1win Moldova Privacy Policy

Privacy and Data Protection

The operator collects and processes personal data only to the extent necessary to provide online casino and sports betting services, to fulfil legal obligations and to ensure the security of the platform.

Types of Personal Data Collected

The following categories of information may be collected and processed:

identification data: surname, first name, date of birth, nationality, copy of identity document (where required by law);
contact details: email address, telephone number, home or residential address;
account details: username, password (stored in encrypted form), account settings and preferences;
transaction data: information on deposits, withdrawals, payment methods used, currency and transaction history;
technical data: IP address, device type, operating system, browser identifiers, access logs and website activity;
gaming and betting data: history of participation in games, stakes, winnings and losses, gaming limits, self-exclusion or voluntary limits;
data required under responsible gaming and anti-money laundering regulations, including additional information obtained as part of KYC (Know Your Customer) procedures.

This data is collected directly from the user, via online forms, through the use of our services, or via authorised third parties, such as payment providers and identity verification services.

Purpose of Data Collection and Legal Basis

Personal data is processed for the following main purposes:

creating, managing and securing the user’s account;
verifying identity and age, and preventing fraud and account misuse;
processing deposits, withdrawals and other financial transactions;
complying with the applicable legislation in the Republic of Moldova, including regulations on gambling, the prevention of money laundering and the financing of terrorism;
ensuring the proper functioning of the website and improving online services;
fulfilling contractual obligations towards the user;
account-related communications, policy updates and mandatory notifications.

Data processing takes place on the basis of one or more legal grounds, such as:

the user’s explicit consent, where required;
the performance of the contract between the controller and the user;
compliance with legal obligations;
the controller’s legitimate interest in protecting the platform, preventing fraud and improving services, whilst respecting the user’s rights.

Technical and Organisational Security Measures

The data controller shall implement appropriate measures to protect personal data against unauthorised access, loss or unauthorised alteration, such as:

encryption of communications between the user’s device and the website;
role-based access control internally and logging of data access;
strict internal confidentiality policies and staff training on data protection;
systems for detecting and preventing suspicious activity and cyber-attacks;
storage of data in infrastructure that complies with recognised security standards.

Users’ Rights

In accordance with the legislation of the Republic of Moldova and the relevant European regulations, users have the following rights in relation to their personal data:

the right of access: to obtain confirmation as to whether data is being processed and, if so, to receive a copy of it;
the right to rectification: to request the correction of inaccurate personal data or the completion of incomplete data;
the right to erasure: to request the erasure of personal data, within the limits permitted by law and retention obligations;
the right to restriction of processing: to request the temporary restriction of the use of data in certain situations;
the right to object: to object to processing based on legitimate interests, if there are grounds relating to their personal circumstances;
the right to data portability: to receive the data in a structured format, where the processing is based on consent or a contract and is carried out by automated means.

Use of the Information Collected

The personal data collected is used strictly for the purposes set out in this policy and is processed in a lawful, fair and transparent manner with regard to each user.

Provision and Management of Services

The information collected is used for:

creating and activating an online account;
verifying identity and eligibility to participate in gambling;
processing payments and withdrawals, and confirming transactions;
managing gaming limits, self-exclusion and other responsible gambling tools;
managing account settings and gaming and betting history.

Platform Improvements and Analysis

Certain technical data and information regarding how the website is used are processed for the following purposes:

monitoring the performance of the online platform;
analysing usage patterns to improve the website’s structure, content and features;
testing and developing new features;
customising certain elements of the interface for more efficient use.

Statistical and aggregated data, which do not allow for the direct identification of the user, may be used for internal reports and risk management analyses.

Announcements and Updates

The operator may use the contact details to:

sending notifications regarding your account, security, changes to the rules or to this document;
sending mandatory information required by law or by the supervisory authorities;
communications relating to customer support and the resolution of enquiries or complaints.

Marketing communications may only be sent with the user’s consent, where required by law, and can be opted out of using the unsubscribe options provided in the messages sent or in the account settings.

