meet our minimum requirements. We also process data to facilitate financial transactions, including deposits, withdrawals, and settlement of gaming outcomes, ensuring secure and transparent fund management.

Our platform uses your information to provide personalized gaming experiences, improve our services, and recommend games and features tailored to your preferences. We process data for fraud prevention, money laundering detection, and responsible gambling compliance, which is critically important under Indian gaming regulations. Your information is also used for customer support, including responding to inquiries, resolving disputes, and handling complaints in accordance with our service terms.

Marketing and promotional communications are sent based on your consent preferences, allowing us to inform you about new games, special offers, and platform updates. We also use aggregated and anonymized data for analytics purposes, enabling us to understand user behavior patterns and optimize platform performance. Legal and regulatory compliance requires us to maintain records for audit purposes, respond to governmental requests, and cooperate with law enforcement authorities as required by Indian law.

  1. Account creation, verification, and management
  2. Financial transaction processing and settlement
  3. Fraud detection and prevention
  4. Anti-money laundering compliance verification
  5. Responsible gambling enforcement
  6. Customer support and dispute resolution
  7. Marketing communications and promotional offerings
  8. Platform analytics and service improvement
  9. Legal obligation fulfillment and regulatory reporting
  10. Risk assessment and creditworthiness evaluation

3. Data Sharing and Third-Party Disclosure

We do not sell or rent your personal information to unaffiliated third parties for their independent marketing purposes. However, we may share your data with trusted service providers who assist in delivering our services under strict confidentiality agreements. These include payment processors and financial institutions that handle deposits and withdrawals, hosting providers who maintain our technical infrastructure, and cybersecurity firms that protect against fraudulent activities.

Regulatory compliance requires us to share certain information with government authorities, financial regulators, and law enforcement agencies in India when legally required or when we have reasonable grounds to believe such disclosure is necessary to prevent illegal activities. We may also share aggregated, anonymized data with business partners and analytics providers for improving our services, and this data cannot identify individual users.

In the event of merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, and we will provide notice of any material changes to this Policy. We implement Data Processing Agreements with all third parties to ensure they maintain equivalent privacy protections and comply with applicable data protection laws.

4. Data Security and Protection Measures

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our platform employs industry-standard encryption protocols, including TLS/SSL encryption for data transmission between your device and our servers, ensuring that sensitive information remains confidential during transit. All stored personal data is encrypted using advanced cryptographic algorithms at rest within our secure databases.

Our infrastructure includes multiple layers of firewalls, intrusion detection systems, and regular security audits performed by independent cybersecurity professionals. We maintain restricted access controls, ensuring that only authorized personnel can access personal information on a need-to-know basis. All employees and contractors who handle personal data are required to sign confidentiality agreements and undergo regular data protection training.

We implement regular security updates, patch management protocols, and vulnerability assessments to identify and remediate potential weaknesses. Our backup systems are maintained in secure, geographically distributed locations to ensure business continuity and data recovery capabilities. Despite these measures, no online platform is completely immune to security risks, and we cannot guarantee absolute security of your information.

  1. End-to-end encryption for data transmission
  2. Advanced encryption standards for data storage
  3. Multi-layer firewall protection
  4. Intrusion detection and prevention systems
  5. Regular security audits and penetration testing
  6. Access controls and authentication protocols
  7. Employee confidentiality agreements
  8. Regular security training and awareness programs
  9. Incident response procedures
  10. Secure backup and disaster recovery systems

5. User Rights and Data Access

In compliance with Indian data protection principles and international privacy standards, you have certain rights regarding your personal information. You have the right to access your personal data held by us and obtain confirmation regarding whether we process your information. We will provide you with a copy of your data in a structured, commonly-used format within thirty days of your request, free of charge unless the request is manifestly unfounded or excessive.

You have the right to rectification, allowing you to request correction of inaccurate or incomplete personal information. We encourage you to maintain accurate information in your account profile, and we will promptly update records upon verification of corrections. You have the right to request deletion of your personal data, although we may retain certain information for legal compliance, fraud prevention, or legitimate business purposes as permitted by law.

You have the right to restrict processing of your data in certain circumstances, particularly where you contest the accuracy of information or when processing is no longer necessary for our original purposes. You may object to direct marketing communications at any time by using the unsubscribe function in our emails or adjusting your notification preferences in your account settings. You also have the right to data portability, requesting that we provide your information in a portable format for transfer to another service provider.

To exercise any of these rights, you must submit a written request to our privacy team with sufficient detail to identify you and specify which right you wish to exercise. We will respond to all requests within the timeframe specified by applicable law, typically within thirty to sixty days. If you are unsatisfied with our response or believe we have violated your privacy rights, you may lodge a complaint with the relevant regulatory authority in India.

6. Policy Updates and Contact Information

This Privacy Policy may be updated periodically to reflect changes in our data practices, technological advancements, or modifications to applicable laws and regulations in India and other jurisdictions. When we make material changes to this Policy, we will notify affected users through email or prominent notice on our platform. Your continued use of our services following notification of changes constitutes acceptance of the updated Policy.

Last updated: January 22, 2026

If you have questions, concerns, or requests regarding this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact our Privacy Officer through the following channels. You may submit inquiries via email to our dedicated privacy email address, through the contact form on our website, or by mailing a written request to our registered office address in India. We are committed to addressing all privacy-related inquiries and complaints within ten business days of receipt, and we maintain a formal complaint resolution process for users who believe their privacy rights have been violated.

Our platform operates under compliance with Indian gaming and data protection regulations, and we maintain partnership with recognized gaming authorities and regulatory bodies. We are dedicated to maintaining the highest standards of privacy protection and transparency in all our operations serving users within India and internationally.