Sign Up Download

WinWin Privacy Policy

This Privacy Policy explains how this online casino and sportsbook platform collects, uses, protects, discloses, and deletes personal data of users in Bangladesh. The document covers information received during registration, account use, payments, and communication. All collection and processing of personal information are based on consent given by the user and on applicable legal grounds. By using the services and providing personal details, the user confirms understanding of this policy and agrees to the described handling of data.

Privacy and Data Protection

Types of personal data collected

The platform may collect and process the following categories of personal information:

  • Identification data, such as full name, date of birth, nationality, and identity document details when required for verification
  • Contact information, such as mobile number, email address, and residential address
  • Account details, such as username, encrypted password, preferences, and communication settings
  • Transaction and payment information related to deposits, withdrawals, and betting activity
  • Technical data, such as IP address, device information, browser details, login times, and usage logs
  • Communication records, such as messages sent to customer support or compliance teams

Collection of personal data is limited to what is necessary to provide online services, manage accounts, meet legal obligations, and maintain a secure gaming environment.

Purposes of collection and processing

Personal information is collected and used in order to:

  • Create, verify, and manage user accounts
  • Process deposits, withdrawals, and bets on casino and sportsbook services
  • Prevent fraud, misuse, money laundering, and other unlawful activities
  • Resolve disputes, respond to requests, and provide support
  • Meet obligations under applicable laws and regulations
  • Improve website performance, user experience, and service quality through analytics

Technical and organisational protection measures

The operator applies appropriate technical and organisational measures to protect user data, including:

  • Encryption of data in transit using secure protocols
  • Restricted access to personal information, limited to authorised staff and service providers
  • Use of firewalls, intrusion detection systems, and security monitoring tools
  • Regular backup of important information and secure storage of records
  • Internal procedures for handling data breaches and security incidents

No method of online transmission or electronic storage is risk-free, but reasonable steps are taken to reduce risks and protect the confidentiality, integrity, and availability of personal data.

User rights regarding personal data

Users in Bangladesh have the right to:

  • Request confirmation whether their personal information is processed
  • Access their personal data and receive a copy in a commonly used format
  • Ask for correction of inaccurate or incomplete information
  • Request deletion of data where there is no legal obligation to keep it
  • Object to certain types of processing, such as direct marketing
  • Request restriction of processing in specific circumstances

Requests may be subject to identity verification and legal requirements. Some records, such as payment and transaction information, may need to be kept for a defined period to comply with anti-money laundering, tax, and accounting rules.

Compliance with Bangladesh laws and international standards

The operator aims to handle personal data in line with relevant laws of Bangladesh, general principles of data protection, and recognised international standards. Processing of information is based on valid consent, contractual necessity, legitimate interest, or legal obligation, depending on the context of the services used.

Use of Collected Information

Main purposes of using personal information

Collected personal data is used only for lawful and transparent purposes, including:

  • Account registration, verification, management, and security
  • Enabling access to online casino and sportsbook services
  • Processing deposits, withdrawals, bonuses, and settlement of bets
  • Monitoring transactions for fraud prevention, responsible betting, and compliance
  • Providing customer support and responding to user requests

Service improvement and analytics

Personal and technical information may be processed to:

  • Analyse usage patterns and performance of the website
  • Identify technical problems and improve platform stability and speed
  • Develop new features, adjust game offerings, and optimise content for users in Bangladesh
  • Produce aggregated statistics that do not identify individual users

Marketing and communication

Subject to consent and applicable law, the platform may use contact details to:

  • Send service-related notifications, such as account changes or policy updates
  • Provide information about features, updates, and responsible gaming tools
  • Send promotional messages where permitted, which users may opt out of at any time

Marketing communication will always allow easy withdrawal of consent. Opting out does not affect the legality of earlier processing.

Legal and compliance purposes

Personal data may also be used to:

  • Comply with anti-money laundering, counter-terrorism financing, and other regulatory obligations
  • Assist law enforcement or regulatory bodies when legally required
  • Establish, exercise, or defend legal claims in disputes

Every use of information is limited to the purpose for which it was collected or another compatible legal purpose that the user can reasonably expect.

Access to Information

How users can access and manage their data

Users can access and update most of their personal details through the account settings section on the website. For additional access, correction, or deletion requests, users may contact the data protection contact point indicated in this policy.

To protect privacy, the operator may:

  • Request proof of identity before providing access or making changes
  • Ask for clarification of the scope of the request

Correction and deletion procedures

Users may request:

  • Correction of inaccurate or outdated information
  • Completion of incomplete data where relevant to the services
  • Deletion of personal information where there is no overriding legal or contractual reason to continue processing

Requests will be reviewed within a reasonable timeframe. Deletion may be delayed or declined where records must be kept for regulatory, accounting, security, or dispute-related reasons.