Legal Compliance and Risk Management

Personal data may be used for:

compliance with legal and regulatory requirements in the field of gambling and financial services;
fulfilling reporting obligations to the competent authorities, where necessary;
preventing, detecting and investigating fraud, illegal activities or breaches of the terms and conditions;
protecting the legitimate rights and interests of the operator and other users.

Access to Information

The user has the right to access, verify and control the personal information held by the data controller. Access to, updating and deletion of data are carried out in accordance with this policy and the applicable legislation.

Accessing and Updating Data

The user can:

access certain personal data directly from your online account, including profile details, transaction history and certain settings;
update and correct contact details and other information that is incorrect or incomplete via the profile section or by contacting customer support.

For certain sensitive changes (e.g. name, address, identity details), the operator may request supporting documents or additional verification procedures in order to protect the security of the account and to comply with legal obligations.

Deletion and Restriction of Data

The user may request:

the erasure of certain personal data when it is no longer necessary for the purposes for which it was collected and there are no legal obligations to retain it;
the restriction of processing in certain situations (for example, whilst the accuracy of the data is being verified or whilst an objection is being considered).

The operator may be required by law to retain certain data for specified periods, in particular information relating to financial transactions and gaming history, in order to comply with regulations on gambling, accounting and the prevention of money laundering.

Application Procedures

To exercise their rights regarding access, rectification, erasure or restriction, users may submit a request via the official contact channels published on the website. The request must contain sufficient information to identify the data subject. The controller will respond within the time limits laid down by law and may request further information to verify the data subject’s identity.

Security Checks and Payment Details

By using the website and creating an account, the user consents to the following:

personal data is subject to security checks, including checks on identity, transaction history and the source of funds, to the extent permitted by law;
payment data and transaction information are processed by payment service providers, banks, card issuers and other partners involved in payment processing.

These service providers act as data controllers or data processors, as the case may be, and are obliged to ensure the confidentiality and security of the data processed in accordance with the applicable legislation and the agreements entered into.

Data Protection for Minors

The platform is intended exclusively for persons aged 18 or over. Under the legislation of the Republic of Moldova, minors are not permitted to take part in gambling or use online services.

The operator does not intentionally collect personal data from persons under the age of 18. Age verification may be carried out by requesting identity documents and through other verification procedures; however, the operator cannot automatically and continuously verify the age of each user without their cooperation.

If it is found that an account belongs to a person who has not reached the minimum legal age:

the account will be closed;
all transactions and participation in games will be reviewed;
the minor’s personal data will be deleted or anonymised, to the extent permitted by law and subject to any retention obligations.

A parent or legal guardian who has reason to believe that a minor’s data has been provided to the platform may submit a request for deletion via the official contact channels. Once the legal guardian status and the circumstances have been verified, the operator will take the appropriate measures to delete the data as soon as possible, within the limits of the legal framework.

International Data Transfers

In order to provide online services and fulfil contractual and legal obligations, users’ personal data may be transferred and processed outside the Republic of Moldova, in countries where the partners and suppliers involved in operating the platform carry out their activities.

Recipients may include:

IT and data hosting service providers;
providers of casino games and sports betting solutions;
payment providers, financial institutions and card processors;
providers of identity verification and anti-fraud analysis services.

By using the website and creating an account, the user consents to such international data transfers, to the extent necessary for the provision of services and the fulfilment of legal obligations.

The data controller ensures that all partners who receive personal data:

have strict contractual obligations regarding data confidentiality and security;
apply appropriate levels of protection, comparable to the requirements of Moldovan legislation and relevant international standards;
use the data solely for the purposes set out in the contract and in this policy.

Where the transfer is made to countries that do not provide an adequate level of protection in accordance with international standards, additional safeguards may be applied, such as standard contractual clauses or other mechanisms recognised by the applicable legislation.

Legal Statement

This statement forms an integral part of the Privacy Policy and sets out the limits and conditions under which the rules described have legal effect.

