1nwin Privacy Policy

This Privacy Policy is issued by 1nwin ("we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://1nwin.one (the "Platform"). This document constitutes the complete and authoritative statement of 1nwin's data protection and privacy practices and applies to all persons who visit, register on, or otherwise interact with the Platform ("you", "your", "Player").

This Privacy Policy governs the collection, use, storage, transfer, and deletion of personal data in connection with your use of 1nwin's services, including live casino games, slot titles, sportsbook markets, regional card game formats, and all associated customer support, payment processing, and promotional activities. It applies regardless of the device or method by which you access the Platform — whether via a desktop browser in Jakarta, a mobile device in Surabaya, or any other means from any location in Indonesia.

By registering an account on 1nwin, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Privacy Policy, you must not register an account or use the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — that is, any data that can be used, alone or in combination with other information, to identify you directly or indirectly.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Controller" means 1nwin, as the entity that determines the purposes and means of processing your Personal Data.
• "Processor" means any third-party service provider that processes Personal Data on behalf of 1nwin under a binding data processing agreement.
• "KYC Data" means identity and age verification documents and associated information submitted by a Player for the purpose of Know Your Customer compliance, including government-issued identification such as a KTP (Indonesian National Identity Card) or valid passport.
• "Cookies" means small text files placed on your device by the Platform for the purposes described in Section 8 of this Policy.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including financial account information, identity document data, and any data relating to health or religious belief where relevant to responsible gaming assessments.
• "IDR" means Indonesian Rupiah, the sole currency in which all 1nwin financial transactions are denominated.

1nwin collects Personal Data across several categories, depending on how you interact with the Platform. The categories of data we collect, and specific examples within each, are set out in the table below:

We collect only the minimum data necessary to deliver our services, meet our compliance obligations, and protect the integrity of the Platform. We do not collect sensitive categories of personal data beyond those listed above unless explicitly required for a specific compliance purpose.

1nwin collects Personal Data through the following mechanisms:

• Directly from you: When you complete the account registration form, submit KYC documentation, make a deposit or withdrawal request, contact our support team, participate in a promotion, or update your account settings, you are directly providing Personal Data to 1nwin.
• Automatically via platform technology: When you visit or interact with the 1nwin Platform, our servers and analytics systems automatically record Technical & Device Data and Gaming Activity Data as described in Section 3. This collection is necessary for platform operation, security monitoring, and service quality management.
• Via cookies and tracking technologies: 1nwin uses first-party cookies and, in limited cases, third-party analytics tools to understand how Players navigate the Platform and to maintain session integrity. Full details are provided in Section 8.
• From third-party service providers: Our identity verification partners and payment processors may provide supplementary data to assist in completing KYC checks or validating financial transactions. Any third-party data source used by 1nwin is contractually required to have obtained that data lawfully and to share it in compliance with applicable data protection standards.
• From publicly available sources: In limited circumstances — principally in connection with fraud prevention and compliance investigations — 1nwin may verify or supplement Player information using publicly available sources such as official government databases.

1nwin processes your Personal Data for the following specific purposes. Each purpose is supported by a defined legal basis, which is set out in Section 6:

• Account Management: Creating, maintaining, and administering your 1nwin account; authenticating your identity at login; enabling access to all Platform features; managing account security settings including two-factor authentication.
• KYC & Age Verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity prior to approving withdrawal requests. 1nwin enforces a strict 21+ policy across all Indonesian markets.
• Payment Processing: Facilitating deposits from and withdrawals to your verified Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet accounts (OVO, DANA, GoPay, ShopeePay, LinkAja), all denominated in IDR.
• Service Delivery: Providing access to live casino games, slot titles from studios including Pragmatic Play, NetEnt, Microgaming, and Pocket Games Soft, sportsbook markets covering the BRI Liga 1, EPL, Champions League, and Timnas Indonesia matches, and all other Platform products.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and other forms of Prohibited Conduct as defined in the 1nwin Terms & Conditions.
• Customer Support: Responding to your support queries, processing complaints, and maintaining records of interactions for quality assurance and dispute resolution purposes.
• Responsible Gaming: Monitoring gaming patterns to identify indicators of problem gambling; administering deposit limits, cooling-off periods, and self-exclusion requests; fulfilling obligations to protect Player welfare.
• Regulatory Compliance: Meeting 1nwin's obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) standards as required by the Platform's international licensing framework.
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal campaign communications — including offers tied to Indonesian cultural occasions such as Ramadhan, Idul Fitri, and Nyepi — where you have provided explicit consent. You may withdraw marketing consent at any time via your account settings or by contacting support.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the Platform's performance, content offering, and user experience.

