1 Lee Privacy Policy – How We Handle Your Personal Data

This Privacy Policy applies to 1 Lee, the online gaming and sports betting platform operated at https://1lee.biz. When we refer to "1 Lee," "we," "us," or "our" in this document, we mean the legal entity responsible for operating the 1 Lee platform and processing your personal data.

1 Lee is the data controller for all personal information collected through the website, mobile browser interface, customer support channels, and related services. As data controller, 1 Lee determines the purposes for which your data is processed and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

This policy covers all users of the 1 Lee platform including registered members, visitors browsing the site without an account, and individuals who contact 1 Lee support. If you are a registered player based in Pakistan, this policy governs the full scope of how your personal data is handled throughout your membership.

1 Lee collects personal data in the following categories. We only collect information that is necessary and relevant to operating the platform, verifying your identity, processing payments, and complying with our legal obligations.

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where this is directly relevant to responsible gaming assessments and you have explicitly provided it in the context of a responsible gaming request.

1 Lee uses your personal data only for the purposes set out below. We do not process personal data in any way that is incompatible with these stated purposes without your knowledge.

• Account management: Creating and maintaining your 1 Lee player account, including authentication, password recovery, and account settings management.
• Identity and age verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 18 years. Verification is required before withdrawals are processed and may be requested at any time during your membership.
• Payment processing: Processing deposits and withdrawals through your chosen PKR payment method — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, or Visa/Mastercard. Financial data is passed only to the payment processor required to complete your transaction.
• Fraud prevention and security: Monitoring account activity for signs of fraud, money laundering, multi-accounting, bonus abuse, or any other prohibited conduct. Technical data including IP addresses and device information is used for this purpose.
• Responsible gaming: Using gaming activity data to identify patterns that may indicate problem gambling. Where 1 Lee's responsible gaming systems flag a concern, we may contact you or apply account protections in line with our Responsible Gaming commitments.
• Customer support: Handling your queries, complaints, and requests accurately and efficiently. Support interactions are recorded to maintain service quality and to resolve disputes.
• Legal compliance: Retaining records required under applicable anti-money laundering regulations, gaming licensing conditions, and financial reporting obligations.
• Platform improvement: Using aggregated, anonymised analytics data to understand how players interact with 1 Lee and to improve game performance, navigation, and features.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates by email or SMS where you have opted in to receive them. You can opt out at any time.

Every instance of personal data processing at 1 Lee rests on one of the following legal grounds:

• Contract performance: Processing your identity, contact, and financial data is necessary to provide the services you signed up for when you registered a 1 Lee account. Without this processing, 1 Lee cannot create your account, accept deposits, or pay out winnings.
• Legal obligation: 1 Lee is required by its gaming licence conditions and applicable anti-money laundering regulations to verify player identities, retain transaction records, and report suspicious financial activity. This processing is non-optional.
• Legitimate interests: Fraud detection, security monitoring, and platform analytics are conducted under 1 Lee's legitimate interests in operating a secure and legally compliant platform. These interests do not override your privacy rights.
• Consent: Marketing communications are sent only where you have actively opted in. You may withdraw consent at any time. Withdrawal of marketing consent does not affect the lawfulness of any processing already carried out.

1 Lee does not sell your personal data. We share data only with the limited categories of third parties described below, and only to the extent necessary for the stated purpose. All third-party service providers used by 1 Lee are bound by contractual confidentiality obligations and data processing agreements.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card processing partners receive the payment information required to process your transactions. These providers do not receive your full gaming history or other unrelated account data.
• Identity verification providers: Where 1 Lee uses a third-party KYC (Know Your Customer) service to assist with age and identity verification, that provider receives only the document and identity data needed to complete the check.
• Live game studio providers: The studios that power 1 Lee's live dealer games receive session connection data necessary to stream the game to your device. They do not receive your financial information or full account details.
• Analytics providers: Anonymised, aggregated usage data may be processed by analytics tools to help 1 Lee understand platform performance. This data cannot be used to identify individual players.
• Regulatory authorities: Where required by applicable law, gaming licence conditions, or a lawful order from a competent authority, 1 Lee may disclose your data to regulators or law enforcement agencies. 1 Lee will notify you of such disclosure unless legally prohibited from doing so.

1 Lee does not transfer your personal data to parties located outside of the applicable regulatory framework without ensuring that appropriate data protection safeguards are in place.

1 Lee retains personal data for only as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and licensing obligations. The general retention periods applied by 1 Lee are as follows:

• Active account data: Retained for the full duration of your membership at 1 Lee, plus a standard post-closure period required by our licensing conditions (typically five years from account closure).
• Transaction records: Financial transaction records are retained for a minimum of five years from the date of each transaction in line with anti-money laundering record-keeping requirements.
• KYC documents: Identity and age verification documents are retained for five years from the date of submission or account closure, whichever is later.
• Support communications: Chat logs and email correspondence are retained for two years from the date of the interaction unless a longer period is required for an ongoing dispute or investigation.
• Marketing consent records: Records of your marketing preferences are retained for as long as your account is active and for one year after account closure.

