Summary: 1xbad collects personal information you provide during registration and verification, data about your transactions and bets, and technical information about how you use the platform. We use this data to operate your account, process payments and comply with legal requirements. We do not sell your data. You can request access, correction or deletion at any time by emailing support@1xbad.click.
Who We Are and How This Policy Applies
1xbad operates the online betting and gaming platform accessible at 1xbad.click. For the purposes of this Privacy Policy, 1xbad is the data controller — the entity that determines why and how your personal information is processed.
This Privacy Policy applies to all personal data collected from registered players, visitors to the 1xbad website and users of any associated mobile interface. It covers data collected during registration, during use of the platform, through customer support interactions and through cookies and similar technologies.
By creating an account on 1xbad or using our services, you acknowledge that you have read and understood this Privacy Policy. If you have any questions about how we handle your data before registering, you can contact us at support@1xbad.click and we will respond within 24 hours.
This policy is written in English (en-PK) and governs how 1xbad handles the personal data of players who access the platform from Pakistan or who are Pakistani nationals, regardless of where they are located at the time of access.
Personal Data We Collect
1xbad collects several categories of personal data, depending on how you interact with the platform. Here is a clear breakdown of what we collect and when.
| Category | Specific Data | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, photograph (KYC) | Registration and identity verification |
| Contact Data | Mobile number, email address, city/province | Registration |
| Financial Data | Payment method details (masked), transaction amounts, deposit and withdrawal history | Each financial transaction |
| Betting Data | Bets placed, markets chosen, stakes, outcomes, session duration per game type | Ongoing platform use |
| Technical Data | IP address, device type, operating system, browser, session timestamps | Each site visit |
| Communications Data | Support chat transcripts, email correspondence, dispute records | When you contact 1xbad support |
| Behavioural Data | Pages visited, features used, time on site, button clicks (anonymised for analytics) | Ongoing platform use |
We do not collect sensitive personal data such as religious beliefs, political opinions, health conditions or biometric data beyond what is strictly required for identity verification purposes under our KYC obligations.
Payment Method Data: When you make a transaction via Easypaisa, JazzCash or bank transfer, 1xbad records the transaction amount and a reference identifier. We do not store your full mobile wallet PIN or bank account credentials. Payment authentication happens directly through the payment provider's own secure system.
How 1xbad Uses Your Personal Data
Every piece of data 1xbad collects is used for a specific, defined purpose. We do not process personal data speculatively or for purposes that go beyond what is described here.
- Account Creation and Management: Your identity and contact data allows 1xbad to create your account, verify your eligibility, send account-related notifications and maintain your betting history and balance records.
- Processing Transactions: Financial data enables 1xbad to process deposits from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfers and cards, and to send withdrawals to your registered payment method in PKR.
- Identity Verification (KYC): 1xbad is obligated under anti-money laundering requirements to verify the identity of players, particularly for larger withdrawals. CNIC and other identity documents are used solely for this purpose.
- Bet Settlement and Game Operation: Betting data — stakes, markets, outcomes — is used to settle bets accurately, pay out winnings, operate jackpots and resolve any disputes about bet results.
- Customer Support: Communications data from support interactions is retained so that support agents can access full context when following up on open queries and so that we can improve the quality of our support over time.
- Responsible Gaming Monitoring: Betting patterns and session data are used by our responsible gaming team to identify players who may be developing problematic gambling behaviours, so that appropriate interventions can be made proactively.
- Platform Improvement: Anonymised behavioural and technical data is used to understand how players use 1xbad, identify performance bottlenecks and prioritise new features. This analysis does not involve identifying individual players.
- Legal Compliance: Certain data is retained and processed because applicable law requires it — for example, transaction records for anti-money laundering reporting, or age verification records to demonstrate compliance with our 18+ policy.
We do not use your personal data to build advertising profiles, to sell targeted advertising to third parties or to make automated decisions that significantly affect you without any human review.
Legal Basis for Processing Your Data
1xbad processes your personal data on the following legal grounds depending on the specific processing activity.
- Performance of a Contract: Most processing at 1xbad — operating your account, processing transactions, settling bets — is necessary to perform the contract between 1xbad and you as a registered player. Without this processing, we simply cannot provide the service.
