Overview of This Privacy Policy

Personal data collected may include:

• Identity details: full name, date of birth, national ID information, KYC documents, and age verification records.
• Contact details: mobile number, email address, and residential address.
• Account information: username, preferences, responsible gaming settings, and communication history.
• Transaction and betting records: deposits, withdrawals, payment references, bonuses, and wagering history.
• Technical data: device identifiers, IP address, browser type, operating system, and online log data (including cookies).
• Location and usage data: approximate location, session times, and interactions on the websites and apps.

Why this data is collected:

• To open and operate the account and provide services.
• To verify identity and age, meet anti-money laundering obligations, and prevent fraud.
• To process payments and support mobile money and card transactions.
• To deliver customer support and improve the user experience.
• To meet legal, regulatory, and reporting duties in Ghana.

Protection measures in place:

• Transport Layer Security (TLS) for data in transit and strong encryption at rest.
• Strict access controls, role-based permissions, and staff confidentiality obligations.
• Security monitoring, logging, vulnerability management, and incident response procedures.
• Data minimisation, purpose limitation, and retention schedules with secure destruction.
• Vendor due diligence and contractual safeguards for any service providers.

User rights under Ghana law (Data Protection Act, 2012 (Act 843)):

• Access: request a copy of personal data and information about processing.
• Correction: request updates to inaccurate or incomplete records.
• Deletion: request erasure where allowed by law and subject to retention duties.
• Objection and restriction: object to direct marketing and ask to limit certain uses.
• Portability and consent withdrawal: obtain a copy in a usable format and withdraw consent where processing relies on consent.

Compliance statement:

• Processing follows the laws of Ghana, including the Data Protection Act, and relevant guidance from the Data Protection Commission. International best practice standards, such as principles similar to GDPR, are applied where appropriate.

Personal data is processed for lawful purposes, in a fair and transparent manner:

• Account setup and service delivery: create the account, authenticate logins, and provide online services (contract necessity).
• Payments and withdrawals: process mobile money and card transactions, verify ownership, and manage refunds (contract necessity and legal obligation).
• Identity, age, and security checks: KYC screening, sanctions watchlists, fraud prevention, and responsible gaming controls (legal obligation and legitimate interests).
• Customer support: handle queries, disputes, and service requests (contract necessity and legitimate interests).
• Personalisation: remember preferences and improve the user experience (consent where required, legitimate interests otherwise).
• Analytics and service improvement: measure performance, test features, and maintain service quality (legitimate interests and consent for certain cookies).
• Marketing communications: send offers or updates only where the user has provided consent or as permitted by law; users can opt out at any time.
• Legal compliance and reporting: meet duties under Ghana’s regulatory framework, including gaming and anti-money laundering rules.

Processing activities are documented and limited to the purposes stated above. Any new purpose that is incompatible will be communicated before further use of data.

Users can manage their information in the following ways:

• Access: request a copy of personal information and a description of processing. Identity verification may be required to protect the account.
• Update: edit profile details in account settings or submit a correction request through support.
• Delete: request erasure of personal data. Some records must be kept to meet legal duties, for example anti-money laundering retention requirements.
• Preferences: change marketing choices, cookie settings, and responsible gaming options at any time.

Procedure and timelines:

• Submit requests through the account or support channels. A response will be provided within the time limits required by Ghanaian law.
• Additional information may be requested to confirm identity and to locate the relevant records.

Security and payment processing consent:

• By using 1win, the user consents to security checks, KYC verification, and screening in line with Ghana law.
• The user also consents to processing of payment data by licensed providers, such as mobile money operators and card processors, to complete transactions and prevent fraud.

Complaints:

• Users may lodge a complaint with the Data Protection Commission (Ghana) if they believe their data rights have been infringed.

The services are intended for adults aged 18 years and above, as required by the laws and regulations of Ghana. The operator cannot confirm age without identity documents and may request verification at any time. If a minor’s information is discovered, the account will be closed and personal data will be deleted where the law allows and after necessary retention. A parent or legal guardian can contact support to request deletion for a minor; verification of the requester’s authority will be required.

Personal data may be stored or processed in other countries where service partners, payment providers, or cloud platforms operate. By using 1win, the user consents to these international transfers as needed to deliver the services. Safeguards are applied, including contractual protections and confidentiality commitments, to protect the information in any location. Partners are required to handle data securely and only for agreed purposes.

This privacy document explains how personal data is handled and may include a disclaimer that limits or clarifies its scope as permitted by law. The disclaimer applies once the user accepts the policy by signature, online acceptance, or accession. If a local law requires a different approach to processing, that requirement will apply to the extent of the conflict. The latest policy text governs the handling of data for all users in Ghana.

Cookies are small files saved on a device by websites or apps to remember the user and understand how services are used. They are used for statistics, behaviour analysis, personalisation, and site improvement. Cookie data is generally retained for up to 1 year, unless a shorter period is needed for session management or security. Users can manage cookies in their browser or device settings; blocking some cookies may limit certain functions.

Using 1win and related online services means full acceptance of this Privacy Policy and any updates published here. The current version of the policy prevails over previous versions. Continued use after changes indicates agreement to the revised document. Users who do not agree should stop using the services and manage their data rights as described above.

Personal data may be shared when required by law, for dispute resolution, or under agreements needed to deliver services. Typical recipients include identity verification providers, payment processors, cloud hosting, analytics, marketing service providers (where consent applies), fraud prevention partners, auditors, regulators, law enforcement, and legal advisers.

The list of key third parties may be provided on the websites or in the account area. If a new category of recipient is not listed, information about the purpose and scope of sharing will be provided where legally required. Providing personal information constitutes consent to share it for the purposes described in this policy, in addition to other lawful grounds such as contract necessity or legal obligation. All third parties must keep information confidential and process it only under documented instructions.

The websites may include links to third-party sites that have their own privacy policies and security practices. 1win is not responsible for how those sites collect, use, or protect information. Users should review the privacy policy of each external site and proceed carefully before sharing any personal details.