Privacy Policy

1. Data We Collect

When you register for and use a winbw account, we collect personal data across several categories. The specific data collected depends on the actions you take on the platform and the products you access. Below is a comprehensive overview of the categories of personal data winbw may hold about you.

1.1 Registration Data

When you create a winbw account, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify that you are 18 years of age or older)
• Mobile phone number registered in Bangladesh
• Email address
• Preferred username
• Residential address (district, city, and division within Bangladesh)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer process, we may collect copies of:

• National Identity Card (NID) or passport
• Proof of address document (utility bill, bank statement, or official correspondence)
• Proof of payment method ownership (screenshot or confirmation from bKash, Nagad, Rocket, Upay, or a Bangladeshi bank account)

1.3 Financial Transaction Data

Every deposit, withdrawal, and balance adjustment on your winbw account is logged. This includes: transaction amounts in BDT, payment method used (e.g., bKash account number last four digits, bank name), transaction timestamps in Bangladesh Standard Time (BST, UTC+6), and transaction reference numbers.

1.4 Gameplay & Activity Data

We record your betting and gaming activity on winbw, including: markets and events wagered on, stake amounts and returns, game sessions (slots, Callbreak, live casino), login and logout timestamps, and session duration. This data is used to deliver the platform's core service, to identify problem gambling patterns, and to calculate Loyalty Program points.

1.5 Technical & Device Data

When you access winbw through a browser or mobile device, we automatically collect:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, click paths, and time spent on each section
• Referral source (the URL from which you arrived at winbw.net)

1.6 Communications Data

If you contact our support team via live chat or email at [email protected], we retain a record of that correspondence. This includes the content of your messages, the date and time of contact, and the resolution outcome. This data is used to improve service quality and to resolve any disputes that may arise.

2. How We Use Your Data

winbw processes your personal data on the basis of contractual necessity (to fulfil our obligations to you as a platform), legitimate interests (to operate the business securely and responsibly), and legal compliance (to meet regulatory requirements applicable to our operations in the Bangladesh market). We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected.

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, contact details	Contractual necessity
Age verification and KYC	Date of birth, ID documents	Legal obligation
Processing deposits and withdrawals	Financial transaction data	Contractual necessity
Fraud detection and prevention	Technical data, transaction data	Legitimate interests
Responsible gaming monitoring	Gameplay data, session data	Legal obligation / Legitimate interests
Loyalty Program management	Gameplay data, account data	Contractual necessity
Customer support	Communications data, account data	Contractual necessity
Platform analytics and improvement	Technical data, activity data	Legitimate interests
Promotional communications (opt-in only)	Contact details, gameplay preferences	Consent

2.1 Marketing Communications

winbw will only send you promotional emails or SMS messages regarding bonuses, seasonal offers (e.g., BPL promotions, Eid special offers), or new product launches if you have explicitly opted in to receive such communications during registration or via your account notification settings. You may withdraw this consent at any time by adjusting your preferences within your account dashboard or by contacting support at [email protected].

2.2 Automated Decision-Making

Some of winbw's fraud prevention, AML monitoring, and responsible gaming alert systems operate using automated processes that analyse patterns in your transaction and gameplay data. Where an automated process results in a restriction being placed on your account, you have the right to request a human review of that decision. Contact our compliance team via [email protected] to initiate such a review.

3. Data Sharing & Third Parties

winbw does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share data only where it is strictly necessary to deliver our service, comply with our legal obligations, or protect the integrity of the platform. All third-party recipients of winbw player data are subject to appropriate contractual data protection obligations.

3.1 Payment Processing Partners

To process your deposits and withdrawals, winbw shares the minimum necessary financial data with our payment processing partners, which include bKash, Nagad, Rocket, Upay, and selected Bangladeshi banks (including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank). These partners receive only the data required to execute and verify the specific transaction.

3.2 Game Content Providers

Live casino, slot, and sports data feeds are supplied by third-party providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive anonymised or pseudonymised session identifiers to manage game state and return-to-player calculations. They do not receive your full name, NID details, or financial transaction history.

3.3 Analytics Providers

winbw uses privacy-respecting analytics tools to understand how players use our platform so we can improve the user experience. Analytics data is aggregated and does not identify individual users. No raw personal data is shared with analytics providers.

3.4 Legal & Regulatory Disclosure

winbw may be required to disclose personal data to law enforcement authorities, financial intelligence units, or other regulatory bodies where we are legally obliged to do so. Such disclosures are made only to the extent required by applicable law and are logged internally for audit purposes.

4. Cookies & Tracking Technologies

The winbw website uses cookies and similar technologies (such as local storage and session tokens) to provide core platform functionality, maintain your logged-in session, and gather anonymous analytics data about how our site is used. This section explains the types of cookies in use and how you can manage your preferences.

4.1 Essential Cookies

These cookies are strictly necessary for the winbw platform to function. They maintain your authenticated session after login, store your language and display preferences, and protect against cross-site request forgery (CSRF). You cannot opt out of essential cookies without losing access to core platform features.

4.2 Analytics Cookies

We use anonymised analytics cookies to understand which pages players visit most frequently, how long sessions last, and which features are used most often. This data helps our development team prioritise improvements. Analytics cookies do not identify you personally and are not linked to your winbw account profile.

4.3 Fraud Prevention Tokens

To protect you and the integrity of our platform, winbw stores a device fingerprint token in your browser's local storage. This token helps our fraud prevention systems detect unusual login activity — for example, if your account is accessed simultaneously from two geographically distant locations. This token cannot be used to track you across other websites.

