WinBaji Privacy Policy —
Your Data, Handled With Care

1. Introduction

Welcome to WinBaji. This Privacy Policy describes how WinBaji ("we", "us", "our", or "the Platform") collects, uses, stores, and protects the personal information of members and visitors who use the WinBaji website at winbaji.co and the WinBaji mobile application.

We understand that privacy is important to our members in Bangladesh. When you trust us with your personal information, we take that responsibility seriously. This policy is written in plain language so you can understand exactly what happens to your data — no legal jargon, no hidden surprises.

By registering an account on WinBaji or continuing to use the platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your data as described here. If you do not agree with this policy, please do not use the WinBaji platform.

2. Data We Collect

WinBaji collects the following categories of personal data from members and platform visitors:

We collect only the data that is necessary for the purposes described in this policy. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, or health information unless specifically required for responsible gaming purposes and with your explicit consent.

3. How We Collect Your Data

3.1 Directly From You

Most of the personal data WinBaji holds is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in a promotion. We collect this data through our registration forms, KYC verification process, and support channels.

3.2 Automatically

When you visit the WinBaji website or use the mobile app, we automatically collect certain technical data including your IP address, device identifiers, browser type, and session information. This data is collected using cookies, server logs, and similar tracking technologies. It helps us keep the platform secure and understand how members use the platform so we can improve it.

3.3 From Third Parties

In some cases, WinBaji receives data about you from third parties. This includes identity verification data from our KYC partners, fraud detection signals from our security providers, and payment confirmation data from our payment processing partners. We only receive data from third parties where it is necessary for the operation of the platform and where those third parties are contractually bound to handle data responsibly.

4. How We Use Your Data

WinBaji uses your personal data for the following purposes:

• Account management: Creating and maintaining your WinBaji account, verifying your identity, and managing your account settings and preferences.
• Payment processing: Processing deposits and withdrawals, verifying payment method ownership, and maintaining transaction records.
• Platform security: Detecting and preventing fraud, money laundering, underage gambling, and other prohibited activities. Monitoring for suspicious account behaviour.
• Legal compliance: Meeting our obligations under applicable laws and regulations, including anti-money laundering (AML) requirements and responsible gaming obligations.
• Customer support: Responding to your queries, resolving disputes, and providing assistance when you contact our support team.
• Platform improvement: Analysing how members use the platform to identify bugs, improve features, and develop new products and services.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — but only if you have opted in to receive these communications.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and providing appropriate support tools and interventions.

WinBaji will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

5. Data Sharing

5.1 Who We Share Data With

WinBaji shares personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, and banking partners — to process your deposits and withdrawals.
• Identity verification providers: KYC and AML compliance partners — to verify your identity and prevent fraud.
• Game providers: Our casino and sports betting software providers — to deliver games and settle bets. These providers receive only the data necessary to operate their services.
• IT and security providers: Cloud hosting, cybersecurity, and fraud detection services that support the operation of the WinBaji platform.
• Legal and regulatory authorities: Where required by law, court order, or regulatory requirement, WinBaji may disclose personal data to law enforcement or regulatory bodies.

5.2 What We Never Do

WinBaji will never sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We do not share your data with advertisers, data brokers, or social media platforms. Every third party that receives your data is bound by a data processing agreement that restricts how they can use it.

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They allow the website to remember information about your visit — such as your login status and preferences — so you don't have to re-enter them every time you return.

6.2 How WinBaji Uses Cookies

WinBaji uses the following types of cookies:

• Essential cookies: Required for the platform to function. These keep you logged in and maintain your session security. You cannot opt out of essential cookies.
• Preference cookies: Remember your language, display settings, and other preferences so you don't have to set them every visit.
• Analytics cookies: Help us understand how members use the platform — which pages are visited most, where members encounter problems, and how long sessions last. This data is aggregated and anonymised.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

6.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the WinBaji platform. Instructions for managing cookies in common browsers are available in your browser's help documentation.

7. Data Retention

WinBaji retains your personal data for as long as your account is active and for a period after account closure as required by applicable laws and regulations. Specifically:

• Account and identity data is retained for a minimum of 5 years after account closure, in line with anti-money laundering regulations.
• Transaction records are retained for a minimum of 5 years from the date of the transaction.
• Support communications are retained for 3 years from the date of the interaction.
• Technical and analytics data is retained for 2 years from collection.
• Marketing preference data is retained until you withdraw consent or request deletion.

After the applicable retention period, your data is securely deleted or anonymised so that it can no longer be linked to you as an individual. If you request deletion of your account before the end of the retention period, we will delete all data that we are not legally required to retain and will inform you of what data must be kept and for how long.

8. Data Security

WinBaji implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• AES-256 encryption for all data stored at rest on our servers
• TLS 1.3 encryption for all data transmitted between your device and our servers
• Multi-factor authentication options for member accounts
• Regular security audits and penetration testing by independent security firms
• Strict access controls — only authorised personnel can access personal data, and only to the extent required for their role
• 24/7 security monitoring and automated threat detection systems
• Incident response procedures to detect, contain, and report data breaches

Despite these measures, no online platform can guarantee absolute security. If you become aware of any security vulnerability or suspect that your WinBaji account has been compromised, please contact our support team immediately. In the event of a data breach that affects your personal data, WinBaji will notify you as required by applicable law.

9. Your Privacy Rights

As a WinBaji member, you have the following rights over your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all requests within a reasonable timeframe.

10. Minors and Under-18 Policy

WinBaji is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age verification steps, and we reserve the right to request identity documents to confirm age at any time.

If we discover that personal data has been collected from a person under 18, we will delete that data immediately and close the associated account. If you are a parent or guardian and believe that your child has registered on WinBaji, please contact us immediately at [email protected] and we will take prompt action.

11. Changes to This Privacy Policy

WinBaji may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make significant changes, we will notify registered members via email and display a prominent notice on the platform. The date of the most recent update is shown at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of the WinBaji platform after any update constitutes your acceptance of the revised policy. If you do not agree with the changes, you should stop using the platform and contact us to close your account.

12. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how WinBaji handles your personal information, please get in touch with our support team. We are available 24 hours a day, 7 days a week.