1xlote Privacy Policy

1. Introduction and Scope

1.1 Data Controller

1xlote (referred to as "we," "us," "our," or the "Company") is the data controller responsible for the collection, processing, and protection of personal information provided by users (referred to as "you," "your," or "User") of the 1xlote gaming platform accessible at https://1xlote.cam and associated mobile applications (collectively, the "Platform").

1.2 Scope of This Policy

This Privacy Policy applies to all personal information collected through the Platform, including information collected during account registration, gameplay, deposits, withdrawals, customer support interactions, and marketing communications. This Policy does not apply to third-party websites, applications, or services that may be linked from the Platform. Users are advised to review the privacy policies of any third-party services before providing personal information.

1.3 Consent and Acceptance

By registering an account on 1xlote, accessing the Platform, or using our services, you acknowledge that you have read, understood, and consent to the collection, use, disclosure, and processing of your personal information as described in this Privacy Policy. If you do not agree with any provision of this Policy, you must immediately cease using the Platform and close your account.

2. Personal Information We Collect

2.1 Information Provided by You

When you register an account, use the Platform, or contact customer support, we collect the following categories of personal information:

• Identity Information: Full legal name, date of birth, nationality, gender, government-issued identification numbers (e.g., passport number, driver's license number, national ID number).
• Contact Information: Residential address, email address, mobile phone number, preferred language.
• Account Credentials: Username, password, security questions and answers.
• Financial Information: Payment method details (GCash number, bank account numbers, cryptocurrency wallet addresses), transaction history, deposit and withdrawal records, payment verification documents.
• Verification Documents: Government-issued photo ID (passport, driver's license, national ID), proof of address (utility bills, bank statements), selfie photographs for identity verification (KYC).
• Communication Data: Messages exchanged with customer support, feedback, surveys, and correspondence.
• Marketing Preferences: Consent to receive promotional emails, SMS notifications, and marketing communications.

2.2 Information Collected Automatically

When you access and use the Platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address, UDID).
• Network Information: IP address, internet service provider (ISP), geographic location (city, region, country), time zone.
• Usage Data: Pages visited, games played, bet amounts, win/loss history, session duration, clickstream data, features accessed, login timestamps, logout timestamps.
• Cookies and Tracking Technologies: We use cookies, web beacons, local storage, and similar technologies to track user behavior, remember preferences, authenticate sessions, and deliver personalized content. See Section 8 for more information on cookies.

2.3 Information from Third Parties

We may receive personal information about you from third-party sources, including:

• Payment Providers: GCash, PayMaya, banks, and cryptocurrency exchanges may share transaction data, account verification status, and fraud detection information.
• Identity Verification Services: Third-party KYC and AML (anti-money laundering) service providers may share identity verification results, risk scores, and compliance data.
• Marketing Partners: Affiliate networks and advertising platforms may share referral data, campaign performance metrics, and conversion tracking information.
• Public Databases: We may cross-reference your information with publicly available databases, government registries, and watchlists to verify identity, prevent fraud, and comply with regulatory obligations.

3. How We Use Your Personal Information

3.1 Purposes of Processing

1xlote collects and processes your personal information for the following purposes:

• Account Management: Creating and managing your user account, authenticating login sessions, verifying your identity (KYC/AML compliance), maintaining account records, and processing account updates or closures.
• Service Delivery: Processing deposits and withdrawals, facilitating gameplay, settling bets, calculating winnings and losses, delivering bonuses and promotions, and providing customer support.
• Legal and Regulatory Compliance: Complying with anti-money laundering (AML) regulations, combating fraud and criminal activity, responding to legal requests and court orders, maintaining regulatory licenses, and reporting to government authorities (including PAGCOR and the National Privacy Commission).
• Fraud Prevention and Security: Detecting and preventing fraudulent transactions, unauthorized account access, bonus abuse, collusion, money laundering, identity theft, and other security threats. Monitoring gameplay patterns, IP addresses, device fingerprints, and behavioral anomalies to identify suspicious activity.
• Responsible Gaming: Monitoring gameplay for signs of problem gambling, implementing deposit limits, self-exclusion tools, and cooling-off periods, and providing access to responsible gaming resources and support services.
• Marketing and Promotions: Sending promotional emails, SMS notifications, push notifications, and personalized offers based on your preferences, gameplay history, and marketing consent. You may opt out of marketing communications at any time.
• Analytics and Improvement: Analyzing user behavior, gameplay patterns, and platform performance to improve user experience, optimize game offerings, develop new features, and enhance security measures.
• Communication: Sending transactional notifications (account updates, deposit confirmations, withdrawal status), responding to customer support inquiries, and delivering important service announcements.

