This Privacy Policy applies to 1xbad, the online betting and casino platform operated at 1xbad.im. When this policy refers to "1xbad", "we", "us" or "the platform", it means the operator of 1xbad.im and all associated services, including sports betting, live casino, Aviator, Jackpot Slots, Virtual Sports and any promotional programmes offered to registered players.
This policy governs the collection, use, storage, sharing and deletion of personal information belonging to all users of 1xbad — with particular attention to Pakistani players whose data is processed in PKR transactions through local payment providers including Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and Visa/Mastercard.
By registering an account or using any part of the 1xbad platform, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside the 1xbad Terms and Conditions and Responsible Gaming Policy, which together form the complete agreement between you and 1xbad.
If you are under 18 years of age, you must not use 1xbad or provide any personal information to the platform. Our services are strictly for adults only.
1xbad collects personal data across several categories. We collect only what is genuinely necessary to operate your account safely, process PKR transactions and comply with our legal obligations. Here is a clear breakdown of what we collect and when:
| Data Category | Specific Data Points | When Collected |
|---|
| Identity Data | Full legal name, date of birth, nationality, CNIC number (where required for verification) | Registration & KYC verification |
| Contact Data | Email address, mobile number, city/province | Account registration |
| Account Data | Username, password (hashed), account preferences, responsible gaming settings | Account creation and ongoing use |
| Transaction Data | Deposit and withdrawal amounts in PKR, payment method used, transaction timestamps, wallet IDs (tokenised) | Every financial transaction |
| Betting & Gaming Data | Bets placed, markets selected, stakes, outcomes, casino sessions, game history | Platform usage |
| Device & Technical Data | IP address, browser type, device model, operating system, screen resolution, session duration | Each platform visit |
| Communications Data | Support chat transcripts, email correspondence, complaint records | When you contact support |
| Verification Documents | Scanned copies of identity documents (CNIC, passport), utility bills (where requested) | KYC/AML verification processes |
Where we need to collect personal data by law or under the terms of our account agreement with you and you fail to provide that data, we may not be able to activate or continue your account. We will notify you if this is the case.
1xbad does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, biometric data or health information unless required by applicable law for responsible gaming purposes (for example, where a player self-discloses a gambling problem).
Every piece of data we collect at 1xbad has a specific, documented purpose. We do not collect data speculatively or retain it for undefined future use. Below are the lawful grounds and specific purposes for each type of data processing we carry out:
Account Registration and Management
To create and maintain your 1xbad account, verify your identity, process login requests and manage your account settings, including responsible gaming tools and notification preferences.
PKR Payment Processing
To process deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and Visa/Mastercard. Transaction records are required by anti-money laundering regulations and our payment provider agreements.
Fraud Prevention and Security
Device data and IP addresses are used to detect unusual login patterns, prevent unauthorised account access and identify potentially fraudulent deposit or withdrawal activity. This protects your account and the integrity of the platform.
Legal and Regulatory Compliance
Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations require 1xbad to verify the identity of players, maintain transaction records and report certain activities as required by applicable law.
Responsible Gaming
Betting and gaming history is analysed to support the responsible gaming tools available on 1xbad — including deposit limits, session reminders and self-exclusion — and to identify patterns that may indicate problem gambling behaviour.
Customer Support
Support communications are retained to resolve disputes, investigate complaints and maintain a record of interactions for quality assurance purposes.
Service Communications and Marketing
Transactional communications (deposit confirmations, withdrawal notifications, security alerts) are sent by legal right. Marketing emails and SMS messages are sent only where you have given explicit consent and can be opted out of at any time.
Given that 1xbad operates entirely in Pakistani Rupees and uses local payment infrastructure, how we handle financial data deserves a specific and clear explanation.
When you make a deposit or request a withdrawal at 1xbad using Easypaisa, JazzCash, NayaPay, SadaPay or bank IBFT, the transaction is processed through a tokenised API integration. This means:
- Your full mobile wallet credentials (Easypaisa or JazzCash PIN, account password) are never transmitted to or stored on 1xbad's servers. You authenticate directly with your payment provider's system.
- For bank IBFT transfers, your full account number is used only to direct the transfer and is not retained in 1xbad's live database after the transaction completes.
- Visa and Mastercard transactions are processed through a PCI-DSS compliant payment gateway. Full card numbers are not stored by 1xbad at any point.
