Your Privacy Matters
to 1xbwt

1 Data We Collect

When you register for, access, or use the 1xbwt platform, we collect certain personal information about you. The categories of data we collect, and the circumstances under which each category is collected, are described in detail below. We are committed to transparency: if we ever need to collect a new category of data not described in this Policy, we will update this page and notify active account holders before doing so.

Special categories of data: 1xbwt does not intentionally collect sensitive personal data as defined under applicable data protection frameworks — including racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — except where such information is provided voluntarily by a player in a support communication. Any sensitive data disclosed inadvertently in a support context is not recorded as a structured data field and is handled with heightened confidentiality.

2 How We Use Your Data

1xbwt processes your personal data only for lawful, defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process personal data, together with the legal basis for each, are set out below.

• Account creation and management: We use your identity and contact data to create your account, verify your eligibility, and maintain your account in good standing. This processing is necessary to perform the contract between you and 1xbwt.
• Identity and age verification (KYC): We are required to verify that all account holders are aged 18 or above and are who they claim to be. This processing is both a contractual necessity and a legal obligation under applicable anti-money laundering (AML) and responsible gaming requirements.
• Processing deposits and withdrawals: Your financial data is used to process payments via bKash, Nagad, Rocket, and bank transfer in Bangladeshi Taka (BDT). This processing is necessary to perform the contract.
• Fraud prevention and platform security: Technical data and usage data are analysed to detect and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct described in the Terms and Conditions. This processing serves our legitimate interest in maintaining a fair and secure platform.
• Responsible gaming monitoring: Usage data — including session length, deposit frequency, and wagering patterns — is used to identify players who may be displaying signs of problem gambling and to prompt appropriate responsible gaming interventions. This processing reflects both our legal obligations and our ethical commitment to player welfare. See the Responsible Gaming page for full details.
• Customer support: Communications data from live chat and email interactions is used to resolve queries, handle complaints, and improve the quality of our support services. This processing is necessary to perform the contract and serves our legitimate interests.
• Personalisation: With your consent, usage data is used to tailor the platform experience — including game recommendations and display of relevant promotions such as BPL cricket season offers or Eid bonus campaigns — to your preferences and activity history.
• Marketing communications: Where you have opted in, your contact data (email address and/or mobile number) is used to send promotional communications about bonuses, new games, and seasonal events. You may withdraw this consent at any time. We will not send unsolicited marketing if you have not opted in or have subsequently opted out.
• Legal and regulatory compliance: We may process any category of your data as required to comply with applicable laws, respond to lawful requests from authorities, and fulfil our record-keeping obligations (including financial transaction records retained for a minimum of 5 years).

3 Data Sharing

1xbwt does not sell your personal data to any third party. We do not share your personal information with external parties for their own marketing or commercial purposes. However, in order to operate the platform and fulfil our legal obligations, we share limited data with the categories of trusted third parties described below.

• Payment service providers: We share the minimum financial data necessary to process your transactions with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers process your data only in accordance with their own privacy policies and our data processing agreements with them.
• Game technology providers: Casino games available on 1xbwt are delivered by licensed third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session tokens and anonymous game-round identifiers to deliver game content and audit game outcomes. They do not receive your full identity data.
• Identity verification services: During the KYC process, we may share your identity document images and personal details with a third-party identity verification provider for document authentication and age verification. These providers are contractually bound to process the data solely for the verification purpose.
• Analytics and fraud detection tools: We use third-party analytics and risk management software to analyse usage patterns and detect fraudulent behaviour. These tools process technical and usage data in an aggregated or pseudonymised form wherever possible.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory authorities where we are legally required to do so — for example, in response to a court order, a legally binding request under AML regulations, or as part of an investigation into suspected fraud or money laundering.
• Business transfers: In the event that 1xbwt undergoes a merger, acquisition, or transfer of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the terms under which your data will continue to be processed.

4 Cookies & Tracking Technologies

1xbwt uses cookies and similar tracking technologies — including local storage objects and session tokens — to operate the platform, maintain your login session, remember your preferences, and gather analytical data about how players use the site. This section explains what cookies we use and what choices you have.