When data is no longer needed and the applicable retention period has expired, 1 Lee securely deletes or anonymises it so that it can no longer be linked to you as an individual.

The security of your personal data is taken seriously at 1 Lee. The platform implements a range of technical and organisational security measures to protect your information against unauthorised access, disclosure, alteration, or destruction.

• Encryption in transit: All data transmitted between your device and the 1 Lee platform is encrypted using TLS (Transport Layer Security). This applies to all pages including login, registration, cashier, and live game interfaces.
• Encrypted storage: Personal and financial data stored on 1 Lee servers is encrypted at rest. Database access is restricted to authorised personnel on a need-to-know basis.
• Access controls: Internal access to player data is limited through role-based access controls. Only team members who require data access to perform their specific job function are granted it.
• Fraud monitoring: Automated systems monitor account activity continuously for anomalies that may indicate account compromise or fraudulent access.
• Regular security reviews: The 1 Lee platform undergoes regular security assessments, including penetration testing and vulnerability scanning, to identify and address potential weaknesses before they can be exploited.

While 1 Lee implements robust security measures, no online platform can guarantee complete security against all threats. You are responsible for maintaining the security of your own account credentials. If you suspect your account has been accessed without your authorisation, contact support immediately.

The 1 Lee website uses cookies and similar tracking technologies to make the platform function properly, remember your preferences, and understand how the site is being used. A cookie is a small text file stored on your device by your browser when you visit a website.

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking essential cookies will prevent parts of the 1 Lee platform from functioning correctly. Changing cookie settings in your browser does not affect data that 1 Lee has already legitimately collected.

As a 1 Lee member and data subject, you have the following rights over your personal information. 1 Lee will respond to all valid rights requests within 30 days of receipt.

To exercise any of these rights, contact 1 Lee at support@1lee.biz with the subject line "Data Rights Request." Include your registered email address and a description of your request. 1 Lee may need to verify your identity before processing the request. Submitting a rights request does not affect your ability to continue using the platform.

Where a rights request conflicts with a legal obligation — for example, the requirement to retain transaction records for anti-money laundering purposes — 1 Lee will explain the conflict to you and carry out the request to the maximum extent possible within the legal constraints.

1 Lee sends promotional communications — including welcome bonuses, reload offers, seasonal promotions, and platform updates — by email and SMS. These communications are sent only to members who have opted in to receive them at the time of registration or subsequently through account settings.

If you no longer wish to receive marketing messages from 1 Lee, you can opt out at any time in one of the following ways:

• Click the "Unsubscribe" link at the bottom of any marketing email from 1 Lee
• Update your communication preferences in the Notifications section of your 1 Lee account settings
• Contact support@1lee.biz with a request to be removed from the marketing list

Opting out of marketing communications does not affect transactional messages — you will continue to receive emails and SMS messages related to your account activity, deposits, withdrawals, identity verification, and support responses. These service messages are necessary for the operation of your 1 Lee account and cannot be disabled.

The 1 Lee platform is strictly for adults aged 18 and over. 1 Lee does not knowingly collect personal data from anyone under the age of 18. The registration process requires you to confirm your date of birth, and identity verification is used to confirm age compliance where required.

If 1 Lee becomes aware that personal data has been collected from a person under 18, the relevant account will be closed immediately, all data will be deleted, and any balance held in the account will be handled in accordance with applicable legal requirements. If you believe a minor has registered at 1 Lee using false age information, please contact support@1lee.biz immediately.

Parents and guardians are encouraged to use parental control software to restrict access to gambling websites on devices used by minors.

1 Lee may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, changes to the platform, or updates to the services we use. The date of the most recent update is shown at the top of this page.

When significant changes are made to the policy — for example, changes to how your data is used or shared — 1 Lee will notify active members by email to the address registered on their account at least 7 days before the new policy takes effect, where practicable.

For minor changes such as clarifications of existing practices or corrections of typographical errors, 1 Lee may update the policy without direct notification, relying instead on the date stamp at the top of the page to indicate that a change has been made. We recommend reviewing this page periodically to stay informed.

Continued use of the 1 Lee platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any updated version of this policy, you may close your account by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 1 Lee handles your personal data, please get in touch through any of the following channels:

• Email: support@1lee.biz — use subject line "Privacy Query" or "Data Rights Request"
• Live Chat: Available 24/7 directly on the 1 Lee platform
• FAQ: Visit the FAQ page for answers to common account and data questions

1 Lee aims to respond to all privacy-related queries within 5 business days. Data rights requests will be acknowledged within 72 hours and resolved within 30 days. If the request is complex or involves a large volume of data, 1 Lee will notify you of any necessary extension to this timeframe.

This Privacy Policy is governed by and construed in accordance with the laws applicable under 1 Lee's operating jurisdiction. Any disputes relating to data processing that cannot be resolved through 1 Lee's internal process may be referred to the appropriate data protection supervisory authority.