WinWin Privacy Policy

The platform collects personal data that users provide directly and information generated during use of the services.

Types of personal information collected

The following categories of information may be collected:

• Identity details, such as full name, date of birth, nationality, and identification document data, where required for verification.
• Contact details, such as address, email address, mobile number, and communication preferences.
• Account information, such as username, encrypted password, security questions, and account settings.
• Transaction data, such as deposits, withdrawals, betting history, game activity, and payment method details (in tokenised or masked form where payment providers support this).
• Technical data, such as IP address, device identifiers, browser type, operating system, language settings, access times, and pages visited.
• Compliance and risk data, such as results of age verification, fraud checks, responsible gambling indicators, and information required under anti-money laundering and counter-terrorist financing rules.

Information may be collected directly from the user, through automated means on the website, and from trusted third parties, such as payment providers and verification service providers.

Purposes of collection and processing

Personal information is collected and processed in order to:

• Create and manage user accounts.
• Provide online casino and sportsbook services and maintain the security and fairness of games.
• Process payments, verify ownership of payment instruments, and manage withdrawals.
• Meet legal and regulatory obligations, including anti-money laundering, fraud prevention, and responsible gambling duties.
• Communicate service updates, transactional messages, and, where permitted, marketing messages.
• Improve website performance, user experience, and service quality through analysis of aggregated data.

Processing always follows principles of lawfulness, fairness, and transparency relevant to Bangladesh users and other applicable international standards.

Technical and organisational protection measures

To protect personal data against unauthorised access, loss, alteration, and disclosure, the operator uses:

• Encryption for data in transit and, where appropriate, in storage.
• Firewalls, intrusion detection, and access controls on internal systems.
• Strong authentication requirements for staff access based on roles.
• Regular security monitoring, logging, and vulnerability assessments.
• Strict internal policies on data handling, confidentiality, and staff training.

Third-party service providers that process information on behalf of the operator must apply appropriate technical and organisational security measures and follow contractual data protection obligations.

User rights over personal data

Subject to Bangladesh laws and any applicable international data protection standards, users have the right to:

• Request access to their personal information and receive a copy of the data held.
• Request correction of inaccurate or incomplete personal information.
• Request deletion of personal data where it is no longer needed, or where processing is based on consent that has been withdrawn, subject to legal retention duties.
• Object to or restrict certain processing activities, such as some forms of profiling or direct marketing.
• Withdraw consent to processing, where consent is the legal basis, without affecting processing already carried out before withdrawal.

The operator confirms that collection, processing, and storage of information for Bangladesh users are carried out in line with relevant laws of Bangladesh, contractual obligations, and recognised international data protection practices.

Personal information is used only for specific, lawful purposes and is not sold or misused.

Service delivery and account management

User data is processed to:

• Register and manage player accounts.
• Verify identity, age, and eligibility to use online gaming services.
• Provide access to casino games, sportsbook markets, and related features.
• Support customer service interactions and respond to user requests.

Transactions and financial operations

Information relating to payments and transactions is used to:

• Process deposits and withdrawals securely.
• Confirm that funds originate from permitted sources.
• Detect and prevent fraudulent or unauthorised activity.
• Keep accurate financial records required by law and regulators.

Service improvement and analytics

Usage data and technical logs are analysed to:

• Monitor performance of the website and mobile access.
• Diagnose and resolve technical issues.
• Understand patterns of game use in aggregated form.
• Develop new features and improve user experience.

Analytics are conducted using pseudonymised or aggregated data where possible to reduce privacy risks.

Marketing and communication

Where users have provided consent or where permitted by law, email, SMS, or on-site messages may be used to:

• Send information about account activity and service changes.
• Provide responsible gambling information and reminders.
• Share promotional content in a controlled manner, subject to opt-out options.

Users may change communication preferences at any time through account settings or by following the instructions included in each message.

