1xwin Privacy Policy

1xwin ("we," "us," "our," or "the Platform") operates the online gaming website accessible at 1xwin.biz and is committed to protecting the personal information of all users ("you," "User," or "Player") who interact with our platform, services, and communications.

This Privacy Policy ("Policy") describes how 1xwin collects, processes, stores, shares, and safeguards your personal data in connection with your use of the 1xwin website, account services, payment systems, customer support channels, and any other services provided by the Platform.

By registering an account on 1xwin, depositing funds, accessing any part of the Platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy is incorporated into and forms part of the 1xwin Terms & Conditions.

1xwin collects the following categories of personal data, depending on how you interact with the Platform:

We collect only the minimum personal data necessary for the purposes described in this Policy. We do not collect sensitive personal information unless it is strictly required for identity verification, age confirmation, or compliance with applicable law.

1xwin collects personal data through the following channels and mechanisms:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to promotions.
• Automated Technologies: Technical and usage data collected automatically through cookies, web beacons, browser local storage, and similar tracking technologies when you access the 1xwin platform.
• Payment Processors: Transaction confirmation and payment reference data shared by GCash, Maya (formerly PayMaya), BPI, BDO, and other authorized payment providers when you make a deposit or withdrawal.
• Identity Verification Partners: Verification outcomes and document data provided by our KYC service partners during the account verification process.
• Fraud Prevention Services: Risk signals and behavioral data provided by third-party fraud detection systems that help protect the integrity of the Platform.

1xwin processes your personal data for the following specific purposes:

• Account Creation & Management: To register your account, authenticate your identity, and maintain your player profile on the 1xwin platform.
• Identity Verification (KYC): To verify that you are at least 21 years of age, confirm your identity, and comply with Anti-Money Laundering (AML) regulations applicable in the Philippines.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, QR Ph, BPI, BDO, GrabPay, and other supported payment methods.
• Service Delivery: To provide access to 1xwin games including slots, live casino, bingo, lottery, virtual sports, and sports betting.
• Responsible Gaming: To monitor gaming behavior, apply deposit and loss limits, identify signs of problem gambling, and enforce self-exclusion requests.
• Fraud Prevention & Security: To detect, investigate, and prevent fraud, unauthorized account access, money laundering, and other prohibited activities.
• Legal & Regulatory Compliance: To satisfy obligations under Philippine law including the Data Privacy Act, Anti-Money Laundering Act, and any requirements imposed by PAGCOR or other relevant authorities.
• Customer Support: To respond to your queries, complaints, and requests through live chat, email, and other support channels.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant platform updates — where you have provided consent or where permitted by applicable law. You may opt out at any time.
• Platform Improvement: To analyze usage patterns, improve platform performance, personalize your experience, and develop new features.

1xwin processes your personal data on the following legal grounds under the Data Privacy Act of 2012 and its Implementing Rules:

• Consent: Where you have given your express consent to the processing of your data for a specific purpose, such as receiving marketing communications or participating in promotional programs.
• Contract Performance: Where processing is necessary to fulfill our obligations under the 1xwin Terms & Conditions, including account creation, game provision, and payment processing.
• Legal Obligation: Where processing is required to comply with applicable Philippine law, including KYC identity verification, AML transaction monitoring, and regulatory reporting.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and responsible gaming monitoring, provided such interests are not overridden by your data privacy rights.

1xwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash (G-Xchange Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, GrabPay, and other authorized payment service providers, for the purpose of processing your financial transactions.
• KYC & Identity Verification Partners: Licensed third-party KYC service providers that assist in verifying the identity and age of account holders. These partners are contractually bound to process your data solely for verification purposes.
• Fraud Prevention & Security Providers: Third-party fraud detection and cybersecurity services engaged to protect the integrity of the 1xwin platform and its users.
• Game Software Providers: Licensed game developers and studios (such as JILI, Pragmatic Play, PG Soft, Evolution Gaming, and others) whose game software is hosted on or integrated into the 1xwin platform. Data shared is limited to session tokens and game transaction data necessary for game operation.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, as required by law or upon lawful request.
• Professional Advisors: Legal counsel, auditors, and accountants acting in their professional capacity, subject to obligations of confidentiality.

1xwin retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your account's active status and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under Philippine law.
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the last transaction, as required by the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer Support Records: Retained for up to three (3) years from the date of the interaction, unless the subject matter of the interaction requires a longer retention period.
• Marketing Preferences: Retained until you withdraw consent or until the data is no longer relevant to the promotion concerned.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 1xwin's data disposal procedures.

