winbdt Privacy Policy

This Privacy Policy ("Policy") describes how winbdt ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "player") who access or use the winbdt online gaming and sports betting platform, accessible at winbdt.vu (the "Platform").

winbdt is committed to handling your personal data with transparency, integrity, and care. We recognise that players across Bangladesh — including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — place significant trust in us when they share their personal information, and we take that responsibility seriously.

By registering an account, making a deposit, or otherwise using the winbdt Platform, you acknowledge that you have read, understood, and agreed to this Policy. If you do not agree with any part of this Policy, you must discontinue your use of the Platform and may close your account by contacting our support team.

winbdt operates as the data controller in respect of the personal data it collects from players using the Platform. As data controller, winbdt determines the purposes for which personal data is collected and the means by which it is processed.

For any questions, concerns, or formal requests relating to the processing of your personal data, you may contact the winbdt data team at [email protected]. Please include "Privacy Request" in the subject line of your email to ensure your query is directed to the appropriate team without delay.

winbdt operates as an internationally licensed online gaming platform serving the Bangladesh market. All data processing activities are conducted in accordance with the applicable data protection principles of the jurisdiction in which winbdt is licensed and operated.

winbdt collects the following categories of personal data from players. The specific data points collected may vary depending on the features of the Platform you use and the stage of your account lifecycle:

winbdt collects personal data through the following channels and mechanisms:

• Direct collection: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and behavioural data collected automatically as you interact with the Platform, including via cookies, web beacons, server logs, and similar tracking technologies. See Section 11 (Cookies) for further detail.
• Third-party payment providers: Transaction confirmation data shared by bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a deposit or withdrawal. winbdt does not receive or store your full payment credentials — only confirmation data and identifiers necessary for transaction reconciliation.
• Identity verification providers: Where winbdt uses a third-party KYC or identity verification service to authenticate your identity documents, that provider may share verification results and risk scores with winbdt.
• Fraud prevention and analytics services: winbdt may receive risk-scoring or fraud-indicator data from specialist third-party services that analyse device fingerprints, IP reputation, and behavioural patterns to help protect the Platform and its players.
• Publicly available sources: Where necessary for compliance or fraud prevention, winbdt may cross-reference information against publicly available data sources, including government registers and sanctions lists.

winbdt uses the personal data it collects for the following purposes. Each purpose is linked to a lawful basis for processing, which is described in Section 6:

• Account creation and management: To register your player account, authenticate your identity, maintain your account settings, and communicate account-related information to you.
• Age and identity verification (KYC): To verify that you are 18 years of age or older and to confirm your identity in accordance with our regulatory obligations. winbdt operates a strict 18+ policy and uses KYC data to enforce this.
• Payment processing: To process deposits and withdrawals via your selected payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to reconcile transactions with our payment providers.
• Platform operation and personalisation: To deliver, maintain, and improve the winbdt Platform, and to personalise your experience based on your gaming history and preferences where you have consented to such personalisation.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other illegal or prohibited conduct on the Platform. Technical data including IP addresses and device fingerprints is used for this purpose.
• Responsible gaming compliance: To monitor gaming patterns for indicators of problem gambling, to implement player-requested responsible gaming tools (such as deposit limits, session limits, and self-exclusion), and to comply with applicable responsible gaming obligations.
• Legal and regulatory compliance: To comply with applicable laws, regulations, licensing conditions, and lawful requests from competent authorities, including anti-money laundering (AML) obligations.
• Customer support: To respond to your support queries, resolve disputes, and maintain records of communications for quality assurance purposes.
• Marketing and promotions: To send you promotional offers, bonus notifications, and platform updates where you have provided explicit consent to receive marketing communications. You may withdraw consent at any time.
• Analytics and improvement: To analyse Platform usage patterns, identify technical issues, and improve the features, performance, and security of the winbdt Platform.