- Legal Obligation: Identity verification, transaction record-keeping and anti-money laundering checks are carried out because applicable law requires them. 1xbad has no choice but to process this data and cannot opt out of these obligations on a player's behalf.
- Legitimate Interests: Fraud prevention, security monitoring, responsible gaming surveillance and platform analytics are carried out on the basis of 1xbad's legitimate business interests. In each case we have assessed that our legitimate interest is not overridden by your privacy rights.
- Consent: Marketing communications — such as promotional emails about bonuses and new features — are sent only where you have explicitly opted in to receive them. You can withdraw this consent at any time through your account settings or by emailing support@1xbad.click.
Sharing Your Personal Data
1xbad does not sell your personal data. We share personal data only in the following defined circumstances, with the minimum information necessary for each purpose.
- Payment Processors: When you make a deposit or withdrawal, the relevant payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, your bank or card network) receives transaction data necessary to process the payment. These providers operate under their own privacy policies and are independently responsible for how they handle that data.
- Identity Verification Services: To fulfil our KYC obligations, 1xbad may use third-party identity verification services to cross-reference CNIC details. These services are contractually bound to use the data only for the verification purpose and not to retain it beyond the verification process.
- Game and Technology Providers: Some games on 1xbad — particularly live dealer games — are provided by third-party studios. These providers receive the minimum session data necessary to operate the game (for example, your bet amount and round seed) but do not receive your identity information.
- Regulatory and Legal Authorities: 1xbad will share personal data with regulatory bodies, law enforcement or courts where we are legally required to do so — for example, in response to a court order or under anti-money laundering reporting obligations. We cannot refuse such disclosures but will inform you where legally permitted to do so.
- Business Transfers: In the event that 1xbad is acquired by or merges with another company, your data may be transferred to the acquiring entity. You will be notified of any such transfer and given the opportunity to delete your account before it takes effect.
All third parties with whom 1xbad shares personal data are required to maintain appropriate technical and organisational security measures and to use your data only for the specific purpose for which it was shared.
How Long We Keep Your Data
1xbad retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law. Specific retention periods by data category are as follows.
- Active Account Data: Identity, contact and financial data is retained for the duration of your active account plus five years following account closure, to meet anti-money laundering record-keeping requirements.
- Transaction Records: All deposit, withdrawal and bet settlement records are retained for seven years following the transaction date, in line with standard financial record-keeping requirements.
- KYC Documents: Identity verification documents (CNIC copies, etc.) are retained for five years following account closure. After this period they are securely and irreversibly deleted.
- Support Communications: Customer support chat logs and emails are retained for three years following the closure of the relevant support case.
- Technical and Behavioural Data: IP logs and session data are retained for 90 days. Anonymised, aggregated behavioural analytics (which cannot be linked back to you individually) may be retained indefinitely for product improvement purposes.
- Marketing Consent Records: Records of your marketing consent (or withdrawal of consent) are retained for the life of your account plus three years to demonstrate compliance.
When data reaches the end of its retention period, it is either securely deleted or irreversibly anonymised so it can no longer be linked to you as an individual.
Your Privacy Rights as a 1xbad Player
As a registered player on 1xbad, you have a set of rights regarding your personal data. These are not just technicalities — they are genuine controls that you can exercise at any time by contacting support@1xbad.click.
To exercise any of these rights, email support@1xbad.click with the subject line "Data Rights Request — [your account username]". We will acknowledge your request within 24 hours and fulfil it within 30 calendar days. There is no charge for making a reasonable data rights request.
Cookies and Similar Technologies
1xbad uses cookies and similar tracking technologies to operate the platform, remember your preferences and understand how the site is used. Here is an honest explanation of what we use and why.
| Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential | Session management, login authentication, security tokens, remembering your PKR wallet balance and active bets. Without these cookies 1xbad cannot function. | No |
| Analytics | Anonymised page view tracking, feature usage patterns, performance monitoring. Helps 1xbad identify slow pages and improve user experience. Data is aggregated and never linked back to you individually. | Yes |
| Functional | Remembering your preferred odds format, language setting, notification preferences and last sport viewed. These improve your experience but the platform works without them. | Yes |
1xbad does not use advertising or marketing cookies. We do not place cookies that enable third-party advertisers to track your browsing activity across other websites.