1xwin implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser and the 1xwin platform is encrypted using 256-bit SSL/TLS protocols. The padlock icon in your browser's address bar confirms an active secure connection.
• Password Security: Account passwords are hashed using industry-standard cryptographic algorithms. 1xwin does not store plaintext passwords.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their 1xwin accounts, which provides an additional layer of protection through SMS one-time passwords.
• Access Controls: Access to personal data within 1xwin's internal systems is restricted to authorized personnel on a strictly need-to-know basis and is subject to logging and audit.
• Secure Payment Infrastructure: All financial transactions are processed through PCI-DSS compliant payment gateways.
• Data Breach Response: 1xwin maintains an incident response plan. In the event of a personal data breach that poses a risk to your rights, 1xwin will notify the National Privacy Commission and affected users in accordance with the requirements of the Data Privacy Act.

While 1xwin takes all reasonable precautions to secure your data, no system is entirely immune to risk. You are responsible for maintaining the security of your own account credentials. If you suspect unauthorized access to your 1xwin account, contact our support team immediately.

As a data subject under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by 1xwin:

To exercise any of the above rights, please contact 1xwin's data privacy team at [email protected] with the subject line "Data Privacy Request." Please include sufficient detail to allow us to process your request and verify your identity before acting on it.

1xwin uses cookies and similar technologies to operate the platform, analyze usage, and improve the user experience. Cookies are small text files stored on your device by your web browser. The following types of cookies may be used on 1xwin.biz:

• Strictly Necessary Cookies: Essential for the basic operation of the platform, including maintaining your login session, processing transactions, and preventing cross-site request forgery. These cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymized data about how visitors interact with 1xwin.biz — such as pages visited, time spent, and error events — to improve platform performance and usability.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and recently accessed game categories.
• Security Cookies: Used for fraud detection, bot prevention, and protecting the integrity of account login sessions.

You may control cookie behavior through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies may prevent you from logging in or using core platform features. 1xwin does not use advertising or third-party behavioral profiling cookies for the purpose of selling your data to advertisers.

The 1xwin platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. This restriction is enforced through mandatory KYC identity verification, which requires submission of a valid Philippine government-issued ID confirming the account holder's date of birth.

If 1xwin becomes aware that personal data has been collected from an individual who is under 21 years of age, the relevant account will be immediately suspended and the personal data will be deleted as soon as practicable, subject to any retention obligations arising from regulatory requirements.

If you believe that a minor has registered an account on 1xwin, please notify us immediately at [email protected] so that we can take immediate action.

The 1xwin platform integrates third-party services including payment processors, game providers, and identity verification partners. Each third-party service operates under its own privacy policy and data protection practices. 1xwin is not responsible for the privacy practices of third-party service providers beyond the contractual data protection obligations we impose on them.

1xwin does not currently embed links to external third-party websites within its platform. If you navigate away from 1xwin.biz to any external site, you do so at your own risk and under the terms and privacy practices of that external site.

All third-party service providers engaged by 1xwin are required to:

• Process personal data only for the specific purposes for which they are engaged.
• Implement appropriate technical and organizational security measures to protect the data.
• Notify 1xwin promptly in the event of any data breach or security incident involving 1xwin user data.
• Delete or return all personal data upon termination of the service agreement.

1xwin reserves the right to update, revise, or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered users via email notification or a prominent notice on the Platform no less than seven (7) calendar days before taking effect, where reasonably practicable.

Changes required to comply with applicable law or urgent security considerations may take effect immediately. The effective date at the top of this document will be updated to reflect the date of the most recent revision.

Your continued use of the 1xwin platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with a material change to this Policy, you must cease using the Platform and close your account before the change takes effect.

The most current version of this Privacy Policy is always available at 1xwin.biz/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 1xwin, please contact us through any of the following channels:

• Email: [email protected] — for data privacy requests, please use the subject line "Data Privacy Request" and include your account details and a description of your request.
• Live Chat: Available 24/7 on the 1xwin website via the chat icon at the bottom of the page.
• FAQ: The 1xwin FAQ addresses common questions about account data, privacy settings, and data requests.

We aim to acknowledge all data privacy requests within 48 hours and provide a substantive response within 30 calendar days of receipt, as required under the Data Privacy Act.