winbit Privacy Policy

Full Legal Document

winbit Privacy Policy

1. Introduction

winbit operates the online casino and sports betting platform accessible at winbit.club. As part of delivering our services to players across Bangladesh, we collect and process certain personal data relating to registered users and website visitors. This Privacy Policy sets out in full detail what data we collect, the purposes for which it is used, the legal basis on which it is processed, how it is stored and protected, and the rights you hold as a data subject.

This Privacy Policy applies to all personal data collected through the winbit website, mobile browser interface, and any associated services or communications channels operated by winbit. It should be read together with the winbit Terms & Conditions and Responsible Gaming Policy, both of which are published on this platform.

winbit is committed to handling your personal data with care, transparency, and respect. We do not use your data in ways that are incompatible with the purposes described in this document, and we do not engage in the sale of personal data to third parties for commercial gain.

2. Data We Collect

winbit collects two categories of personal data: data you provide directly to us, and data we collect automatically as you use the platform.

Data you provide directly:

• Full legal name
• Date of birth (for age verification purposes)
• Email address and mobile phone number
• Residential address (street, city, district, and postcode)
• Government-issued identification details (National ID number, passport number, or driving licence number)
• Payment method details (mobile wallet number for bKash, Nagad, Rocket, or Upay; bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, and other bank transfers)
• Username and encrypted account password
• Any communications sent to winbit support, including the content of support tickets, chat messages, and email correspondence

Data collected automatically:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type and version
• Pages visited on the winbit platform, time and date of visits, and session duration
• Referring URL (the web address from which you arrived at winbit.club)
• Betting and gaming activity records, including markets wagered on, stake amounts, and game history
• Transaction records including deposit amounts, timestamps, and withdrawal requests
• Cookie identifiers and similar tracking data (see Section 8)

3. How We Collect Your Data

winbit collects personal data through the following channels:

• Account Registration: When you create a winbit account, you submit your name, date of birth, contact details, and payment method information directly through the registration interface.
• Identity Verification (KYC): When you submit identity documents to complete the verification process, we receive and process the information contained in those documents.
• Deposits and Withdrawals: Each financial transaction generates a record associated with your account, including the amount, date, time, and payment method used.
• Platform Use: As you navigate the winbit platform, browse betting markets, and play casino games, our servers automatically log activity data associated with your account session.
• Customer Support: When you contact winbit support by email or live chat, the content of that communication is stored as part of your account record.
• Cookies and Tracking Technologies: When you visit winbit.club, cookies and similar technologies are placed on your device that allow us to recognise your session, maintain login state, and analyse site usage patterns.

4. Why We Use Your Data

winbit uses the personal data we collect for the following purposes:

Purpose	Data Used
Account registration and management	Name, email, phone, date of birth, username, password
Age and identity verification (KYC)	Name, date of birth, government ID details, address, ID document images
Processing deposits and withdrawals	Payment method details, transaction amounts, timestamps
Fraud prevention and security monitoring	IP address, device data, login history, transaction patterns
Responsible gaming enforcement	Gaming activity, deposit history, self-exclusion requests
Customer support	Account data, support communications, transaction records
Platform performance and improvement	Session data, device type, pages visited, error logs
Marketing communications (where consented)	Email address, phone number, betting preferences

winbit will not use your data for any purpose that is incompatible with those listed above. Where we wish to use your data for a new purpose, we will update this Privacy Policy and, where required, seek your consent before doing so.

5. Legal Basis for Processing

winbit processes your personal data on the following legal bases:

• Contractual necessity: Processing your name, contact details, payment information, and account activity is necessary to fulfil the contract between you and winbit — that is, to provide you with access to the platform and its services.
• Legal obligation: winbit is required to collect and retain certain data, including identity verification documents and transaction records, to comply with applicable anti-money laundering, fraud prevention, and responsible gaming obligations.
• Legitimate interests: winbit processes certain data — such as IP addresses, device identifiers, and session logs — on the basis of legitimate interests in maintaining platform security, detecting fraud, and improving service quality. These interests do not override your fundamental data rights.
• Consent: Where winbit sends you marketing communications or uses non-essential cookies, we do so on the basis of your explicit consent. You may withdraw your consent at any time by contacting winbit support or adjusting your browser cookie settings.

6. Data Sharing and Disclosure

winbit does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited circumstances:

• Payment processors: To process your deposits and withdrawals, winbit shares relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and connected banking partners. These providers are bound by their own data protection obligations and may not use your data for any purpose other than processing your transaction.
• Identity verification services: winbit may engage third-party KYC (Know Your Customer) service providers to assist in verifying your identity. These providers process your identification documents under strict contractual confidentiality terms.
• Game and technology providers: Game studios such as Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming receive limited session data necessary to deliver their games within the winbit platform. They do not receive your full personal profile.
• Legal and regulatory disclosure: winbit may disclose your personal data to law enforcement agencies, financial intelligence units, or other government authorities where required to do so by applicable law, court order, or in response to a legitimate legal request.
• Business transfers: In the event of a merger, acquisition, or sale of winbit's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that may result.

7. Payment Data

winbit handles payment data with a particularly high standard of care given its sensitive financial nature. All payment transactions on the winbit platform are processed through encrypted channels. winbit does not store full card numbers, CVV codes, or complete mobile banking PINs on its own servers.

When you make a deposit or withdrawal using bKash, Nagad, Rocket, or Upay, the transaction is authenticated through the respective mobile financial service provider's own secure interface. winbit receives only a transaction confirmation reference and the associated amount in BDT — not your full mobile wallet credentials.

