1Win Azerbaijan Privacy Policy

1. Introduction

The Privacy Policy applies to all websites owned and operated by the Company and all services provided by the Company, including online and mobile services and products. Throughout this Policy they will be referred to as “Websites” and “Services”.

The term “Personal Data” refers to information that identifies you, such as your name, email address, address, phone number, payment profile details, payment information, support requests, betting history, chat comments, etc. If your identity cannot be established (for example, personal information is aggregated and anonymous), this Policy does not apply.

This Policy may be changed from time to time. In the event of significant changes, we will inform you – usually by placing a notice on the website or sending an email.

2. What data we collect and how

When you visit our website or use our services, we collect and process your personal data. The ways in which we collect data can be categorised as follows:

The information you give us directly

When you visit our website or use any part of it and/or our services, we may ask you to provide us with personal information. For example, we may ask you to provide contact details or certain documents as part of registration, verification and anti-money laundering or anti-fraud procedures, or when you contact us with questions or requests for support.

The information which is collected automatically

We automatically collect certain information about you when you visit our Website, such as your IP address, operating system, device type and settings, browser type and settings, problem reports, system activity, and the date, time and URL of the page from which you linked to our Website. This information is useful to us because it helps us better understand how you use our Website and our services, allowing us to provide you with the best possible service. For example, we may use information from your browser to determine what language you speak.

Some of this information is collected through cookies, similar tracking technologies and third party tools such as Google Analytics.

We also collect data about the transactions you have made with us and your account activity. Information received from third parties

Sometimes we may collect your Personal Information from other sources, such as publicly available materials or from trusted third parties, such as our payment service providers. We use this information to refine your Personal Information to better inform, personalise and improve our Services and to verify the Personal Information you provide to us.

3. Legal basis for processing personal data

When we collect personal data, we process it only if there are legal grounds for such processing specified in the relevant data protection laws. Such legal grounds are:

Implementation of the contract

We may process your personal data if it is necessary for the performance of the contract. For example, when you register on the Website, you enter into an agreement with us, or when we take actions relevant to the contract, such as carrying out transactions on the Websites.

Various laws and regulations impose certain obligations on us. We need to process your Personal Data to comply with these obligations, for example, to comply with anti-money laundering legislation, responsible gambling requirements and the terms of our gambling licence.

Legitimate interests

Your personal data may be processed if we, other companies in our group or third parties have a business or commercial reason to process your personal data.

Your consent

In certain limited cases, we process your Personal Data based on your consent, for example, when it is necessary for direct marketing purposes.

4. How we use personal data

Use of your personal data (Legal basis):

To operate our websites, ensure the proper functioning of our websites and services and provide the Services you have ordered.

To verify that you can use certain Services, including verifying your age, geographic location, identity or opt-out status, and to set up and operate your account.

Comply with legal obligations, responsibilities and duties, comply with laws and requirements relevant to us and the terms of our gaming license, and prevent illegal activities, including money laundering and match fixing.

For customer support, including assistance in resolving technical or payment problems or other issues related to the Websites or Services.

To improve our Websites and Services, test and develop new features and perform technical analysis of our Websites and Services to optimise your interaction with our Websites and provide you with more effective tools.

To prevent, detect and report crimes, protect you, other users and us, for example, to ensure network and information security, mitigate risks, detect and prevent any fraudulent or malicious activity, and ensure fair use of our Websites and Services and compliance with the Agreement.

Analyse and summarise data, produce statistics, in particular anonymised summary analyses and reports for internal use, public distribution or to third parties.

Conduct, administer and confirm financial transactions.

Analyse the risk of fraud on your part and verify your data with third parties, including financial institutions, identity verification agencies and credit information bureaus.

Assess their playing behaviour in order to ensure a responsible attitude towards the game.

To monitor gaming activity and manage our risks and opportunities.

Exercise our rights as set out in the Agreement or other arrangements with you.

Disclose information to our Group companies after restructuring or for internal administrative purposes.

To establish our relationship and communicate with you. This may include: operational communications such as reports of changes to our Websites or Services, information about new features, bonuses and promotions, security updates or assistance with the use of our Websites and Services, marketing communications and the provision of information that you have requested or that we are required to provide to you.

We may need to disclose your personal information to third parties. We may disclose your personal information:

To other companies in our group of companies;

To third party service providers and partners who help us provide the Websites and Services you request, such as those who provide access to or operate the Websites or Services, or who promote our Websites and Services;

Regulators, law enforcement, government authorities, courts, fraud prevention agencies, licensing authorities, local cyber sports authorities or other third parties where we believe it is necessary to comply with relevant laws and requirements or to enforce, establish and protect our legal rights (we will notify such disclosures where possible and appropriate);

Partners or others who have introduced you to us;

Other people, with their consent.

6. International data transmission

When information is processed and transmitted, it may be transmitted and processed in countries other than the one in which you reside. The laws in these countries may be different from what you are used to. If we process personal information in another country, we take precautions to protect your personal information.

For people in the European Economic Area (EEA), this means that your data may be transferred outside the EEA. If your data is transferred outside the EEA, it will be transferred to countries where we have appropriate transfer mechanisms in place to protect your personal data, in particular the application of the European Commission’s standard contractual clauses to contracts with organisations to which the information is transferred.

