Overview of how personal information is handled

This document explains how personal information is collected, processed, protected, disclosed, and destroyed across the online services. The use of information is based on consent provided by the user and other lawful grounds recognised under Ghana law. The policy applies to all interactions on the website and mobile applications. Continued use of the platform signifies agreement to the practices described here.

Privacy standards and safeguards for Ghana users

  • What is collected
    • Registration details such as name, date of birth, address, phone number, and email.
    • Identity verification records and KYC documents where required by law.
    • Payment information processed through approved providers. Card numbers are not stored in plain form.
    • Technical data such as device identifiers, IP address, log files, cookies, and usage analytics for online security and service performance.
    • Responsible gaming information, fraud indicators, and dispute records.
  • Why it is collected
    • To create and manage the account and provide gambling services.
    • To process transactions, verify identity, and comply with anti-money laundering rules.
    • To protect the service, prevent fraud, and meet legal obligations.
    • To improve user experience, support, and site reliability.
  • How information is protected
    • Encryption in transit and at rest, access controls, role-based permissions, and multi-factor authentication for sensitive systems.
    • Secure development practices, vendor due diligence, and data processing agreements.
    • Network monitoring, logging, and incident response procedures, including breach notifications as required by law.
    • Staff training and periodic audits.
  • User rights
    • Access to personal data and request for a copy.
    • Correction of inaccurate information.
    • Deletion of personal data where legally possible.
    • Restriction or objection to certain processing, including direct marketing.
    • Withdrawal of consent where consent is the legal basis.
    • Complaint to the Data Protection Commission of Ghana.

Processing is undertaken in line with Ghana’s Data Protection Act, 2012 (Act 843), guidance from the Data Protection Commission, and relevant international standards such as GDPR principles.

Purposes and lawful bases for using personal data

Personal data is used only for specified and lawful purposes, in a transparent manner:

  • Account services
    • Registering and authenticating the user.
    • Managing preferences, responsible gaming settings, and support requests.
  • Transactions
    • Processing deposits, bets, withdrawals, and resolving payment issues through licensed providers.
  • Service improvement and analytics
    • Monitoring performance, preventing errors, and enhancing features based on aggregated usage information.
  • Marketing and communications
    • Sending service messages, security alerts, and where permitted, promotional messages that the user can opt out of at any time.
  • Compliance and risk management
    • Identity checks, age verification, fraud prevention, AML screening, tax and regulatory reporting under Ghana law.

Legal bases include consent, performance of a contract, compliance with legal obligations, and legitimate interests such as platform security and service quality.

Access, correction, and deletion requests

Users can manage information in the account settings and may request access, correction, or deletion of personal data. Requests can be submitted through the support channels listed on the website, including the help centre. A response will be provided within statutory timelines and users may be asked to confirm identity before action is taken.

Correction requests are applied to records that are inaccurate or incomplete. Deletion requests are honoured where the information is not required to meet legal obligations, resolve disputes, or enforce agreements. By using 1win, the user consents to security checks and processing of payment information by independent payment providers for verification, fraud control, and settlement.

Under-18 restrictions and parental measures

The services are intended for persons aged 18 years and above as required by the Gaming Act of Ghana. The operator cannot verify age without identification documents and may ask for proof of age during security checks. If a parent or guardian believes a minor has provided personal information, a request for deletion can be lodged through the published support channels. Verified requests will lead to closure of the account and removal of information that is not required for legal or dispute purposes.

Cross-border handling of personal information

Personal data may be stored or processed outside Ghana where technology, payment, or verification partners operate. Use of the site constitutes consent to international transfers subject to appropriate safeguards. Contracts, confidentiality obligations, and security standards are required from all partners handling personal information. Technical and organisational measures, including encryption and strict access controls, are applied to protect the information during transfer and storage.

Disclaimer and effect of acceptance

This policy includes disclaimers that may limit or clarify the scope of certain rules where permitted by law. The disclaimers take effect when the user accepts the policy by account registration, continued use of the services, or other forms of accession recognised online. If any part of this document is held invalid by a competent authority, the remaining parts continue to apply to the extent allowed by Ghana law.

Cookies and similar technologies

Cookies are small files stored on a device to remember settings and improve online services. The site uses cookies for statistics, behaviour analysis, personalisation, and site improvement. Cookie information is generally retained for up to 1 year. Users can manage cookies through browser settings and, where available, in-site preferences. Disabling certain cookies may affect functionality such as login, bet settlement, or remembering language.

Acceptance and updates to this policy

Use of the platform constitutes full acceptance of this Privacy Policy. The current version of the policy prevails over any prior version. Updates may be posted from time to time to reflect changes in processing, law, or technology. Continued use after an update indicates agreement to the revised document.

Sharing information with third parties

Personal data may be shared in line with legal duties, dispute resolution, and contractual needs. Typical recipients include payment processors, KYC and AML screening providers, fraud prevention services, analytics vendors, hosting and security partners, and competent authorities upon lawful request. A list of material providers is maintained on the website or made available upon request, including the purpose and scope of the sharing.

Providing information on the site constitutes consent to share personal data for the purposes stated, subject to confidentiality, security controls, and data processing agreements.

External websites and third-party policies

The website may include links to third-party websites that have their own privacy policies. The operator is not responsible for how external sites collect, use, or secure information. Users are advised to review the privacy terms on any external site before submitting personal data.

Updated: