winbd 17
Privacy Policy

Section 1

Data Controller & Scope

This Privacy Policy applies to all personal data processed by winbd 17 ("the Platform", "we", "us", or "our") in connection with the operation of the winbd 17 website at winbd-17.com and all associated services, including casino gaming, sports betting, live casino, Lucky Bingo, and payment processing. winbd 17 acts as the data controller for all personal information collected directly from players and site visitors.

This policy applies to all individuals who access the winbd 17 platform, whether as registered players, prospective players browsing the site without an account, or individuals who contact our support team. It covers data collected via the winbd 17 website, any mobile web interface, and any communication channel operated by winbd 17, including live chat and email correspondence.

winbd 17 is designed and marketed primarily for English-speaking adults in Bangladesh. Our data practices are aligned with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) and comparable standards, as a benchmark for responsible data handling — even where specific national data protection legislation in Bangladesh does not require it. We believe every player deserves to know how their information is handled, regardless of jurisdiction.

Section 2

Personal Data We Collect

winbd 17 collects personal data through several channels: directly from you when you register an account, make a deposit, or contact support; automatically through your use of the platform via cookies and server logs; and from third-party verification and payment service providers as part of our KYC and fraud prevention processes.

2.1 Registration and Account Data

When you create a winbd 17 account, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth — required for mandatory age verification (18+ only).
• Email address — used for account notifications, security alerts, and promotional communications (where opted in).
• Bangladeshi mobile number — required for account verification and two-factor authentication.
• Residential address in Bangladesh — collected at KYC verification stage.
• Username and encrypted password — credentials for accessing your account.
• Preferred language and currency — English and Bangladeshi Taka (BDT) by default.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, which is mandatory before your first withdrawal is processed, we collect:

• A copy of your National Identity Card (NID), passport, or other government-issued photo identification.
• A proof of address document such as a utility bill, bank statement, or official government correspondence dated within the last three months.
• Confirmation of your registered payment method (e.g., the bKash, Nagad, or Rocket account registered in your name).
• In cases of elevated risk assessment, we may request a selfie with your ID document for facial verification purposes.

2.3 Financial Transaction Data

When you make deposits or withdrawals, we collect transaction records including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or Bangladeshi bank transfer), transaction amounts in BDT, timestamps, and transaction reference numbers. We do not store full card numbers on our own servers — card data is tokenised by our PCI-compliant payment processing partners.

2.4 Gaming Activity Data

We record all gaming and betting activity associated with your account, including games played, bets placed, wager amounts, winnings, bonus usage, session durations, and game preferences. This data is used for account management, responsible gaming monitoring, dispute resolution, and improving the overall player experience on winbd 17.

2.5 Technical and Device Data

We automatically collect certain technical information when you access the winbd 17 platform, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session duration. This data is used for platform security, fraud detection, and analytical purposes.

2.6 Communications Data

When you contact our support team via live chat or email, we retain records of those communications, including the content of your messages, timestamps, and the resolution outcome. These records are kept for quality assurance, dispute resolution, and regulatory compliance purposes.

Section 3

How We Use Your Data

winbd 17 processes your personal data only for specific, legitimate purposes. The table below sets out the primary purposes for which we use your data and the legal basis for each processing activity.

Section 4

Data Sharing & Third Parties

winbd 17 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

4.1 Payment Processing Partners

To facilitate deposits and withdrawals, we share relevant transaction data with our payment processing partners, which include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and card processing networks (Visa, Mastercard). These partners receive only the data required to authorise and process the specific transaction and are bound by their own data protection obligations.

4.2 Identity Verification Service Providers

We work with third-party KYC and identity verification service providers to validate the documents you submit as part of the account verification process. These providers process your identity document data solely for the purpose of verification and are contractually prohibited from using it for any other purpose. All KYC service providers engaged by winbd 17 operate under data processing agreements consistent with international data protection standards.

4.3 Game Software Providers

The casino games, sports betting markets, and live casino tables available on winbd 17 are powered by third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers may receive anonymised or pseudonymised game session data for the purpose of game operation, fairness certification, and technical support. They do not receive your name, contact details, or financial information unless required for a specific dispute resolution process.

4.4 Analytics and Security Providers

winbd 17 uses third-party analytics and cybersecurity tools to monitor platform performance, detect fraud, and protect against malicious activity. These tools may process technical data such as IP addresses, device identifiers, and session behaviour. All analytics and security providers are engaged under data processing agreements and are restricted from using platform data for their own independent purposes.

