WinWin Privacy Policy

The platform collects personal information that is necessary to provide and manage online gaming and sports betting services for users in Bangladesh.

• Identification data: full name, date of birth, nationality, and identity document information when required
• Contact data: email address, mobile number, residential address
• Account data: username, password, security questions, account settings
• Transaction data: deposits, withdrawals, bet history, payment method details (in tokenised or masked form where possible)
• Technical data: IP address, device identifiers, browser type, operating system, access time, and log data
• Verification data: documents or information used for age, identity, and security checks

Personal information is collected in order to:

• Create and manage user accounts
• Provide online casino and sportsbook services
• Process payments and comply with anti-fraud controls
• Meet legal and regulatory obligations that may apply in Bangladesh or other relevant jurisdictions
• Maintain platform security, prevent misuse, and monitor for suspicious activity

Technical and organisational protection measures

The operator applies technical and organisational safeguards designed to protect personal data and information from unauthorised access, loss, alteration, or disclosure, including:

• Encryption in transit by using secure connection protocols where appropriate
• Restricted access to personal data based on role and necessity
• Secure password and credential policies
• Regular monitoring of systems and logs for security incidents
• Vendor due diligence for third-party service providers handling data

While no online transmission or storage system can guarantee absolute security, reasonable steps are taken to reduce foreseeable risks and to respond promptly to any suspected breach.

User rights regarding personal data

Subject to applicable law, users in Bangladesh have the right to:

• Request access to their personal information held by the operator
• Request correction of inaccurate, incomplete, or outdated data
• Request deletion of personal data, where allowed by law and where it is no longer needed for legal or contractual purposes
• Object to certain types of processing, such as direct marketing, where such activity is used
• Request restriction of processing in specific cases

Requests can be made through the contact channels specified in this document. The operator may need to verify identity before acting on any request.

Compliance with Bangladesh laws

The platform takes into account applicable data protection requirements, consumer protection norms, and financial transaction rules relevant to users in Bangladesh. Where international standards such as the General Data Protection Regulation (GDPR) offer stronger protections, the operator seeks to align internal practices to maintain a consistent level of privacy and security.

Personal data and other information are processed only for purposes that are lawful, fair, and transparent for users. The main purposes include:

• Account setup and management: creating user profiles, verifying identity and age, managing login credentials, and maintaining account preferences
• Online casino and sportsbook services: processing bets, calculating payouts, resolving disputes, and managing game sessions
• Payments and financial transactions: handling deposits and withdrawals, processing payment instructions through authorised providers, and keeping transaction records as required for accounting and compliance
• Customer support: responding to user queries, handling complaints, providing technical assistance, and improving support quality
• Service improvement and analytics: analysing aggregated and pseudonymised data to understand website performance, user behaviour patterns, and to improve functionality, stability, and user experience
• Security and fraud prevention: monitoring activities to detect suspicious behaviour, protect accounts, enforce platform rules, and support investigations into fraud or misuse
• Regulatory and legal compliance: meeting obligations related to financial monitoring, record-keeping, dispute handling, and requests from competent authorities, where applicable
• Marketing and communication: sending service-related notices, account alerts, and, where consent is provided, marketing communications relevant to the services; users can opt out of marketing at any time through account settings or communication preferences

Processing is limited to what is necessary for these purposes. Personal data is not sold to third parties. Any use of information beyond the original purpose is subject to compatible legal grounds and, where required, new consent from the user.

Users have the right to know what personal information is held and how it is processed.

How users can access their data

• Users may review most account-related data directly by logging into their profile and checking sections such as account details, contact information, and transaction history.
• For a broader access request, including logs and other records, users may contact the support team or designated data protection contact, following the instructions on the website.

Updating and correcting data

• Certain personal data, such as contact details, can be updated directly in the account settings.
• If any information cannot be edited online, users may request correction or update by contacting support, who may ask for verification documents to ensure accuracy and security.

Deletion of personal data

• Users may request deletion of their personal information where this is allowed by law and does not conflict with regulatory obligations, dispute handling, or financial record-keeping requirements.
• Some data must be retained for a legally required period, such as transaction records or documents linked to security checks and anti-fraud controls. In such cases, data will be restricted and stored only for compliance purposes.

Security checks and payment data processing

By using this platform, the user agrees that:

• Identity, age, and security checks may be performed by the operator or authorised third parties using personal data and verification information.
• Payment information submitted for deposits and withdrawals may be processed by external payment providers, banks, and financial institutions that follow their own security and privacy standards.
• Additional verification, including document checks or enhanced due diligence, may be required before certain transactions are approved or accounts are fully activated.

These processes are carried out to protect users, safeguard the integrity of the services, and meet legal and contractual duties.

This online gaming and betting website is intended only for users who are at least 18 years old and legally permitted to use such services under Bangladesh law.