3.2 Legal Basis for Processing

Under the Data Privacy Act of 2012 and applicable data protection laws, we process your personal information based on the following legal grounds:

• Consent: You have provided explicit consent for specific processing activities, such as receiving marketing communications or storing cookies.
• Contractual Necessity: Processing is necessary to perform our contractual obligations under the Terms & Conditions, including account creation, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with legal and regulatory obligations, including anti-money laundering laws, tax regulations, and court orders.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, analytics, and service improvement, provided such interests do not override your fundamental rights and freedoms.

4. Disclosure of Personal Information

4.1 Sharing with Third Parties

1xlote may disclose your personal information to the following categories of third parties:

• Payment Service Providers: GCash, PayMaya, banks, cryptocurrency exchanges, and other payment processors to facilitate deposits, withdrawals, and transaction processing.
• Identity Verification Services: Third-party KYC and AML compliance providers to verify your identity, assess risk, and prevent fraud.
• Game Providers: Software developers and game studios that power the Platform's gaming content (slots, live dealer games, sports betting) may receive limited user data for gameplay delivery and analytics.
• Cloud Service Providers: Infrastructure and hosting providers that store and process data on our behalf, including Amazon Web Services (AWS), Google Cloud Platform, and other cloud hosting services.
• Marketing and Analytics Partners: Advertising networks, affiliate platforms, and analytics services (e.g., Google Analytics) to measure campaign performance, track conversions, and deliver targeted advertising.
• Legal and Regulatory Authorities: Government agencies, regulatory bodies (including PAGCOR and the National Privacy Commission), law enforcement, courts, and legal advisors when required by law or to protect our legal rights.
• Professional Advisors: Lawyers, accountants, auditors, and consultants who provide professional services to 1xlote.
• Business Successors: In the event of a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the acquiring entity or successor company.

4.2 International Data Transfers

Your personal information may be transferred to, stored in, and processed in countries outside the Philippines, including countries that may not provide the same level of data protection as Philippine law. When we transfer data internationally, we implement appropriate safeguards, including standard contractual clauses, data processing agreements, and encryption, to ensure your data remains protected in accordance with this Privacy Policy and applicable law.

4.3 No Sale of Personal Information

1xlote does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We only share personal information with third parties as described in this Privacy Policy for legitimate business purposes, legal compliance, or with your explicit consent.

5. Data Security and Protection

5.1 Security Measures

1xlote implements industry-standard technical, organizational, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: All sensitive data, including passwords, payment information, and personal identification documents, are encrypted using AES-256 encryption or equivalent cryptographic standards. Data transmitted over the internet is protected using SSL/TLS encryption (HTTPS).
• Access Controls: Access to personal information is restricted to authorized personnel only on a need-to-know basis. Employees and contractors with access to personal data are bound by confidentiality obligations and undergo security training.
• Secure Infrastructure: Our servers and databases are hosted in secure, SOC 2-compliant data centers with physical access controls, surveillance systems, fire suppression, and redundant power supplies.
• Regular Audits: We conduct regular security audits, penetration testing, and vulnerability assessments to identify and remediate potential security risks.
• Incident Response: We maintain a data breach response plan to promptly detect, investigate, and mitigate security incidents. In the event of a data breach, we will notify affected users and relevant authorities as required by law.

5.2 User Responsibilities

You are responsible for maintaining the confidentiality of your account credentials (username and password) and for all activities conducted through your account. You agree to: (a) use a strong, unique password; (b) not share your login credentials with third parties; (c) immediately notify 1xlote of any unauthorized access or security breach; and (d) log out from your account after each session, especially when using shared or public devices.

5.3 Limitations

While we implement robust security measures, no system is completely secure. 1xlote cannot guarantee absolute security of your personal information. You acknowledge that you provide personal information at your own risk.

6. Data Retention

6.1 Retention Periods

1xlote retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, enforce agreements, and protect our legitimate interests. Specific retention periods include:

• Account Information: Retained for the duration of your account's active status and for a minimum of five (5) years after account closure to comply with anti-money laundering regulations and tax reporting requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of transaction to comply with financial record-keeping obligations and for audit purposes.
• KYC/Identity Verification Documents: Retained for a minimum of five (5) years after account closure or the last transaction, whichever is later, to comply with AML/CFT regulations.
• Communication Records: Customer support tickets, emails, and chat logs are retained for two (2) years for quality assurance, dispute resolution, and training purposes.
• Marketing Data: Marketing preferences and communication history are retained until you withdraw consent or request deletion, or for a maximum of three (3) years from your last interaction with marketing content.
• Technical Logs: Server logs, access logs, and security logs are retained for ninety (90) days for security monitoring, troubleshooting, and fraud prevention.