Consent to security checks and payment processing

By creating an account and using the services, the user consents to:

  • Security checks to confirm identity, age, location, and eligibility to use online betting services
  • Verification of payment methods to prevent fraud and unauthorised use

Payment data may be processed by trusted third-party payment providers such as banks, card processors, mobile payment operators, and other licensed financial institutions. These providers receive only the information necessary to perform their services and are required to protect confidentiality under their own policies and contracts.

Protection of Children’s Privacy

Age restriction

The online services are intended only for persons who are at least 18 years old and legally allowed to participate in online betting activities under the laws of their jurisdiction. Registration and use of the platform by minors are strictly prohibited.

Age verification limitations

The operator takes reasonable steps to prevent access by minors, including age confirmation during registration and, where needed, requests for identity documents. However, age cannot be fully verified without official documentation, and the operator relies in part on the truthfulness of information provided by users and account holders.

Handling data of minors

If it is discovered that personal data of a person under 18 years has been collected or an account has been created by a minor:

  • The account may be suspended or closed
  • Further access to the services will be blocked
  • Personal information related to the minor will be deleted as soon as reasonably possible, subject to legal retention duties

Parents or legal guardians in Bangladesh who believe that a minor under their care has provided personal information are encouraged to contact the operator. Upon verified request, the platform will remove the minor’s data and take steps to prevent further use.

International Data Transfers

Processing in other countries

Personal data of users in Bangladesh may be stored or processed in other countries where the operator, its group companies, hosting providers, payment processors, or other trusted partners are located. These countries may have data protection rules that differ from those of Bangladesh.

Consent to cross-border transfers

By using the website, creating an account, or providing personal information, the user agrees that their data may be transferred to and processed in such jurisdictions for the purposes described in this Privacy Policy. Transfers are limited to what is necessary for technical operation, customer support, payment processing, security checks, and regulatory compliance.

Confidentiality and safeguards

All partners who process personal information must:

  • Handle the data only on documented instructions from the operator where applicable
  • Apply appropriate technical and organisational measures to protect confidentiality and security
  • Use the data only for specified purposes such as hosting, payment processing, analytics, or support

Where required, contractual safeguards or equivalent mechanisms are used to help ensure that transferred data receives an appropriate level of protection.

Use of Cookies

What cookies are

Cookies are small text files stored on a user’s device by a website. They help recognise the browser, remember preferences, and understand how visitors interact with online services.

Purposes of using cookies

This website uses cookies and similar technologies for the following purposes:

  • Basic functionality, such as keeping users logged in and remembering language or regional settings
  • Statistics and measurement of traffic, such as number of visits, duration of sessions, and frequently visited pages
  • Behaviour analysis, to understand how users navigate pages and features
  • Personalisation of content, such as recommended games or sports events based on previous activity
  • Improvement of site performance, stability, and security

Some cookies are set directly by the platform, while others may be set by third-party analytics or service providers.

Cookie retention and control

Cookies are stored for a maximum period of 1 year, after which they expire or are removed. Users can manage or delete cookies at any time by adjusting browser settings. Blocking certain cookies may affect the proper functioning of some features of the website.

By continuing to browse or use the services after being informed about cookies, the user consents to their use for the purposes described above, subject to the ability to change settings at any time.

Acceptance of Privacy Policy

Conditions of acceptance

By accessing or using the website, registering an account, or placing bets, the user confirms full acceptance of this Privacy Policy and agrees to the collection, processing, and use of personal data as described. If a user does not agree with any part of this document, that user should stop using the services and request closure of the account.

Priority of current version

The version of the Privacy Policy published on the website at the time of use is the version that applies to the handling of data. Older versions may be kept for record purposes but do not override the current document.

Users are encouraged to review this page from time to time to stay informed about the way information is collected and used.

Third-Party Privacy Practices

Sharing data with third parties

Personal information may be disclosed to third parties in limited situations, such as:

  • Payment providers and banks to process deposits and withdrawals
  • Identity verification and anti-fraud service providers
  • Technical partners providing hosting, security, analytics, and support
  • Professional advisers, such as legal or financial consultants, where necessary
  • Law enforcement, regulators, or courts when required by applicable law or to protect legitimate interests

Only the minimum information needed for each purpose is shared.

Legal grounds and user consent

Data may be shared when:

  • Required by law, regulation, or a valid request from an authority
  • Necessary to perform a contract with the user or to take steps at the user’s request
  • Needed to protect the rights, property, or safety of the operator, users, or the public
  • The user has provided explicit consent, such as agreeing to payment processing or optional partner offers

Where the website lists specific third parties, additional details about type of data shared and purpose may be provided there. In all cases, providing personal data and using the services means the user agrees that such data may be transferred to relevant third parties for the purposes described.

Responsibility of third parties

Third parties that receive personal data are responsible for their own privacy and security practices, which are governed by their respective privacy policies and applicable laws. The operator takes reasonable care in selecting partners but cannot control how independent parties manage their websites and systems.

Updated: