1lee Privacy Policy — How We Handle Your Personal Data

This Privacy Policy applies to all personal data collected and processed by 1lee ("we", "us", "our") in connection with the operation of the 1lee gaming platform accessible at 1lee.click. It applies to all registered players, visitors to our website, and anyone who interacts with 1lee through any channel including email, live chat, or our payment systems.

By registering an account on 1lee, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should not register for or continue to use a 1lee account.

This policy is written in plain English and applies to Pakistani players who are the primary audience of 1lee. References to "personal data" mean any information that identifies you or could reasonably be used to identify you — your name, mobile number, CNIC number, Easypaisa account, transaction history, and similar identifiers.

1lee collects personal data through several channels — directly from you when you register and use the platform, automatically through your interaction with our website, and occasionally from third-party payment processors as part of transaction verification. Here is a clear breakdown:

We do not collect or store sensitive biometric data, political opinions, religious beliefs, or health information. Where CNIC verification is required for compliance purposes, the document is reviewed and then either securely deleted or archived in encrypted form in accordance with our data retention schedule.

1lee uses your personal data for specific, clearly defined purposes. We do not use your data in ways that would surprise you or that you would reasonably object to. Here is exactly what we use your data for:

• Account management: Creating and maintaining your 1lee account, verifying your identity, resetting passwords, and handling account security.
• Processing transactions: Receiving deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card; processing withdrawal requests to your registered payment method; maintaining accurate PKR balance records.
• Providing gaming services: Delivering game content, recording game outcomes, crediting winnings, applying bonuses, and maintaining your game history for dispute resolution purposes.
• Customer support: Responding to your enquiries, resolving complaints, investigating disputed transactions, and providing technical assistance.
• Fraud prevention and security: Detecting unusual account activity, identifying multi-account usage, preventing bonus abuse, and investigating potential money laundering or other prohibited conduct.
• Responsible gaming: Monitoring gameplay patterns that may indicate problematic gambling behaviour; applying player-requested tools (deposit limits, self-exclusion); proactively intervening where player welfare concerns are identified.
• Legal compliance: Retaining transaction records as required by applicable financial regulations; responding to lawful requests from regulatory authorities or law enforcement.
• Platform improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve the platform experience, and inform game catalogue decisions. This analysis uses aggregated data that cannot be used to identify individual players.
• Marketing communications: Sending you information about 1lee bonuses, promotions, and new game launches — only where you have opted in, or where you are an existing player and we are communicating about directly relevant services.

For players who are covered by privacy regulations that require a stated legal basis for data processing — including Pakistani data protection frameworks and aligned international standards — here is the legal basis 1lee relies on for each category of processing:

• Contract performance: Most of 1lee's data processing is necessary to fulfil the contract between you and 1lee — specifically, to operate your gaming account, process PKR deposits and withdrawals, and deliver game services. Without this processing, 1lee cannot provide the services you have signed up for.
• Legal obligation: Certain data processing is required by law — particularly the retention of financial transaction records for anti-money-laundering and regulatory compliance purposes. 1lee has no discretion to opt out of these obligations.
• Legitimate interests: Fraud prevention, responsible gaming monitoring, platform security, and aggregated analytics are processed on the basis of 1lee's legitimate interest in operating a safe, secure, and fair platform. These interests have been assessed as not overriding the rights and interests of individual players when balanced fairly.
• Consent: Marketing communications — where you have not been an active player for a significant period, or where communications relate to new products rather than directly related services — are sent on the basis of your consent. This consent can be withdrawn at any time.

