Your Data Security at 1Win Kenya: A Clear Privacy Policy🔐

At 1Win Kenya, we know that placing a bet requires trust—trust that your funds are safe and that your personal information is protected. This policy is designed to be fully transparent: we will tell you exactly what data we collect, why it's necessary, and how we keep it secure, all in full compliance with Kenya’s Data Protection Act, 2019 and mandatory Anti-Money Laundering (AML) regulations.

By engaging with the 1Win Kenya platform, you confirm your acceptance of the terms outlined below. This agreement is a fundamental step in maintaining a secure, legal, and fair betting environment for all users.

What Personal Information Do We Collect?

We adhere to the principle of data minimization—we only collect data that is strictly essential for service provision, security, and legal obligations.

Verifying Your Identity (The Legal Requirement)

To protect against fraud and comply with Know Your Customer (KYC) and age verification laws, we must collect:

• Proof of Identity: Your full legal name, date of birth, gender, and your official Kenyan National ID or Passport Number.
• Contact Information: Your primary mobile number (crucial for M-Pesa/Airtel Money links), a valid email address, and your current residential address.

Financial and Transaction Data (For Payouts and Tax)

We track financial data only to process your payments correctly and meet tax mandates:

• Account Activity: A full record of your deposits, withdrawals, specific bets placed, your resulting winnings, and all mandatory 20% Withholding Tax (WHT) deductions.
• Payment Source Details: The specific mobile money number or bank details used to transact with your 1Win account.

Platform Usage Data (For Service Improvement and Security)

This data helps us troubleshoot, personalize your experience, and defend your account from malicious activity:

• Technical Details: Your device's IP address, browser and operating system type, unique device identifiers (especially important for the mobile app), and log-in times.
• Usage Patterns: Details on the pages you view, which games you play, and how you respond to our promotional offers.

The Reasons: Why We Use Your Information

Every piece of data we process has a clear, lawful basis. We do not use your information for reasons outside of the following:

We use your data primarily for:

• Account Management and Contractual Fulfilment: We need your Identity, Contact, and Transaction History to fulfil the betting contract (our Terms & Conditions) with you, including setting up your account and processing payments.
• AML/CTF Compliance & Fraud Prevention: This involves using your Identity, Financial, and Technical data. This is a strict legal obligation under Kenyan AML laws to prevent illegal activity on the platform.
• Protecting the Integrity of the Game: We rely on our legitimate interest to secure the business and ensure fair play. This involves monitoring Technical, Usage, and Identity data.
• Marketing and Personalized Offers: We will only use your Contact and Usage data for promotions if you provide us with your explicit consent (opt-in).
• Dispute Resolution and Legal Defence: In case of an argument or legal claim, we may need your Transaction History and Correspondence to legally defend ourselves or resolve the issue.

Compliance Note: Kenyan laws, particularly those related to Anti-Money Laundering (AML) and tax, are strict. They mandate that we confirm your identity and monitor large or suspicious transactions. This is a non-negotiable legal requirement.

We Never Sell Your Personal Data

Your data is a serious responsibility, not a commodity. We only share your information under strictly controlled circumstances:

• Government & Regulators: Mandatory sharing with the Betting Control and Licensing Board (BCLB), the Kenya Revenue Authority (KRA) for tax reporting, and the Financial Reporting Centre (FRC) for financial compliance checks.
• Payment Providers: Sharing necessary transaction details with M-Pesa, Airtel Money, and banks to ensure your deposits and withdrawals are processed successfully.
• Anti-Fraud Partners: We use vetted third parties to screen IDs and financial data against global and local fraud databases to protect your account.
• Legal Mandates: We comply with any valid and legally binding request from a Kenyan court or government authority.

How We Keep Your Data Safe

We employ robust technical and organizational measures to safeguard your information:

• Advanced Encryption: All data transmissions (login, payment, etc.) are secured using SSL/TLS encryption.
• Access Control: We operate under a strict "least privilege" principle—only employees who require specific data to perform their job duties can access it.
• Firewalls and Monitoring: Our systems are protected by advanced firewalls and continuously monitored to detect and prevent unauthorized access.

Data Retention: How Long We Keep Records

We cannot simply delete your data immediately upon request; legal mandates dictate a minimum retention period:

• The Mandatory 7-Year Rule: For all core KYC and Transaction records, we are legally required to retain them for a minimum of seven (7) years after you close your account. This is a strict requirement under Kenyan tax and AML legislation.
• Marketing Data: If you withdraw your consent for marketing, we will delete your contact details from our marketing lists promptly.

Your Rights Under the Kenyan Data Protection Act

Under the Kenyan Data Protection Act, you have powerful rights concerning your personal data. We are committed to upholding them:

• Right to be Informed: We must clearly tell you what data we collect and why (which we have done in this policy).
• Right of Access: You can formally request a copy of the personal data we hold about you. We commit to responding to your access request within the legally mandated timeframe.
• Right to Rectification: If you notice any incorrect or outdated data, you have the right to ask us to correct or update it immediately.
• Right to Object to Marketing: You can withdraw your consent for us to use your data for direct marketing at any time.
• Right to Erasure (The "Right to be Forgotten"): You can request to close your account and have your data deleted. Important: Our legal obligation to retain KYC/Transaction data for 7 years for AML and tax compliance overrides the immediate right to erasure for these core records.
• Right to Lodge a Complaint: If you believe we have misused your data, you have the right to file a formal complaint with Kenya's Office of the Data Protection Commissioner (ODPC).

FAQ