You can manage cookie preferences in your browser settings. Disabling essential cookies will prevent you from logging in and using the platform. Disabling analytics or functional cookies will not prevent you from using 1xbad but may mean some preferences are not remembered between sessions.
Children's Privacy
1xbad is strictly for adults aged 18 and over. We do not knowingly collect personal data from any person under 18 years of age and we actively verify the age of all registered players as part of our KYC process.
If you are a parent or guardian and you believe that your child may have registered on 1xbad, please contact us immediately at support@1xbad.click. We will verify the account, close it and delete all associated personal data within 5 business days of receiving your request.
Age Verification: Every 1xbad account is subject to age verification before withdrawal functionality is enabled. Players who cannot provide acceptable proof of age (a valid CNIC showing date of birth) will have their accounts closed and any deposits returned.
How We Protect Your Personal Data
Protecting the personal and financial data of 1xbad players is a technical and operational priority. The following measures are in place as standard.
- Transport Layer Security (TLS): All data transmitted between your browser or app and 1xbad servers is encrypted in transit using TLS 1.3, preventing interception by third parties.
- AES-256 Encryption at Rest: Personal and financial data stored in 1xbad databases is encrypted at rest using AES-256 encryption. Even in the unlikely event of a database breach, encrypted data cannot be read without the encryption keys.
- Access Controls: Access to systems containing personal data is restricted on a need-to-know basis. All internal access is logged and reviewed. Customer support agents can see the account information necessary to help you but cannot see your full payment details or login password.
- Two-Factor Authentication: 1xbad supports two-factor authentication for player accounts. We strongly recommend enabling it from your account security settings.
- Regular Security Audits: 1xbad engages independent third-party security auditors to conduct penetration testing and vulnerability assessments on a regular basis.
- Breach Response Plan: In the event of a data breach affecting personal information, 1xbad has a documented incident response plan that includes player notification within 72 hours of the breach being discovered, with clear guidance on what to do.
No online service can guarantee 100% security and 1xbad does not make that claim. What we do commit to is that we apply industry-standard protections consistently and that we will respond promptly and transparently in the event of any security incident.
International Data Transfers
1xbad operates servers and uses service providers in multiple locations internationally. This means that your personal data may be processed in countries outside Pakistan. Where this occurs, 1xbad ensures appropriate safeguards are in place.
All third-party service providers who handle your data on 1xbad's behalf — whether they are located in Europe, the United States or elsewhere — are required to maintain data protection standards equivalent to those described in this policy, and to process your data only for the specific purposes for which it was shared.
Payment processing for transactions through Pakistani payment networks (Easypaisa, JazzCash, bank IBFT) is handled locally, meaning that transaction data associated with these payment methods does not leave Pakistan's financial network during processing.
Changes to This Privacy Policy
1xbad may update this Privacy Policy from time to time as our services evolve or applicable law changes. When we make material changes — changes that affect your rights or how we use your data in significant ways — we will notify all registered players via email at least 14 days before the changes take effect.
Minor updates such as clarifications of existing language, corrections to descriptions or additions of new data processing activities of low sensitivity may be made without advance notice. The "Last Updated" date at the top of this page always reflects the date of the most recent change.
Continued use of 1xbad after the effective date of any updated Privacy Policy constitutes acceptance of the updated terms. If you do not agree with any material change, you may close your account before the effective date by contacting support@1xbad.click.
Contact Us About Privacy
If you have any questions about this Privacy Policy, want to exercise any of your data rights or wish to make a complaint about how 1xbad has handled your personal information, please contact us through the following channels.
- Email (preferred): support@1xbad.click — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.
- Live Chat: Available 24/7 on 1xbad.click — suitable for straightforward queries. For data rights requests, we recommend email so there is a written record.
We acknowledge all privacy-related contacts within 24 hours and aim to provide a full response within 5 business days for general enquiries and within 30 calendar days for formal data rights requests.
Complaints: If you believe 1xbad has not handled your personal data correctly and our response to your complaint has not resolved the matter to your satisfaction, you may escalate your complaint to the relevant data protection authority in your jurisdiction. Details of the escalation process are available on request from our support team.
QUICK ANSWERS