Privacy Policy

This Privacy Policy explains how 1Win N.V. (registered in Curaçao, company no. 147039), operating under Curaçao eGaming License 8048/JAZ2018-040, collects, processes, and protects your personal data when you use our platform at news247.com.pk. We are committed to transparency and compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other regional privacy frameworks. This policy describes your rights and our obligations regarding your information.

Data Controller and Contact Information

The data controller responsible for your personal information is 1Win N.V., Curaçao. For data protection inquiries, you may contact our Data Protection Officer or our support team, available 24/7 in English, Urdu, and Hindi. Requests for data access, correction, or deletion should be submitted in writing with proof of identity. We will respond to all data subject requests within 30 days or as required by applicable law.

What Personal Data We Collect

We collect personal data in several categories to provide our services, comply with legal obligations, and prevent fraud and money laundering.

Identity information: full name, date of birth, nationality, gender, and identification document numbers (passport, national ID, driving license).
Contact details: email address, phone number, and postal address.
Financial information: bank account details, payment method information, transaction history, and account balance.
KYC and AML documents: copies of identity documents, proof of address, source of funds documentation, and beneficial ownership information where applicable.
Technical data: IP address, device type, operating system, browser type, unique device identifiers, and connection logs.
Usage data: pages visited, games played, betting patterns, session duration, and interaction with platform features.
Marketing preferences: consent status for promotional communications and communication channel preferences.
Communications: records of support tickets, live chat conversations, and email correspondence.

How We Collect Your Data

Your personal data is collected through multiple sources. You provide identity, contact, and financial information directly when you register an account, complete verification, or make deposits and withdrawals. We automatically collect technical and usage data through cookies, pixels, and server logs when you access our platform. Third parties, including payment processors, KYC and AML service providers, credit reference agencies, fraud prevention services, and affiliate partners, may provide us with additional information to verify your identity, assess risk, or process transactions. We do not purchase data from data brokers.

Purposes and Legal Bases for Processing

We process your personal data for the following purposes, each supported by a lawful basis under GDPR and equivalent frameworks.

Purpose: Legal Basis
Account creation, service delivery, and transaction processing: Contract performance
Identity verification (KYC) and anti-money laundering compliance: Legal obligation under gaming and financial regulations
Fraud detection, account security, and risk assessment: Legitimate interest in protecting our platform and users
Regulatory reporting and compliance with licensing requirements: Legal obligation
Marketing communications and promotional offers: Your consent (where required by law)
Dispute resolution and customer support: Contract performance and legitimate interest
Platform improvement and analytics: Legitimate interest in optimizing user experience
Responsible gaming monitoring and self-exclusion enforcement: Legal obligation and legitimate interest

We do not sell your personal data. However, we share information with trusted third parties to operate our platform and meet legal obligations.

Payment processors and financial institutions: MFI Investments Limited (Cyprus, HE386738) and other payment service providers to process deposits and withdrawals.
KYC and AML partners: third-party verification and compliance service providers to conduct identity checks and monitor for suspicious activity.
Regulatory authorities: gaming regulators, financial intelligence units, and law enforcement when required by law or licensing conditions.
Group companies: other entities within the 1Win corporate group for shared services and compliance purposes.
Marketing and affiliate partners: selected partners for promotional campaigns (only with your consent or where permitted).
IT service providers and hosting partners: cloud providers, security vendors, and technical support contractors.
Customer support platforms: third-party tools for managing support tickets and communications.
Credit reference and fraud prevention agencies: to verify identity and assess credit and fraud risk.

International Data Transfers

Your personal data may be transferred to countries outside the European Economic Area, including Curaçao (where our operator is registered), Cyprus, and other jurisdictions where our service providers operate. Where transfers occur to countries without an adequacy decision, we rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards to protect your data. By using our platform, you consent to these transfers. You may request details of the safeguards in place by contacting our support team.

Data Retention

We retain your personal data for as long as necessary to provide services and comply with legal obligations. Identity and financial records are retained for a minimum of five years after account closure to satisfy anti-money laundering and tax obligations. Technical logs and usage data are typically retained for 12 months. Marketing data is retained until you withdraw consent. You may request deletion of certain data, subject to legal retention requirements. Deletion requests will not override mandatory retention periods imposed by gaming, financial, or tax regulations.

Your Data Subject Rights

Under GDPR and equivalent laws, you have the following rights regarding your personal data.

Right of access: request a copy of all personal data we hold about you.
Right to rectification: correct inaccurate or incomplete information.
Right to erasure: request deletion of your data, subject to legal retention obligations.
Right to restrict processing: request that we limit how we use your data while you dispute its accuracy or legality.
Right to data portability: receive your data in a structured, portable format and transmit it to another controller.
Right to object: object to processing for marketing, profiling, or legitimate interest purposes.
Right to withdraw consent: withdraw consent for marketing communications or other consent-based processing at any time.
Right not to be subject to solely automated decision-making: you have the right to human review of automated decisions that significantly affect you.

To exercise any of these rights, contact our support team with a clear request and proof of identity. We will respond within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Cookies and Tracking Technologies

Our platform uses cookies, pixels, and similar technologies to enhance your experience, analyze usage, and deliver personalized content. Cookies store information about your preferences, login status, and betting history. For detailed information about the types of cookies we use, their purposes, and how to manage your cookie preferences, please refer to our Cookie Policy. You can disable cookies through your browser settings, though this may affect platform functionality.

Data Security

We implement comprehensive technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data transmissions are encrypted using 256-bit SSL/TLS encryption. We require two-factor authentication for account access. Our systems are regularly tested for vulnerabilities, and access to personal data is restricted to authorized personnel on a need-to-know basis. However, no security measure is completely impenetrable. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and account information.

Children and Minors

Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a user is under 18, we will immediately suspend the account and take steps to delete associated data, subject to legal obligations. Parents or guardians who believe a minor has registered should contact our support team immediately.

Complaints and Supervisory Authority

If you believe we have violated your data protection rights, you have the right to lodge a complaint with your local data protection authority (DPA). In the European Union, you may contact the DPA in your member state. In other jurisdictions, contact the relevant privacy regulator. You may also file a complaint with us first by contacting our support team. We will investigate and respond to all complaints within 30 days.

Policy Updates and Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our platform and updating the 'Last Updated' date below. Your continued use of the 1win official site following any changes constitutes your acceptance of the updated policy. We recommend reviewing this policy periodically to stay informed about how we protect your data.

Last Updated: January 2025
Effective Date: Upon publication
Version: 1.0