4.4 Managing Cookies

You may manage or delete cookies at any time through your browser settings. Most modern browsers (Chrome, Firefox, Edge, Safari) allow you to view, block, or delete specific cookies. Please be aware that disabling essential cookies will prevent you from logging into your winbw account and using core platform features.

5. Data Security & Storage

Protecting the personal and financial data of our players is one of winbw's highest operational priorities. We employ a layered security architecture that addresses threats at the network, application, and data levels.

5.1 Encryption

All data transmitted between your browser or mobile device and the winbw platform is encrypted using TLS 1.2 or higher. Sensitive data fields stored in our databases — including passwords (stored as salted hashes), NID numbers, and payment account identifiers — are encrypted at rest using AES-256 encryption.

5.2 Access Controls

Access to winbw's production data systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged, monitored, and subject to regular audit. Staff with access to player data undergo background screening and are bound by confidentiality agreements.

5.3 Infrastructure Security

winbw's servers are hosted in secured data centres with physical access controls, 24/7 monitoring, and redundant power and network connectivity. Our network perimeter is protected by firewalls, intrusion detection systems, and DDoS mitigation services. We conduct regular penetration testing and vulnerability assessments.

5.4 Breach Response

In the unlikely event of a data security breach that affects your personal information, winbw will notify affected account holders via their registered email address without undue delay. The notification will describe the nature of the breach, the categories of data involved, and the steps we have taken to contain and remediate the incident.

5.5 Your Role in Security

While we take extensive technical measures on our end, account security also depends on you. We strongly recommend that you: use a unique, strong password for your winbw account; enable two-factor authentication in your account settings; never share your login credentials with any third party; and log out of your account when using a shared or public device.

6. Data Retention

winbw retains your personal data for as long as your account is active and for a defined period after account closure. Retention periods are determined by the purpose for which the data was collected and by any applicable legal obligations, particularly those relating to anti-money-laundering (AML) record-keeping and financial audit requirements.

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years post-closure	AML / regulatory compliance
KYC identity documents	Duration of account + 5 years post-closure	Legal obligation
Financial transaction records	Duration of account + 7 years post-closure	Financial record-keeping regulations
Gameplay and betting history	Duration of account + 3 years post-closure	Dispute resolution / responsible gaming
Customer support correspondence	3 years from date of communication	Dispute resolution / service improvement
Analytics and technical data	13 months on a rolling basis	Legitimate interests
Marketing consent records	Until consent is withdrawn + 1 year	Consent accountability

Once the applicable retention period expires, winbw securely deletes or anonymises the relevant data so that it can no longer be associated with any individual. Anonymised, aggregated data (e.g., aggregate betting volume by sport for a given month) may be retained indefinitely for business analytics purposes, as it cannot be used to identify any individual.

7. Your Rights Over Your Data

As a winbw account holder, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our data protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and provide a full response within 14 calendar days.

7.1 Right of Access

You have the right to request a copy of all personal data winbw holds about you. Upon a verified access request, we will provide a structured, portable summary of your data including your registration details, KYC status, transaction history, and gameplay record. This is provided free of charge.

7.2 Right to Rectification

If any of the personal data winbw holds about you is inaccurate or incomplete, you have the right to request correction. For changes to core identity data (name, date of birth), supporting documentary evidence will be required in accordance with our KYC process.

7.3 Right to Erasure

You may request deletion of your personal data. winbw will honour erasure requests where there is no overriding legal obligation to retain the data. Where we are required by law to retain certain records (e.g., financial transaction records for AML compliance), we will inform you of the specific retention period that applies and delete the data at the earliest permissible date.

7.4 Right to Object to Marketing

If you have previously opted in to receiving promotional communications from winbw, you may withdraw that consent at any time by updating your notification preferences in your account settings or by emailing [email protected]. Opt-out requests are processed within 5 business days.

7.5 Right to Data Portability

Where winbw processes your data on the basis of consent or contractual necessity, you may request that we provide your data in a commonly used, machine-readable format (JSON or CSV) so that you can transfer it to another service if you wish.

7.6 Right to Restrict Processing

You may request that winbw temporarily restrict the processing of your personal data — for example, while you contest the accuracy of data we hold or while a complaint is under investigation. During a restriction period, winbw will continue to store your data but will not use it for any other purpose.

8. Policy Updates & Contact

winbw reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable laws, or the services we offer. When we make a material change to this policy, we will notify registered account holders via the email address on file and update the "Last Revised" date at the top of the relevant section. Continued use of the winbw platform following notification of a material change constitutes your acceptance of the revised policy.

8.1 Minor Updates

Corrections to typographical errors, clarifications of existing language, or structural reformatting that do not alter the substantive meaning of any clause are considered minor updates. Minor updates take effect immediately upon publication and do not require individual notification.

8.2 Links to Third-Party Sites

The winbw platform does not contain links to third-party websites. In the event that any informational or help content contains a reference to an external resource, winbw is not responsible for the privacy practices of those external parties. This Privacy Policy applies solely to data collected and processed by winbw at https://winbw.net.

8.3 Children's Data

winbw does not knowingly collect personal data from individuals under the age of 18. Our platform is intended exclusively for adults. If we discover that a minor has registered an account, that account will be closed immediately, all associated data will be deleted (subject to any legal retention obligations related to the detection of underage access), and any funds held will be returned to the deposit source after investigation.

8.4 Contact Our Data Protection Team

For all privacy-related enquiries, data rights requests, or concerns about how winbw handles your personal information, please contact us at:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Response time: Within 48 hours for acknowledgement; full response within 14 calendar days
• Availability: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)