1win Privacy Policy in Canada

• Identification information is collected when users create an account, such as name, date of birth, address, email, telephone number, and account credentials, to verify identity and enable access to the services;
• Transaction and payment information, including deposits, withdrawals, betting records, and payment method details, is processed to operate the gaming account, meet anti-money laundering obligations, and complete financial operations securely;
• Technical and usage data, such as IP address, device identifiers, browser type, operating system, and interaction logs, is recorded to maintain platform security, prevent fraud, and improve online performance;
• Verification documents, such as copies of identification, proof of address, and payment method ownership, may be requested to comply with age verification, know-your-customer, and regulatory requirements in Canada and other relevant jurisdictions;
• Communication information, including emails, chat logs, call recordings, and complaint records, is stored to respond to user requests, resolve disputes, and support responsible gaming measures;
• Preference and setting information, including language choice, notification settings, and responsible gambling limits, is retained to tailor services to each user and support safer play;
• Security measures include encryption of sensitive data in transit and at rest, access controls, multi-factor authentication where applicable, regular security assessments, and staff training on privacy procedures;
• Organisational safeguards include role-based access to personal information, confidentiality obligations for employees and contractors, documented retention schedules, and incident response procedures for potential data breaches;
• Data is stored on secure servers operated by the platform or trusted providers that apply industry-standard security controls and follow contractual data protection requirements;
• Personal information is kept only for as long as necessary to fulfil legal obligations, provide services, manage disputes, and satisfy regulatory record-keeping rules, after which it is securely anonymised or destroyed.

1win users have the right to request access to their personal information, ask for corrections of inaccurate data, and, in some circumstances, request deletion or restriction of processing. Users may also object to certain types of processing and can withdraw consent for specific activities where consent is the legal basis, subject to legal or regulatory limits.

The handling of personal data follows applicable privacy and data protection laws in Canada, as well as international standards such as the General Data Protection Regulation (GDPR) where relevant. The platform aims to apply consistent safeguards for users in all provinces and territories, while respecting local gambling and privacy regulatory frameworks.

Personal data collected from users in Canada is used by 1win to operate and manage gaming accounts, verify identity, and provide access to online casino and sportsbook services. Information is processed to handle deposits, withdrawals, bet settlement, and bonus management, and to deliver a stable, secure betting environment. Data is also used for customer support, technical maintenance, analytics, and product development to improve the quality and reliability of the services. Marketing communications may be sent in line with user preferences and applicable consent rules, and users can adjust or opt out of these communications at any time. In addition, information is processed to comply with anti-money laundering legislation, fraud prevention obligations, and other applicable regulations.

• Manage user registration, authenticate logins, maintain account profiles, and provide access to games, betting markets, and related services;
• Process financial transactions, including deposits and withdrawals, verify payment methods, and maintain accurate financial and betting records;
• Conduct age verification, identity checks, and ongoing monitoring to satisfy know-your-customer and anti-money laundering obligations;
• Monitor gameplay and account activity to detect and prevent fraud, abuse, bonus misuse, and suspicious behaviour that could affect the integrity of the platform;
• Provide customer support through email, chat, and other communication channels, investigate complaints, and manage dispute resolution;
• Analyse technical and behavioural data to maintain site performance, fix bugs, enhance security controls, and improve user experience on the online platform;
• Develop and refine products and services, including personalisation of content, responsible gambling tools, and interface improvements based on aggregate analytics;
• Send service notifications, account alerts, security messages, and, where permitted, promotional materials and offers that may be of interest to the user;
• Enforce terms and conditions, protect legal rights, and cooperate with law enforcement, regulators, and dispute resolution bodies when justified;
• Fulfil legal, regulatory, tax, and accounting obligations, including record keeping and reporting required by gaming and financial regulators.

All processing of personal information is based on lawful grounds, such as user consent, performance of a contract, compliance with legal obligations, or legitimate interests that do not override user rights and freedoms. The platform aims to ensure transparency by informing users about key purposes before data is collected or used for new activities, and by offering accessible ways to manage privacy preferences.

