Privacy Policy — winbet21

Privacy at a Glance

How winbet21 Handles Your Personal Information

The cards below provide a quick overview of our core privacy commitments. They do not replace the full text of this Privacy Policy — the complete document below governs our practices. These highlights are provided as a reading aid only.

Section 1

Information We Collect

winbet21 collects personal data through several channels: directly from you during registration and account use, automatically as you interact with our platform, and in some cases from trusted third-party sources such as payment processors and identity verification services. The categories of data we collect are set out below.

Data We Collect Directly From You

Data Collected Automatically

• Device & Technical Data: IP address, device type and model, operating system version, browser type and version, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage Data: Pages visited, game sessions initiated, bet amounts, session duration, click paths, and navigation patterns across the winbet21 platform.
• Cookie & Tracking Data: Session cookies, persistent preference cookies, and analytics identifiers. See the Cookies & Tracking section for full details.
• Geolocation Data: Approximate location derived from your IP address, used solely for eligibility checks and fraud prevention. We do not use GPS-level precision tracking.

Data Received From Third Parties

• Identity verification scores and flags from our KYC service providers.
• Transaction confirmation data from payment processors including bKash, Nagad, Rocket, and Upay.
• Fraud risk signals from anti-money-laundering screening tools.

Section 2

How We Use Your Data

winbet21 processes your personal data only where we have a lawful basis for doing so. The primary lawful bases we rely on are: performance of the contract between you and winbet21 (operating your account), compliance with legal obligations (KYC, AML, responsible gaming), our legitimate interests (platform security, fraud prevention, product improvement), and your consent (marketing communications). The table below details each processing purpose.

• Account creation and management: Creating, maintaining, and securing your winbet21 account, including password recovery and two-factor authentication via your registered Bangladeshi mobile number.
• Payment processing: Facilitating deposits and withdrawals in Bangladeshi Taka (৳) through bKash, Nagad, Rocket, Upay, DBBL, and other accepted payment methods, and maintaining auditable transaction records.
• Identity and age verification: Confirming that you are aged 18 or older and that your identity matches the information you provided at registration, in compliance with our responsible gaming obligations.
• Fraud and AML screening: Detecting, investigating, and preventing fraudulent transactions, money laundering, bonus abuse, and other prohibited activities that could harm you or other platform users.
• Responsible gaming compliance: Monitoring gameplay patterns to identify potential problem gambling behaviours and applying appropriate safeguards such as deposit limit alerts or account review flags.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining a record of communications for quality assurance and training purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with winbet21, which games are most popular, and where the user experience can be enhanced.
• Marketing communications: Sending you promotional offers, bonus announcements, and seasonal campaign notifications (such as Eid, BPL season, or T20 World Cup promotions) via SMS, email, or in-platform notification — only where you have opted in or where permitted under applicable law.
• Legal and regulatory compliance: Retaining records as required by applicable laws, responding to lawful requests from competent authorities, and enforcing our Terms & Conditions.

Section 3

Data Sharing & Third Parties

winbet21 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the specific circumstances described below, and only to the minimum extent necessary to fulfil the stated purpose.

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), City Bank, BRAC Bank, and Islami Bank receive transaction-specific data (your registered wallet or account number and the transaction amount) solely to process your deposit or withdrawal instruction.
• KYC and identity verification providers: Accredited third-party identity verification services receive copies of your submitted identity documents to conduct age and identity checks on our behalf. These providers are contractually bound to process your data for no other purpose.
• Anti-fraud and AML screening tools: Transaction data and device identifiers may be shared with fraud detection platforms to assess risk. These platforms return a risk score only — they do not retain your full personal profile.
• Game providers and software studios: Studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive a pseudonymous player identifier (never your full name or contact details) to facilitate your game session and maintain game-history records.
• Analytics providers: Aggregated, anonymised usage data may be shared with web analytics tools to help us understand platform performance. No personally identifiable information is shared in this context.
• Legal and regulatory authorities: winbet21 will disclose personal data to law enforcement, regulatory bodies, or courts if required to do so by a valid legal order, warrant, or regulatory directive. Where legally permitted, we will notify you of such disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer.

All third-party service providers who process data on behalf of winbet21 are required to enter into data processing agreements that restrict their use of your data to the specific purpose for which it was shared and mandate appropriate security standards.

Section 4

Cookies & Tracking Technologies

winbet21 uses cookies and similar tracking technologies (local storage, session storage, pixel tags) to operate the platform effectively, remember your preferences, and gather anonymised analytics data. A cookie is a small text file placed on your device by our web server when you visit the platform. Cookies do not execute code or transmit viruses.

Types of Cookies We Use

You may control cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your winbet21 account and using core platform features. Disabling functional cookies will reset your preferences on each visit.

Section 5

Data Retention

winbet21 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods below reflect our standard practice. Where legal obligations require longer retention, those obligations take precedence.

• Account and identity data: Retained for the full duration of your account and for a minimum of five years following permanent account closure, in line with anti-money-laundering record-keeping standards.
• Transaction records: Deposit, withdrawal, and bet history records are retained for a minimum of five years from the date of each transaction.
• KYC documents: Identity documents submitted for verification are retained for a minimum of five years following account closure. Physical copies (if any) are securely destroyed.
• Support correspondence: Customer support communications are retained for up to three years following the resolution of the relevant matter.
• Analytics data: Anonymised, aggregated usage data used for platform analytics is retained indefinitely, as it contains no personally identifiable information.
• Marketing consent records: Records of your marketing opt-in or opt-out choices are retained for the duration of your account plus three years, to allow us to demonstrate compliance with consent obligations.

When personal data is no longer required and the applicable retention period has expired, winbet21 deletes or irreversibly anonymises the data using secure data destruction procedures. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for statistical and research purposes, as it can no longer be linked to any individual.

Section 6

Your Privacy Rights

winbet21 respects your rights over your personal data. The rights set out below are available to all registered players. To exercise any of these rights, please contact our support team. We will respond to verified requests within 30 days. In complex cases, this period may be extended by a further 30 days, and you will be notified accordingly.

To exercise any of the above rights, contact our support team at support@winbet21 (plain text — not a link). We may ask you to verify your identity before processing your request to protect against unauthorised access to your data.

Section 7

Data Security Measures

winbet21 employs a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to, the following:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and winbet21 is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). This protects your login credentials, payment information, and personal details from interception in transit.
• Password Hashing: Account passwords are never stored in plain text. They are processed using a strong one-way cryptographic hashing algorithm. Even winbet21 staff cannot view your password.
• Two-Factor Authentication (2FA): winbet21 supports OTP-based two-factor authentication delivered to your registered Bangladeshi mobile number, adding a second layer of protection at login.
• Access Controls: Internal access to player data is restricted on a strict need-to-know basis. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Server Security: Platform servers are hosted in secure data centres with physical access controls, intrusion detection systems, and regular third-party security audits.
• Penetration Testing: winbet21 commissions periodic external penetration tests to identify and remediate potential vulnerabilities in our platform before they can be exploited.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, winbet21 will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

Section 8

Policy Updates & Contact

winbet21 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or in-platform notification.

We encourage you to review this Privacy Policy periodically. Your continued use of winbet21 following the publication of any updates constitutes your acknowledgement of the revised policy. If you disagree with any material change, you should cease using the platform and may request account closure by contacting our support team.

This Privacy Policy applies exclusively to the winbet21 platform. It does not govern the privacy practices of third-party game providers, payment processors, or any external website that may be referenced in passing. winbet21 accepts no responsibility for the privacy practices of those third parties.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all prior versions of the winbet21 Privacy Policy.