- Transaction records retained by 1xbad contain the transaction amount in PKR, the payment method type, a tokenised reference ID and timestamp — sufficient for account management and legal compliance without exposing full credentials.
Important: 1xbad will never ask for your Easypaisa or JazzCash PIN, mobile banking password or full debit card number via email, SMS or live chat. If you receive any such request claiming to be from 1xbad, please report it to support@1xbad.im immediately.
All transaction data is retained for a minimum of five years in compliance with financial record-keeping obligations. After this period, data is securely deleted or anonymised.
1xbad uses cookies and similar technologies to operate the platform, personalise your experience and analyse how the site is used. Here is a breakdown of the cookie categories we use:
| Cookie Type | Purpose | Can Be Disabled? |
|---|
| Essential | Required for the platform to function — login sessions, security tokens, bet slip management, balance display. Without these, 1xbad cannot operate. | No — essential |
| Functional | Remember your language preference, display settings, responsible gaming tool preferences and previously selected odds format. | Yes, with reduced experience |
| Analytics | Aggregate data on which pages, games and markets are most used. Helps 1xbad improve the platform. No personally identifiable information is used in analytics reporting. | Yes |
| Performance | Monitor page load times, live stream quality and error rates on the platform. Used by the engineering team to improve technical performance, particularly for Pakistani mobile users. | Yes |
| Marketing | Track whether you arrived at 1xbad via a referral or promotional campaign. Used only with your consent to measure the effectiveness of promotions. | Yes — consent required |
You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using 1xbad but may affect some personalisation features. Most modern mobile browsers on Android and iOS allow per-site cookie management.
1xbad does not use third-party advertising cookies to serve targeted ads to you on other websites. Cookies used on the platform are specific to 1xbad and its directly integrated service providers.
1xbad does not sell your personal data to any third party under any circumstances. Data sharing is limited to the specific categories of recipients and purposes described below:
- Payment processors: Transaction data is shared with Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT operators and Visa/Mastercard networks solely to process your PKR deposits and withdrawals. Each provider processes your data under their own privacy policy and applicable financial regulations.
- Identity verification services: Where age or identity verification is required, limited personal data (name, date of birth, document reference) may be shared with a licensed KYC service provider operating under confidentiality obligations.
- Game software providers: RNG game and live dealer providers receive session tokens and bet data to deliver game results. They do not receive your full identity or payment data.
- Cloud infrastructure providers: 1xbad uses cloud hosting and data storage services whose servers process account and transaction data. These providers are bound by data processing agreements that require them to handle data only on 1xbad's instructions.
- Legal and regulatory authorities: 1xbad will disclose personal data where required to do so by law, court order, regulatory authority or in connection with any legal proceeding to which 1xbad is a party.
- Fraud prevention and sporting integrity: Where match fixing, fraud or money laundering is suspected, relevant data may be shared with law enforcement, sporting integrity bodies or financial intelligence units in accordance with legal obligations.
In all cases, data sharing is limited to the minimum necessary for the stated purpose. Third-party service providers are contractually prohibited from using your data for their own marketing or any purpose other than the specific service they are providing to 1xbad.
1xbad retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
- Account and identity data: Retained for the duration of your account plus five years after account closure. This period is required for legal compliance and to resolve any disputes arising after closure.
- Transaction and financial records: Retained for a minimum of five years from the date of the transaction, as required by financial record-keeping and anti-money laundering regulations.
- Betting and gaming history: Retained for five years. This data may be needed to resolve bet settlement disputes, investigate irregularities or support responsible gaming interventions.
- Support communications: Retained for three years from the date of the last communication in a given thread. Historical records help resolve repeated or escalated complaints accurately.
- Device and technical logs: Retained for 12 months. These logs are used primarily for fraud detection and security incident investigation.
- Marketing consent records: Retained for the duration of your consent plus one year after you withdraw it, to demonstrate compliance with marketing regulations.
When data reaches the end of its retention period, it is either securely deleted or anonymised so that it can no longer be linked to an individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.
Protecting your personal and financial data is an operational priority at 1xbad, not a checkbox exercise. The following technical and organisational measures are in place:
Encryption
All data transmitted between your device and 1xbad is encrypted using TLS 1.2 or higher. Stored passwords are hashed with a one-way algorithm — even 1xbad staff cannot see your password.
Two-Factor Authentication
2FA is available for all 1xbad accounts via SMS or authenticator app. Enabling 2FA significantly reduces the risk of unauthorised account access even if your password is compromised.
