winbs Privacy Policy

01 Introduction and Scope

This Privacy Policy ("Policy") describes how winbs ("we", "us", "our", "the Platform") collects, uses, stores, and shares personal data relating to individuals ("you", "your", "the Player") who access or use the winbs website at https://winbs.io and all associated services, including sports betting, live casino, slots, crash games, and related account management features.

This Policy applies to all personal data processed by winbs in connection with your use of the platform, regardless of whether you are a registered account holder, a visitor browsing the site without an account, or a former player whose account has been closed.

This Privacy Policy should be read alongside the winbs Terms & Conditions and the winbs Responsible Gaming Policy, both of which form part of the overall legal framework governing your relationship with winbs.

02 Data Controller Information

winbs is the data controller responsible for the personal data collected and processed through the winbs platform. As data controller, winbs determines the purposes for which personal data is processed and the means by which that processing is carried out.

If you have any questions or concerns about the way in which your personal data is handled, or if you wish to exercise any of the rights described in Section 9 of this Policy, you may contact our Data Protection team using the details provided in Section 14.

03 Personal Data We Collect

winbs collects personal data from you in three primary ways: data you provide directly to us, data collected automatically through your use of the platform, and data received from third-party verification and payment service providers. The categories of personal data we collect are described in the table below.

winbs does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or health information, except where such data is voluntarily disclosed by a player in the context of a responsible gaming support interaction (for example, disclosing a gambling-related health condition when requesting self-exclusion).

04 How We Use Your Personal Data

winbs uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent.

• Account Registration and Management: To create and maintain your winbs player account, verify your identity, process your login credentials, and communicate account-related notifications including security alerts, deposit confirmations, and withdrawal updates.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer channels, including communicating with payment service providers to verify and settle transactions.
• Age and Identity Verification (KYC): To verify that you are aged 21 or above and that the identity information you provided during registration is accurate, in accordance with our legal and regulatory obligations.
• Service Delivery: To provide you with access to the winbs sports betting, live casino, slots, and crash games product suite, and to personalise your gaming experience based on your stated preferences and historical activity.
• Responsible Gaming Compliance: To monitor your gaming behaviour for signs of problem gambling, to enforce deposit limits and self-exclusion restrictions that you have activated, and to contact you proactively if our responsible gaming systems identify patterns of concern.
• Anti-Fraud and Anti-Money-Laundering (AML): To detect, investigate, and prevent fraudulent account activity, bonus abuse, multi-accounting, match-fixing, money laundering, and other prohibited activities described in the winbs Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve complaints, and maintain records of our communications with you for quality assurance and training purposes.
• Platform Improvement: To analyse aggregated usage data and performance metrics to improve the winbs platform, fix technical issues, and develop new product features. This analysis uses anonymised or pseudonymised data where possible.
• Marketing Communications: To send you promotional offers, bonus notifications, and event announcements by email or SMS, where you have given your explicit consent to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected].
• Legal Compliance: To comply with applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities, maintaining transaction records for audit purposes, and enforcing our Terms & Conditions.

05 Legal Basis for Processing

winbs processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and winbs — that is, to provide the betting and gaming services you have registered to use, including account management, payment processing, and game delivery.
• Legal Obligation: Processing is necessary for winbs to comply with applicable legal and regulatory requirements, including KYC/AML obligations, fraud prevention duties, and obligations to cooperate with lawful authority requests.
• Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by winbs, including platform security, fraud detection, responsible gaming monitoring, and business analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not otherwise justified by one of the bases above — specifically for marketing communications and certain optional personalisation features — winbs will process your data only where you have given your free, specific, informed, and unambiguous consent. You may withdraw this consent at any time without detriment to your account standing.

06 Data Sharing and Disclosure

winbs does not sell, rent, or trade your personal data. We share personal data with third parties only in the circumstances described below, and only to the extent strictly necessary for each purpose.

• Payment Service Providers: We share transaction-relevant data (such as your wallet identifier and transaction amount) with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and other payment partners to facilitate deposits and withdrawals. These providers process your data under their own privacy policies and are contractually required to maintain data security standards consistent with ours.
• Identity Verification Providers: We may share your identity and document data with third-party KYC verification service providers to fulfil our age and identity verification obligations. These providers act as data processors on our behalf.
• Game Technology Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level data necessary to deliver their game content through the winbs platform. No directly identifiable personal data beyond a pseudonymous session identifier is shared with game providers.
• Fraud Prevention and AML Services: We may share data with specialist fraud prevention and anti-money-laundering screening services to identify and prevent financial crime. Such sharing is conducted on the basis of our legal obligations and legitimate interests.
• Law Enforcement and Regulators: winbs will disclose personal data to government authorities, law enforcement agencies, or courts where required to do so by law, or where we believe in good faith that such disclosure is necessary to protect the rights, safety, or property of winbs, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of the winbs business, player personal data may be transferred to the relevant acquiring entity, subject to that entity being bound by obligations no less protective than those set out in this Policy.