6.2 Data Deletion

After the applicable retention period expires, or upon your request (subject to legal obligations), we will securely delete or anonymize your personal information. Deletion methods include secure overwriting, cryptographic erasure, and physical destruction of storage media. Anonymized data that can no longer identify you may be retained indefinitely for analytics and research purposes.

7. Your Rights as a Data Subject

7.1 Rights Under Philippine Law

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights regarding your personal information:

• Right to Information: You have the right to be informed about how your personal information is collected, used, and disclosed.
• Right to Access: You have the right to request access to your personal information held by 1xlote and obtain a copy of such data.
• Right to Rectification: You have the right to request correction of inaccurate, incomplete, or outdated personal information.
• Right to Erasure (Right to be Forgotten): You have the right to request deletion of your personal information, subject to legal retention obligations and legitimate business interests.
• Right to Object: You have the right to object to processing of your personal information for direct marketing purposes or processing based on legitimate interests.
• Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit such data to another data controller.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

7.2 Exercising Your Rights

To exercise any of your rights as a data subject, please contact our Data Protection Officer at [email protected]. We will respond to your request within fifteen (15) days, or within the timeframe required by applicable law. We may request additional information to verify your identity before processing your request. In certain circumstances, we may be unable to fulfill your request due to legal obligations, ongoing investigations, or other legitimate reasons, in which case we will explain the reason for our inability to comply.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device (computer, smartphone, tablet) when you visit a website. Cookies allow websites to recognize your device, remember your preferences, and deliver personalized content. 1xlote uses cookies and similar tracking technologies (web beacons, pixels, local storage) to enhance user experience, improve platform performance, and deliver targeted advertising.

8.2 Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the Platform to function properly. They enable core functionalities such as authentication, session management, security features, and payment processing. Essential cookies cannot be disabled without significantly impairing the Platform's functionality.
• Performance Cookies: These cookies collect information about how users interact with the Platform, including pages visited, error messages, and loading times. Performance cookies help us improve platform performance and user experience. Examples include Google Analytics cookies.
• Functional Cookies: These cookies remember your preferences, settings, and choices (e.g., language, currency, game favorites) to provide a personalized experience. Functional cookies enhance convenience and usability.
• Marketing Cookies: These cookies track your browsing activity across websites to deliver targeted advertising, measure campaign effectiveness, and personalize promotional content. Marketing cookies are set by third-party advertising networks and require your consent.

8.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, although disabling essential cookies may impair the Platform's functionality. For more information on managing cookies, visit your browser's help documentation. To opt out of interest-based advertising, visit the Digital Advertising Alliance's opt-out page at http://www.aboutads.info/choices/.

9. Children's Privacy

9.1 Age Restriction

The 1xlote Platform is not intended for individuals under the age of twenty-one (21). We do not knowingly collect, use, or disclose personal information from children under 21. By using the Platform, you represent and warrant that you are at least 21 years old.

9.2 Verification and Enforcement

If we become aware that we have collected personal information from an individual under 21 without proper age verification, we will immediately delete such information and terminate the associated account. If you believe we have collected information from a minor, please contact us at [email protected].

10. Changes to This Privacy Policy

10.1 Updates and Amendments

1xlote reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Amendments become effective immediately upon publication on the Platform. The "Last Updated" date at the top of this Policy indicates the most recent revision.

10.2 Notification of Changes

For material changes to this Privacy Policy, we will provide prominent notice on the Platform or send you an email notification (if you have provided an email address). Your continued use of the Platform following the publication of amended Privacy Policy constitutes acceptance of the changes. If you do not agree with the updated Policy, you must cease using the Platform and close your account.

11. Contact Information and Data Protection Officer

11.1 Contact Details

If you have questions, concerns, or complaints regarding this Privacy Policy, your personal information, or your data protection rights, please contact:

Data Protection Officer
Email: [email protected]
Customer Support: Live chat available 24/7 on the Platform

11.2 National Privacy Commission

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:

National Privacy Commission
Website: https://www.privacy.gov.ph
Email: [email protected]
Hotline: (02) 8234-2228