This document may elaborate on, clarify or, in certain situations, limit certain rights provided for by the website’s general rules, to the extent permitted by applicable law. No provision shall affect the fundamental rights of users guaranteed by law.

The statement becomes binding on the user from the moment they accept the policy in one of the following ways:

ticking a box to accept the policy on the registration form or on another online interface;
continuing to use the website after a notice regarding a change to the policy has been displayed;
signing or accepting, by electronic means, any agreement that refers to this policy.

In the event of any conflict between the provisions of this policy and other terms published on the website, the provisions relating to the protection of personal data shall take precedence, provided that they do not contravene the legislation in force in the Republic of Moldova.

Use of Cookies

Cookies are small text files stored on the user’s device when they visit the website. These files enable the browser to be recognised and help ensure that online services function correctly and securely.

The platform uses cookies and similar technologies for the following purposes:

the basic functioning of the website and maintaining the login session;
collecting anonymous statistics on website usage, for the purpose of analysing traffic and improving page structure;
analysing browsing behaviour to optimise the user experience and tailor content to users’ general preferences;
identifying and preventing fraudulent or unusual activity.

As a general rule, the cookies used are stored for a period of up to 1 year, unless the law or technical requirements dictate shorter or longer periods, which are clearly specified in the cookie settings.

Users can manage their cookie settings directly from their browser, including:

blocking certain categories of cookies;
deleting cookies stored on your device;
setting notifications to appear before new cookies are saved.

Restricting certain types of cookies may affect the proper functioning of the website and the quality of the online services provided. Further information on the categories of cookies may be provided in a separate section dedicated to them.

Acceptance of the Privacy Policy

By accessing the website and using the online services, the user confirms that they have read, understood and accepted this Privacy Policy, including the processing of personal data for the purposes and under the conditions described in this document.

Creating an account, continuing to use the platform or providing personal data in the forms available on the website constitutes the user’s consent to their personal information being collected, used and stored in accordance with this policy and the applicable legislation.

The current version of the Privacy Policy is the one published on the website at the time of use. The operator may periodically update the content of this document to reflect legislative changes, requirements from the authorities, or technical and organisational changes.

In the event of significant changes, the user will be informed by appropriate means, and continued use of the services after the changes come into effect will be deemed acceptance of the updated version of the policy.

Third-Party Privacy Practices

In certain circumstances, personal data may be disclosed to third parties, within the limits set out in this policy and in accordance with applicable legislation. Such third parties may include:

public authorities or regulatory bodies, where disclosure is required by law or by an official decision;
courts, solicitors, legal advisers or other representatives, in the event of disputes or investigations;
contractual partners providing essential services, such as payment processors, game providers, identity verification services and anti-fraud analytics companies.

A list of the main categories of partners may be made available on the website or on request, where this is possible and does not compromise confidentiality obligations. Should we collaborate with additional partners, the user will be informed of the purpose and nature of the processing of personal data.

Providing personal data when creating an account, carrying out transactions or using the services constitutes the user’s consent for this data to be shared, where necessary, for the purposes set out above. All partners are contractually obliged to use the information solely for the specified purposes, to protect it appropriately and to keep it confidential.

The operator is not responsible for the independent policies or practices of third parties acting as data controllers in their own right, and users are encouraged to consult those third parties’ privacy policies when accessing their services directly.

Links to Other Websites

The website may contain links to other websites or online services operated by third parties. These websites have their own privacy policies and terms of use, which may differ from this policy.

The operator does not control and accepts no responsibility for the way in which these external websites collect, use, store or protect users’ personal data. Any information provided directly to third parties or on their websites will be subject to the rules and policies established by those third parties.

When accessing an external link, users are advised to:

to check the privacy policy and terms of use of the third-party website;
to review the security measures in place;
to provide personal information only if they have confidence in the service in question and in the way data is protected.

The inclusion of a link to a third-party website does not constitute an endorsement or guarantee of that website’s data processing practices, and users access such websites at their own risk.