WinWin Privacy Policy

The platform collects personal information required to provide online casino and sportsbook services to users in Bangladesh. This may include:

• Identification data: full name, date of birth, gender, nationality, copies of ID documents (such as passport or NID), and verification photos or videos.
• Contact data: address, mobile number, email address, and communication preferences.
• Account data: username, encrypted password, security questions, responsible gaming settings, and account history.
• Transaction data: payment method details (such as partially masked card numbers or mobile financial service identifiers), deposit and withdrawal records, and betting activity.
• Technical data: IP address, browser type, device type, operating system, language settings, and login logs.
• Usage data: pages visited, time spent on the website, interaction with features, and preferences for games or sports markets.

Personal information is collected to:

• Create and manage user accounts.
• Verify identity and age.
• Process deposits, withdrawals, and bets.
• Monitor and support responsible gaming.
• Prevent fraud, money laundering, and misuse of services.
• Comply with applicable laws and regulatory requirements.
• Improve the quality, safety, and reliability of services.

Technical and organisational protection measures

The operator applies appropriate technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, or destruction, including:

• Encryption of data in transit using industry-standard protocols.
• Secure storage systems and restricted access based on role and necessity.
• Strong password policies and multi-factor authentication where available.
• Continuous monitoring of systems for suspicious activity.
• Regular security audits, risk assessments, and staff training on data protection.

While no online transmission or storage can be guaranteed as fully secure, reasonable efforts are made to maintain a high level of security in line with international standards.

User rights over personal data

Subject to applicable laws, users have the following rights in relation to their personal information:

• Right of access: to request confirmation whether data is held and to obtain a copy of personal data, subject to identity verification.
• Right of correction: to request that inaccurate or incomplete information is corrected or updated.
• Right of deletion: to request deletion of personal data where it is no longer needed for the purposes for which it was collected, or where there is no lawful basis to continue processing.
• Right to restrict or object: to object to certain types of processing and to request temporary restriction in specific cases, where allowed by law.
• Right to withdraw consent: where data processing is based on consent, users may withdraw that consent at any time. This will not affect processing that took place before withdrawal.

Requests related to these rights may be submitted through the contact details provided in the user account area or as specified in this Policy. The operator may need to request additional information to confirm identity before acting on a request.

Compliance with Bangladesh laws

The handling of personal information is intended to respect the laws of Bangladesh concerning data privacy, electronic communications, financial transactions, and gaming-related compliance. Where relevant, the platform also aims to align its practices with recognised international data protection standards, such as principles inspired by the General Data Protection Regulation (GDPR), to enhance transparency, fairness, and user control over data.

Personal data is collected and processed for explicit and lawful purposes connected to the operation of online casino and sportsbook services. The main uses include:

• Account creation and management, including authentication, security checks, and communication regarding account activity.
• Processing deposits, withdrawals, and bets, as well as financial reconciliation and payment dispute handling.
• Providing customer support through email, chat, or other communication methods chosen by the user.
• Improving the stability, security, and performance of the website through analysis of technical and usage information.
• Personalising the user experience, such as showing relevant sports events, games, and language or interface preferences.
• Conducting statistical analysis and analytics to understand how users interact with services and to enhance product design, features, and risk management.
• Implementing responsible gaming tools, including limits, self-exclusion features, and monitoring for behaviour that may indicate gambling-related harm.
• Preventing, detecting, and investigating fraud, money laundering, misuse of bonuses, and other potentially unlawful or abusive activities.
• Meeting legal obligations related to record-keeping, reporting to authorities where required, handling tax or anti-money laundering requirements, and cooperating in lawful investigations.

Marketing communications, such as promotional messages or newsletters, may be sent where permitted by law and where the user has not opted out. Users may change their preference for marketing messages at any time through account settings or by using the unsubscribe option in communications.

All processing of information is carried out on appropriate legal bases, which may include the performance of a contract, compliance with legal obligations, the legitimate interests of operating and protecting the platform, and user consent where required. The operator intends that processing remains transparent, proportionate, and limited to what is necessary for the purposes described in this Policy.

Users in Bangladesh have the ability to access, review, and manage their personal information stored in their account.

Access and update

• Key account details, such as contact information and preferences, can be viewed and updated directly through the account settings section of the website.
• For access to additional records, such as full transaction history or copies of identification documents, users may submit a formal request using the contact methods stated in this Policy.

Correction of information

• If any personal data is inaccurate, incomplete, or outdated, users may request correction or update.
• The operator may request supporting documentation, for example updated ID or proof of address, before applying certain changes.

Deletion of information

• Users may request deletion of personal data where there is no longer a legal or contractual reason for it to be held.
• Certain information may need to be retained for a defined period to comply with legal, regulatory, or anti-money laundering requirements, or to defend against potential legal claims.
• Once retention periods expire, data is deleted or irreversibly anonymised according to internal procedures.

Consent to security checks and payment processing

By using the services, users acknowledge and consent that:

• Identity verification, age checks, and security assessments may be carried out using the data and documents supplied.
• Personal and transaction information may be processed by payment service providers, banks, mobile financial service operators, and other financial intermediaries involved in deposits and withdrawals.
• These checks are conducted to confirm identity, prevent fraud and money laundering, protect both the user and the platform, and meet legal obligations in Bangladesh and any other relevant jurisdiction.

