1ee Privacy Policy – How We Collect, Use & Protect Your Data

1. Introduction

1ee is committed to protecting the privacy and personal data of all users. This Policy sets out in plain terms what information we collect, the purposes for which we use it, with whom we may share it, and the rights available to you as a data subject. We have written this Policy to be readable and clear – not because we are legally required to use simple language, but because we believe every 1ee user deserves to understand what happens with their data.

This Policy applies to all personal data collected via the 1ee website, any mobile-optimised version thereof, and any communications channels operated by 1ee, including our support email system.

2. Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal data is 1ee. Where 1ee engages third-party processors to handle data on its behalf, those processors act under written instructions from 1ee and are contractually bound to handle data securely and only for the specified purposes.

All enquiries regarding this Policy or your personal data should be directed to our support team using the contact information provided at the end of this Policy.

3. Data We Collect

1ee collects personal data in the following categories:

• Identity data: Full name, date of birth, gender, nationality, and copies of government-issued identification documents (such as CNIC or passport) collected during KYC verification.
• Contact data: Email address, Pakistani mobile number, and residential address.
• Account data: Username, encrypted password, account preferences, and responsible gaming settings.
• Financial data: Payment method details (JazzCash account reference, Easypaisa wallet number, bank account information for HBL, UBL, Meezan Bank, Bank Alfalah), transaction history, deposit and withdrawal records.
• Technical data: IP address, device type, browser type and version, operating system, session timestamps, and referral source.
• Usage data: Pages visited, games played, bets placed, session duration, and interaction patterns within the 1ee platform.
• Communication data: Records of correspondence between you and 1ee support staff, including emails and any documents you submit in support of a query or dispute.

We do not collect sensitive categories of personal data (such as health data, biometric data, or political opinions) unless specifically required by law and with your explicit consent.

4. How We Use Your Data

1ee uses your personal data for the following purposes:

• To create and manage your 1ee account and verify your identity;
• To process deposits, withdrawals, and other financial transactions in PKR;
• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations;
• To enforce our 18+ age restriction policy;
• To provide customer support and resolve disputes;
• To detect, investigate, and prevent fraud, cheating, and other prohibited conduct;
• To personalise your 1ee experience where you have consented to such personalisation;
• To send you service-related communications, including account alerts, security notifications, and policy updates;
• To send you promotional communications about 1ee offers and games, where you have opted in to receive such communications;
• To comply with applicable legal and regulatory obligations;
• To improve our platform through aggregated, anonymised usage analytics.

5. Legal Basis for Processing

1ee processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws, including KYC, AML, and age verification requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing for optional communications, preference-based personalisation, and non-essential cookies, where you have given clear, informed consent that can be withdrawn at any time.

6. Data Sharing

1ee does not sell your personal data. We may share your data with the following categories of recipients:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and any other payment provider required to process your transactions. Each is provided only with the data strictly required to execute the relevant transaction.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity documents and check against sanctions lists.
• Technology providers: Cloud hosting, platform infrastructure, and analytics providers who process data on our behalf under data processing agreements.
• Regulatory and law enforcement authorities: Where we are legally required to disclose data in response to a valid legal request, court order, or regulatory investigation.
• Fraud prevention agencies: To detect and prevent financial crime, we may share data with specialised fraud detection services.

All third-party processors engaged by 1ee are subject to written data processing agreements that impose confidentiality obligations and restrict use of data to the specified purpose.

7. Data Retention

1ee retains personal data for as long as your account remains active and for a period of five (5) years following account closure, or for such longer period as may be required by applicable AML regulations or legal proceedings.

Financial transaction records are retained for a minimum of seven (7) years in line with standard financial record-keeping requirements.

Where data is retained solely for legal compliance purposes and no longer needed for service delivery, it is stored in restricted-access archives and not used for any operational purpose.

On expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised.

8. Cookies & Tracking Technologies

1ee uses the following categories of cookies and similar technologies:

• Strictly necessary cookies: Required for the platform to function. These include session management cookies and security tokens. They cannot be disabled without impairing the use of 1ee.
• Performance/analytics cookies: Collect anonymised data about how users interact with the platform to help us identify areas for improvement. These are optional and subject to your consent.
• Preference cookies: Remember your display preferences and language settings to improve your experience on return visits.

You can control non-essential cookies through your browser settings. Clearing browser cookies will reset your preferences. Note that disabling certain cookies may affect the functionality of specific features on 1ee.

9. Security Measures

1ee implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Transport Layer Security (TLS 1.3) encryption on all data in transit;
• AES-256 encryption for sensitive data stored at rest;
• Password hashing using bcrypt with per-user salts;
• Multi-factor authentication options for account access;
• Regular penetration testing and vulnerability assessments;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Incident response procedures with defined notification timelines.

Despite these measures, no system is completely immune to security incidents. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 1ee will notify affected users without undue delay.

10. Your Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by 1ee:

• Right of access: Request a copy of the personal data 1ee holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to restriction: Request that 1ee restrict processing of your data in certain circumstances.
• Right to data portability: Receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via the email address in the footer of this page. We will respond within 30 calendar days. We may request identity verification before processing a data rights request.

11. Children

1ee strictly prohibits access by anyone under the age of 18. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that personal data of an underage individual has been collected, we will delete it immediately and close the associated account.

Parents or guardians who believe their child has created a 1ee account should contact our support team immediately using the contact details provided at the foot of this page.

12. International Data Transfers

1ee's platform infrastructure may involve the transfer of personal data to servers or service providers located outside Pakistan. Where such transfers occur, 1ee ensures appropriate safeguards are in place, including contractual clauses that require recipients to protect data to a standard equivalent to that applied by 1ee.

By using the 1ee platform, you acknowledge that your data may be processed in jurisdictions outside Pakistan. We do not transfer data to jurisdictions that lack adequate data protection frameworks without implementing appropriate contractual or technical safeguards.

13. Changes to This Policy

1ee may update this Privacy Policy from time to time to reflect changes in our data practices, platform functionality, or applicable law. Material changes will be communicated to registered users via email or in-platform notification at least 7 days before the revised Policy takes effect.

The date of the most recent revision is shown at the top of this page. Your continued use of the 1ee platform following the effective date of a revised Policy constitutes acceptance of the changes.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 1ee holds about you, please contact our support team. Our support email address is displayed in the footer of this page. We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days.

For responsible gaming queries, please visit our Responsible Gaming page which provides additional contact routes and support resources.