Anti-Fraud Policy

1win applies anti-fraud rules to every account, aimed at fraud and abuse against the operator and other players, not at scams committed against players. Looking for phishing or fake-app warnings instead? That’s on the Malaysia Player Safety Centre. This page covers what counts as prohibited activity, how account checks work, and what happens when something looks wrong.

Last reviewed: August 2026.

Key Points

1win’s anti-fraud policy bans multiple accounts, identity and document fraud, and payment or chargeback abuse, and relies on account verification to catch them.

• One verified person, one account — duplicates and shared logins count as abuse.
• Identity checks confirm who holds the account and who owns its payment method.
• Chargeback abuse and stolen-card use are handled as payment fraud, not disputes.
• Suspicious activity goes through monitoring and manual review, not guesswork.
• This isn’t the scam-safety page — see the Malaysia Player Safety Centre for that.

What This Policy Covers (and What It Doesn’t)

This policy sets out rules against fraud and abuse on player accounts. It is not a phishing or scam-safety guide; that lives on the Malaysia Player Safety Centre (linked in the FAQ below). A scam against a player usually involves a fake site or an impostor support agent trying to trick that player. Fraud under this policy runs the other way: a player breaking the account rules, whether that’s duplicate accounts, payment misuse, or disputing a deposit after already playing with it.

The two overlap in practice, a compromised account can end up used for both, but they’re handled separately. For red flags and what to do if your account looks compromised, see the Player Safety Centre.

Prohibited Activities

1win’s rules prohibit multiple or shared accounts, identity and document fraud, unauthorized payment use, chargeback abuse, bonus abuse, and collusion or bot-assisted play.

None of these require proof of intent. A duplicate account opened by mistake is reviewed the same way as one opened deliberately, at least at first.

Multiple Accounts and Account Sharing

A 1win account is tied to one verified person — opening more than one, or letting someone else use yours, counts as abuse even without harm intended. That holds in ordinary situations too: two siblings on the same Wi-Fi, a spouse borrowing a login «just this once.» The rule keeps the link between an account and a verified identity intact, since bonus eligibility, withdrawal checks, and responsible-gambling limits all depend on that link holding.

Each person who wants to play needs their own registered, verified account. Handing over a login puts it at risk if that person breaks a rule.

Identity Verification and Document Fraud

Identity verification checks that the person behind an account is who they say they are; using fake, altered, or someone else’s documents to pass it is document fraud. In practice that means a valid ID and confirmation that a payment method belongs to its user, the same approach most licensed betting platforms use.

A verification request isn’t automatically a bad sign, at least not on its own. Most accounts pass a light check with no more than a short delay at withdrawal. Requests get more detailed when something doesn’t line up on its own, a name mismatch between card and account, say. Submitting someone else’s ID moves a case into fraud.

Payment Fraud and Chargeback Abuse

Chargeback abuse means disputing a legitimate deposit through a bank after using those funds to play — treated as payment fraud, not a billing error. A genuine dispute (a charge you never made, a duplicate transaction from a glitch) is normal to raise with a bank. Chargeback abuse is different: the deposit was authorized, the funds were used, and the dispute only appears once the outcome of play wasn’t wanted.

Payment fraud more broadly covers using a card, wallet, or account that isn’t the holder’s own. Both get flagged mostly through monitoring, since payment gateways carry much of the detection load automatically.

How Suspicious Activity Is Reviewed

Suspicious activity is first flagged by automated monitoring, then checked manually where needed — most players never see this because ordinary activity doesn’t trigger it. Monitoring watches patterns rather than single transactions: an unusual burst of deposits and withdrawals, a device already linked to a flagged account, a login that doesn’t match the account’s history. None of that proves anything alone; it just moves a case into a closer look, which a person then reviews by hand.

A standard deposit or withdrawal that trips none of these signals sails through without delay.

What Can Happen to a Flagged Account

A flagged account may face extra verification, a temporary hold, or restriction while it’s reviewed — the outcome depends on the case, not a fixed list of penalties. Lighter cases usually mean a request for more documents; confirmed breaches, duplicate accounts farming bonuses, fraudulent payment activity, document fraud, tend to end in restriction under 1win’s terms and conditions.

1win operates under a Curacao gaming license, and enforcement sits within that framework. That’s separate from whether Curacao licensing amounts to approval by any Malaysian authority. It doesn’t, and this page makes no legality claim about Malaysia.

Reporting a Concern

To report suspicious activity or ask about a restricted account, contact official 1win support through live chat, email, or phone — support never asks for your password or one-time code. Have your account email and any relevant transaction details ready. Not sure whether something you noticed is a breach or just an odd coincidence? Raise it anyway.

For general account issues, the Support Help Hub covers registration, deposits, withdrawals, and app problems in one place.