1lee shares personal data only with parties that have a direct functional role in operating your account or a legal right to receive it. We do not share your data commercially. The categories of recipient are as follows:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and partner banks receive the minimum personal data required to process your deposit or withdrawal — typically your name, account number, and transaction amount. These parties process your data under their own privacy policies and applicable financial regulations.
• Licensed game providers: Evolution Gaming, Ezugi, Pragmatic Play, Spribe, and other providers whose games are available on 1lee may receive a pseudonymised player identifier, session token, and game activity data to facilitate gameplay and resolve technical disputes. Full personal details are not passed to game providers.
• Identity verification services: Where CNIC verification is required, a specialist identity verification service may process your document. These services operate under strict contractual data protection obligations with 1lee.
• Regulatory and law enforcement authorities: Where required by a lawful request from a Pakistani regulatory authority, financial intelligence unit, or law enforcement agency, 1lee will provide required information. We will notify the player where we are legally permitted to do so before complying with such a request.
• IT and security service providers: Technical infrastructure providers, cloud hosting services, and cybersecurity tools that support the operation of 1lee may process limited technical data as part of providing their services. All such providers are bound by contractual data processing agreements.

Given that 1lee operates exclusively in Pakistani rupees and serves Pakistani players, payment data has a particular significance. Here is how 1lee handles the specific payment identifiers most relevant to Pakistani players:

Easypaisa & JazzCash mobile numbers: Your registered mobile wallet number is stored in encrypted form and is used solely to process deposits credited to your 1lee account and to direct withdrawal payments to your wallet. It is not used for unsolicited marketing SMS. It is not shared with any party other than the respective mobile wallet provider for transaction processing.

NayaPay & SadaPay account details: Handled under the same conditions as mobile wallet numbers above. Account identifiers are stored in encrypted form and used only for transaction processing.

IBFT bank account details: Bank account numbers provided for IBFT withdrawals are retained in encrypted form for the duration of your account's active status plus the legally required retention period, after which they are securely deleted.

Visa/Mastercard debit card data: 1lee does not store full card numbers on its own servers. Card payments are processed through PCI-DSS Level 1 compliant payment processors. 1lee retains only the last four digits of the card number, card type, and expiry date for account management and dispute resolution purposes.

1lee uses cookies and similar tracking technologies to operate the platform, remember your session, and understand how the site is used. Here is a straightforward explanation of the cookies we use:

Essential cookies (Session, Authentication, Security) are required for the platform to function and cannot be disabled without breaking core functionality. Non-essential cookies (Preferences, Analytics) can be disabled in your browser settings at any time. Disabling preference cookies will mean 1lee cannot remember your settings between sessions. Disabling analytics cookies will not affect your ability to use the platform in any way.

1lee does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on the platform. We don't sell advertising space and we don't allow external advertising networks to track 1lee players.

1lee implements a multi-layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures in place include:

• Transport security: All data transmitted between your device and 1lee servers is encrypted using TLS 1.3 with 256-bit AES encryption. Our SSL certificate is maintained and renewed continuously.
• Password security: Passwords are processed using bcrypt hashing with individual salts. No 1lee employee can see your password in readable form. The platform enforces minimum password complexity requirements.
• Access control: Internal access to player data is restricted on a strict need-to-know basis. Customer support agents can see the minimum data required to assist with your query. Only a small number of senior staff have access to full account records, and all such access is logged and auditable.
• Infrastructure security: 1lee's servers are hosted in ISO 27001-certified data centres with physical security controls, redundant power, and regular penetration testing by independent security firms.
• Monitoring: Automated intrusion detection systems monitor 1lee's infrastructure 24/7. Suspicious activity triggers immediate alerts and human review.
• Data breach response: 1lee maintains a documented data breach response plan. In the event of a breach that creates a risk to player rights and freedoms, affected players will be notified promptly along with guidance on protective steps they can take.

