winbit Privacy Policy

1. Who We Are and How to Contact Us

This Privacy Policy is issued by winbit, the operator of the online gaming and sports betting platform at winbit.onl ("winbit", "we", "us", "our"). winbit is committed to protecting the privacy and security of every player's personal data. This Policy describes our data practices in plain, accessible language so you understand exactly what happens to your information when you use our platform.

If you have any questions about this Privacy Policy or wish to exercise any of your data rights, please contact our Privacy team by email at [email protected] (plain text — not a clickable link). We aim to respond to all privacy enquiries within five business days, Bangladesh Standard Time (BST, UTC+6).

---

2. Scope of This Policy

This Privacy Policy applies to all personal data processed by winbit in connection with your use of the winbit.onl website and any associated mobile-optimised interface, support channels, and promotional communications. It applies to all registered players, prospective players who browse the site without registering, and individuals who contact our support team.

This Policy does not cover third-party websites or services that may be linked to or integrated with the winbit platform (for example, game studios such as Pragmatic Play or Evolution Gaming, or payment processors such as bKash and Nagad). Those third parties operate under their own privacy policies, for which winbit accepts no responsibility.

---

3. Legal Basis for Processing Your Data

winbit processes your personal data on the following legal bases depending on the specific purpose of the processing:

• Contractual necessity: Processing required to open and maintain your account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with anti-money-laundering (AML) obligations, Know Your Customer (KYC) requirements, and fraud prevention duties.
• Legitimate interests: Processing carried out in winbit's legitimate business interests, such as platform security, fraud detection, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing of your data for direct marketing and non-essential cookies, carried out only where you have provided clear, freely given, and informed consent. You may withdraw consent at any time.

---

4. How winbit Uses Your Personal Data

winbit uses the personal data it collects for the following specific purposes:

• Account management: Creating, operating, and maintaining your player account, including verifying your identity and age (21+ requirement) and managing your security credentials.
• Transaction processing: Handling deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, and other supported payment channels in BDT.
• Regulatory compliance: Fulfilling KYC, AML, and responsible gaming obligations, including monitoring for unusual betting patterns or signs of problem gambling.
• Customer support: Responding to queries, resolving disputes, and providing technical assistance via email and live chat.
• Platform security: Detecting and preventing fraud, account takeovers, money laundering, and other prohibited activity.
• Service improvement: Analysing aggregated usage data to improve platform performance, game selection, and user experience.
• Marketing communications: Sending promotional emails, bonus notifications, and platform updates to players who have opted in. You may opt out at any time by contacting [email protected].
• Responsible gaming: Monitoring gaming behaviour to identify players who may benefit from responsible gaming interventions or self-exclusion tools.

---

5. Sharing Your Data with Third Parties

winbit does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your data with carefully selected third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment partners receive the minimum data necessary to process your deposits and withdrawals securely.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, Microgaming, and NetEnt may receive anonymous session tokens to operate their games. No personally identifiable information is shared with game providers beyond what is strictly required.
• Identity verification services: Third-party KYC providers may receive identity documents and biographic data to complete age and identity verification checks on our behalf.
• Fraud prevention services: We work with fraud detection partners who analyse transaction and behavioural data to protect players and the platform against financial crime.
• Regulatory and legal authorities: winbit will disclose personal data to law enforcement, regulatory bodies, or courts where required by applicable law or a valid legal process.
• Business transfers: In the event of a merger, acquisition, or sale of winbit's business, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance where legally permissible.

All third-party service providers engaged by winbit are contractually required to handle personal data in a manner consistent with this Privacy Policy and to implement appropriate technical and organisational security measures.

---

6. Cookies and Similar Tracking Technologies

winbit uses cookies and similar technologies (such as local storage and pixel tags) to operate core platform functions, analyse usage patterns, and — where you have consented — to deliver relevant promotional content. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without breaking core functionality.
• Performance and analytics cookies: Allow us to understand how players navigate the platform so we can identify and fix issues and improve the experience. Data collected is aggregated and anonymous.
• Functional cookies: Remember your preferences such as language, currency display, and responsible gaming limit settings across sessions.
• Marketing cookies: Used only with your consent to track whether you have engaged with a promotional communication and to avoid showing you the same promotion repeatedly.

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use core platform features. For all other cookie categories, you may opt out without affecting your core account access.

---

7. How Long We Keep Your Data

winbit retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are:

• Active account data: Retained for the lifetime of your account plus a minimum of five years after account closure, in line with standard AML record-keeping requirements.
• Transaction records: Retained for a minimum of seven years to satisfy financial record-keeping obligations.
• KYC documents: Retained for five years from the date of verification or account closure, whichever is later.
• Support correspondence: Retained for three years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus one year thereafter for audit purposes.

When data is no longer required, winbit securely deletes or anonymises it so that it can no longer be associated with an identifiable individual.

---

8. How We Protect Your Data

winbit implements a layered security framework to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures include:

• SSL/TLS encryption for all data transmitted between your device and winbit servers.
• Encryption at rest for sensitive data fields including payment references and identity document scans.
• Access controls restricting internal staff access to personal data on a strict need-to-know basis.
• Regular security audits and vulnerability assessments of platform infrastructure.
• Two-factor authentication (2FA) available to all registered players and mandatory for internal staff accounts.
• Incident response procedures to detect, contain, and report data breaches in a timely manner.

While winbit takes all reasonable precautions to protect your data, no internet-based system is completely immune to risk. You are responsible for keeping your own login credentials secure and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

---

9. Your Data Rights

As a winbit player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

• Right of access: You may request a copy of all personal data winbit holds about you.
• Right to rectification: You may ask us to correct any inaccurate or incomplete personal data without undue delay.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may ask us to limit the way we use your data in certain circumstances — for example, while a dispute is being resolved.
• Right to data portability: You may request your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. We will honour all marketing opt-out requests promptly.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time with immediate effect for future processing.

Please note that some rights are subject to legal exceptions. For example, the right to erasure does not apply where retention is required by AML or financial regulation. We will always explain clearly if an exception applies to your specific request.

---

10. Children and Minors

winbit's platform is strictly restricted to adults aged 21 years and above. We do not knowingly collect or process personal data relating to individuals under the age of 21. If we become aware that an account has been registered by or on behalf of a minor, we will immediately close the account, void any transactions, and delete all associated personal data. If you believe a minor has registered on winbit, please notify us at [email protected] immediately.

---

11. Changes to This Privacy Policy

winbit reserves the right to update this Privacy Policy at any time. When we make material changes, we will notify registered players by email and display a prominent notice on the platform for at least 14 days before the changes take effect. The "Effective" date at the top of this page will be updated accordingly. Continued use of the winbit platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

---

12. Governing Law

This Privacy Policy is governed by the laws of the jurisdiction in which winbit holds its operational registration as an offshore platform. Players in Bangladesh access winbit voluntarily and are responsible for ensuring their use of the platform complies with applicable local laws. This Policy does not create or imply any specific regulatory relationship with any Bangladeshi government body.

⚠️ Play Responsibly – 21+ Only

winbit is intended for adults aged 21 and above. Gambling involves real money and carries financial risk. Always set a budget, never chase losses, and use our built-in responsible gaming tools to stay in control. Visit our Responsible Gaming page for self-exclusion options and further support.