This Privacy Policy explains how MFI Investments Limited (“1Win”, “we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you use our website 1win-bets.ng and related services. By accessing our platform, you agree to the practices described in this policy.
1. Information We Collect
We collect several types of information to provide and improve our services:
1.1 Personal Information You Provide
When you register an account or use our services, you may provide us with:
Account registration details including your full name, email address, phone number, date of birth, and residential address. We also collect identity verification documents such as government-issued ID (NIN, international passport, driver’s license), proof of address, and Bank Verification Number (BVN) for Nigerian users.
Financial information includes your bank account details, payment card information, and transaction history. We may also collect your preferred payment methods and withdrawal preferences.
1.2 Automatically Collected Information
When you access our platform, we automatically collect technical data including your IP address and approximate location, device type, operating system, and browser information. We also gather browsing behavior on our site, pages visited and time spent, and referring websites.
1.3 Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience, remember your preferences, and analyze site traffic. You can manage cookie preferences through your browser settings, though disabling certain cookies may affect site functionality.
2. How We Use Your Information
We process your personal data for several legitimate purposes:
Service Delivery: Creating and managing your account, processing deposits and withdrawals, facilitating betting and gaming activities, and providing customer support.
Legal Compliance: Verifying your identity and age (you must be 18 or older), preventing fraud, money laundering, and other illegal activities, complying with regulatory requirements including those from the Curacao Gaming Authority, and responding to legal requests from authorities.
Security: Protecting our platform from unauthorized access, detecting and preventing suspicious activities, ensuring fair play and preventing abuse of promotions.
Improvement: Analyzing usage patterns to enhance user experience, developing new features and services, and conducting research and analytics.
Communication: Sending transaction confirmations and account updates, notifying you about promotions and offers (with your consent), and providing important service announcements.
3. Legal Basis for Processing
We process your data based on contractual necessity to provide our services to you, legal obligations under gaming regulations and anti-money laundering laws, legitimate interests in operating a secure and efficient platform, and your consent where required, particularly for marketing communications.
4. Data Sharing and Disclosure
We may share your information with payment processors and financial institutions to facilitate transactions, identity verification services for KYC compliance, regulatory authorities and law enforcement when legally required, affiliated companies within our corporate group, and professional advisors including legal, accounting, and auditing firms.
We do not sell your personal information to third parties for marketing purposes.
5. International Data Transfers
As an international company, your data may be transferred to and processed in countries outside Nigeria, including Cyprus where our parent company is registered and Curacao where we hold our gaming license. We implement appropriate safeguards to protect your data during such transfers, including standard contractual clauses and encryption protocols.
6. Data Security
We implement robust security measures to protect your information. Technical measures include SSL/TLS encryption for all data transmissions, secure servers with firewalls and intrusion detection, and encrypted storage of sensitive data including passwords.
Organizational measures encompass strict access controls limiting data access to authorized personnel, regular security audits and vulnerability assessments, and employee training on data protection practices.
Despite these measures, no system is completely secure. We encourage you to use strong passwords and enable two-factor authentication where available.
7. Data Retention
We retain your personal data for as long as your account remains active and for a period afterward as required by law. Specifically, account information is kept for the duration of your account plus 5 years, transaction records are maintained for 7 years as required by financial regulations, and identity documents are retained for 5 years after account closure.
You may request deletion of your data, subject to our legal retention obligations.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your data where legally permissible.
Restriction: Request limited processing of your data in certain circumstances.
Portability: Receive your data in a structured, commonly used format.
Objection: Object to certain types of processing, including direct marketing.
Withdraw Consent: Where processing is based on consent, withdraw it at any time.
To exercise these rights, contact our Data Protection Officer at the details provided below.
9. Marketing Communications
With your consent, we may send you promotional communications about bonuses, new games, and special offers. You can opt out at any time by clicking the unsubscribe link in emails, adjusting preferences in your account settings, or contacting customer support.
We will continue to send essential transactional communications regardless of your marketing preferences.
10. Third-Party Links
Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
11. Children’s Privacy
Our services are strictly for individuals aged 18 and older. We do not knowingly collect personal information from minors. If we discover that a minor has registered an account, we will immediately close it and delete all associated data.
12. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending an email. The “Last Updated” date at the top indicates when the policy was last revised.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
1Win Nigeria
Operated by MFI Investments Limited
Email: [email protected]
Live Chat: Available 24/7 on our website
For data protection inquiries specifically, you may contact our Data Protection Officer through the same channels, clearly marking your communication as a “Data Protection Request.”