winbdt processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing that is necessary to perform our contract with you — specifically, the Terms and Conditions governing your use of the winbdt Platform. This includes account registration, KYC verification, payment processing, and game operation.
• Legitimate interests: Processing that serves the legitimate interests of winbdt (or a third party), provided those interests are not overridden by your fundamental rights and freedoms. Legitimate interest processing at winbdt includes fraud prevention, security monitoring, analytics, and responsible gaming monitoring.
• Legal obligation: Processing that is required to comply with a legal or regulatory obligation applicable to winbdt, including anti-money laundering obligations, record-keeping requirements, and responses to lawful authority requests.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent. Consent-based processing at winbdt is limited primarily to marketing communications and certain non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

winbdt does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to process your deposit or withdrawal transactions. These providers operate under their own privacy policies and are independently responsible for their data processing activities.
• Identity verification providers: Third-party KYC and identity verification services that winbdt engages to authenticate player identities receive the identity documents and data you submit during the verification process. These providers act as data processors under winbdt's instruction and are bound by strict confidentiality obligations.
• Fraud prevention and security services: Specialist fraud detection providers receive technical data (such as IP addresses, device identifiers, and behavioural signals) to assist in protecting the Platform and its players from fraudulent activity.
• Game providers: Technology and game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session and wager data necessary to operate their games within the Platform. These providers do not receive your identity or financial data unless required for their own regulatory compliance purposes.
• Regulatory and law enforcement authorities: winbdt will disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by law, by court order, or in connection with the investigation of fraud, money laundering, or other criminal activity.
• Professional advisers: Legal counsel, auditors, and other professional advisers who require access to your data in the course of providing services to winbdt are bound by strict professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of winbdt's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to this Policy that results from it.

winbdt operates as an internationally licensed platform, and some of our service providers — including cloud hosting infrastructure, KYC verification providers, and fraud detection services — may process your personal data in jurisdictions outside of Bangladesh.

Where personal data is transferred internationally, winbdt takes appropriate steps to ensure that such transfers are conducted with adequate safeguards in place, consistent with the applicable data protection principles of our licensing jurisdiction. These safeguards may include:

• Transferring data only to countries or organisations that provide an adequate level of data protection as recognised by the relevant regulatory framework.
• Entering into contractual data processing agreements with recipient organisations that impose obligations equivalent to those winbdt itself is subject to under this Policy.
• Applying technical and organisational security measures — including encryption in transit and at rest — to all international data transfers.

If you have questions about the specific safeguards applied to international transfers of your personal data, please contact us at [email protected].

winbdt retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The following general retention principles apply:

• Active accounts: Personal data associated with an active winbdt player account is retained for the duration of the account relationship plus a further period as required by our legal and regulatory obligations following account closure.
• KYC and identity documents: Identity verification documents are retained for a minimum period following account closure to comply with anti-money laundering record-keeping obligations. The exact retention period is determined by the regulatory requirements applicable to winbdt's licensing jurisdiction.
• Transaction records: Financial transaction records — including deposit and withdrawal history — are retained for the applicable statutory period following the date of the transaction, as required by financial record-keeping regulations.
• Gaming activity records: Records of game sessions, bet history, and bonus activity are retained for a reasonable period following account closure to support dispute resolution and regulatory reporting obligations.
• Communications records: Customer support communications and live chat transcripts are retained for a period sufficient to resolve any ongoing disputes and to comply with quality assurance and regulatory obligations.
• Marketing consent records: Records of your marketing consent and any subsequent withdrawal of consent are retained for as long as necessary to demonstrate compliance with applicable marketing regulations, even after the underlying consent has been withdrawn.

Upon expiry of the applicable retention period, personal data is either securely deleted from winbdt's systems or, where deletion is not technically feasible, permanently anonymised so that it can no longer be associated with any identifiable individual.

winbdt implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• TLS/SSL encryption: All data transmitted between your device and the winbdt Platform is encrypted using Transport Layer Security (TLS), ensuring that your personal and financial data cannot be intercepted in transit.
• Encryption at rest: Sensitive personal data stored on winbdt's servers — including identity documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within winbdt's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific role, and all access is logged and monitored.
• Two-factor authentication: Internal winbdt systems that hold personal data are protected by multi-factor authentication requirements for all staff access.
• Regular security assessments: winbdt conducts regular internal security reviews and vulnerability assessments to identify and remediate potential weaknesses in its data security infrastructure.
• Incident response: winbdt maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, you will be notified without undue delay in accordance with applicable data protection obligations.