1lee retains personal data only for as long as necessary for the purpose it was collected, or as required by law. The following retention periods apply:

• Account data: Retained for the duration of your active account plus 5 years after account closure. This retention is required for regulatory compliance and dispute resolution purposes.
• Transaction records (PKR deposits and withdrawals): Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping regulations applicable to gaming platforms.
• Identity verification documents (CNIC): Retained for 5 years from the date of verification. Where documents are submitted but verification is not completed (e.g., document unclear or account not activated), documents are deleted within 90 days.
• Game history: Retained for 5 years from each session date. Required for dispute resolution and responsible gaming monitoring.
• Customer support records: Email correspondence and live chat transcripts are retained for 3 years from the date of the interaction.
• Device and usage data: Server logs are retained for 12 months. Aggregated analytics data (which cannot be used to identify individuals) may be retained indefinitely.
• Self-exclusion records: Where a player has self-excluded from 1lee, a record of that exclusion is retained indefinitely to prevent reregistration during an exclusion period.
• Inactive accounts with zero balance: Accounts that have been inactive for more than 24 months with a zero balance may be closed and their data anonymised after the applicable retention period.

When retention periods expire, 1lee securely deletes or anonymises personal data in accordance with our data destruction procedures. Anonymised data — from which individual players cannot be identified — may be retained for statistical and analytical purposes without any retention limit.

You have meaningful rights over your personal data held by 1lee. These rights are genuine — not listed here as a formality. Here is what you can ask for and how to exercise each right:

To exercise any of the above rights, email support@1lee.click. We will acknowledge your request within 72 hours and respond fully within 30 days. We may need to verify your identity before processing certain requests to protect against unauthorised data access.

1lee is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you believe that a minor has registered for a 1lee account, please contact us immediately at support@1lee.click.

Where we identify that an account belongs to a person under 18, we will immediately suspend the account, refund any deposited funds to the originating payment method, and delete all personal data associated with the account as quickly as technically possible — subject to any legal obligations that require us to retain records of the incident.

Age verification is a required step in the 1lee registration process. We may request additional verification documents where there is reasonable suspicion that a player may not be 18. Providing false information about your age to circumvent this check is a breach of our Terms and Conditions and may result in permanent account closure.

1lee may send you information about bonuses, promotions, new game launches, and other platform updates by SMS or email. Here is how our marketing communications work:

• If you are an active 1lee player, we may contact you about offers and features that are directly relevant to your account and gaming activity. This is based on our legitimate interest in keeping you informed about services you are already using.
• If you have not been active on 1lee for a significant period, or if we want to send communications about new products outside your established activity, we will only do so with your explicit consent.
• You can opt out of all marketing communications at any time by updating your preferences in your account settings, by clicking the unsubscribe link in any email we send you, or by contacting support at support@1lee.click.
• Opting out of marketing does not affect your ability to receive transactional communications — deposit confirmations, withdrawal notifications, and security alerts will still be sent as these are necessary for account operation.
• 1lee does not purchase marketing lists or send unsolicited communications to people who have not registered for a 1lee account.

1lee may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When we make changes, we will update the "Last Updated" date at the top of this page.

For material changes — those that significantly affect your rights or how your data is used — we will notify registered players via the mobile number or email address associated with their 1lee account at least 14 days before the changes take effect. We will summarise clearly what has changed and why.

For minor changes — corrections, clarifications, or updates that do not materially affect your rights — no advance notice is required, though the policy will be updated immediately. We encourage you to review this policy periodically to stay informed about how 1lee protects your data.

Your continued use of 1lee following any update to this policy constitutes acceptance of the revised version. If you do not agree with material changes, you have the right to close your account and withdraw your balance before the changes take effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or how 1lee handles your personal data, please contact us. We take privacy enquiries seriously and will respond promptly.

• Email: support@1lee.click — mark your subject line as "Privacy Enquiry" for fastest routing.
• Live Chat: Available within the 1lee platform when logged in, 24 hours a day, 7 days a week. For data requests, we recommend email to ensure a proper written record.
• Response time: We acknowledge all privacy-related contacts within 72 hours and provide a full response within 30 days for formal data subject requests.

1lee is committed to resolving privacy concerns directly and transparently. If you are not satisfied with our response to a privacy concern, you have the right to raise the matter with the relevant data protection authority in your jurisdiction.

This Privacy Policy was last updated in January 2025. The version published at 1lee.click/privacy-policy is always the current version.