1nwin processes your Personal Data on the basis of one or more of the following legal grounds:

• Contractual Necessity: The majority of data processing described in Section 5 — including account management, payment processing, KYC verification, and service delivery — is necessary to perform the contract between you and 1nwin (as documented in the Terms & Conditions). Without this processing, 1nwin cannot provide its services.
• Legal Obligation: Certain processing activities are required by applicable law or by the conditions of 1nwin's international operating licences — particularly in relation to AML/CTF compliance, KYC identity verification, and record-keeping obligations.
• Legitimate Interests: 1nwin processes certain data — principally Technical & Device Data and Gaming Activity Data — on the basis of its legitimate interests in maintaining platform security, preventing fraud, and improving service quality, provided those interests are not overridden by your rights and freedoms.
• Consent: Where processing is not otherwise justified by the grounds above — specifically in relation to direct marketing communications — 1nwin relies on your freely given, specific, and informed consent. This consent can be withdrawn at any time.

1nwin does not sell your Personal Data to any third party under any circumstances. Your data may, however, be shared with the following categories of trusted third-party partners where necessary to deliver the Platform's services or meet legal obligations:

• Payment Processors: Indonesian bank gateways and e-wallet service providers (including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) receive the minimum financial data necessary to complete deposit and withdrawal transactions. All payment partners are contractually bound to use your data solely for transaction processing.
• Identity Verification Services: Third-party KYC and document verification providers process identity documents (KTP, passport) and biometric data (where applicable) to complete age and identity verification. These providers operate under strict data processing agreements with 1nwin.
• Game Studio Providers: Licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — receive session identifiers and gaming transaction data necessary to operate their games on the 1nwin Platform. These providers do not receive your full registration or financial profile.
• Platform Technology Partners: Cloud hosting, content delivery, cybersecurity, and analytics partners who provide infrastructure and tooling to support Platform operation. All such partners are bound by data processing agreements that prohibit use of your data for independent purposes.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory mandate, 1nwin may disclose Personal Data to competent governmental or regulatory authorities. 1nwin will notify you of any such disclosure to the extent permitted by applicable law.
• Professional Advisors: Lawyers, auditors, and compliance consultants may access limited Personal Data in the context of providing professional services to 1nwin, subject to professional confidentiality obligations.

1nwin uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain the security of user sessions, and to analyse how Players navigate the site. The categories of cookies used by 1nwin are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your security preferences, and ensure that pages load correctly. The Platform cannot operate without them, and they cannot be disabled.
• Functional Cookies: These cookies remember choices you have made — such as preferred language, deposit limit settings, and game category preferences — so that the Platform can deliver a more personalised experience on subsequent visits. They do not track browsing activity outside of 1nwin.
• Analytics Cookies: 1nwin uses first-party analytics tools to understand aggregate usage patterns — for example, which game categories are most visited and how Players navigate between sections of the Platform. This data is anonymised and used solely to improve Platform quality.
• Security Cookies: These cookies support 1nwin's fraud detection and account security systems by identifying unusual access patterns, detecting automated bot activity, and flagging suspicious login attempts from unrecognised devices or IP addresses.

Most web browsers allow you to control or block cookies via the browser's settings menu. Blocking strictly necessary cookies will prevent you from logging in or using core Platform features. Blocking functional and analytics cookies will reduce the quality of your experience but will not prevent basic access to the Platform. For detailed browser-specific cookie controls, refer to your browser's help documentation.

1nwin retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Active Account Data: All registration, KYC, financial, and gaming activity data associated with an active account is retained for the full duration of the account's active status.
• Post-Closure Retention: Following account closure — whether initiated by the Player or by 1nwin — core account and transaction records are retained for a minimum of five (5) years to meet applicable AML/CTF compliance and financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the date of last transaction, in accordance with international KYC compliance standards applicable to 1nwin's licensing jurisdiction.
• Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the last interaction, unless the communication relates to a formal complaint or legal matter, in which case retention aligns with the resolution timeline plus the applicable statutory limitation period.
• Marketing Data: Marketing consent records and associated communications data are retained until consent is withdrawn and for one (1) year thereafter as an audit record. Withdrawn consent does not trigger deletion of core account data.
• Anonymised Analytics Data: Aggregated, anonymised usage data from which individual Players cannot be identified may be retained indefinitely for statistical and product development purposes.