Users who wish to exercise their rights or obtain more details about access, correction, or deletion procedures may contact customer support or the dedicated privacy contact address provided on the website.

The online casino and sportsbook services are intended only for individuals who are at least 18 years old or the legal age for using such services in their jurisdiction, whichever is higher.

• Registration and use of the platform by persons under 18 years of age are strictly prohibited.
• During registration, users are asked to confirm that they are legally allowed to use the services. Age verification checks may be carried out based on identification documents and other data.
• The operator cannot always independently verify the real age of every visitor or user without suitable identification documents or verification procedures.

If it is discovered that a user is a minor or has provided false information about age:

• The account will be suspended and then closed as required.
• Any personal data associated with that account will be deleted or anonymised, subject to legal obligations regarding record-keeping and regulatory reporting.

A parent or legal guardian who believes that a child has provided personal information or has created an account may contact the platform and request review and deletion. Once sufficient proof of guardianship and the situation is received, reasonable steps will be taken to remove the child’s data where permitted by law.

To operate the online casino and sportsbook services reliably and securely, personal data may be processed and stored in countries outside Bangladesh. This may happen when:

• Technical infrastructure, servers, or cloud services are located abroad.
• Group companies, partners, or service providers involved in customer support, payment processing, fraud prevention, or analytics are based in other jurisdictions.

By using the website and providing personal information, users consent to the transfer, storage, and processing of their data in these locations, subject to this Privacy Policy and any applicable legal requirements.

The operator takes measures to ensure that all such transfers provide a level of protection for personal information that is consistent with the standards described in this document. Contractual safeguards, confidentiality obligations, access controls, and security standards are applied to partners and service providers that handle information on behalf of the platform.

This Privacy Policy sets out the general rules under which personal data is collected, processed, stored, and shared. In certain situations, a legal disclaimer or specific notice provided on the website or during registration may clarify, limit, or extend how these rules apply to a particular feature, promotion, or service.

Such disclaimers are part of the contractual framework between the user and the operator. They apply from the moment the user accepts the relevant terms, which may occur through signature, electronic acceptance, ticking an acceptance box, or continuing to use the services after being informed of the updated conditions.

If there is any inconsistency between this Privacy Policy and a mandatory legal requirement in Bangladesh or another relevant jurisdiction, the applicable law will prevail. If a specific disclaimer or special data notice directly attached to a feature differs from this general Policy, that specific notice will take priority for the scope of that feature.

Cookies are small text files stored on a user’s browser or device when visiting websites. They help recognise the device, remember preferences, and improve the performance and safety of online services.

The platform uses cookies and similar technologies for the following purposes:

• Collecting statistics about visits, such as number of visitors, pages viewed, and time spent on the website.
• Analysing user behaviour to understand how services are used and to improve design, navigation, and content.
• Remembering user settings and preferences, such as language, login status, and display options.
• Providing a more consistent and secure betting and gaming experience, including fraud prevention and security monitoring.

Cookies used for these purposes are generally stored for up to 1 year, unless a shorter or longer period is required for technical, security, or legal reasons. After expiry, cookies are removed or refreshed.

Users may manage or disable cookies through browser settings. However, blocking certain cookies may affect the functioning of some features of the website and may limit the ability to use all services in full.

By accessing or using the online casino and sportsbook services, creating an account, or continuing to use the website after changes are published, users confirm that they have read, understood, and fully accept this Privacy Policy.

The version of the Policy available on the website at the time of use is the version that applies. The operator may update this document from time to time to reflect changes in services, laws, or technical and organisational measures. Material changes will be signposted through appropriate notice on the website or via direct communication when required.

If a user does not agree with this Policy or any future update, they should stop using the services and may request account closure and handling of their personal data in accordance with the sections on deletion and user rights.

In certain situations, personal information may be shared with third parties, always for defined and lawful purposes and subject to appropriate protection measures. These third parties include:

• Payment institutions, banks, and mobile financial service providers that process deposits, withdrawals, and refunds.
• Identity verification and anti-fraud service providers assisting in age checks, document validation, and risk assessments.
• Professional advisers, such as auditors, legal counsel, and compliance consultants supporting regulatory and financial obligations.
• Law enforcement agencies, courts, regulators, and other authorities where disclosure is required or allowed by law, or to protect legal rights and respond to disputes.
• Technical partners that provide hosting, data storage, email delivery, analytics, or security services.

Where possible, categories or lists of key partners are made available on the website, or users are informed of the relevant category and purpose at the time their data is collected.

By providing personal information and using the services, users consent to the sharing and processing of their data by such third parties for the purposes described in this Policy, in contractual arrangements, or in specific notices. Each third party is expected to handle information in accordance with applicable data protection requirements, but their own privacy policies may apply to their independent processing activities.

The website may contain links, banners, or references to other websites or services operated by third parties. These external websites have their own privacy policies and data handling practices, which may differ from the practices described in this Policy.

The operator does not control and is not responsible for how third-party websites or services collect, use, or protect personal information. Users who follow a link to any external site do so at their own discretion and should:

• Review the privacy policy and terms of use of that website.
• Consider how their data will be processed before submitting any personal information.

This Privacy Policy applies only to the data collected through the official website and services of the platform, and not to any information processed by third parties on their own websites or applications.