Privacy Policy — How 1up Protects Your Personal Data

01 Who We Are

This Privacy Policy applies to the 1up platform, accessible at 1up.wine, including the website and the 1up mobile application for Android and iOS. References to "1up", "we", "us", or "the Platform" throughout this document refer to the operating entity behind the 1up brand.

1up is a sports betting and online gaming platform built specifically for players in Pakistan. The platform supports PKR-denominated accounts, local payment methods including JazzCash, Easypaisa, and Raast, and content centred around cricket, PSL, T20, football, esports, live casino, slots, and bingo.

This Privacy Policy governs how personal data belonging to registered players, website visitors, and app users is collected, stored, used, and managed. By using the Platform in any capacity, you acknowledge that you have read and understood this Policy.

02 Data We Collect

1up collects personal data through several channels — at registration, during account verification, through your use of platform features, and automatically via technical systems. Below is a breakdown of the categories of data collected.

Category	Examples	When Collected
Identity Data	Full name, date of birth, CNIC number (for verification)	At registration and during KYC verification
Contact Data	Email address, mobile number	At registration
Account Data	Username, password (hashed), account preferences	At registration and throughout account use
Financial Data	Deposit and withdrawal history in PKR, payment method references	With each transaction
Gaming Activity Data	Bets placed, games played, session duration, wins and losses	Throughout platform use
Technical Data	IP address, device type, browser, operating system, app version	Automatically on each visit or session
Communication Data	Support chat logs, email correspondence, complaint records	When you contact support

We do not collect data beyond what is necessary for the purposes described in this Policy. You are not required to provide data beyond what is needed for the specific feature you are using, though some features — such as withdrawals — require identity verification before they can be unlocked.

03 How We Use Your Data

The personal data 1up holds about you is used for the following purposes:

• Account management: to create, maintain, and secure your player account on the Platform.
• Identity verification: to confirm you are an adult (18+) and to verify the accuracy of the details you provided at registration.
• Transaction processing: to process deposits and withdrawals in PKR via JazzCash, Easypaisa, Raast, bank transfer, and other supported payment methods.
• Responsible gaming: to monitor gaming patterns, identify signs of problem gaming behaviour, and apply or enforce the responsible gaming tools you have set on your account — including deposit limits, loss limits, and self-exclusion.
• Fraud prevention and security: to detect and prevent fraudulent activity, unauthorised account access, and abuse of bonuses or promotions.
• Customer support: to handle queries, complaints, and disputes relating to your account, deposits, withdrawals, and gaming activity.
• Platform improvement: to understand how players use the Platform and improve features, performance, and the overall experience for players in Pakistan.
• Legal compliance: to meet any obligations required under applicable laws and regulations relating to the operation of an online gaming platform.
• Communications: to send you account-related notifications, security alerts, and — where you have opted in — promotional information about offers on the Platform.

1up does not use your data for automated decision-making that produces legal or similarly significant effects without human review. If you receive a decision about your account that you believe was made incorrectly, you can contact support to request a manual review.

04 Payment Data and PKR Transactions

All financial transactions on 1up are conducted in Pakistani Rupees (PKR). When you deposit or withdraw using JazzCash, Easypaisa, Raast, bank transfer, or a debit or credit card, your transaction is processed through the relevant payment provider's systems.

1up retains transaction reference numbers, amounts, timestamps, and the payment method type associated with each transaction. Full payment credentials — such as your JazzCash PIN, Easypaisa wallet credentials, or card numbers — are not stored by 1up. These are processed directly by the payment provider under their own security and privacy frameworks.

Transaction records are retained for the period necessary to meet our obligations relating to account management, dispute resolution, and financial record-keeping. During account verification, we may ask for proof of payment method ownership — for example, a screenshot of a JazzCash transaction confirmation — to confirm that the payment method belongs to you.