Access Controls
Internal access to player data is restricted on a need-to-know basis. Staff with access to personal data are trained on data protection obligations and bound by confidentiality agreements.
Fraud Monitoring
Automated systems monitor for unusual login locations, rapid credential changes, atypical transaction patterns and other indicators of account compromise or fraud in real time.
Secure Infrastructure
1xbad's platform is hosted on enterprise-grade cloud infrastructure with redundant backups, intrusion detection systems and regular security audits.
Breach Notification
In the unlikely event of a data breach affecting your personal information, 1xbad will notify affected players without undue delay and take immediate steps to contain and investigate the incident.
You have a number of rights in relation to the personal data 1xbad holds about you. These rights can be exercised by contacting us at support@1xbad.im. We will respond to all valid requests within 30 days.
Right to Access
Request a copy of all personal data 1xbad holds about you, including your account data, transaction history and any verification documents on file.
Right to Rectification
Ask 1xbad to correct any inaccurate or outdated personal information held in your account. Some corrections may require supporting documentation.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected. Note that financial and legal records must be retained for the mandatory periods described in Section 7.
Right to Restrict Processing
Ask 1xbad to temporarily pause processing of your data while a dispute or correction request is being investigated, without deleting it.
Right to Portability
Request your personal and transaction data in a structured, machine-readable format so you can transfer it to another service if you wish.
Right to Object
Object to processing of your data for marketing purposes or where we are relying on legitimate interests as a lawful basis. You can opt out of marketing at any time in your account settings.
To exercise any of the rights above, email support@1xbad.im with the subject line "Data Rights Request". Please include your registered name and email address so we can locate your account. We will verify your identity before actioning the request.
1xbad is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that your child has provided personal information to 1xbad, please contact us immediately at support@1xbad.im and we will take prompt action to identify and delete any such data.
Age verification checks are conducted during the registration process and may be carried out again at any point during account activity. Any account found to belong to a person under 18 will be immediately closed, winnings forfeited and the situation referred to relevant authorities where required.
If you are concerned that a minor in your household may be accessing gambling platforms, please visit our Responsible Gaming page for information about parental control tools and filtering software.
1xbad sends two distinct types of communications to registered players:
- Transactional communications — deposit confirmations, withdrawal notifications, security alerts, account status changes and important policy updates. These are sent as a necessary part of operating your account and cannot be disabled while your account is active.
- Marketing communications — promotional offers, bonus announcements, PSL season campaigns and platform updates. These are sent only where you have given explicit consent during registration or at a later point in your account settings.
You can withdraw your consent for marketing communications at any time by:
- Clicking the "Unsubscribe" link in any marketing email from 1xbad
- Updating your notification preferences in the 1xbad account settings
- Emailing support@1xbad.im with the request to stop marketing communications
Opt-out requests are processed within 5 business days. You may continue to receive transactional messages after opting out of marketing — these cannot be disabled as they are a necessary part of account operation.
1xbad may update this Privacy Policy from time to time to reflect changes in our data practices, new services, updated legal requirements or feedback from players. When changes are made, the "Last Updated" date at the top of this page will be revised accordingly.
For significant changes that materially affect how your personal data is processed, 1xbad will provide advance notice via email to your registered address or by displaying a prominent notification within the platform. Your continued use of 1xbad after the effective date of any update to this Privacy Policy constitutes your acknowledgement of the revised policy.
Previous versions of this Privacy Policy are available on request by emailing support@1xbad.im. We recommend reviewing this policy periodically, particularly around the start of major cricket seasons when new promotional data practices may be introduced.
If you have any questions about this Privacy Policy, about how 1xbad handles your personal data, or if you wish to exercise any of the data rights described in Section 9, please contact us using any of the following methods:
- Email: support@1xbad.im — please use the subject line "Privacy Enquiry" or "Data Rights Request" so we can route your message to the right team quickly.
- Live Chat: Available 24/7 directly within the 1xbad platform after login. Our support agents can assist with most privacy questions in real time and escalate to the data protection team where necessary.
We will acknowledge all privacy-related emails within one business day and aim to provide a full response within 30 days. Complex data access or deletion requests may take longer, in which case we will notify you of the extended timeline and the reason for it.
This Privacy Policy was last updated in January 2025. It applies to all 1xbad accounts active as of this date and to all new accounts created after this date.