For bank card payments via Visa and Mastercard, transactions are processed through PCI-DSS compliant payment gateways. winbit retains only the last four digits of the card number, the card type, and the transaction reference for record-keeping purposes.

8. Cookies and Tracking Technologies

winbit uses cookies and similar technologies to ensure the platform functions correctly, to maintain your login session, to remember your preferences, and to gather anonymised analytics data that helps us improve the platform experience. Cookies are small text files stored on your device by your browser.

winbit uses the following categories of cookies:

• Essential cookies: These are strictly necessary for the winbit platform to function. They maintain your login session, remember your language and display preferences, and ensure security features operate correctly. Essential cookies cannot be disabled without materially impairing platform functionality.
• Analytics cookies: These cookies allow winbit to understand how users navigate the platform — which pages are visited most frequently, where users encounter errors, and how long sessions typically last. Analytics data is aggregated and anonymised. winbit uses this information to identify areas for platform improvement.
• Functional cookies: These cookies remember choices you have made — such as your preferred game category or notification settings — to provide a more personalised experience on subsequent visits.
• Marketing cookies: Where you have provided explicit consent, winbit may use marketing cookies to deliver relevant promotional content based on your betting and gaming preferences. You may withdraw this consent at any time.

You can control and delete cookies through your browser settings at any time. Please note that disabling certain categories of cookies may affect the functionality of the winbit platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

9. Data Security

winbit implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the winbit platform
• Encrypted storage of account passwords using industry-standard one-way hashing algorithms
• Restricted internal access to personal data on a strict need-to-know basis, with access logging and audit trails
• Regular security assessments and vulnerability testing of the winbit platform infrastructure
• Firewall protection and intrusion detection systems monitoring platform traffic in real time
• Secure data centre environments with physical access controls

In the event of a data security incident that poses a risk to your personal data, winbit will take prompt remedial action and notify affected users in accordance with applicable legal requirements.

10. Data Retention

winbit retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a period of five (5) years following account closure, to comply with anti-money laundering and financial record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements.
• Support communications: Retained for three (3) years from the date of the last communication, unless a longer retention period is required due to an open dispute or legal matter.
• Marketing preferences and consent records: Retained until you withdraw your consent, plus a further twelve (12) months as evidence of the consent having been given.
• Analytics and session data: Retained in aggregated, anonymised form indefinitely. Individual session logs are deleted or anonymised within twenty-four (24) months.

Where personal data is no longer required and its retention period has expired, winbit will securely delete or irreversibly anonymise the data using methods appropriate to the storage medium and sensitivity of the data in question.

11. Your Data Rights

As a winbit user, you hold the following rights in relation to your personal data held by winbit. To exercise any of these rights, please contact winbit support using the contact details provided in Section 15:

• Right of access: You have the right to request a copy of the personal data winbit holds about you. We will respond to verified access requests within a reasonable timeframe.
• Right to rectification: If any personal data winbit holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your account settings page.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent and no other legal basis exists for continued processing. Please note that winbit may be required to retain certain data for legal compliance purposes even after an erasure request is received.
• Right to restriction: In certain circumstances, you may request that winbit restrict the processing of your personal data — for example, while a correction request is being assessed.
• Right to object: Where winbit processes your data on the basis of legitimate interests, you have the right to object to that processing. winbit will review the objection and will cease processing unless compelling legitimate grounds exist that override your interests.
• Right to data portability: Where technically feasible and where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where winbit processes your data on the basis of consent — for example, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

winbit will respond to all data rights requests within a reasonable period. In cases where a request is complex or numerous, the response period may be extended, and you will be informed of this in advance.

12. Children's Privacy

The winbit platform is strictly intended for adults aged 18 years and above. winbit does not knowingly collect personal data from individuals under the age of 18. If winbit becomes aware that personal data has been submitted by a person under 18, that data will be deleted and the associated account will be immediately suspended.

If you are a parent or guardian and you believe that a person under 18 in your care has registered an account on or submitted personal data to the winbit platform, please contact winbit support immediately using the details provided in Section 15.

13. Third-Party Links

The winbit platform may, from time to time, contain references to game providers and payment services that operate their own separate platforms or interfaces. winbit is not responsible for the privacy practices of third-party providers. When you interact with a third-party interface — such as a mobile financial service provider's authentication screen — you are subject to that provider's own privacy policy.

winbit encourages you to review the privacy policies of any third-party services you use in connection with your winbit account, including bKash, Nagad, Rocket, Upay, and any connected banking partner.

14. Updates to This Privacy Policy

winbit reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy — such as changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — will be communicated to registered users via the email address associated with their account, or through a prominent notice on the winbit platform, prior to the changes taking effect.

The effective date at the top of this document reflects the date of the most recent revision. Your continued use of the winbit platform following publication of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you may request account closure in accordance with the winbit Terms & Conditions.

winbit encourages you to review this Privacy Policy periodically to stay informed about how your personal data is being protected and used.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data winbit holds about you, please contact the winbit data support team. All privacy-related enquiries are handled by winbit's support team, who are available 24 hours a day, 7 days a week at Bangladesh Standard Time (BST, UTC+6).

Email: [email protected]

Please include your registered account username and a brief description of your request in your message so that we can respond to you efficiently. winbit will acknowledge your enquiry promptly and aim to resolve all data-related requests within a reasonable timeframe.

This Privacy Policy was last reviewed and updated with an effective date of 1 January 2026. winbit reserves the right to update this Policy at any time. Please check this page periodically for the latest version.