05 Cookies and Tracking Technologies

The 1up website and mobile app use cookies and similar tracking technologies to support the platform's functionality and improve the user experience. Here is what these technologies do and why they are used.

• Essential cookies: These are required for the Platform to function. They maintain your login session, remember your language preferences, and ensure that security features operate correctly. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These track how players navigate the Platform — which pages are visited, how long sessions last, and where technical errors occur. This data is used in aggregate to improve platform performance and is not linked to your personal identity.
• Functional cookies: These remember your preferences — such as your preferred deposit method or notification settings — so you do not have to re-enter them each time you log in.

When you first visit the 1up website, you will be presented with a cookie consent notice. You can manage your cookie preferences through your browser settings at any time. Disabling non-essential cookies will not affect your ability to place bets, deposit, or withdraw, but may affect some personalisation features.

The 1up mobile app uses similar device-level tracking technologies to maintain your session, store preferences, and monitor app performance. These do not access your device's contacts, camera, or other unrelated data .

06 Sharing Your Data

1up does not sell your personal data to any third party. However, to operate the Platform and provide you with a full range of features, we do share certain data with trusted service providers and partners under strict data processing agreements. Below are the categories of third parties who may receive your data and the reason for sharing.

• Payment processors: JazzCash, Easypaisa, Raast, and banking partners receive transaction data to process your PKR deposits and withdrawals. Each payment provider operates under its own privacy policy and security standards.
• Identity verification providers: Where additional identity checks are required — for example, to verify your CNIC or confirm your address — we may use a third-party verification service. These providers receive only the minimum data necessary to complete the check.
• Game software providers: Slot games, live casino, and bingo titles on the Platform are supplied by third-party gaming software providers. Your gaming session data — stakes, results, session length — is shared with the relevant provider to operate the game and settle results correctly.
• Customer support platforms: Support chat and ticketing systems may be operated using third-party software. Communication data you share with support is stored within these systems under appropriate data security standards.
• Analytics providers: Aggregated, anonymised usage data may be processed by analytics platforms to help us understand platform performance. This data cannot be used to identify individual players.
• Legal and regulatory authorities: Where required by applicable law, or in response to a valid legal request, 1up may disclose your data to law enforcement, regulatory bodies, or other authorities. We will inform you of such disclosure where we are legally permitted to do so.

All third-party service providers who process personal data on 1up's behalf are required to handle that data in accordance with appropriate data security and confidentiality standards. We do not permit them to use your data for their own marketing purposes.

07 Data Retention

1up retains your personal data for as long as your account is active and for a defined period after account closure. The retention periods for different categories of data are guided by the purpose for which the data was collected and applicable record-keeping requirements.

• Account and identity data: Retained for the duration of your active account and for a period after account closure to support dispute resolution, fraud investigation, and compliance with record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction to support financial record-keeping and potential audit requirements.
• Gaming activity data: Session and bet history is retained for the duration of your account and for a period after closure. This data supports responsible gaming monitoring, dispute resolution, and platform auditing.
• Support correspondence: Communication records with the support team are retained for a period sufficient to allow for follow-up on unresolved matters and to maintain a complete history of your account interactions.
• Technical and log data: System logs, IP records, and security event data are retained for a shorter period sufficient for security monitoring and fraud investigation.

When data is no longer required for any active purpose, it is securely deleted or anonymised so that it can no longer be linked to your identity. Requests for early deletion of your data are handled under the Your Rights section below.

08 Data Security

Keeping your personal data secure is a fundamental responsibility that 1up takes seriously. The Platform applies a range of technical and organisational security measures to protect your data against unauthorised access, loss, or misuse.

