Your Privacy Commitment: 1Win Kenya Data Protection Policy🛡️

When you choose 1win Kenya, you are entrusting us with your personal data. This policy is our commitment to handling that information with the highest level of care and transparency. We explicitly outline the data we collect and our lawful reasons for doing so, ensuring full adherence to Kenya’s Data Protection Act, 2019, as well as the strict requirements for Anti-Money Laundering (AML) and financial regulation. By using our services, you accept these terms, which establish a safe and responsible environment for all users.

What Personal Data Does 1Win Kenya Collect?

We limit our data collection to what is strictly necessary to operate a secure, legal, and functional betting service.

Registration and Identification Data (The Security Layer)

This information is mandatory for Know Your Customer (KYC) verification and age confirmation:

• Core Identity: Your complete legal name, date of birth, gender, and the unique number from your Kenyan National ID or valid Passport.
• Contact Details: Your registered mobile phone number (used for financial processing via M-Pesa/Airtel Money), current email address, and physical residence address.

Transactional and Financial Data (For Payments and Reporting)

We process this data to manage your funds, process payouts, and comply with tax law:

• Financial History: Detailed records of all your deposits, withdrawals, the specific wagers you place, winnings, losses, and the mandatory 20% tax deductions (WHT).
• Payment Instrument: Identification of the mobile number or bank account used to fund your activity.

Platform Interaction Data (For Service Quality)

This anonymous data helps us deliver and continuously improve the technical operation of the platform:

• Technical Footprint: Your Device IP address, operating system, browser type, and a unique identifier for your device (especially when using the 1Win mobile app).
• Activity Logs: Time and date of logins, pages viewed, features used, and performance data related to promotions.

Our Legal Grounds for Processing Your Information

We do not use your data arbitrarily. Every action involving your information is supported by a defined legal basis or operational necessity:

• To Fulfill Our Contract (Account & Payouts): We require your Identity, Contact, and Transaction data to manage your account and deliver the betting service as per our Terms and Conditions.
• Legal Compliance (AML & Tax): We are legally required by Kenyan law (e.g., AML legislation, KRA tax mandates) to process your Identity, Financial, and Technical data to prevent money laundering and remit taxes.
• Legitimate Business Interests (Fraud & Fairness): We use Technical, Usage, and Identity data to protect our platform and our users against cheating, fraud, and system abuse, ensuring a fair environment.
• User Consent (Marketing): We only use Contact and Usage data to send you promotions and offers if you have given us explicit, revocable consent.
• Legal Claims (Disputes): We may use Transaction History and Correspondence records to resolve disputes and, if necessary, defend our legal position.

Legal Mandate: Due to strict Kenyan financial and gambling laws, verifying your identity (KYC) and monitoring transactions is a non-negotiable obligation. This includes mandatory data retention periods.

Data Sharing: Who We Share Information With

We guarantee that we do not sell your personal information to third parties. Data is shared only when absolutely necessary for regulatory compliance or operational purposes:

• Governmental Bodies: We are compelled to share data with regulatory authorities, including the BCLB (Betting Control and Licensing Board), the KRA (Kenya Revenue Authority) for tax processing, and the FRC (Financial Reporting Centre) for anti-money laundering reporting.
• Payment Processors: We share only the essential transaction details with partners like M-Pesa and Airtel Money to facilitate deposits and payouts.
• Fraud Prevention Services: We engage specialized, secure partners to cross-reference your identification details against known fraud databases.
• Judicial/Legal Orders: We comply with legally binding demands for disclosure from a Kenyan court or authorized government agency.

Protecting Your Data: Our Security Measures

We prioritize the security of your funds and personal data through sophisticated safeguards:

• Data Encryption: We employ industry-standard SSL/TLS encryption to secure all data transmitted between your device and our servers.
• Access Restriction: Access to your data is strictly controlled and granted only to authorized personnel on a "need-to-know" basis to perform their specific duties.
• Firewalls and Monitoring: Our systems are protected by robust firewalls and undergo continuous monitoring to detect and neutralize threats proactively.

Data Retention Period

We are unable to immediately erase your records due to statutory obligations.

• AML/Tax Requirement: We must retain your essential KYC and transaction records for a mandatory period of seven (7) years following the closure of your account, as required by tax and anti-money laundering legislation in Kenya.
• Marketing Data: We remove your data from our marketing systems immediately upon receiving your withdrawal of consent.

Your Rights Under Kenyan Data Protection Law

The Kenyan Data Protection Act grants you specific, enforceable rights concerning your personal information:

• The Right to Be Informed: We must clearly and openly communicate what data we collect and why (fulfilled by this policy).
• The Right of Access: You can request a copy of the personal data we hold about you. We will comply with this request within the legally stipulated timeframe (30 days).
• The Right to Rectification: You can request that we correct any inaccurate or incomplete information we have on file for your account.
• The Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• The Right to Erasure (The "Right to be Forgotten"): While you can request account closure and data deletion, we must legally retain core KYC/transaction data for the mandatory 7-year retention period.
• The Right to Lodge a Complaint: If you believe your data rights have been violated, you can file a formal complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.

FAQ