1xBet operates internationally through a licensed Curaçao corporate operator. Licensing identifies the responsible company and establishes regulatory duties. Security controls protect account, identity, and transaction data during platform use. Pakistani users should examine national restrictions before creating an account. Bangladeshi users face stronger statutory restrictions introduced during 2026. Local law remains separate from the operator’s foreign licence.
Security checks also matter before sending identification or payment information. KYC may require identification, address evidence, and additional financial documents. Account controls include two-factor authentication and active-session monitoring. Payment availability can differ between PKR and BDT accounts. A listed payment route does not confirm local legal permission. Users should verify current regulatory status before depositing funds.
Licensing Information
Licensing establishes who operates the service, which regulator supervises that company, and what rules apply to its activities. This distinction matters particularly in Pakistan and Bangladesh. Neither country grants 1xBet a domestic gambling licence. The international authorisation therefore identifies the offshore operator but does not replace national legislation governing gambling, online betting, payments, advertising, or website access.
Curaçao Gaming Authority license
The international 1xBet website identifies Caecus N.V. as its operator. The company is incorporated in Curaçao under Company Number 163779. Its registered address is Chuchubiweg 17, Willemstad, Curaçao. The published licence number is OGL/2024/1262/0493, granted on 7 November 2024. The operator currently describes this licence as active.
The licence was originally granted during Curaçao’s regulatory transition. The National Ordinance on Games of Chance, known as LOK, entered into force on 24 December 2024. It replaced the former offshore master and sub-licence structure with direct regulatory supervision by the Curaçao Gaming Authority. Current 1xBet legal pages reference the licence under this newer framework.
The authorisation covers online games of chance offered from Curaçao. CGA rules impose obligations concerning operator integrity, financial stability, responsible gambling, complaints, reporting, domain registration, and player-fund safeguards. The regulator also maintains domain-specific certificates for licensed B2C websites.
Key licence facts:
- Licence holder: Caecus N.V.
- Company number: 163779.
- Registered address: Chuchubiweg 17, Willemstad, Curaçao.
- Licence number: OGL/2024/1262/0493.
- Grant date: 7 November 2024.
- Current regulator: Curaçao Gaming Authority.
- Current published status: active.
- Verification: CGA certificate and domain-specific digital seal.
CGA verification deserves a separate check before registration. Licensed B2C domains must display the regulator’s current certificate seal. Clicking that seal should open the official CGA certificate service and show the exact domain, operator, and licence status. The current active B2C seal is green. The former orange certificate became invalid after 15 October 2025.
| Regulatory point | Curaçao CGA licence | Jurisdiction-specific domestic licence |
| Operator supervision | CGA supervises the Curaçao licensee | National regulator supervises local operations |
| Remote betting and casino | Permitted within approved licence scope | Depends on each country’s legislation |
| Domain verification | CGA certificate required for approved domains | Local domain registration may be required |
| Player complaints | Operator, CGA rules and applicable ADR procedures | Domestic regulator may provide additional channels |
| Local legality abroad | Does not override another country’s laws | Applies within the issuing jurisdiction |
| Market-specific advertising rules | Limited by target-country law | Usually directly regulated locally |
A Curaçao licence provides identifiable regulatory oversight. It should not be treated as equivalent to domestic approval in every target country. Regulators such as the UK Gambling Commission or Malta Gaming Authority operate under different statutory systems, enforcement structures, and consumer-redress arrangements.
Operator details and international status
Caecus N.V. is the legal entity named for the international 1xBet service. Published terms also identify 2 Cyprus companies as payment agents. Exidna Enterprises LTD carries registration number HE435756. Evrianassa Enterprises LTD carries registration number HE435969. Both are registered at 22B Agias Zonis, Limassol, Cyprus.
These payment agents process transactions on behalf of Caecus N.V. Their participation does not create a separate Pakistani or Bangladeshi gambling licence. The contractual operator remains the entity stated within the terms applying to the relevant international domain.
The brand has also expanded through local licences in regulated markets outside Curaçao. Company representatives reported more than 35 licences by 2026, with substantial licensed activity across Africa, Latin America, and parts of Europe. Examples reported publicly include Nigeria, Ghana, Kenya, Senegal, Cameroon, Brazil, Peru, Spain, Ireland, and Serbia.
Notable international points include:
- The international operator is registered in Curaçao.
- The international licence does not automatically authorise every country.
- Separate legal entities can operate locally licensed versions in certain jurisdictions.
- Local licences carry their own reporting and player-protection requirements.
- Payment processing may involve contracted entities outside Curaçao.
- Applicable dispute routes depend on the account’s governing terms and jurisdiction.