07 International Data Transfers

The winbs platform primarily serves players based in Bangladesh. Certain data processing activities — including cloud hosting, KYC verification, and game delivery — may involve the transfer of personal data to servers or service providers located outside Bangladesh.

Where personal data is transferred internationally, winbs takes reasonable steps to ensure that the receiving party provides a level of data protection substantially equivalent to that provided by winbs under this Policy. Such steps may include contractual data processing agreements that incorporate internationally recognised data protection standards.

08 Data Retention Periods

winbs retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including legal, regulatory, and business requirements. The specific retention periods applicable to each category of data are set out below.

Once a retention period has expired and there is no longer a legal basis to continue holding your data, winbs will securely delete or irreversibly anonymise your personal data. Anonymised data — from which you cannot reasonably be re-identified — may be retained indefinitely for statistical and business analytics purposes.

09 Your Rights as a Data Subject

As a winbs player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 3 business days and provide a substantive response within 20 business days.

• Right of Access: You have the right to request a copy of all personal data that winbs holds about you, along with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update most account information directly via your account dashboard after completing the winbs Login process.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where we have no other lawful basis to continue processing it. This right is subject to our obligations to retain certain records under applicable law.
• Right to Restriction of Processing: You have the right to request that winbs restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to winbs in a structured, commonly used, machine-readable format, and to request that we transmit that data directly to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where winbs relies on legitimate interests as the legal basis, including profiling based on legitimate interests. You also have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

10 Cookies and Tracking Technologies

The winbs platform uses a limited set of cookies and similar technologies to ensure the platform functions correctly, to maintain your login session, and to support our security and fraud prevention systems. The cookies we use are described in the table below.

winbs does not use third-party advertising cookies, tracking pixels, or cross-site profiling technologies. You may manage or delete cookies through your browser settings at any time; however, disabling essential cookies may impair core platform functionality including the ability to log in and place bets.

11 Children and Minors

The winbs platform is strictly intended for adults aged 21 years and above. winbs does not knowingly collect personal data from persons under the age of 21. Registration by minors is prohibited, and any account found to belong to a person under 21 will be immediately closed with all balances forfeited.

winbs actively supports responsible gaming and age verification initiatives. We recommend that parents and guardians use parental control software to restrict access to online gambling websites on devices accessible to minors. More information is available on our Responsible Gaming page.

12 Security Measures

winbs implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security controls in place on the winbs platform include:

• Transport Layer Security: All data transmitted between your device and winbs servers is encrypted using TLS 1.2 or higher. HTTP connections are automatically redirected to HTTPS across all platform pages.
• Data Encryption at Rest: Sensitive personal data — including identity documents and financial information — is encrypted at rest using AES-256 encryption within our secure database infrastructure.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. winbs staff members are granted access only to the specific data categories required to fulfil their job function, and all access is logged and audited.
• Two-Factor Authentication: winbs supports two-factor authentication (2FA) on player accounts as an additional layer of security against unauthorised access. Players are strongly encouraged to enable 2FA via their account security settings.
• Penetration Testing and Security Audits: The winbs platform undergoes periodic security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential security weaknesses before they can be exploited.
• Incident Response: winbs maintains a documented security incident response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, winbs will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

While winbs takes all reasonable precautions to protect your data, no online platform can guarantee absolute security against all threats. You also have an important role to play in keeping your account secure — please review the security guidance provided in Section 3 of the winbs Terms & Conditions.

13 Changes to This Policy

winbs reserves the right to update or replace this Privacy Policy at any time in response to changes in applicable law, changes in our data processing practices, or improvements to the winbs platform. The "last updated" date at the top of this Policy reflects the date of the most recent revision.

Where a proposed change is material — for example, a change to the types of data we collect, the purposes for which we use it, or the third parties with whom we share it — winbs will provide at least 14 days' advance notice to registered players via the email address held on their account before the change takes effect.

For non-material clarifications or corrections that do not alter the substance of the Policy, winbs may update this page without advance notice. We encourage you to review this Policy periodically to stay informed about how your data is protected.

14 Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which winbs handles your personal data, please contact our Data Protection team using the details below. All correspondence must be submitted in English.

• Email: [email protected] (plain text — this address is not a clickable link)
• Subject Line: "Data Privacy Request" for rights requests; "Privacy Complaint" for complaints
• Response Time: Acknowledgement within 3 business days; substantive response within 20 business days (Bangladesh Standard Time, UTC+6)
• Operating Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays

winbs is committed to resolving all privacy concerns promptly and fairly through our internal complaints process. If you remain dissatisfied following our response, you may have the right to escalate your complaint to an appropriate data protection authority or independent dispute resolution body in accordance with applicable law.