Data Protection Policy

1xbad Privacy Policy

At 1xbad, the privacy of every Pakistani player is treated as a core operational responsibility — not an afterthought. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and processed, and what rights you hold as a registered player on our platform.

Last Updated: 1 January 2026
256-bit
SSL Encryption
0
Data Sold to Advertisers
24 hrs
Breach Notification Window
GDPR
Aligned Standards
7 Rights
Guaranteed to Every Player

What You Can Ask 1xbad to Do

Every registered 1xbad player holds seven enforceable data rights. Expand each one to understand how to exercise it.

You have the right to request a full copy of all personal data 1xbad holds about you. This includes your registration details, KYC documents on file, transaction history, bet records, and any customer support communications. Email [email protected] with the subject line "Data Access Request" and your registered account details. We will provide your data in a structured, readable format within 30 days.

If any personal data we hold about you is incorrect — for example, a misspelled name or an outdated address — you have the right to request that we correct it. Contact our support team with the specific inaccuracy and we will update your records within 14 days of confirming the correction with supporting documentation where necessary.

You may request that 1xbad delete your personal data. Note that this right is not absolute — we are required to retain certain data (such as transaction records and KYC documents) for a minimum of five years under our licensing obligations. Where deletion is legally permissible, we will complete it within 30 days of your verified request.

Where 1xbad processes your data based on your consent or a contract with you, you have the right to receive that data in a structured, machine-readable format (such as CSV or JSON). This allows you to transfer your data to another service provider. Submit a portability request to [email protected] and we will deliver the export within 30 days.

You have the right to object to 1xbad processing your personal data for purposes based on legitimate interests — including any profiling we conduct for fraud prevention or responsible gaming monitoring. You also have an absolute right to object to your data being used for direct marketing purposes at any time. We will cease such processing immediately upon receiving your objection unless we can demonstrate compelling legitimate grounds.

In certain circumstances — for example, while a rectification request is being assessed — you may request that we restrict processing of your data to storage only. This means we will retain your data but not actively use it for any other purpose until the restriction is lifted. Restriction requests are assessed on a case-by-case basis within 14 days.

Where 1xbad processes your data based on your consent — such as for marketing emails or SMS promotions — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before you withdrew consent. To opt out of marketing communications, reply STOP to any SMS or email [email protected] with "Unsubscribe" in the subject line. Your preference will be updated within 48 hours.

Six Ways 1xbad Protects Your Privacy

These are not aspirational statements. They are operational commitments built into how 1xbad handles data every single day for players across Pakistan.

🔒
256-Bit SSL Encryption

Every byte of data exchanged between your device and 1xbad — from login credentials to PKR transaction details — is protected by bank-grade 256-bit SSL/TLS encryption. Your CNIC data and JazzCash account numbers never travel in plain text.

🚫
Zero Data Sales

1xbad does not sell, license, or trade your personal data to advertisers, data brokers, or marketing firms. Your gaming behaviour, location data, and contact details are used solely to operate your account and fulfil our licensing obligations — nothing more.

🛡️
KYC Data Minimisation

We collect only the minimum identity data required to verify your age (21+) and comply with our AML/KYC obligations. CNIC scans and passport images are stored in encrypted vaults with strict access controls and are never shared beyond our licensed verification partners.

🔔
24-Hour Breach Notification

In the unlikely event of a data breach affecting your account, 1xbad commits to notifying all affected players within 24 hours of detection — directly to the email address on your account. We do not delay breach notifications to protect our reputation.

🍪
Transparent Cookie Use

1xbad uses only four categories of cookies — strictly necessary, functional, analytics, and fraud detection. We do not embed third-party advertising trackers or social media pixels. Your browsing behaviour on 1xbad is never used to build an advertising profile on external platforms.

📋
GDPR-Aligned Standards

Although 1xbad primarily serves Pakistani players, we voluntarily align our data protection practices with GDPR principles — including lawful basis documentation, data subject rights fulfilment, and data processing agreements with all third-party suppliers. Your rights are real and enforceable.

Your Data. Your Rights. Your Game.

1xbad is built on transparency. Read our full Terms, explore the casino, or log in to manage your privacy preferences directly from your account dashboard.

21+ only  ·  Privacy Policy applies  ·  Play Responsibly