7. Security

We are committed to protecting your personal data and take appropriate technical and organisational measures, including

Data encryption To protect your personal and financial data, we encrypt all data we exchange with you using the industry standard TLS (Transport Layer Security). Your data is also stored on our servers and transmitted for backup and replication purposes between our data centres in encrypted form.

Restricted Access Only our employees, contractors and agents who need to process this information have access to Personal Data.

Network security. Access to our network space, both external and internal, is protected by a multi-layered security system that includes firewalls, intrusion protection systems and network segmentation. Our security systems are configured, managed and maintained in accordance with best practices. We collaborate with leading security vendors, using their expertise and the threat intelligence they have gathered, to protect our systems.

Secure data centres. Our servers are located in industrial grade hosting facilities that use robust security systems to prevent physical access to the protected servers. These security systems include continuous 24/7 monitoring and surveillance, on-site security personnel presence and regular security checks. We use geographically separated data copies to minimise the risk of data loss or disruption.

Security monitoring. Our security service continuously monitors the security, event logs, notifications and alerts of all systems to identify and address threats.

8. Data storage

Some of the data you can delete at any time, some is deleted automatically and some data is stored for a longer period of time if necessary. When deleting data, we ensure that your data is securely and completely deleted from our servers or is only retained anonymously. Information is stored until it is deleted.

We offer a range of services that allow you to correct or delete data associated or stored in your account. For example, you can:

Change the information about yourself,

Delete a line in the chat room, or

Delete the account completely.

In accordance with regulatory requirements and legal obligations, and to avoid any claim against us, we retain your account details until your account is closed and thereafter for a period of five years after your closure (where applicable) or after your last contact with us.

Information is retained for long periods of time for limited purposes

In some cases, business and legal requirements may require us to retain certain information, for specific purposes, for an extended period of time. For example, if an individual has opted out of our services, we retain their Personal Information longer as required by Responsible Gaming.

The reasons for keeping some data longer include

Protect you, others and us from fraud, abuse, criminal activity and unauthorised access, such as when someone is suspected of committing fraud, engaging in match fixing or money laundering.

Compliance with tax laws, anti-money laundering measures and other financial requirements, performing accounting or assisting in the resolution of disputes, such as when dealing with financial transactions, including

Receiving your deposit and paying your money.

Compliance with an applicable law, regulation, court proceeding or executive government request, or the need to enforce agreements, including investigation of possible violations.

Ensuring continuity of our services to you and other users.

If you have contacted us directly, for example through the support channel or by submitting a feedback or error report.

We undertake to protect the privacy of your personal data and to collect, use and/or store it in accordance with applicable data protection laws and requirements and, in particular, the provisions of data protection laws (country) and other applicable International Data Protection Regulations, such as the EU Regulation 2016/679 General Data Protection Regulation (GDPR) (hereinafter “Data Protection Laws”).

9. Your rights

You have certain rights in relation to your personal data:

Find out what personal information we hold about you.

Correct or ask us to correct inaccurate personal information about you.

Have access to your personal data and request a machine-readable copy, for example if you want to have it backed up.

Object to the processing of your personal data where we have a legitimate interest in doing so. Please note that we may continue to process your personal data where there are other relevant legitimate grounds or where there are compelling reasons to continue processing the data in our interest over which your rights, interests and freedoms do not prevail.

Ask us to delete your personal data, including deleting your account, only if (1) we no longer need to process it, (2) you have withdrawn your consent to processing and your consent was the lawful basis for processing your data, (3) you have exercised your right to object and no lawful basis for further processing your data prevails, (4) your personal data has been processed

unlawfully, (5) or the erasure of your personal data is necessary to comply with a legal obligation. Please note that we will not delete and will continue to retain data, in particular if the retention of personal data is necessary to comply with our legitimate interests that override your claim, to comply with legal obligations or, if necessary, to form, exercise or defend against legal claims.

Ask us to restrict the processing of Personal Data in certain circumstances.

Withdraw consent earlier if your consent was necessary for the processing of Personal Data. Please note that we may continue to process your Personal Data for other appropriate legal reasons.

Oppose direct marketing and customer personality profiling (insofar as it relates exclusively to direct marketing). With regard to marketing messages, you can ask us to stop sending them at any time – just follow the instructions contained in the marketing message or send a request to [email protected].

Complain to your local data protection authority.

Note that not all of the above rights are absolute.

You can exercise your rights at any time by changing your account settings or by sending an email to [email protected].

You will need to prove your identity in order to carry out the actions requested.

If you are not satisfied with the way we handle your Personal Data, please notify us at [email protected]. We will consider your complaint and try to provide you with a response within a reasonable time.

10. Using Google Analytics

We use Google Analytics to collect information about how you use this website. Google Analytics collects the following information: your visit to the website, which pages you view when doing so and which other websites you use before visiting our website. Google Analytics only collects the IP address assigned to you on the day you visited the website, but not your name or other identifying information. We do not combine the information collected by Google Analytics with your personal information. Although Google Analytics places a permanent cookie on your browser to identify you as a unique user the next time you visit this website, this cookie cannot be used by anyone other than Google. Google’s ability to use and share information collected by the Google Analytics tool about your visits to the website is restricted by the Google Analytics Terms of Service and the Google Privacy Policy. You can prevent Google Analytics from recognising you when you revisit the website by disabling cookies in your browser.

11. SSL encryption

All critical communications between the user and the site are encrypted using the Secure Socket Layer (SSL) protocol with a 256-bit key.