1xbad Privacy Policy —
Your Data, Our Responsibility

This Privacy Policy applies to all personal data collected, processed, and stored by 1xbad in connection with your registration, use of, and access to the 1xbad platform available at https://1xbad.biz, including the sportsbook, casino, slots, bingo, and all associated account and payment services.

For the purposes of applicable data protection law, 1xbad (the operator of https://1xbad.biz) is the Data Controller responsible for your personal data. As Data Controller, 1xbad determines the purposes for which your personal data is processed and the means by which that processing is carried out.

This policy does not apply to third-party websites, applications, or services that may be linked to or from the 1xbad platform. 1xbad is not responsible for the privacy practices of third-party game providers, payment processors operating their own interfaces, or any other external parties. You should review the privacy policies of any such third parties independently.

1xbad collects personal data through three primary channels: information you provide directly, information generated through your use of the platform, and information received from third parties in the performance of our services.

• Betting & Gaming Data: Complete records of all bets placed, games played, wagers, stakes, results, and session durations on the 1xbad platform.
• Technical Data: IP address, device type, operating system, browser type, screen resolution, and session timestamps.
• Behavioural Data: Pages visited within the 1xbad platform, features accessed, navigation paths, and in-session activity patterns.
• Communications Data: Records of any correspondence between you and 1xbad customer support, including email, chat, and any submitted feedback.
• Responsible Gaming Data: Any deposit limits, loss limits, session timers, cooling-off periods, or self-exclusion settings you configure in your account.

1xbad may receive personal data about you from the following categories of third parties in the performance of our services:

• Payment Processors: JazzCash, EasyPaisa, and Pakistani banks may provide transaction confirmation data and account verification signals necessary to process deposits and withdrawals.
• Identity Verification Services: Third-party KYC providers used to verify the authenticity of identity documents submitted by players during account verification.
• Fraud Prevention Services: Risk assessment and anti-fraud services that help 1xbad identify suspicious account activity or potential breaches of our Terms.

1xbad uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your consent or updating this policy with appropriate notice.

• Account Management: Creating, maintaining, and administering your 1xbad account, including processing your PKR transactions, managing your balance, and communicating account-related information to you.
• Service Delivery: Enabling your access to and use of all 1xbad products — sportsbook, live casino, slots, bingo, and any future features — in accordance with our Terms & Conditions.
• Identity & Age Verification: Verifying that you are who you claim to be and confirming that you meet the minimum age requirement of 21 years as required by our international gaming license.
• Payment Processing: Processing deposits and withdrawals via JazzCash, EasyPaisa, and Pakistani bank accounts in PKR; preventing payment fraud and resolving transaction disputes.
• Regulatory Compliance: Meeting our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming regulations imposed by our licensing authority.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, multiple account creation, bonus abuse, and any other activity that constitutes a breach of our Terms or applicable law.
• Responsible Gaming: Monitoring account activity to identify patterns consistent with problem gambling behaviour and making responsible gaming tools available and effective for all account holders.
• Customer Support: Responding to your queries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how Pakistani players use the 1xbad platform and to improve features, game selection, and the overall user experience.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform news — but only where you have not opted out of marketing communications from 1xbad.

For each category of personal data processing conducted by 1xbad, the processing is carried out on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — specifically, to provide the 1xbad gaming and betting services you registered for. Without this processing, 1xbad cannot deliver the services described in our Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering legislation, our international gaming license conditions, and age verification requirements.
• Legitimate Interests: Processing carried out in pursuit of 1xbad's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and optional personalisation features, where we have obtained your prior consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

1xbad does not sell your personal data. We share your data only in the following defined circumstances and only to the extent necessary for the stated purpose:

1xbad engages carefully selected third-party service providers who process data on our behalf and under our instructions. These include payment processing partners (JazzCash, EasyPaisa, and banking partners), KYC and identity verification providers, fraud detection and risk management services, cloud hosting and infrastructure providers, and customer support platform providers. All service providers are contractually required to process your data only for the stated purpose and to maintain security standards consistent with those applied by 1xbad.

1xbad may disclose your personal data to regulatory authorities, law enforcement agencies, or other government bodies where we are legally required to do so — for example, in response to a lawful court order, a request from our licensing authority, or an anti-money laundering investigation. 1xbad will disclose the minimum information required to satisfy the legal obligation and will notify you where legally permitted to do so.

Third-party game providers whose titles are available in the 1xbad Casino and slot lobby may receive limited technical session data necessary for game functionality. No financial data, identity documents, or contact information is shared with game providers beyond what is technically required to initiate and manage your gaming session.