• Encryption: Data transmitted between your device and the 1up Platform is encrypted using industry-standard TLS protocols. Your password is stored in hashed form — not as plain text — so that even internal staff cannot read it.
• Access controls: Access to player data within 1up's internal systems is restricted to staff who need it to perform their specific role. Access logs are maintained and reviewed.
• Session security: Login sessions are managed with secure, expiring tokens. If your session is inactive for a defined period, you will be automatically logged out to reduce the risk of unauthorised access on shared devices.
• Fraud monitoring: Automated systems monitor for unusual account activity — such as logins from new devices or locations, multiple failed login attempts, or large unexpected transactions — and flag these for review.
• Secure payment handling: As described in the Payment Data section, 1up does not store raw payment credentials. All PKR payment processing flows through the payment provider's own secure infrastructure.

09 Your Rights Over Your Data

As a player on 1up, you have meaningful rights over the personal data the Platform holds about you. These rights can be exercised by contacting our support team through the help section of the Platform.

• Right to access: You can request a copy of the personal data 1up holds about you, including your account details, transaction history, and gaming activity records.
• Right to correction: If any of the personal data we hold about you is inaccurate or out of date — for example, a change in your contact number or email address — you have the right to request that it be corrected.
• Right to deletion: You can request that your personal data be deleted. We will action this request where there is no overriding legal or operational reason to retain the data. Note that transaction records may need to be retained for the period described in Section 7 regardless of a deletion request.
• Right to restrict processing: You can ask us to restrict how your data is used — for example, if you have disputed the accuracy of data we hold and are waiting for a resolution.
• Right to data portability: You can request your personal data in a structured, machine-readable format so that it can be transferred to another service if you wish.
• Right to withdraw consent: Where data processing is based on your consent — such as receiving promotional emails — you can withdraw that consent at any time. This does not affect the lawfulness of processing that took place before the withdrawal.

We aim to respond to data rights requests within a reasonable timeframe. In some cases — for example, where a request is complex or involves large amounts of data — the response period may be extended, and we will inform you of this.

10 Children's Privacy

The 1up Platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Age verification is part of the account registration and identity verification process, and any account found to belong to a minor will be closed immediately with the data deleted and any balance forfeited in accordance with our Terms and Conditions.

If you believe that a person under 18 has created an account on 1up, please contact our support team immediately so that the account can be reviewed and closed without delay. If you are a parent or guardian concerned about underage access to gaming content, we recommend using device-level parental controls alongside the responsible gaming tools described on our Responsible Gaming page.

11 Third-Party Services and Links

The 1up Platform integrates with third-party services — payment providers, game software suppliers, and analytics tools — as described in this Policy. Each of these third parties operates under its own privacy policy and data handling practices. 1up is not responsible for the privacy practices of third-party services and recommends that you review their policies directly if you have concerns about how they handle your data.

The Platform does not contain links to external websites for general browsing. Navigation is limited to internal platform pages. Any communication you receive purporting to be from 1up that directs you to an external website asking for login credentials or payment details should be treated as suspicious and reported to our support team immediately.

12 Updates to This Privacy Policy

1up may update this Privacy Policy from time to time to reflect changes in platform features, applicable laws, or how we handle data. When material changes are made, registered players will be notified via the email address associated with their account or through a prominent notice on the Platform before the changes take effect.

The date shown at the top of this page reflects when the Policy was last updated. Continued use of the Platform following an update to this Policy constitutes acceptance of the revised terms. If you do not agree with any change, you may contact support to request account closure in line with our Terms and Conditions.

We encourage players to review this Policy periodically to stay informed about how their data is being handled. The most current version is always available on this page.

13 Contact Us About Privacy

If you have a question, concern, or request relating to this Privacy Policy or the way 1up handles your personal data, you can contact our support team through the help section of the Platform. Our team is familiar with PKR payment queries, Pakistan Standard Time, and the specific needs of Pakistani players.

For responsible gaming concerns, self-exclusion requests, or account restriction queries, please visit the Responsible Gaming page for immediate self-service options, or contact support directly.

For general account questions and platform FAQs, visit the FAQ page. For full details of your rights and obligations as a player, refer to our Terms and Conditions.