Compliance, legal obligations, and risk management

Certain processing activities are required to:

• Comply with anti-money laundering and counter-terrorist financing legislation.
• Enforce responsible gambling measures, including limits, self-exclusion, and monitoring of risky behaviour.
• Respond to lawful requests from courts, regulators, or law enforcement in Bangladesh or other relevant jurisdictions.
• Protect the rights, safety, and property of users, staff, partners, and the operator.

All processing of personal information is carried out in a lawful, fair, and transparent manner, based on identified legal grounds such as consent, contractual necessity, legal obligation, or legitimate interest.

Users have control over much of the personal information stored in their accounts and may manage it directly.

How users can access their data

• Account dashboards normally show key profile information, contact details, and recent activity.
• Users may log in and review, download, or check their personal details and betting or transaction history, subject to technical availability.

If a user needs access to additional records, a written request may be submitted to the support team through the contact channels indicated on the website. Reasonable steps will be taken to verify identity before sharing any sensitive information.

Updating and correcting personal information

• Many fields, such as contact details or communication preferences, can be updated in the account profile section.
• If certain information cannot be edited directly, for example identity data used for verification, users may request correction by contacting support and providing supporting documents.

The operator aims to update or correct inaccurate information without undue delay where this is technically and legally possible.

Deletion of personal data

Users may request deletion of their personal information where:

• The account has been closed and there is no longer a legal need to keep the data.
• Processing is based on consent that has been withdrawn.

Deletion will be carried out subject to legal and regulatory retention duties, including obligations related to anti-money laundering, financial reporting, gambling regulation, dispute handling, and security investigations. Some transaction and activity records may need to be retained for a minimum period specified by law.

Security checks and payment data processing

By using the services, users agree that:

• Security checks may be conducted to verify identity, prevent fraud, and ensure compliance with legal and regulatory requirements.
• Payment-related information may be shared securely with banks, card schemes, mobile payment providers, and other payment service providers involved in processing deposits and withdrawals.

These providers process payment data under their own regulatory obligations and are required to maintain confidentiality and adequate security for all information handled on behalf of the operator.

The services are intended only for adults who are 18 years of age or older and legally permitted to participate in online gaming activities under Bangladesh laws.

• During registration and account use, users must confirm that they are at least 18 years old.
• The operator applies age verification checks using documents or third-party services where required for legal or risk purposes.

However, it is not possible to fully verify age in every situation without official documents, and some misuse of another person’s identity may occur. Parents and guardians are strongly advised to monitor the use of connected devices and internet access by minors in their household.

If a parent or legal guardian believes that personal information of a minor has been collected, they should contact the support team promptly. Upon confirmation that the user is under 18 years of age:

• The account will be closed as soon as reasonably possible.
• Personal data relating to the minor will be deleted or anonymised, subject to any legal requirement to retain certain records for security or law enforcement purposes.

The operator does not knowingly market services to minors and aims to reduce the risk of underage participation in online gaming and betting activities.

Personal information may be processed in, or transferred to, countries outside Bangladesh. This can occur where technical infrastructure, support teams, payment processors, or other service partners are located or host their systems.

Examples of such processing include:

• Storage of data on secure servers in foreign data centres.
• Use of international payment service providers, identity verification services, or analytics tools.
• Access by group companies or contracted partners that support customer service, technical operations, or risk management.

In all such cases, the operator takes steps to protect confidentiality and apply appropriate data protection safeguards, such as contractual data protection clauses, security standards, and access controls.

By accessing or using the website and services, users consent to the transfer, storage, and processing of their personal data outside Bangladesh, including in countries that may have different data protection rules. All partners that receive such information are required to handle it lawfully, protect it from unauthorised access, and use it only for the agreed purposes described in this Privacy Policy.

This Privacy Policy is intended to explain, in a transparent manner, how personal information is collected, used, and protected. However, certain legal disclaimers may limit or clarify the scope of these rules where required by law or by regulatory guidance.