The 1xbad platform uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve the user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the 1xbad platform to function. These include session management cookies that keep you logged in, security cookies that protect against cross-site request forgery, and preference cookies that remember your language and settings. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Store your preferences and personalisation choices — such as your preferred sports markets or casino game categories — to improve your experience on subsequent visits to 1xbad.
• Analytics Cookies: Collect anonymised data about how visitors use the 1xbad platform — which pages are visited most, which features are used, and where players encounter difficulty. This data is used in aggregate form to improve the platform and is never used to identify individual players.
• Security & Fraud Prevention Cookies: Used to detect abnormal session behaviour, identify account takeover attempts, and assist with fraud prevention on the 1xbad platform.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your 1xbad account and using the platform's core features. 1xbad does not use third-party advertising or tracking cookies to serve targeted advertisements outside the 1xbad platform.

1xbad implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the 1xbad platform is encrypted using TLS 1.3 / 256-bit SSL. This includes login credentials, payment information, and any documents submitted for identity verification.
• Encryption at Rest: Sensitive personal data stored in 1xbad's systems — including financial data and identity documents — is encrypted at rest using industry-standard encryption algorithms.
• Password Security: Passwords are never stored in plain text. 1xbad uses a one-way cryptographic hashing process that prevents passwords from being read even by platform administrators.
• Access Controls: Access to personal data within 1xbad's systems is restricted to staff who require it to perform their specific job functions. Role-based access controls and audit logging are applied to all systems handling personal data.
• Two-Factor Authentication: Available for all 1xbad account holders to add an additional layer of protection against unauthorised account access, particularly relevant for accounts linked to PKR payment methods.
• Regular Security Audits: 1xbad conducts regular technical security audits and penetration testing of the platform infrastructure. Any identified vulnerabilities are remediated on a priority basis.
• Incident Response: In the event of a personal data breach that creates a risk to affected players, 1xbad will notify the relevant regulatory authority within the timeframe required by our licensing obligations and will notify affected players where required.

1xbad retains personal data only for as long as is necessary for the purpose for which it was collected and to comply with our legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained beyond these periods for statistical and platform improvement purposes, as it no longer constitutes personal data.

As a 1xbad account holder, you have the following rights over your personal data. These rights are not absolute — they are subject to applicable legal exceptions — but 1xbad will respond to all valid requests within a reasonable timeframe and without charge for standard requests.

1xbad may send you promotional communications — including bonus offers, deposit match promotions, free bet notifications, and platform news — by email or SMS to the contact details registered in your 1xbad account. Marketing communications are sent only to players who have not opted out of receiving them.

You may opt out of marketing communications from 1xbad at any time by:

• Using the unsubscribe link included in every marketing email sent by 1xbad.
• Updating your communication preferences in the notification settings section of your 1xbad account dashboard.
• Contacting [email protected] with a request to opt out of all marketing communications.

Opting out of marketing communications does not affect your account status or your ability to use any 1xbad product. You will continue to receive non-marketing account-related communications — such as transaction confirmations, security alerts, and account verification requests — as these are necessary for the performance of our contract with you.

1xbad takes the protection of minors seriously as a condition of our international gaming license and as a core ethical commitment. Age verification is mandatory before any withdrawal is processed, and 1xbad may request age verification documentation at any stage of the account lifecycle. Parents or guardians who believe a minor has created a 1xbad account should contact [email protected] immediately so that the account can be closed and all associated personal data removed from our systems.

1xbad also strongly recommends that parents and guardians of minors in Pakistan use parental control software to restrict access to online gambling platforms, including 1xbad. Age verification technology is one layer of protection — parental supervision and software controls provide a complementary layer that 1xbad actively supports.

1xbad reserves the right to update or amend this Privacy Policy at any time. Material changes — meaning changes that significantly affect how your personal data is used or your rights over that data — will be communicated to registered players by email at the address registered in their 1xbad account at least fourteen (14) days before the change takes effect.

Non-material changes — such as clarifications of existing language, typographical corrections, or updates to contact information — may be made at any time without prior notice, with the updated policy becoming effective on the date of publication at https://1xbad.biz/privacy-policy.

Your continued use of the 1xbad platform following notification of any material amendment to this policy constitutes your acceptance of the revised terms. If you do not accept a material change to this policy, you should stop using the 1xbad platform and close your account before the amendment takes effect. Your remaining real-money balance will be returned to you through the last registered payment method following standard verification procedures.

For all privacy-related queries, data rights requests, or concerns about how 1xbad handles your personal data, please contact us through the following channel. All privacy communications are handled by 1xbad's designated data protection function and are treated with the same priority as account-related support requests.