Privacy Policy for 1win Kenya

Table of Contents

Privacy Policy for 1win Kenya

Last Updated: September 22, 2025

1. Introduction

Welcome to 1win Kenya (https://onewin.ke/), hereafter referred to as "we," "us," or "our." We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our sports betting and casino game services ("Services"). This policy is drafted in compliance with the Kenyan Data Protection Act, 2019 (DPA) and other applicable regulations.

2. Information We Collect

We collect various types of personal data to provide and improve our Services, and to meet our legal obligations. The data we collect includes:

Personal Identification Data: Your full name, date of birth, gender, national ID or passport number, and contact details such as email address and phone number.
Financial Data: Information related to your payment methods, such as mobile money details, credit/debit card numbers (processed securely by our payment partners), and your transaction history on our platform.
Technical & Usage Data: Your IP address, browser type and version, device information, login data, and details of your activity on our website, including bets placed and games played.
Verification Data (KYC): Information required to verify your identity and comply with anti-money laundering (AML) regulations. This may include copies of your identification documents.
Communications Data: Records of your correspondence with our customer support team via email, chat, or phone.

3. How We Use Your Data

Your personal data is used for the following purposes, based on a lawful basis for processing:

To Provide Services: To register and manage your account, process bets, and handle financial transactions. (Basis: Performance of a contract)
To Comply with Legal Obligations: To perform age and identity verification, conduct fraud prevention checks, and adhere to responsible gaming and anti-money laundering regulations. (Basis: Legal obligation)
For Customer Support: To respond to your inquiries and resolve any issues you may have. (Basis: Performance of a contract)
To Improve Our Platform: To analyze usage data for service improvement, website optimization, and to personalize your user experience. (Basis: Legitimate interest)
For Marketing: To send you information about promotions, bonuses, and special offers. We will only do this with your explicit consent, and you can opt-out at any time. (Basis: Consent)

4. Data Sharing and Third Parties

We do not sell your personal data. However, we may share your information with trusted third parties under specific circumstances:

Payment Service Providers: To securely process your deposits and withdrawals.
Identity Verification Services: To comply with our Know Your Customer (KYC) and legal obligations.
Regulatory Authorities: To comply with legal requests from government bodies, law enforcement, or regulatory agencies as required by law.
Analytics Providers: To help us understand and improve our Services. These parties are contractually obligated to protect your data.

If we transfer data outside of Kenya, we will ensure that appropriate safeguards are in place to protect your data in accordance with the DPA, 2019.

5. Data Security and Storage

We implement robust technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include SSL encryption for data transmission, secure servers, and strict access controls. We will retain your personal data only for as long as is necessary for the purposes set out in this policy, or as required to comply with our legal and regulatory obligations.

6. Your Rights as a Data Subject

Under the Kenyan Data Protection Act, 2019, you have the following rights regarding your personal data:

The Right to Access: You can request a copy of the personal data we hold about you.
The Right to Rectification: You can request the correction of inaccurate or incomplete data.
The Right to Erasure: You can request the deletion of your personal data, subject to our legal and regulatory retention requirements.
The Right to Restrict Processing: You can request that we limit the way we use your data.
The Right to Object: You can object to the processing of your data for certain purposes, such as direct marketing.
The Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact our support team. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya if you believe we have infringed upon your rights.

7. Use of Cookies

Our website uses cookies to enhance functionality, analyze performance, and improve your user experience. Cookies are small text files stored on your device. We use essential, functional, and analytics cookies. For detailed information, please refer to our separate Cookie Policy.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.