onestepwin Platform Privacy Notice
This page describes what we collect when you use onestepwin and how we keep that data protected. When you sign up for an onestepwin account, make deposits via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, or place bets on Liga 1 or other markets, you provide us with personal information. We treat that information with care and transparency.
Our privacy practices follow applicable data protection rules in Southeast Asia. We operate onestepwin across supported jurisdictions, and our servers may be located outside your country of residence. This notice explains our data collection, use, storage, and your rights to access or request deletion.
onestepwin's privacy commitments are simple: we collect only the data we need to operate, we do not sell your data to third parties, and we use encryption to protect it in transit and at rest.
What data we collect on onestepwin
Account information
When you create an onestepwin account, we collect your full name, email address, phone number, date of birth, and residential city. We ask for city (Jakarta, Surabaya, Bandung, Medan, Semarang, or other Indonesian or Southeast Asian locations) to verify jurisdiction eligibility and to tailor support in local languages.
Identity verification documents
We require a government-issued ID and a selfie photo to verify your identity. We securely store encrypted copies of these documents on our servers. We use them only to prevent fraud, comply with local anti-money-laundering laws, and confirm account eligibility. We do not share these documents with third parties except where required by law.
Payment data
We collect payment method information when you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet. We store the last four digits of your payment account and the payment provider's transaction ID. We do not store full payment credentials — that data is handled directly by your payment provider.
Gameplay and betting data
We log every bet you place, every hand of Capsa Susun you play, and every spin on Aviator or other slots. We record match history, account balance changes, and withdrawal requests. This data allows us to settle bets, detect fraud, and provide account statements.
Device and usage data
We collect your device type (mobile, tablet, desktop), operating system, browser, and IP address. We log session duration, pages visited, and gameplay duration. We use this to improve onestepwin's performance, diagnose technical issues, and ensure platform security.
Our onestepwin data commitments
- We collect only data necessary to operate onestepwin, verify accounts, and settle wagers
- We encrypt your data in transit (HTTPS) and at rest on our servers
- We do not sell or share your data with marketing or advertising partners
- We retain data for the duration of your account and up to seven years after closure for compliance
- We allow you to request access, correction, or deletion of your data
How we use and share your data
Operational use
We use your data to run onestepwin: to create your account, process deposits and withdrawals, settle bets, deliver live-dealer games, and maintain slots and esports markets. Your name and email allow us to send account notifications, settlement confirmations, and support responses.
Fraud and legal compliance
We analyze your account activity to detect unusual patterns, block fraudulent transactions, and comply with anti-money-laundering requirements in your jurisdiction. During Idul Fitri, Idul Adha, Imlek, Nyepi, and other holiday periods, we maintain this monitoring continuously.
Third-party processors
We engage third-party vendors to handle specific functions. Payment processors (operated by mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receive transaction data directly from you. We use cloud hosting services to store encrypted account and betting data. We use email providers to send account notifications. All processors are bound by data protection agreements and may not use your data for their own purposes.
Legal disclosure
We may disclose your data to law enforcement, regulators, or courts when legally required. We do not voluntarily share your data with government agencies unless compelled by valid legal process.
Your rights on onestepwin
You have the right to access your onestepwin account data, request corrections, and ask for deletion. You can view your full account history, betting record, and deposit/withdrawal statements anytime in your onestepwin account dashboard.
To request a data export, correct inaccurate information, or request account deletion, contact our support team via in-app chat or email. We will respond within 30 days. Deletion of your onestepwin account does not delete historical betting records required for compliance; those records are retained for seven years after closure.
Cookies and tracking on onestepwin
onestepwin uses cookies to keep you logged in, remember your preferences, and track basic usage statistics. We use cookies only to improve your experience, not to build advertising profiles or share with third parties. You can disable cookies in your browser settings, but onestepwin may not function properly without them.
We do not use third-party tracking pixels or analytics services that link your onestepwin activity to external advertising networks.
Jurisdiction, changes, and contact
onestepwin's privacy policy is governed by the laws of the jurisdictions where we operate. Our servers are located in Southeast Asia. If our data practices conflict with your local laws, your local law takes precedence. If you believe we have breached your privacy rights, you have the right to lodge a complaint with your local data protection authority.
We may update this notice if our data practices change. Material changes will be notified via email or in-app announcement at least 30 days before taking effect. Your continued use of onestepwin after an update constitutes acceptance of the new terms.
- In-app support
- Use the in-app chat to contact onestepwin support with privacy questions. Response times average subject to verification during peak hours.
- Email contact
- Email our privacy team at [email protected] for formal data requests, deletion, or complaints.
- Data retention
- We retain account and betting data for seven years after account closure to comply with anti-money-laundering rules.
- Jurisdiction
- onestepwin's privacy policy is governed by Southeast Asian data protection law and the jurisdictions where we operate.
This privacy notice is current as of the date published at the bottom of this page. onestepwin is committed to protecting your data while delivering secure sportsbook, live-dealer, and slot gaming across supported jurisdictions.