How We1Win Handles Your Personal Data

Four categories, and the first two are the ones you provide directly.

Registration details: the username you choose, your password in encrypted form, your mobile number and your real name.

Payment details: the bank account or e-wallet you link for deposits and payouts, held so that the name on it can be matched against the name on the account.

Activity data: your deposits, withdrawals, bets and claimed bonuses, which together form the transaction and bet history visible in your account.

Technical data: device type, operating system, browser and the information needed to keep a session running and to detect unusual access.

Nothing beyond what those purposes require is asked for at registration.

Five purposes.

Identifying you, so that an account and a payout belong to the person they claim to. Processing payments, which means passing the necessary details to the payment provider handling the transfer. Answering support requests, which needs the account history to be visible to the agent helping you. Detecting fraud and enforcing the account rules, which is what transaction monitoring is for. And telling you about promotions.

The last one is the only optional one. Marketing messages can be turned off by asking support, and doing so changes nothing about the account itself: the offers stay visible in the Promotion section either way.

The site uses cookies, which are small files stored by your browser. They do the practical work of keeping you signed in, remembering the interface language you chose and measuring which pages get used.

Some are essential, meaning the login and the cashier will not function without them. Others are functional, analytical or advertising files, and those can be limited or switched off in your browser settings without breaking the account. What each type does, and how to manage them on a desktop and on a phone, is set out in the cookies policy.

The connection between your device and the platform is encrypted, which is what prevents anything readable being intercepted in transit. Access to stored data is limited to the people and systems that need it for the purposes above.

Data is shared in three directions and no further. Payment providers receive what a transfer requires. Game providers receive what is needed to run a session and settle a round, and they do not receive your payment details. And where a legal obligation applies, information can be disclosed to the extent that obligation requires.

Your data is not sold. Retention periods depend on the obligation a record supports, and the current periods are confirmed on request through support.

Four things you can ask for, all through support.

A copy of the personal data held about you. A correction, where something recorded is wrong, which matters most for the real name, since a mismatch blocks payouts. Withdrawal of consent for marketing, which takes effect for future messages. And deletion of your data.

Deletion has a limit worth stating plainly: records an operator is required to keep, transaction history in particular, cannot be erased on request while that requirement stands. What can be deleted will be, and the rest is explained rather than quietly ignored.

This policy can be updated, and the version on this page is the current one. Changes typically follow a new payment method, a new provider or a change in the applicable rules.

Requests about your data go through live chat, which is the fastest route to the team that can act on them. Ask there for a copy, a correction, an opt-out or a deletion, and keep the reference the chat gives you.

Questions about data go to live chat, open around the clock; the routes are on the customer service page. Verification checks, and what they involve, are covered in the KYC and AML policy.