Privacy Policy for winbet22

1 Data We Collect

winbet22 collects personal data from you in three ways: directly when you provide it to us, automatically when you interact with the platform, and from authorised third parties where permitted. The categories of personal data we collect are described below.

1.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address in Bangladesh (including division, district, and upazila), email address, and mobile number.
• Identity verification (KYC) documents: National ID Card (NID), passport, or driver's licence; proof of registered payment method (e.g., a screenshot of your bKash or Nagad account showing your name and mobile number).
• Financial data: The mobile wallet number, bank account details, or card details associated with your deposit and withdrawal transactions. Full card numbers are never stored on our servers — card payments are tokenised by our PCI-DSS compliant payment processor.
• Communications data: Any messages, complaints, or support requests you submit to us via email, live chat, or our on-site contact form, including the content of those communications and any attachments.
• Responsible gaming data: Any self-exclusion requests, deposit limits, or time-out settings you apply to your account via the responsible gaming tools available on winbet22.

1.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage data: Pages visited, time spent on each page, games played, bets placed, links clicked, and navigation paths within the platform.
• Session data: Login timestamps, session duration, and logout events.
• Location data: Approximate geographic location derived from your IP address (typically city and country level). We do not collect precise GPS coordinates.
• Cookie data: Data stored in or retrieved from cookies and similar tracking technologies as described in Section 3 of this Policy.

1.3 Information from Third Parties

Where permitted by applicable law and where necessary to provide our services, winbet22 may receive personal data about you from the following categories of third parties:

• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, Mastercard) who confirm the status and details of your transactions.
• Identity verification and fraud prevention services who assist us in confirming the authenticity of KYC documents.
• Responsible gaming databases that indicate whether a player has registered a self-exclusion with a partner operator.
• Analytics providers who supply aggregated, anonymised data about platform usage trends.

2 How We Use Your Data

winbet22 processes your personal data for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed below. The legal basis for each processing activity is noted alongside.

Where winbet22 relies on legitimate interests as the legal basis for processing, we have conducted a balancing test and concluded that our interests do not override your fundamental privacy rights. You may object to processing carried out on legitimate interest grounds at any time by contacting support@winbet22.

Where winbet22 relies on your consent for processing (for example, for receiving promotional emails about BPL season bonuses, Eid offers, or new game releases), you may withdraw that consent at any time by updating your communication preferences within your account settings or by emailing support@winbet22. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

3 Cookies & Tracking Technologies

winbet22 uses cookies, web beacons, pixel tags, and similar tracking technologies on its platform. A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies allow the platform to recognise your device, maintain your session, remember your preferences, and analyse how the platform is being used.

3.1 Categories of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. Without these cookies, services such as logging in, maintaining your bet slip, and processing deposits cannot operate. These cookies cannot be disabled.
• Preference Cookies: These cookies remember choices you have made on the platform — such as your preferred language setting (English), your display preferences, and any in-game settings you have saved. They improve your experience but are not essential to core functionality.
• Analytics Cookies: winbet22 uses analytics cookies to understand how players interact with the platform — which pages are visited most, which games are most popular, where players experience difficulties, and how navigation flows are being used. Data collected by analytics cookies is aggregated and anonymised before analysis. No individual player is identified through analytics data.
• Security and Fraud Prevention Cookies: These cookies help winbet22 identify potentially fraudulent sessions, detect bots, and protect against account takeover attacks. They are treated as strictly necessary for the security of the platform and cannot be disabled.

3.2 Managing Cookies

You can manage or disable cookies at any time through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block or delete cookies via their privacy or settings menus. Please note that disabling strictly necessary cookies will prevent you from logging in and using the core features of winbet22. Disabling preference or analytics cookies will not affect your ability to use the platform but may result in a less personalised experience.

For players accessing winbet22 via mobile devices in Bangladesh — whether on Android via bKash's built-in browser or standard mobile Chrome — cookie settings can be managed through your browser's application settings panel.

4 Third-Party Data Sharing

winbet22 does not sell, rent, or trade your personal data. We share personal data with third parties only where strictly necessary to deliver our services, comply with legal obligations, or protect the security of the platform. All third-party recipients of your data are subject to contractual data protection obligations that require them to process your data only for the stated purpose and to keep it secure.

4.1 Categories of Third Parties

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard receive the minimum transaction data necessary to process your deposits and withdrawals. These entities operate under their own privacy policies and are subject to applicable financial regulations.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios may receive an anonymised or pseudonymised player identifier to manage game sessions, handle jackpot eligibility, and comply with their own fair play audit obligations. They do not receive your name, contact details, or financial data.
• Identity verification providers: Third-party KYC and age verification services receive the documents you submit for identity verification. They process this data solely for verification purposes under strict confidentiality obligations.
• Legal and regulatory authorities: winbet22 is required by law to disclose personal data to competent authorities (such as financial intelligence units) in response to lawful requests related to anti-money laundering investigations, fraud cases, or court orders. We will notify you of such disclosures where legally permitted to do so.
• IT infrastructure and cloud hosting providers: winbet22 uses secure, enterprise-grade hosting infrastructure. Our hosting providers have access to personal data only to the extent required to maintain and operate that infrastructure, under strict data processing agreements.