• During registration, users must confirm that they are 18 years or older.
• The operator cannot independently verify the real age of all users without identity documents or supporting information.
• Where age verification is conducted, additional documents may be requested to confirm that the user is not a minor.

If a parent or legal guardian believes that a minor has created an account or provided personal data on this website:

• They should contact the operator immediately using the contact information given in this document.
• Upon confirmation that the user is under 18, the account will be closed as soon as reasonably possible.
• Personal data linked to the minor will be deleted or anonymised, unless there is a legal requirement to retain limited information for fraud prevention or legal reporting.

The platform does not intentionally collect or process personal information from children, and any such data that comes to light will be removed in line with this policy.

In order to deliver online casino and sportsbook services, personal data and other information may be stored or processed outside Bangladesh.

• Data may be handled in countries where technology partners, data centres, payment processors, or support teams are located.
• These locations may have different data protection laws from Bangladesh, but contractual and technical safeguards are used to maintain a consistent level of confidentiality and security.

By using the website and related services, the user agrees that:

• Personal information may be transferred to and processed in other countries for purposes described in this Privacy Policy.
• Such transfers will be limited to partners and service providers who have obligations to keep personal data confidential and to use it only for the agreed purposes.

The operator selects third-party partners that apply appropriate data protection measures, such as encryption, access controls, and contractual data processing commitments.

This Privacy Policy is intended to explain how personal data and other user information are collected, used, shared, and protected in connection with the services.

• The policy forms part of the broader legal framework that includes the Terms and Conditions, any rules applicable to specific games, and other legal notices published on the website.
• If there is any conflict between summaries in this document and mandatory legal requirements, the applicable law and binding regulations will prevail.

The legal disclaimer applies when the user accepts this Privacy Policy by:

• Opening an account or using the services after being informed of the policy
• Selecting any confirmation box that indicates agreement to the Privacy Policy or related documents
• Continuing to use the site after updates to this document have been published and communicated as required

Nothing in this Privacy Policy limits rights that users may have under mandatory law in Bangladesh or other applicable jurisdictions, nor does it restrict the operator from complying with lawful instructions from regulators, courts, or authorities.

Cookies are small text files stored on a user’s device when visiting websites. Similar technologies, such as local storage and tracking pixels, may also be used for related purposes.

This website uses cookies and similar tools to:

• Maintain essential functions, such as login, session management, and security features
• Compile statistics about visits, traffic sources, and usage patterns
• Analyse user behaviour on the site to understand which pages and services are used most often
• Personalise certain content, language preferences, and settings to improve usability
• Test and enhance performance, security, and overall quality of the online platform

Cookies are kept for no longer than 1 year, unless a shorter period is appropriate for a particular type of cookie or a longer period is required by law or necessary for security and fraud prevention.

Users can manage cookie preferences through browser settings, including blocking or deleting cookies. Disabling some technical cookies may affect the availability or functioning of parts of the website.

By accessing or using the online casino and sportsbook services, the user confirms full acceptance of this Privacy Policy.

• Use of the website, account registration, or any interaction that involves submission of personal data indicates that the user has read and understood this document.
• If a user does not agree with any part of this Privacy Policy, that user should not create an account or continue to use the services.

The current version of the Privacy Policy, as published on the website at the time of use, applies to all ongoing data processing activities. Earlier versions may be retained for record purposes, but the latest version will govern how personal information and other user data are handled.

Users are encouraged to review this document from time to time to stay informed about how their data is collected, processed, and protected.

Personal data and other information may be shared with third parties in specific situations and only for legitimate purposes.

These situations include:

• Compliance with applicable laws, regulations, court orders, or lawful requests from authorities
• Handling of disputes, chargebacks, fraud investigations, or enforcement of contractual rights
• Performance of agreements, such as use of payment processors, identity verification providers, technical hosting partners, or analytics services

A list or description of key categories of third-party partners may be provided on the website or upon request. If a new category of third party is added for a material new purpose, information about that use will be provided, and consent obtained where required.

By providing personal data to this website, the user agrees that:

• Information may be shared with third parties for the purposes set out in this Privacy Policy.
• Each third party will process data in line with its own privacy policy and regulatory obligations.

The operator selects partners that maintain appropriate confidentiality, security standards, and lawful data processing practices.

The website may contain links, banners, or references to other online services and external websites.

• These external sites are operated by independent third parties that have their own privacy policies and data protection practices.
• The operator does not control how those websites collect, use, or protect personal information.

Users are advised to:

• Review the privacy policy and terms of any external website before providing personal data or completing transactions
• Exercise caution when following links, downloading content, or entering login or payment details on other platforms

The operator is not responsible for any content, security incident, or data handling practice that occurs on third-party websites, nor for any consequences arising from a user’s decision to access or use those external services.