Privacy Policy Overview

We start collecting your information from the second you enter 1win Kenya. This kind of information falls under several categories, including:

• Information you provide us. You give us your first and last name, gender, birth date, address, phone number, email, and copies of your ID documents when you register or confirm your account;
• Automatically collected information. We automatically gather some technical details when you visit our site or use our services, for instance, your IP address, device type, language settings, browser type, and how long you stay on the site. This enables us to ensure that the platform is functional for you;
• Financial Information. In order to comply with regulatory obligations and avert fraud or money laundering, we observe your payment activity and can gather information on the deposit and withdrawal methods you utilize;
• Information from third-party sources. We can also obtain personal data about you from publicly available databases, other third parties with whom we cooperate, or reliable partners;
• Cookies. Your browser stores cookies, which are small files. They allow us to know your preferences and behavior in order to enhance your online experience. They can recall your favorite language or web pages that you frequently visit, for instance.

We only collect and process Personal Data in line with the legal basis set out in applicable data protection law. Such legal bases are:

• Contract performance. We can process your personal data if it is necessary to fulfill the transaction. For example, when you register on a website or when we perform operations that are part of the contract — i.e., conducting transactions on websites — you and we enter into an agreement;
• Legal obligation. We are subject to a variety of laws and regulations that impose obligations on us. We must process your personal data to fulfill these obligations, such as those relating to responsible gaming, anti-money laundering legislation, and the terms of our gaming license;
• Legitimate interests. Your personal data may be processed by us, our group companies, or third parties where reasonably necessary for their legitimate business;
• Your consent. We process your Personal Data with your consent in certain, limited circumstances, for instance, when it is required for direct marketing.

Using your private data is necessary to provide you with high-quality customized services, improve our platform, and enhance security. We use your data to:

• Run our website and deliver the services that are required;
• Check your eligibility and manage your account;
• Respect your legal responsibilities;
• Provide quick and efficient customer support;
• Improve our website and services;
• Maintain security and stop illicit activities, such as fraud (according to our KYC and AML policies);
• Create anonymous reports that may be used both internally and externally;
• Complete financial transactions and make sure your information is correct;
• Encourage responsible gaming;
• Examine gaming habits to control risks;
• Exercise your legal rights and enforce agreements;
• Distribute info across our company’s employees;
• Talk to you about promotions, updates, and questions.

We might have to share your personal information with another entity. We can share your personal data:

• To our group of companies;
• To third-party service providers and partners who assist us in providing the websites and services you have requested, including those who operate, host, or provide access to our websites and services;
• Licensing authorities, esports self-regulatory bodies, regulators, law enforcement agencies, courts, fraud prevention agencies, or other third parties, where we consider that it is necessary to enforce our legal rights or to satisfy applicable law and regulation;
• Partners or individuals who have referred you to us;
• To others (with your consent).

We can transfer and process your personal information in other nations outside of your nation when we receive or share it. Those nations may have other laws protecting data, which could impact your privacy less. We utilize solid security methods and legal protection to keep your information safe wherever it travels. There is the possibility that your data will be taken outside of the European Economic Area (EEA) which you home. We only pass on your data to partners or nations that are subject to data protection legislation in such a case.

In order to keep your data safe, even when processing it in other countries, we, for instance, utilize standard agreements approved by the European Commission. They’re known as Standard Contractual Clauses. Through the usage of our services, you consent to the possible international transfer and processing of your personal data, subject to the provision of appropriate safeguards.

To protect your sensitive personal and financial data, we apply several technical and organizational security measures, including the following:

• TLS. All data transmitted between you and our platform is secured with TLS (Transport Layer Security), which ensures that sensitive information is safeguarded during transit. Furthermore, everything on our servers is encrypted and securely backed up in numerous places to avoid loss or illegal access;
• Restricted access. Access to personal data is tightly restricted to authorized employees and contractors who have signed confidentiality agreements and require it to carry out their jobs. We regulate and monitor this access using complex internal protocols;
• Reliable data centers. Our servers are housed in enterprise-grade data centers that have strong physical security measures in place, such as 24/7 surveillance, on-site staff, and routine security assessments. We also collaborate with trustworthy cybersecurity partners to maintain strong external threat defenses such as firewalls, intrusion detection systems, and layered network protection;
• Continuous monitoring. Our specialized staff regularly monitors activity logs, warnings, and system notifications to identify and address any issues as soon as possible. This collaborative effort ensures that every user has a secure and trustworthy experience.

We keep your data while your account remains active and for up to five years following termination or your most recent interaction with the platform in order to comply with legal requirements or defend against future claims. In some circumstances, such as self-exclusion or fraud investigations, we may keep data for a prolonged length of time to promote responsible gaming, regulatory compliance, or system integrity. Certain data may be retained for a longer amount of time owing to legal or commercial requirements. This includes the following:

• Preventing fraud, misuse, or criminal activities (for example, match-fixing, money laundering);
• Compliance with tax, anti-money laundering, and financial legislation, as well as managing financial transactions and disputes;
• Meeting legal obligations, responding to government inquiries, and investigating policy infractions;
• Providing service continuity for you and other users;
• Keeping track of direct communications, such as support requests and comments.
  Note: Your personal data is protected in compliance with all applicable local and international laws and regulations, including the GDPR and national Data Protection Laws.

You have several set of rights regarding your personal information and its use:

• View the personal information we have on you;
• Inaccurate data should be corrected or requested to be corrected;
• Get a copy of your data that can be read by a machine;
• Unless there are compelling legal reasons, we object to processing when it serves our legitimate interests;
• In some circumstances, you may request that your data be deleted, such as when it is no longer needed, when permission was the legal basis, when you withdraw consent, when you object and there are no valid reasons, when the data was handled illegally, or when erasure is mandated by law;
• Request that processing be restricted under particular circumstances;
• Where appropriate, withdraw consent; nevertheless, processing may proceed if there are other valid reasons;
• Object to profiling or direct marketing. By following the instructions in the message or sending an email to [email protected], you may opt out of marketing at any time.