You can control most cookies through your browser's settings. Disabling strictly necessary or fraud detection cookies will impair the platform's ability to function correctly and may prevent you from logging in. Disabling analytics cookies will not affect your ability to use any feature of the platform.

5 Data Security

1xbwt implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. While no system can guarantee absolute security, we continuously review and update our security practices in line with industry standards.

• TLS/SSL encryption: All data in transit between your device and 1xbwt servers is encrypted using TLS 1.2 or higher. The platform's web address begins with HTTPS, and our SSL certificate is maintained and renewed without interruption.
• Encrypted data at rest: Sensitive fields in our database — including identity document details and financial account references — are stored in encrypted form using AES-256 encryption. Encryption keys are managed separately from encrypted data.
• Access controls: Access to personal data within 1xbwt's internal systems is strictly limited to staff members whose role requires it. All internal access is logged and subject to regular audit review. We apply the principle of least privilege: no employee has access to more data than their role requires.
• Two-factor authentication (2FA): 1xbwt offers 2FA for all player accounts. Our internal systems require 2FA for all staff accessing production data environments.
• Penetration testing and vulnerability management: The 1xbwt platform undergoes periodic security assessments, including vulnerability scanning. Critical vulnerabilities are remediated within defined response timeframes.
• Incident response: In the event of a data breach that poses a risk to affected players, 1xbwt will notify affected account holders within a reasonable timeframe and will take immediate steps to contain and remediate the breach.

6 Data Retention & Deletion

1xbwt retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below reflect the categories of data we hold and the legal or operational basis for retaining them.

When the retention period for a data category expires, 1xbwt will securely delete or anonymise that data so that it can no longer be attributed to any identifiable individual. Where anonymisation is not technically feasible, data is deleted in a manner that renders recovery impossible.

Account closure and deletion requests: If you close your 1xbwt account voluntarily, we will begin the deletion process for data that does not fall within a mandatory legal retention period. Please be aware that financial and identity records subject to AML retention requirements cannot be deleted at a player's request before the end of the applicable retention period, even following account closure. For more details on account closure, refer to the Terms and Conditions.

7 Your Privacy Rights

As a 1xbwt account holder, you hold a number of rights in relation to your personal data. We are committed to honouring these rights promptly and without undue barriers. Below is a summary of the rights available to you and how to exercise them.

• Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed. We will respond to access requests within 30 days of receipt. Requests can be made through your account settings or by contacting the support team via live chat.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly from within your account settings. For identity data that requires documentary evidence to change (such as a legal name change), please contact the support team.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Please note that data subject to mandatory legal retention periods (e.g., AML financial records) cannot be erased until those periods expire.
• Right to restrict processing: In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that we restrict our processing of your data to storage only, without further active use.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where our processing is based on your consent — including consent to marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent for marketing does not affect your ability to use the platform.
• Right to object: You have the right to object to processing based on 1xbwt's legitimate interests where you believe your interests, rights, or freedoms override those interests. You also have an unconditional right to object to processing your data for direct marketing purposes.

8 Policy Updates & Contact

1xbwt reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made — meaning changes that affect how we collect, use, or share your personal data in a way that may impact your rights — we will update the "Last Updated" date at the top of this page and notify active account holders via their registered email address or through an on-platform notification.

For non-material updates (such as corrections of typographical errors, clarifications of existing practices, or minor restructuring of this document for readability), we will update the "Last Updated" date without a separate notification. We encourage you to review this page periodically.

Continued use of the 1xbwt platform after a Privacy Policy update constitutes your acknowledgement of the revised Policy. If you do not agree with the revised terms, you may request account closure by contacting the support team.

Questions about this Privacy Policy: If you have any questions, concerns, or complaints about how 1xbwt handles your personal data, please contact our support team in the first instance via live chat (available 24 hours a day, 7 days a week, in English). Alternatively, you may write to us at [email protected] (plain text — not a clickable link). We aim to respond to all privacy-related queries within 2 business hours during normal operating conditions.

This Privacy Policy should be read alongside the Terms and Conditions and the Responsible Gaming Policy, both of which form part of your agreement with 1xbwt. The FAQ page also contains answers to common questions about account management and data handling.

This Privacy Policy was last reviewed and updated in January 2026. The current version supersedes all previous versions of the 1xbwt Privacy Policy.