When Personal Data is no longer required for the purposes described above, 1nwin will securely delete or permanently anonymise it in accordance with its internal data disposal procedures.

1nwin applies a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. The key security controls in place include:

• 256-bit SSL Encryption: All data transmitted between your device and the 1nwin platform servers — including login credentials, financial transaction data, and personal information — is encrypted using 256-bit SSL/TLS protocols, the same standard applied by Indonesia's major banking institutions such as BCA and Mandiri.
• Access Controls: Access to Player Personal Data within 1nwin's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication (2FA): 1nwin offers 2FA to all registered Players and strongly recommends its activation. At the system level, all staff access to internal data systems requires multi-factor authentication.
• Intrusion Detection & Monitoring: 1nwin's security infrastructure includes continuous monitoring for unusual access patterns, brute-force login attempts, and other indicators of malicious activity. Automated alerts are reviewed by the security team in real time.
• Penetration Testing: The Platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Encrypted Data Storage: Sensitive data — including KYC documents and financial account identifiers — is stored in encrypted form at rest, in addition to being encrypted in transit.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 1nwin will notify affected Players without undue delay and will take immediate remedial action.

As a Player on the 1nwin Platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact our support team via live chat or at [email protected]. 1nwin will respond to all valid data rights requests within thirty (30) calendar days:

• Right of Access: You may request a copy of all Personal Data that 1nwin holds about you, together with information about how that data is being used and on what legal basis.
• Right to Rectification: If any Personal Data held by 1nwin about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update most registration details directly from your account dashboard.
• Right to Erasure ("Right to Be Forgotten"): You may request that 1nwin delete your Personal Data. This right is subject to limitations where retention is required by law — for example, where AML/KYC obligations mandate a minimum five-year retention period following account closure.
• Right to Restriction: You may request that 1nwin restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, and at any time to processing for direct marketing purposes. Where you object to marketing processing, 1nwin will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Complain: If you believe that 1nwin has processed your Personal Data in a manner that violates applicable data protection standards, you have the right to lodge a complaint with the relevant regulatory authority in 1nwin's licensing jurisdiction.

The 1nwin Platform is strictly intended for adults aged 21 and above. 1nwin does not knowingly collect Personal Data from individuals under the age of 21. The registration process includes mandatory age declaration and is subject to KYC age verification as a pre-condition of withdrawal approval.

If 1nwin becomes aware that Personal Data has been collected from a person under the age of 21, the associated account will be immediately suspended, all Personal Data will be deleted as quickly as practicable, and any balances held will be handled in accordance with 1nwin's minor account policy and applicable legal requirements.

If you are a parent or guardian and believe that a minor in your care has registered an account on 1nwin, please contact our support team immediately at [email protected]. We will investigate and act on all such reports with the highest priority.

The 1nwin Platform may contain links to third-party websites or services — for example, links to the official websites of game studios such as Pragmatic Play or Evolution Gaming for information purposes. These third-party sites operate independently of 1nwin and are governed by their own privacy policies. 1nwin is not responsible for the data practices of any third-party website and encourages you to review the privacy notices of any external site you visit.

The presence of a link to a third-party site on the 1nwin Platform does not constitute an endorsement of that site's privacy practices or content. 1nwin exercises no control over, and accepts no responsibility for, the content or data handling practices of any third-party websites accessible via links on the Platform.

1nwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the Platform's service offering. Where a proposed amendment is material — meaning it substantively affects your rights or changes how we process your data — we will provide at least seven (7) calendar days' advance notice via a prominently displayed notice on the Platform and, where practicable, via direct communication to your registered email address.

Your continued use of the 1nwin Platform following the effective date of any amendment to this Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the amended Policy, you must cease using the Platform and may request account closure by contacting our support team.

The version of this Privacy Policy published at 1nwin.one/privacy-policy is always the current and operative version. All prior versions are archived and available on request from the 1nwin compliance team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which 1nwin processes your Personal Data, please contact our support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the 1nwin Platform. Native Indonesian-speaking agents are available from 08:00 to 24:00 WIB for Players in Jakarta, Surabaya, Bali, Medan, Bandung, and elsewhere in Indonesia.
• Email: [email protected] — please mark the subject line "Privacy Request" for data rights enquiries, or "Privacy Complaint" for formal complaints. Responses are issued within one business hour during staffed hours.

Data rights requests and privacy complaints will be acknowledged within 24 hours of receipt. 1nwin is committed to resolving all privacy matters promptly, transparently, and in accordance with the standards set out in this Policy.