This distinction affects player recourse. A bettor using a locally licensed version may have access to a domestic regulator or approved dispute body. Users outside locally licensed markets normally depend more heavily on contractual complaints procedures, the operator’s regulatory framework, and any remedies available under their own national law.
Availability and restrictions in Pakistan and Bangladesh
Pakistan and Bangladesh require separate treatment. Neither country currently provides Caecus N.V. with a domestic 1xBet gambling licence. The legal position is also no longer accurately described as merely identical “grey areas” in both markets.
Pakistan does not have a domestic licensing framework authorising the international 1xBet service. More importantly, the National Cyber Crime Investigation Agency included 1xBet among online gambling and betting applications it declared illegal in August 2025. NCCIA forwarded the list to the Pakistan Telecommunication Authority for blocking.
Pakistan’s gambling legislation also contains long-standing prohibitions on wagering and gaming activities. Enforcement can involve federal cybercrime provisions, provincial legislation, telecommunications controls, and criminal-law provisions depending on the conduct involved. The existence of an offshore Curaçao licence does not cancel those restrictions.
The Pakistan-facing 1xBet interface currently advertises PKR transactions and methods including JazzCash, Easypaisa, Cashmaal, NayaPay, SadaPay, bank transfer, and other channels. This technical availability does not establish regulatory permission from Pakistani authorities.
Bangladesh changed its gambling legislation during 2026. The Gambling Prevention Act, 2026 became Act No. 98 of 2026 and entered into force on 1 July 2026. It replaced the Public Gambling Act of 1867. The current position is therefore stricter than the older “grey-area” description contained in earlier material.
The new Bangladesh law expressly addresses online gambling, sports betting, remote betting, virtual casino activity, digital gambling networks, and related conduct. Reported penalties for online gambling offences can reach 5 years’ imprisonment and Tk 1 crore. Certain online betting or operating offences can carry penalties reaching 7 years and Tk 5 crore.
Bangladeshi regulators have also acted against gambling-related websites and payment routes. BTRC meetings during late 2025 addressed website blocking, while authorities reported identifying thousands of mobile financial service numbers and web links connected with gambling activity. Bangladesh Bank has separately instructed authorised dealers to prevent international-card payments for online casino and gambling transactions.
The Bangladesh-facing 1xBet pages nevertheless advertise BDT transactions through channels including bKash, Nagad, Rocket, Nexus Pay, and bank transfer. Listing these methods on a website does not establish that their gambling use is lawful under Bangladesh legislation or permitted by the payment provider.
| Issue | Pakistan | Bangladesh |
| Local 1xBet gambling licence | No | No |
| International operator licence | Curaçao | Curaçao |
| Current enforcement position | NCCIA listed 1xBet among illegal gambling apps | Online gambling expressly covered by 2026 legislation |
| Website or app restrictions | PTA blocking directions may apply | BTRC and other authorities can restrict gambling access |
| Local currency shown by platform | PKR | BDT |
| Examples shown in local cashier | JazzCash, Easypaisa, bank transfer | bKash, Nagad, Rocket, bank transfer |
| Domestic gambling-regulator recourse | No licensed 1xBet regulator | No licensed 1xBet regulator |
| Does foreign licence override local law? | No | No |
Users should check current laws and platform accessibility before supplying personal data or money. A working website, mobile application, payment channel, mirror, or alternative domain does not establish legal permission. This point is especially important in Bangladesh after 1 July 2026.
Security and Data Protection
Security controls affect registration data, uploaded identity documents, passwords, and payment records. Pakistani and Bangladeshi users should examine these protections before submitting CNIC, passport, address, bank, wallet, or card information. The operator publishes KYC, AML, privacy, account-protection, and transaction rules. Some technical security details remain less specific publicly.
Encryption and network protection
1xBet publicly states that personal information is stored in an encrypted, password-protected database within a protected network and behind active firewall software. Official pages also use HTTPS and describe encrypted communications for account activity.
Some regional 1xBet pages describe 256-bit SSL encryption. Older published rules, however, still contain references to 128-bit encryption and SSL Version 3. Those older specifications are technically outdated. Exact TLS versions and negotiated cipher suites should therefore be confirmed from the live official domain rather than assumed from regional marketing copy.
Public company materials confirm several user-account controls. These include two-factor authentication, monitoring of active account sessions, a security question, linked email, and phone-number verification.
Published security measures include:
- encrypted and password-protected personal-data storage;
- firewall-protected network infrastructure;
- HTTPS connections on official web pages;
- two-factor authentication;
- active-session monitoring;
- linked email verification;
- phone-number confirmation;
- security reviews when suspicious activity occurs.
Claims concerning AES encryption for every stored record, a specific DDoS mitigation architecture, password-hashing algorithms, or platform-wide PCI-DSS certification are not described clearly enough in the public rules to present as independently confirmed specifications. These points should not be converted into fixed technical facts without additional documentation.
