1win

{
  "allows_bounty_splitting": true,
  "average_time_to_bounty_awarded": 372,
  "average_time_to_first_program_response": 8,
  "average_time_to_report_resolved": 1231,
  "handle": "1win_com",
  "id": 0,
  "managed_program": false,
  "name": "1win",
  "offers_bounties": true,
  "offers_swag": false,
  "response_efficiency_percentage": 100,
  "submission_state": "open",
  "url": "https://hackerone.com/1win_com",
  "website": "https://1win.com",
  "targets": {
    "in_scope": [
      {
        "asset_identifier": "1w.cash",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "1w.run",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "1win.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "- Registration\n- Login\n- Deposit\n- Withdrawal\n- Personal account(settings, voucher, details, etc)\n\n**Here is an incomplete list of countries where the 1win.com website is available: Brazil, Albania, Vietnam, Gibraltar, Zimbabwe, Israel, Indonesia, Malaysia, Kuwait, Jamaica, Japan, Panama, Thailand, Taiwan, Turkey, Philippines, South Korea, India, Bangladesh, Pakistan, Nepal, Kyrgyzstan, Azerbaijan, Uzbekistan, Tajikistan, Armenia, Chile, Argentina, Colombia, Ecuador, Venezuela, Bolivia, Cameroon, Egypt, Zambia, Costa Rica, Algeria, Angola, Andorra, Gabon, Guatemala, Guinea-Bissau, Honduras, Mozambique, Monaco, Mongolia, Namibia**",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "Deposit/Withdraw",
        "asset_type": "OTHER",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "In scope:\n- Payment forms and integrations hosted on 1win.com, including processing of redirect responses and callbacks.\n\nOut of scope:\n- Infrastructure and APIs of external payment providers (vulnerabilities that do not affect 1win)",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "https://1win.com/betting",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "Here is an incomplete list of countries where the 1win.com website is available: Brazil, Albania, Vietnam, Gibraltar, Zimbabwe, Israel, Indonesia, Malaysia, Kuwait, Jamaica, Japan, Panama, Thailand, Taiwan, Turkey, Philippines, South Korea, India, Bangladesh, Pakistan, Nepal, Kyrgyzstan, Azerbaijan, Uzbekistan, Tajikistan, Armenia, Chile, Argentina, Colombia, Ecuador, Venezuela, Bolivia, Cameroon, Egypt, Zambia, Costa Rica, Algeria, Angola, Andorra, Gabon, Guatemala, Guinea-Bissau, Honduras, Mozambique, Monaco, Mongolia, Namibia",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "https://1win.com/casino",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "All games available at https://1win.com/casino fall within the scope of the program.",
        "integrity_requirement": "high",
        "max_severity": "critical"
      }
    ],
    "out_of_scope": []
  }
}