Users can access their personal information by logging into their account and reviewing the profile, payment, and settings sections available on the platform. Most basic details, such as contact information and preferences, can be updated directly by the user to keep records accurate and current. Where certain data cannot be edited online, users may contact customer support to request corrections, updates, or, in some cases, deletion, subject to legal and regulatory retention duties. Requests to restrict processing or obtain a copy of stored personal data can also be submitted through support channels or the designated privacy contact, and they will be handled within a reasonable period, in line with applicable law. By creating and maintaining an account, users acknowledge that security checks may be carried out using their information, and that payment and financial data may be processed by trusted electronic service providers to complete transactions and comply with banking and anti-money laundering rules. The platform maintains technical and organisational safeguards to protect privacy throughout these processes, limiting access to authorised personnel and partners that require the information to operate the services securely.

The 1win online casino and sportsbook services are intended only for users who are at least 18 years old, or any higher age required by applicable provincial gambling laws. Persons who do not meet the legal age requirement are not permitted to open an account, place bets, or use any real-money gaming services. Age cannot be fully verified without supporting documents, so users are required to provide accurate information and cooperate in verification checks when requested. Parents and legal guardians who believe that a minor has provided personal data are encouraged to contact support so that appropriate action can be taken.

• Age verification procedures, including requests for identity documents, may be applied at registration, during withdrawals, or at any other time deemed necessary;
• If it is discovered that a user is under the legal age, the account will be closed, betting activity will be reviewed, and personal information will be removed or anonymised in line with legal obligations;
• Any balances associated with an underage account will be handled in accordance with applicable law and regulatory guidance;
• Parents or guardians may request deletion of personal data relating to a minor by providing sufficient proof of their relationship and the minor’s identity;
• Educational information about responsible gambling and age restrictions may be displayed on the site and in communications to support the protection of young persons;
• Partnerships and marketing activities are structured to avoid targeting individuals under the legal gambling age in Canada.

Personal information collected from users in Canada may be processed and stored by 1win on servers located outside the province or outside Canada, in countries where technology, payment, analytics, or customer support partners operate. Such transfers are required to deliver reliable online services, provide international payment options, and maintain secure infrastructure. By using the site and creating an account, users consent to their personal data being transferred and processed in these other jurisdictions, subject to appropriate protections. All partners that receive personal information are required to preserve confidentiality and apply adequate technical and organisational safeguards.

• Data may be stored or processed in countries that do not have the same privacy laws as Canada, but contractual clauses and safeguards are used to maintain a similar level of protection;
• Cross-border transfers are limited to partners and group companies that are necessary for operating accounts, processing payments, providing support, or delivering technology solutions;
• Service providers handling personal information are selected based on their security standards, compliance practices, and ability to meet privacy commitments;
• Agreements with third parties include confidentiality obligations, data protection requirements, and restrictions on using personal information for unrelated purposes;
• Where required, additional measures such as data minimisation, pseudonymisation, or encryption are applied before data is transferred internationally;
• Users can contact 1win’s privacy contact point to obtain further information about international transfers and the safeguards used to protect their information.

This Privacy Policy describes how personal information is collected, processed, and protected, but it does not create rights or obligations beyond those required by applicable law and the terms and conditions of the services. The disclaimer contained in this section explains that, to the extent allowed by law, certain limitations may apply to liability, scope of application, or interpretation of the rules set out in this document. The provisions apply once the user accepts the policy, including through registration, account use, or other forms of express or implied agreement.

• In the event of a conflict between this Privacy Policy and mandatory legal provisions, the relevant law will prevail while the remaining parts of the policy stay in effect;
• The platform is not responsible for incorrect, incomplete, or misleading information provided by users, and certain rights may be affected where the identity cannot be verified;
• Reasonable efforts are made to maintain up-to-date security measures, but no online system can guarantee absolute protection against unauthorised access or incidents;
• Rights to access, correction, deletion, or portability may be limited by legal, regulatory, or investigative requirements that require retention or restricted disclosure of certain records;
• Any waiver of rights or obligations not expressly stated in this document will not be implied and must be confirmed in writing where permitted by law;
• Use of the services after changes to this Privacy Policy signifies acceptance of the revised document, subject to continued compliance with applicable Canadian law.

