1ball Privacy Policy – How Your Data Is Collected, Used, and Protected

1ball collects certain necessary information to provide you with the best experience. We only collect what is genuinely needed to deliver our services — nothing more.

Information Provided Directly by You

Information collected directly from you when you create an account or use 1ball's services:

• Identity Information: Name, date of birth, and national ID number (for KYC verification)
• Contact Information: Mobile number, email address (optional)
• Financial Information: Mobile banking number (bKash/Nagad/Rocket), transaction history
• Security Information: Password (encrypted), security question answers

Automatically Collected Information

Certain information is collected automatically when you use the platform:

• Device Information: Device model, operating system, browser type
• Network Information: IP address, internet connection type
• Usage Data: Games played, session duration, and features used
• Location: Country-level data only (not precise location)

1ball uses your data only for specific, defined purposes. Your information is never used for vague or excessive reasons.

1ball employs industry-leading security technology to protect your personal data. Our security systems are continuously updated and independently audited by trusted third-party experts.

Technical Security Measures

• SSL/TLS Encryption: 256-bit AES encryption is applied to all data transfers.
• Password Hashing: Your password is never stored in plain text — it is hashed using the bcrypt algorithm.
• Data Segregation: Financial and personal data are stored in separate encrypted databases.
• Firewall & DDoS Protection: Multi-layered firewalls protect our servers from unauthorised access.
• Two-Factor Authentication (2FA): If a suspicious login is detected, OTP verification is triggered automatically.
• Regular Security Audits: Independent security experts conduct penetration tests every three months.

Administrative Safeguards

• Only authorised personnel may access specific user data.
• All staff have signed confidentiality agreements and receive regular training.
• All internal data access is logged and reviewed on a regular basis.

1ball never sells your personal data or shares it with third parties without authorization. However, there are a limited number of circumstances where sharing your data may be necessary:

When Your Information May Be Shared

• Payment Processors: Only the minimum information required to process payments is shared with bKash, Nagad, and Rocket.
• Legal Obligations: Under a court order or a lawful request from a law enforcement authority.
• Security Agency: To regulatory authorities for the detection of fraud or money laundering.
• Technology Partners: Cloud service providers used to operate the platform (encrypted data only).

When Data Is Not Shared

• No data is sold to advertisers or marketing agencies.
• No data is shared with any third party without your consent.
• Your gaming habits and behavioural data are never shared externally.

The 1ball website and app use cookies and similar technologies to enhance your experience and keep the platform secure.

You can disable non-essential cookies at any time through your browser settings. Please note that some features may not function properly as a result.

On the mobile app, session tokens are stored in device storage instead of cookies and are automatically cleared when the app is uninstalled.

As a 1ball user, you have full control over your personal data. Contact our support team to exercise any of the rights listed below.

1ball does not retain any data indefinitely. Each category of data has a defined retention period, determined by legal requirements and business purposes.

• Account Information: Duration of active account + 5 years after closure (as required by law).
• Financial transaction records: 7 years (in accordance with Bangladesh Bank guidelines).
• Login & Session Logs: 1 year (for security review purposes).
• Customer support conversations: 2 years.
• Analytics Data: 90 days (in anonymised form).
• KYC Documents: The original copy is deleted immediately after verification.

Once the retention period expires, your data is securely and permanently deleted or anonymized.

1ball is a platform strictly for adults (18+). We do not collect data from or provide services to anyone under the age of 18.

• Age is verified at registration, and sign-ups from users under 18 are rejected.
• If a minor's account is detected, it is immediately suspended and all associated data is permanently deleted.
• If parents have any concerns, they can contact us immediately — we will investigate and take appropriate action.

To learn more about responsible gaming, visit our Responsible Gaming View page.

1ball may update this Privacy Policy at any time. For significant changes, we will notify users at least 30 days in advance.

• The "Last Updated" date at the top of the page will always reflect the most recent revision.
• An SMS notification will be sent to your registered mobile number for any significant changes.
• Continued use of the platform after any changes take effect will be considered acceptance of the updated policy.
• Previous versions of the policy are archived and available upon request.

For any privacy-related questions, concerns, or complaints, please reach out to us directly. Our data privacy team aims to respond within 24 hours.