While winbdt takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect unauthorised access to your winbdt account, please contact support immediately at [email protected] or via the 24/7 live chat widget.

winbdt uses cookies and similar tracking technologies (including web beacons and session identifiers) to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They include session management cookies that keep you logged in during a gaming session and security cookies that help protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, and responsible gaming tool configurations — to provide a more personalised experience on return visits.
• Performance and analytics cookies: These cookies collect aggregated, anonymised information about how players interact with the Platform, including which pages are visited most frequently and where errors occur. This data is used to improve Platform performance and user experience. winbdt uses privacy-respecting analytics tools that do not share raw individual-level data with third parties.
• Marketing cookies: Where you have consented to marketing communications, winbdt may use cookies to track your interactions with promotional content and to deliver targeted offers relevant to your gaming preferences. These cookies are only active where you have provided explicit consent.

You can manage cookie preferences through your browser settings at any time. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of the winbdt Platform. Disabling strictly necessary cookies may prevent you from logging in or accessing real-money gaming features.

As a winbdt player, you hold the following rights in respect of the personal data we process about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of access: You have the right to request a copy of the personal data winbdt holds about you, together with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. For account-level data such as your registered name or address, you may also contact support directly.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to overriding legal obligations, such as regulatory data retention requirements, which may prevent immediate deletion.
• Right to restriction: You have the right to request that winbdt restricts the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to the withdrawal.

winbdt is strictly an adult platform. We do not knowingly collect, process, or store personal data from individuals under the age of 18. The Platform is not directed at minors, and all registration flows include age verification steps designed to prevent underage access.

If winbdt becomes aware that personal data has been collected from a player who was under 18 at the time of collection, that data will be deleted promptly, the account will be permanently closed, and any deposits made by the minor will be returned where practicable. All winnings associated with the underage account will be permanently forfeited.

Parents and guardians in Bangladesh are strongly encouraged to use parental control and internet filtering software to prevent minors from accessing online gaming platforms. If you believe a minor in your household has registered a winbdt account, please contact us immediately at [email protected] so that we can take prompt action.

winbdt may send you promotional communications — including bonus offers, game announcements, seasonal promotions tied to events such as the BPL, IPL, T20 World Cup, Eid, or Pohela Boishakh — where you have provided explicit consent to receive marketing messages from us.

Marketing communications may be delivered via email or SMS to the contact details registered on your winbdt account. The frequency and content of marketing messages will vary based on your account activity and the promotional calendar.

You may opt out of marketing communications at any time by:

• Contacting winbdt support via live chat or at [email protected] and requesting removal from our marketing list.
• Following the unsubscribe instructions included in any marketing email you receive from winbdt.

Please note that opting out of marketing communications does not affect the delivery of transactional and account-related communications, such as deposit confirmations, withdrawal notifications, KYC request emails, and security alerts. These communications are necessary for the operation of your account and cannot be disabled while your account is active.

The winbdt Platform may contain references to third-party game providers, payment services, and other external services. winbdt is not responsible for the privacy practices of any third-party service, and this Policy does not apply to any third-party website or service that you access independently of the winbdt Platform.

When you interact with a third-party game provider's interface within the Platform — for example, when playing a live casino game powered by Evolution Gaming or a slot title powered by Pragmatic Play — that provider may independently collect technical data about your gaming session in accordance with their own privacy policy. winbdt recommends that you review the privacy policies of any third-party providers whose services you use.

winbdt's payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — are independent data controllers in respect of the payment transaction data they handle. Their privacy practices are governed by their own published privacy policies.

winbdt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services offered on the Platform.

Where a proposed amendment is material — meaning it significantly affects the manner in which we process your personal data or your rights in respect of that data — winbdt will provide reasonable advance notice of the change. This notice will be provided via a prominent notice on the Platform and, where practicable, by email to your registered email address.

Minor or administrative amendments — such as corrections to formatting, clarifications that do not change the substance of our data practices, or updates to contact details — may be made without prior notice. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent amendment.

Your continued use of the winbdt Platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of the changes. If you object to any amendment, you should discontinue use of the Platform and may close your account by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way winbdt processes your personal data, please contact our support team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, via the on-site chat widget
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

For formal data rights requests or privacy complaints, please email [email protected] with the subject line "Privacy Request" or "Formal Privacy Complaint" and include your registered username, a description of your request or concern, and any supporting information. winbdt will acknowledge receipt of formal privacy requests promptly and will respond substantively within a reasonable timeframe.