1lot Privacy Policy

Our Commitment to Your Privacy

When you use 1lot — whether on a desktop browser, mobile browser, or through the app — you share personal information with us. We take that seriously. This Privacy Policy describes how we collect, store, use, and protect your data in plain language, so you know exactly what's happening with your information.

This policy applies to all users of the 1lot platform, including players registered from Manila, Quezon City, Cebu, Davao, and everywhere else in the Philippines. By creating a 1lot account, you agree to the terms of this Privacy Policy alongside our Terms & Conditions.

Privacy at a Glance

Six core principles guide how 1lot handles your data.

The information we collect falls into a few clear categories depending on how you interact with the platform.

Account Registration Data

• Full legal name — required to create your account and verify your identity
• Date of birth — to confirm you meet the 21+ age requirement
• Mobile number — for OTP verification, security alerts, and account communications
• Email address — for account notifications and correspondence
• Username and password — your credentials for accessing the platform

Identity Verification (KYC) Data

• Government-issued ID — a copy of your PhilSys card, passport, driver's licence, or another accepted Philippine ID
• Selfie or proof of identity image — used to match your face with your submitted ID, where required
• Proof of address — may be requested in some circumstances to verify your Philippine residential address

Financial Data

• Payment method details — the name and account information of the GCash account, Maya account, or Philippine bank account you use for deposits and withdrawals
• Transaction records — a history of deposits, withdrawals, and bets linked to your account

Technical and Usage Data

• IP address and device type — used for security monitoring and fraud prevention
• Browser type and operating system — to optimise platform performance for your device
• Session activity logs — pages visited, games played, and time spent, used to improve the platform and detect unusual behaviour
• Cookies and similar tracking data — described in more detail in Section 5 below

Everything we collect is used for a specific, legitimate purpose. Here's the full picture:

We do not sell your personal information. Data is shared with third parties only where necessary to operate the platform securely and legally.

• Payment processors: Your payment account details are shared with Philippine payment service providers (such as banks, GCash, and Maya processing infrastructure) to execute deposits and withdrawals.
• KYC and identity verification providers: Your ID documents and related data are processed by third-party identity verification services to meet account verification requirements. These providers are bound by strict data processing agreements.
• Security and fraud prevention services: IP addresses, device data, and session logs may be shared with third-party security providers to detect and prevent fraudulent activity.
• Legal authorities: We may disclose personal data to law enforcement or regulatory authorities when legally required to do so — for example, in response to a court order or lawful investigation.
• Platform infrastructure providers: Hosting, cloud storage, and technical service providers may have limited access to certain data as part of their infrastructure services. All such providers are subject to data processing agreements.

All third-party service providers we work with are required to handle your data securely and use it only for the specific purpose for which it was shared.

We keep your personal data for as long as your account is active and for a reasonable period after account closure, as required by our legal obligations and operational needs.

• Active account data: Retained for the lifetime of your account to support ongoing service delivery, security monitoring, and responsible gaming compliance.
• Transaction and financial records: Retained for a minimum of five years after the last transaction, consistent with standard financial record-keeping requirements.
• KYC documents: Retained for the period required by applicable identity verification and anti-money laundering obligations.
• Closed or inactive accounts: Core data retained for the legally required retention period after account closure, after which it is securely deleted or anonymised.

Where data is no longer required for any legitimate purpose, it is deleted or anonymised. Anonymised data — where no individual can be identified — may be retained for analytics purposes indefinitely.

1lot uses cookies and similar technologies to keep the platform working properly, personalise your experience, and understand how players use the site.

Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function — login sessions, security tokens, and load balancing. These cannot be disabled without breaking core platform features.
• Functional cookies: Remember your preferences such as language settings and display options so you don't need to reset them on every visit.
• Analytics cookies: Help us understand which parts of the platform are used most, how long sessions last, and where players encounter issues. Data collected is anonymised or aggregated.
• Security cookies: Used to detect and prevent fraudulent logins and suspicious account activity.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use core platform features including logging in and making transactions.

As a 1lot player, you have meaningful rights over your personal data. Here's what you can request:

To exercise any of these rights, contact 1lot support through your account or using the contact details in the footer of this page. We will verify your identity before processing data requests and aim to respond within a reasonable timeframe.

Note that some data must be retained regardless of a deletion request — for example, transaction records held to meet financial record-keeping obligations. We will explain any such limitations when responding to your request.

How We Protect Your Data

All data in transit between your device and 1lot servers is protected by SSL/TLS encryption. Stored personal data is held behind access-controlled systems with restricted staff access on a need-to-know basis. Passwords are hashed and never stored in plain text. Payment details are handled through established Philippine payment infrastructure with their own security standards.

Despite these measures, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your 1lot account and to enable OTP two-factor authentication in your account settings. If you suspect unauthorised access to your account, contact support immediately.

Updates to This Privacy Policy

We may update this Privacy Policy as the platform evolves or as legal requirements change. For material changes, we will notify registered players by email or through an in-platform notification before the new policy takes effect. The "Last Updated" date at the top of this page always reflects the most recent version.

Continued use of the 1lot platform after a policy update constitutes acceptance of the revised Privacy Policy.

Privacy FAQ