Cookies are small text files stored on a user’s device when visiting websites or using online services, and they contain information that can be read on later visits. The platform uses cookies and similar technologies to remember user preferences, maintain sessions, enhance security, and understand how visitors navigate the site. These tools support statistical analysis of traffic, help assess behaviour on the site, and contribute to improving design, content, and performance. They are also used for personalisation, such as remembering language or region, and for presenting content that is more relevant to user interests, in line with applicable consent rules. Cookies are stored for a period that generally does not exceed one year, after which they expire or are removed in accordance with internal policies. Users can manage cookie settings through their browser or device controls, but disabling certain cookies may affect access to some features or reduce the quality of the online experience.

Use of the services offered to users in Canada constitutes full acceptance of this Privacy Policy in its current form at the time of access. By registering an account, visiting the site, or using any online features, users agree that their personal information may be collected, used, and processed as described in this document, subject to applicable Canadian law. The operator may update or modify this Privacy Policy from time to time to reflect changes in legal requirements, technological developments, or service features. The most recent version posted on the site replaces all earlier versions, and continued use of the services after an update signifies agreement to the updated policy.

Personal data may be shared with third parties when necessary to provide services, comply with legal obligations, manage disputes, or enforce agreements. This includes sharing information to process payments, conduct identity checks, prevent fraud, support customer service, and meet regulatory reporting requirements. In some cases, data may be provided to public authorities, courts, regulators, or law enforcement when required by law or to protect legitimate interests. Users are informed, either in this Policy or elsewhere on the site, about the categories of organisations that may receive their personal information and the reasons for such sharing. By using the services and providing personal information, users consent to these forms of disclosure as part of normal operations, subject to the safeguards described here.

• Payment service providers, banks, and financial institutions receive relevant information to process deposits, withdrawals, chargebacks, and financial reconciliations;
• Identity verification, fraud prevention, and credit reference agencies may access data to confirm identity, check for financial crime risks, and support responsible risk management;
• Technology and hosting partners process technical and usage data to deliver platform functionality, maintain security, and perform analytics;
• Customer support and communication providers may handle contact details and interaction logs to respond to queries and manage user correspondence;
• Professional advisers, such as lawyers, auditors, and consultants, may review information where required for legal, regulatory, tax, or governance purposes;
• Gaming regulators, financial intelligence units, and other authorities may receive reports or records where required by gambling, anti-money laundering, or counter-terrorist financing laws;
• Dispute resolution bodies, courts, or law enforcement agencies may receive personal information where necessary to handle complaints, claims, or investigations;
• Group companies or successor entities may access personal data in the context of corporate restructuring, mergers, or transfers of business, subject to continued privacy protections.

The site and applications may contain links to external websites, applications, or services operated by third parties that are not controlled by the operator. These third-party destinations have their own privacy policies, terms, and data protection practices, which may differ from the approach described in this document. The operator is not responsible for how external parties collect, use, or protect personal information once users leave the platform. Users are encouraged to review the privacy policies of each third-party site they visit and to consider the risks before providing any personal data or payment information.

• Links to external sites are provided for convenience, information, or access to additional services, but they do not constitute endorsement or control of those sites;
• When a user clicks on a third-party link, any information provided on that external site is subject to the policies and security measures of the third party;
• Users should check the address bar and security indicators in their browser to confirm they are on the intended site before entering login or payment details;
• It is recommended that users read the privacy and cookie policies of third-party websites to understand how their personal data may be collected and processed;
• The operator does not monitor or guarantee the accuracy, completeness, or reliability of information or services offered on external websites;
• Any concerns regarding how a third party handles personal information should be directed to that organisation, using the contact details provided in its own policy;
• Users remain responsible for the decisions they make when interacting with third-party services and should exercise caution when sharing personal or financial details;
• Removal of an external link from the platform may occur at any time, without notice, if it is considered inappropriate or inconsistent with legal or compliance obligations.