winbad Privacy Policy

This Privacy Policy ("Policy") describes how winbad ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "the Player", "the User") who access or use the website located at https://winbad.vip and all associated services.

winbad is committed to handling your personal data with transparency, integrity, and respect. We process only the information that is necessary to deliver a safe, fair, and enjoyable online gaming experience to players across Bangladesh, and we do so in accordance with internationally recognised data protection principles.

By registering an account on winbad or by continuing to use the platform after this Policy has been made available to you, you acknowledge that you have read and understood how winbad processes your personal data as described in this document. This Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and winbad.

If you have any questions about this Policy or about how winbad handles your data, please contact our Data Protection team at [email protected] before using the platform.

winbad collects personal data across several categories depending on the nature of your interaction with the platform. The table below summarises the categories of data we may collect and typical examples within each category.

winbad does not collect special category data (such as health information, religious beliefs, or political opinions) unless you voluntarily provide it in the context of a responsible gaming self-exclusion request or a support enquiry. Any such data is handled with additional care and is not used for marketing or profiling purposes.

winbad collects your personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or completing any form on the platform.
• Automated technologies: Technical and usage data collected automatically when you access the winbad website, including data gathered via cookies, web beacons, server logs, and similar tracking technologies. See Section 7 for full details on cookies.
• Third-party payment processors: When you transact via bKash, Nagad, Rocket, Upay, or bank transfer, the relevant payment provider may share transactional confirmation data with winbad to reconcile your account balance.
• Game providers: Providers such as Evolution Gaming, Ezugi, Pragmatic Play, and NetEnt may share session and outcome data with winbad for the purpose of game result verification, dispute resolution, and responsible gaming monitoring.
• Identity verification services: Where winbad uses third-party KYC or anti-fraud services to verify the information you have provided, those services may return verification outcomes and risk scores to winbad.
• Publicly available sources: winbad may cross-reference your information against publicly available sanctions lists, politically exposed person (PEP) databases, and adverse media sources as part of its anti-money laundering (AML) compliance obligations.

winbad processes your personal data for the following specific purposes:

• Account management: Creating, maintaining, and administering your player account, including processing deposits, withdrawals, and bonus credits.
• Identity and age verification: Confirming that you are at least 18 years of age and that the identity details you have provided are accurate and genuine, in accordance with KYC obligations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, collusion, bonus abuse, money laundering, and other prohibited activities.
• Customer support: Responding to your queries, complaints, and disputes, and maintaining records of support interactions for quality assurance purposes.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and, where appropriate, offering or enforcing responsible gaming tools such as deposit limits and self-exclusion.
• Legal and regulatory compliance: Fulfilling winbad's obligations under applicable anti-money laundering, counter-terrorist financing, and data protection laws and regulations.
• Platform improvement: Analysing aggregated usage data to improve the functionality, performance, and user experience of the winbad platform.
• Marketing communications: Sending you personalised promotional offers, bonus notifications, and event announcements — but only where you have given explicit consent to receive such communications.

winbad relies on the following legal bases for processing your personal data, depending on the specific purpose involved:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you have agreed to, including operating your account, processing transactions, and resolving disputes.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including KYC/AML identity verification, record-keeping obligations, and co-operation with lawful requests from competent authorities.
• Legitimate interests: Processing carried out for winbad's legitimate business interests, provided those interests are not overridden by your fundamental rights. This includes fraud prevention, platform security, and business analytics based on aggregated data.
• Consent: Processing for which you have given specific, informed, and freely given consent — primarily for direct marketing communications and for the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

winbad does not sell your personal data. We may share your information with the following categories of recipients only where necessary and under appropriate safeguards:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive only the transaction data required to process your deposit or withdrawal. These providers operate under their own privacy policies and are governed by their respective regulatory frameworks.
• Game providers: Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe, and other licensed game studios receive session identifiers and wager data as technically necessary to operate their games within the winbad environment.
• KYC and fraud prevention services: Third-party identity verification and AML screening providers receive the personal data necessary to complete verification and risk assessments on behalf of winbad. All such providers are bound by strict data processing agreements.
• IT and infrastructure providers: Cloud hosting and content delivery providers who process data on winbad's behalf solely for the purpose of maintaining the technical operation of the platform. These providers may not use your data for any purpose of their own.
• Legal and regulatory authorities: winbad may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other competent authorities where required or permitted to do so by applicable law, or where necessary to defend against legal claims.
• Business transfers: In the event of a merger, acquisition, or sale of winbad's business assets, your personal data may be transferred to the acquiring entity, subject to the same data protection obligations described in this Policy.

Any third-party service provider acting as a data processor on winbad's behalf is required to enter into a data processing agreement with winbad that contractually restricts them to processing your data only as instructed by winbad and in accordance with applicable data protection standards.

winbad uses cookies and similar tracking technologies on its website for the purposes described below. A cookie is a small text file placed on your device by your web browser when you visit a website. Cookies allow the platform to recognise your device on subsequent visits and to retain certain preferences and session information.

winbad uses the following categories of cookies:

• Strictly necessary cookies: These are essential to the operation of the winbad platform. They enable core functions such as user authentication, session management, and fraud detection. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: These cookies remember preferences you have set, such as your language or display settings, to provide a more personalised experience across sessions.
• Analytics cookies: These cookies collect aggregated, anonymised data about how players interact with the winbad website — including pages visited, session lengths, and navigation paths. This data is used to improve the platform's design and performance. Analytics cookies are only placed with your consent.
• Marketing cookies: These cookies track your online activity across sessions to enable winbad to deliver personalised promotional communications relevant to your interests. Marketing cookies are only placed with your explicit consent.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling functional or analytics cookies may affect your experience on the winbad platform. Disabling strictly necessary cookies will impair core platform functionality.