4.2 Cross-Border Data Transfers

Where personal data is transferred outside of Bangladesh — for example, to a game provider's servers located in Europe or Asia — winbet22 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required within Bangladesh. These safeguards include standard contractual clauses and data processing agreements with all recipient entities.

5 Data Security

winbet22 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data in transit between your device and winbet22 servers is encrypted using TLS 1.2 or higher. This applies to all pages of the platform, including login, deposit, withdrawal, and KYC document upload pages.
• Data encryption at rest: Sensitive data categories — including KYC documents, payment details, and account passwords — are encrypted at rest using AES-256 encryption on our servers.
• Password hashing: Account passwords are never stored in plain text. They are hashed using a strong, salted cryptographic algorithm so that even our own staff cannot read your password.
• Access controls: Access to personal data within winbet22 is restricted on a strict need-to-know basis. Staff who handle personal data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion detection and monitoring: winbet22 operates continuous security monitoring to detect and respond to suspicious access attempts, unusual data export activities, and other security anomalies in real time.
• Regular security testing: The platform undergoes periodic security assessments and vulnerability testing to identify and remediate security weaknesses proactively.

Despite these measures, no security system is completely impenetrable. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winbet22 will notify you without undue delay via your registered email address and will take all reasonable steps to contain and mitigate the breach.

You also play an important role in keeping your data secure. You must keep your winbet22 login credentials confidential, use a strong and unique password, and contact support@winbet22 immediately if you suspect that your account has been accessed without your authorisation.

6 Data Retention

winbet22 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or to comply with our legal, regulatory, and contractual obligations. The following retention periods apply to the main categories of personal data we hold:

At the end of the applicable retention period, personal data is either securely deleted from all live and backup systems or anonymised so that it can no longer be associated with you as an individual. Where data must be retained for a legal purpose beyond the period you might otherwise expect, we will inform you of this and the reason for the extended retention if you make a subject access request.

7 Your Privacy Rights

As a player on winbet22, you have the following rights in respect of your personal data. These rights are not absolute — they are subject to legal limitations and exceptions in certain circumstances — but winbet22 will always respond to your request promptly and transparently.

• Right of Access: You may request a copy of all personal data that winbet22 holds about you. We will provide this information within 30 days of receiving a valid request, free of charge, in a legible electronic format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details (such as your email address or mobile number) directly within your account settings. For corrections to KYC documents or other sensitive records, please contact support@winbet22.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that this right is subject to our legal retention obligations — we cannot delete financial records or KYC documents that we are required by law to retain.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while an inaccuracy is being verified, or where you have objected to processing and we are assessing that objection.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) to transfer to another service.
• Right to Object: You have the right to object at any time to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will stop processing your data for that purpose immediately and without requiring justification.
• Right to Withdraw Consent: Where we process your data on the basis of consent (for example, sending you promotional emails about new bonuses or BPL season offers), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please email support@winbet22 with the subject line "Privacy Rights Request" and provide sufficient information to identify your account (your registered email address or mobile number). We will respond to all valid requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason.

If you are not satisfied with our response to a privacy rights request, you may escalate the matter to the appropriate data protection authority in your jurisdiction.

8 Contact & Data Protection

winbet22 is the data controller responsible for the personal data of players who use the platform. If you have any questions, concerns, or complaints about this Privacy Policy or the way in which winbet22 handles your personal data, please contact us using the details below.

All privacy-related enquiries are handled by the winbet22 Data Protection team, who are available during Bangladesh Standard Time (BST, UTC+6) business hours, Monday through Saturday. We aim to acknowledge all privacy enquiries within one working day and to provide a substantive response within 30 calendar days.

• Data Protection Contact Email: support@winbet22 — please use the subject line "Privacy Enquiry" or "Data Rights Request" so your message reaches the correct team promptly.
• Response Time: Acknowledgement within 1 working day; full response within 30 calendar days.
• Language: All privacy communications are handled in English.

This Privacy Policy was last reviewed and updated on 1 January 2026. winbet22 reserves the right to update this Policy at any time. When a material change is made, we will post the updated Policy on this page with a revised effective date and, where the change significantly affects your rights, will notify you via your registered email address. Your continued use of winbet22 following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms.

This Privacy Policy should be read alongside the winbet22 Terms & Conditions and the Responsible Gaming page, which together form the complete set of policies governing your use of the platform.