• The operator may need to process or disclose data in ways not detailed in this document when mandated by court orders, regulatory notices, law enforcement requests, or applicable legislation.
• If there is any conflict between this Privacy Policy and binding legal obligations, the legal requirements will prevail to the extent of the conflict.
• Nothing in this document creates contractual rights beyond those required by law or the terms and conditions governing user accounts.

The disclaimer in this section applies from the moment a user indicates acceptance of the Privacy Policy and related terms. Acceptance may occur through actions such as:

• Completing registration or continuing to use the website after being presented with the policy.
• Clicking acceptance or agreement buttons in online forms.
• Signing or otherwise agreeing to documents that incorporate this Privacy Policy by reference.

Continued use of the services following any update of this document will be treated as renewed acceptance of the latest version, subject to applicable laws on notice and consent.

Cookies are small text files placed on a user’s device when visiting websites. Similar technologies, such as pixels or local storage, may also be used for related purposes.

Purposes of cookies

The website uses cookies and related tools to:

• Maintain user sessions and remember login preferences.
• Collect statistics on traffic, performance, and use of different pages.
• Analyse browsing behaviour on an aggregated basis to improve functionality and user experience.
• Personalise content such as language settings and display of relevant information.

Cookies may be set by the operator (first-party cookies) or by trusted third-party providers that supply analytics, security, or functionality services.

Cookie retention and control

• Standard cookies used for analytics and personalisation are retained for up to 1 year, unless a shorter or longer period is justified for security or legal reasons.
• Users can manage or delete cookies through browser or device settings. Blocking certain cookies may affect some functions of the website, such as login or game features.

Further details on the specific types of cookies used, their purposes, and management options may be provided in a separate Cookie Policy or in on-site notices where required.

By accessing or using the online casino and sportsbook services, users confirm that they have read, understood, and agree to this Privacy Policy, including any future updates communicated on the website.

• If a user does not agree to any part of this document, continued use of the services should be avoided, and the user may request account closure.
• Once a user proceeds to register, log in, or continue browsing after being informed of the policy, this is treated as full acceptance.

The operator may update or revise this Privacy Policy from time to time to reflect legal changes, regulatory expectations, or technical developments. The version published on the website at the time of use is the one that applies, and this most recent version prevails over any earlier versions or conflicting information presented elsewhere on the site.

In some situations, personal data may be shared with third parties. Sharing is limited to what is necessary and lawful.

Situations where data may be shared

Data may be provided to:

• Payment service providers, banks, and financial institutions involved in processing deposits and withdrawals.
• Identity verification, fraud prevention, and risk management service providers.
• Technical and customer support partners that help operate or maintain the website and services.
• Professional advisers such as auditors, legal counsel, and compliance consultants.
• Courts, regulators, law enforcement agencies, or other public authorities, where required by law or to protect legal rights.

Where possible, the list or categories of key third parties are described on the website, in sign-up forms, or in supporting documentation. If a new type of third party is introduced for a different purpose, users will be informed where required by law, and the scope of information shared will be limited to what is needed for that defined purpose.

Responsibilities of third parties

Third parties that receive personal data are expected to:

• Use the information only for the agreed and lawful purposes.
• Keep the data secure and confidential.
• Comply with relevant data protection and privacy requirements.

By providing personal information and using the services, users consent to such sharing where it is necessary to perform the contract, to comply with legal duties, or where consent is the legal basis for processing.

The website may contain links or references to third-party websites, apps, or services that are not controlled or operated by the online casino and sportsbook provider.

• Such links are provided for convenience or informational purposes only.
• Each external site or service has its own privacy and data protection practices, which may differ from this Privacy Policy.

When users follow a link to another site, they should review that site’s privacy policy and terms to understand how their information will be collected, used, and protected. The operator is not responsible for how third-party websites handle personal data, for the accuracy or content of external pages, or for any loss or damage arising from their use.

Users are encouraged to exercise caution and evaluate the privacy and security practices of any external websites or services before providing personal information or completing transactions.