winbad implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the winbad platform.
• Irreversible cryptographic hashing of all stored passwords using industry-standard algorithms. winbad staff cannot view your password in plain text.
• Role-based access controls ensuring that only authorised personnel with a documented business need can access personal data in winbad's systems.
• Regular security assessments, penetration testing, and vulnerability scanning of platform infrastructure.
• Anomaly detection systems that identify and flag unusual account activity, including suspicious login attempts, atypical transaction patterns, and potential account takeover behaviour.
• Secure data centres with physical access controls, fire suppression, and redundant power systems.

Notwithstanding these measures, no method of electronic data transmission or storage can guarantee absolute security. In the event of a data security incident that poses a risk to your rights and freedoms, winbad will notify affected players without undue delay and will take prompt remedial action to contain the incident and prevent recurrence.

winbad retains your personal data for the period necessary to fulfil the purposes described in this Policy, subject to any longer retention periods required by law. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account's existence on the winbad platform.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of each transaction, in accordance with applicable financial record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification, or from the date of account closure, whichever is later.
• Support communications: Retained for three (3) years following the resolution of the relevant enquiry or complaint.
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent, to demonstrate compliance with consent obligations.
• Closed account data: Following account closure, winbad retains the minimum personal data necessary to fulfil its legal obligations and to defend against any future legal claims. Non-essential data is securely deleted or anonymised within ninety (90) days of account closure.

When personal data is no longer required, winbad will either securely delete it or render it permanently anonymous so that it can no longer be associated with any individual.

Depending on your jurisdiction and the legal basis on which winbad processes your data, you may hold the following rights in relation to your personal information:

• Right of access: You may request a copy of all personal data winbad holds about you. winbad will provide this within 30 days of a valid request, free of charge for the first request in any 12-month period.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data winbad holds about you. You may also update many of your personal details directly from within your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other lawful basis for processing applies. This right is subject to winbad's legal obligations to retain certain records.
• Right to restrict processing: You may request that winbad restricts its processing of your personal data in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that winbad provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to winbad's processing of your data where that processing is based on legitimate interests, including objecting to direct marketing at any time with immediate effect.
• Right to withdraw consent: Where winbad processes your data based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request". winbad will acknowledge your request within five (5) Bangladesh Standard Time (BST, UTC+6) business days and will respond substantively within 30 calendar days.

winbad is strictly an adult gaming platform. The platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 18. Access to winbad by minors is expressly prohibited under our Terms & Conditions.

If winbad becomes aware that it has inadvertently collected personal data from a person under 18 years of age, it will take immediate steps to delete that data and permanently close the associated account. Any winnings accumulated within such an account will be forfeited.

If you believe that a minor has registered an account on winbad, please notify our support team immediately at [email protected]. winbad takes all such reports seriously and will investigate and act upon them promptly.

winbad operates as an offshore gaming platform and may process or store your personal data on servers located outside of Bangladesh. In such cases, winbad takes appropriate steps to ensure that any international transfer of your data is subject to adequate safeguards, which may include:

• Data processing agreements with receiving parties that incorporate internationally recognised standard contractual clauses or equivalent data transfer mechanisms.
• Transferring data only to jurisdictions or service providers that offer an adequate level of data protection as assessed by winbad.
• Implementing additional technical safeguards, such as encryption in transit and at rest, when transferring data to jurisdictions where the legal framework alone may not provide an equivalent level of protection.

By registering an account and using the winbad platform, you acknowledge and consent to the potential transfer of your personal data to countries outside of Bangladesh for the purposes described in this Policy, subject to the safeguards outlined above.

winbad may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, seasonal promotions, and special events — including BPL and IPL cricket betting offers, Eid and Pohela Boishakh promotions, and general platform news. winbad will only send you marketing communications where you have explicitly opted in to receive them during the registration process or through your account settings.

You may unsubscribe from marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email sent by winbad.
• Updating your communication preferences in the notifications section of your account settings.
• Contacting our support team at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications has no effect on your ability to use the winbad platform or on any existing bonus claims. You will continue to receive essential service communications — such as account security alerts, transaction confirmations, and KYC requests — regardless of your marketing preferences, as these are necessary for the operation of your account.

winbad reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When we make material changes to this Policy, we will notify registered players via email and/or by displaying a prominent notice on the winbad platform prior to the changes taking effect.

The effective date at the top of this Policy will be updated to reflect the date on which the revised version comes into force. Your continued use of the winbad platform after the revised Policy becomes effective constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the platform and may request the closure of your account.

We encourage you to review this Privacy Policy periodically to stay informed about how winbad protects your personal information. The current version of this Policy will always be accessible at https://winbad.vip/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way winbad handles your personal data, please contact our Data Protection team using the details below. All correspondence must be conducted in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Live Chat: Available 24/7 directly from the winbad platform after logging in to your account.
• Response Time: winbad acknowledges all privacy-related enquiries within five (5) BST business days and provides a full response within 30 calendar days.

winbad takes all privacy concerns seriously. If you are not satisfied with the response you receive from our support team, you may escalate your concern through the dispute resolution process outlined in our Terms & Conditions.