Privacy Policy – 1xwin

1. Introduction

1xwin ("we", "us", "our") is committed to protecting the privacy and personal data of every Filipino player who uses our platform. This Privacy Policy explains what personal information 1xwin collects, why we collect it, how we use and protect it, and what rights you have as a data subject under Philippine law.

This Policy applies to all personal data processed in connection with your use of 1xwin — including account registration, identity verification, deposits and withdrawals, gameplay, promotions, customer support, and any other interaction with our platform at 1xwin.bio.

By registering an account with 1xwin, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not create or continue to use a 1xwin account.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, 1xwin is the Personal Information Controller (PIC) responsible for your personal data collected through the 1xwin Platform.

Our designated Data Protection Officer (DPO) can be reached via the contact channels listed in Section 14 of this Policy. The DPO is responsible for ensuring that 1xwin's data processing activities comply with applicable Philippine privacy law and PAGCOR data protection requirements.

3. Personal Data We Collect

1xwin collects only the personal data necessary for the purposes described in this Policy. The categories of data we collect are as follows:

3.1 Registration Data

• Full legal name as it appears on a Philippine government-issued ID
• Date of birth (to verify eligibility — players must be 21 years or older)
• Residential address in the Philippines
• Email address and Philippine mobile number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Scanned or photographed copy of a valid Philippine government-issued ID (PhilSys, driver's licence, SSS ID, GSIS ID, or passport)
• Selfie or liveness-check image for facial verification, where required
• Proof of address documentation where additional verification is required under PAGCOR or AMLA regulations

3.3 Financial Data

• GCash or PayMaya account reference numbers associated with transactions
• BPI, BDO, or Metrobank account details provided for withdrawal purposes
• Transaction history including deposit amounts, withdrawal amounts, and timestamps

3.4 Usage & Technical Data

• IP address and approximate geographic location at time of login
• Device type, operating system, and browser information
• Pages visited, game sessions, bet history, and session duration
• Cookie identifiers and similar tracking technology data (see Section 7)

3.5 Communications Data

• Records of live chat conversations, email exchanges, and support ticket content with 1xwin customer support
• Survey responses and voluntary feedback submitted through the Platform

4. How We Use Your Personal Data

5. Legal Basis for Processing

1xwin processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to create and maintain your 1xwin account and to process transactions.
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), and other applicable Philippine law.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where you have provided express consent. You may withdraw this consent at any time by updating your notification preferences in account settings.

6. Data Sharing and Disclosure

1xwin does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties solely for the purposes described in this Policy:

• PAGCOR and Philippine regulatory authorities: As required by our operating licence and applicable law.
• Anti-money laundering compliance bodies: Including the Anti-Money Laundering Council (AMLC) where required under RA 9160.
• Payment processors: GCash (G-Xchange, Inc.), PayMaya (PayMongo/Voyager), and Philippine banks (BPI, BDO, Metrobank) to process financial transactions.
• KYC and identity verification service providers: Third-party providers engaged to perform document verification and facial recognition checks.
• Game software providers: Game provider systems receive session and bet data necessary to operate the games you play. These providers are contractually bound to data protection standards.
• IT infrastructure and security providers: Cloud hosting, cybersecurity, and fraud detection vendors operating under data processing agreements.

All third-party service providers who process personal data on 1xwin's behalf are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than providing services to 1xwin.

7. Cookies and Tracking Technologies

1xwin uses cookies and similar tracking technologies to operate the Platform, maintain your login session, detect fraud, and improve user experience. The main categories of cookies we use are:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without breaking core functionality such as 1xwin login sessions and cashier operations.
• Performance and analytics cookies: Collect anonymised data about how players navigate the Platform to help us improve design and performance.
• Security cookies: Used to detect suspicious activity, including login anomalies, bot traffic, and potential account compromise.

You may manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. 1xwin does not use third-party advertising or retargeting cookies.

8. Data Retention

1xwin retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. Specific retention periods are as follows:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR regulations and the AMLA.
• Transaction records: Retained for a minimum of five (5) years following each transaction, in accordance with anti-money laundering record-keeping requirements.
• Customer support records: Retained for three (3) years following resolution of the relevant support interaction.
• Marketing preference data: Retained until you withdraw consent or request deletion, subject to any minimum legal retention requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of your identity.

9. Data Security

1xwin implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 1xwin servers
• Encryption of sensitive data fields at rest in 1xwin databases
• Multi-factor authentication requirements for 1xwin administrative systems
• Regular independent security audits and penetration testing
• Role-based access controls limiting employee access to personal data to those with a business need
• Incident response procedures with mandatory breach notification timelines consistent with Philippine law

In the event of a personal data breach that poses a risk to your rights and freedoms, 1xwin will notify affected players and the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by the Data Privacy Act of 2012.

10. Your Data Subject Rights

As a data subject under the Data Privacy Act of 2012, Filipino players have the following rights with respect to their personal data held by 1xwin:

• Right to be informed: The right to know what personal data 1xwin holds about you and how it is used.
• Right of access: The right to request a copy of the personal data 1xwin holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of personal data where there is no longer a legal basis for 1xwin to retain it, subject to regulatory minimum retention requirements.
• Right to object: The right to object to processing of your personal data for direct marketing purposes at any time.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your privacy rights have been violated.

To exercise any of these rights, contact 1xwin's Data Protection Officer through the channels in Section 14. 1xwin will respond to all data subject requests within 30 calendar days, or notify you if a longer period is required.

11. Children's Privacy

1xwin does not knowingly collect personal data from persons under 21 years of age. The Platform is strictly for adults aged 21 and above, as required by PAGCOR. If 1xwin discovers that personal data has been collected from an underage individual, that account will be immediately closed, all personal data will be deleted, and any deposited funds will be returned to the registered payment method.

If you believe a minor has created an account on 1xwin, please contact our support team immediately so we can take prompt corrective action.

12. Cross-Border Data Transfers

Some of 1xwin's third-party service providers — including cloud hosting providers and game software suppliers — may process personal data outside the Philippines. Where such transfers occur, 1xwin ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by the Data Privacy Act of 2012, including contractual data processing agreements incorporating the NPC's standard contractual clauses where applicable.

13. Updates to This Privacy Policy

1xwin may update this Privacy Policy periodically to reflect changes in our data practices, PAGCOR requirements, or Philippine privacy law. Material changes will be communicated to registered players via email to the address on file, or via a prominent notice on the Platform, no fewer than seven (7) days before the revised Policy takes effect.

The "Last updated" date at the top of this page will always reflect when the most recent revision was made. We encourage you to review this Policy periodically. Continued use of 1xwin following the effective date of any revision constitutes your acceptance of the updated Policy.

14. Contact & Complaints

For any questions about this Privacy Policy, to exercise your data subject rights, or to raise a privacy-related concern, please contact the 1xwin Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly on the 1xwin Platform
• Email: [email protected]

If you are not satisfied with 1xwin's response to a privacy complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.