The confirmed controls correspond with common security practices used by financial and gambling websites. That does not justify treating every unpublished component as equivalent to a bank’s infrastructure or certification programme.
KYC, AML and financial security measures
KYC verifies the identity behind an account. 1xBet’s current policy requires personal identification information and allows the company to request supporting documents. Required information can include the user’s full legal name, date of birth, and permanent residential address.
Typical supporting documentation includes a passport, national identity document, driving licence, or another accepted government-issued photo ID. Address verification can involve a recent utility bill, financial institution statement, government correspondence, or another accepted independent document.
Verification is not guaranteed to occur only before the first withdrawal. The company’s current policies allow checks during registration, before certain account activities, before payment approval, or after risk indicators appear. Pakistani-facing pages also identify CNIC, Smart CNIC, NICOP, passport, and other identity documents as possible verification records.
Payment ownership can also become part of the review. The rules state that withdrawals can be restricted when payment details do not belong to the account holder. Withdrawals generally use the same payment details or proportional payment routes used for deposits.
The AML policy adds transaction monitoring and risk-based verification. Published rules state that suspicious activity can be reviewed and that the company may block funds when it suspects money laundering or terrorist financing. Identification records are retained, and suspicious activity can be reported where legally required.
A typical verification sequence can include:
- Submit accurate personal information matching official documents.
- Confirm the registered phone number or email address.
- Provide valid photographic identification when requested.
- Submit recent evidence of residential address.
- Confirm ownership of the payment route when requested.
- Provide information about source of funds during higher-risk reviews.
- Complete additional document or video checks where necessary.
- Wait for security approval before restricted withdrawals resume.
The rules allow verification to take up to 72 hours after document receipt in certain cases. A video conference or additional examination can extend the process. Published rules state that a video-verification outcome may take up to 5 working days.
AML controls exist for several reasons. They help establish age and identity, reduce fraudulent payment use, detect duplicate accounts, identify suspicious money movements, and meet regulatory reporting requirements.
PKR or BDT transaction speed does not exempt an account from these checks. Large, unusual, mismatched, or otherwise suspicious transfers can receive additional examination. Public rules do not disclose fixed “velocity check” thresholds or an automatic amount triggering every investigation.
How user data and payments are protected
1xBet’s privacy rules cover identity information, contact data, payment information, transaction history, account activity, and technical records such as IP addresses. Personal data can also be supplied to selected service providers when required for payment processing, account maintenance, identity verification, or legal compliance.
This means personal data is not necessarily kept exclusively inside one company. The privacy policy permits defined disclosures to partners, processors, messaging services, verification providers, and authorities under specified circumstances. International data transfers may also occur.
For direct account protection, the operator publishes 5 principal controls: two-factor authentication, session monitoring, a security question, email linking, and phone verification. These tools reduce exposure when login credentials become compromised.
Users can reduce account risk through several practical actions:
- Enable two-factor authentication immediately after registration.
- Use a unique password unavailable on other websites.
- Link and verify both phone and email where supported.
- Review active account sessions regularly.
- Log out after using shared hardware.
- Never send passwords, PINs, CVV codes, or OTPs to support agents.
- Check the exact domain before entering credentials.
- Click the CGA seal and verify the displayed domain.
- Avoid unofficial APK files and third-party login pages.
- Keep identity-document photographs away from public cloud links.
| Protection layer | Function |
| TLS/HTTPS | Protects information during transmission |
| Encrypted stored records | Reduces exposure of stored personal information |
| Firewall controls | Restrict unauthorised network access |
| KYC | Confirms user identity and account ownership |
| AML monitoring | Reviews suspicious financial activity |
| Payment ownership checks | Restrict third-party payment use |
| Two-factor authentication | Adds another login verification step |
| Session monitoring | Helps identify unexpected account access |
| Email and phone verification | Supports login and recovery checks |
Security should also be evaluated separately from legality. A platform can apply encryption, KYC, and account controls while remaining unlicensed within a user’s home jurisdiction. That distinction is particularly important for Pakistan and Bangladesh.
Conclusion
1xBet’s international operation has an identifiable Curaçao operator and an active published licence. Caecus N.V., its licence number, registered address, payment agents, and CGA verification route can be checked before account use. The platform also publishes KYC, AML, privacy, transaction, and account-protection procedures.
These controls do not create local gambling permission. Pakistan authorities have listed 1xBet among illegal betting applications, while Bangladesh enacted a specific Gambling Prevention Act effective 1 July 2026. Users should therefore treat local law as the deciding factor before registering, depositing PKR or BDT, or submitting identity documents.