4.5 Legal and Regulatory Disclosure

winbd 17 may disclose your personal data to law enforcement authorities, regulatory bodies, or other government agencies in Bangladesh or internationally if we are legally required to do so, or if we believe in good faith that such disclosure is necessary to prevent fraud, protect the safety of our players, or comply with a valid legal process. We will notify you of any such disclosure where permitted by law.

Section 5

Cookies & Tracking Technologies

winbd 17 uses cookies and similar tracking technologies to operate essential platform functions, improve your experience, and analyse how our services are used. A cookie is a small text file placed on your device by your browser when you visit the winbd 17 website. Cookies do not contain executable code and cannot access other data stored on your device.

5.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the winbd 17 platform to function. They enable core features such as session management, account login persistence, shopping cart functionality for deposits, and security token validation. These cookies cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how visitors use the winbd 17 site — which pages are visited most frequently, how long sessions last, and where errors occur. This data helps us improve platform performance and user experience. These cookies do not identify you personally.
• Functionality Cookies: These cookies remember your preferences, such as your chosen game lobby view, notification settings, and language preference, so that your experience is personalised on subsequent visits. Disabling these cookies may result in certain preferences not being saved between sessions.
• Targeting and Preference Cookies: Where you have opted in to receiving personalised promotions, these cookies help us understand your gaming preferences so that we can present relevant bonus offers and game recommendations. These cookies are only set if you have provided explicit consent.

5.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that blocking strictly necessary cookies will impair your ability to use the winbd 17 platform. For guidance on managing cookies in your specific browser, refer to the help documentation provided by your browser developer.

Adjusting your browser's cookie settings applies to all websites you visit, not just winbd 17. If you wish to opt out of analytics cookies specifically, you may do so through your winbd 17 account preferences panel under the Privacy Settings section.

Section 6

Data Retention Periods

winbd 17 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. The table below sets out our standard retention periods by data category.

Once the applicable retention period has expired, winbd 17 will securely delete or anonymise your personal data so that it can no longer be linked to your identity. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical and research purposes without further notice to you.

Section 7

Your Privacy Rights

winbd 17 respects your rights over your own personal data. Subject to applicable legal exceptions and regulatory obligations, you hold the following rights with respect to the personal data we hold about you:

• Right of Access: You may request a copy of all personal data winbd 17 holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your account settings panel.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing based on legitimate interests. This right is subject to overriding legal retention obligations.
• Right to Restriction of Processing: You may request that winbd 17 restrict the processing of your data — for example, while you contest the accuracy of the data or while a complaint is being investigated.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we transfer your personal data to you or to another data controller in a machine-readable format.
• Right to Object: You may object to the processing of your personal data where that processing is based on our legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Rights Related to Automated Decision-Making: Where winbd 17 uses automated systems — such as fraud detection algorithms — to make decisions that significantly affect you, you have the right to request human review of that decision and to challenge it.

7.1 How to Exercise Your Rights

To exercise any of the rights listed above, please contact our data protection team at [email protected] with the subject line "Privacy Rights Request". Please include your full name, registered email address, and a clear description of the right you wish to exercise. We may ask you to verify your identity before processing your request. We will respond to all verified requests within 30 days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you in advance.

Section 8

Data Security Measures

winbd 17 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework is reviewed and updated regularly to address emerging threats and changes in best practice.

8.1 Technical Safeguards

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and the winbd 17 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. Look for the padlock icon and "https" in your browser address bar when using our platform.
• Password Hashing: Account passwords are never stored in plain text. All passwords are stored as salted cryptographic hashes using a modern, industry-approved hashing algorithm.
• Payment Data Tokenisation: Payment card details are tokenised by our PCI-DSS compliant payment partners. winbd 17 never stores full card numbers, CVV codes, or sensitive authentication data on its own servers.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. 2FA adds an additional verification step using your registered Bangladeshi mobile number, making unauthorised account access significantly more difficult.
• Intrusion Detection and DDoS Protection: Our platform is protected by enterprise-grade intrusion detection systems and distributed denial-of-service (DDoS) mitigation services to ensure continuous availability and security.

8.2 Organisational Safeguards

• Access to player personal data within the winbd 17 organisation is restricted on a strict need-to-know basis. Only staff members whose role requires access to specific categories of player data are granted that access.
• All staff with access to personal data receive data protection training at onboarding and on an annual basis.
• Third-party service providers who process player data on our behalf are subject to due diligence checks and are required to demonstrate compliance with applicable data security standards before engagement.
• winbd 17 maintains an incident response plan to handle data breaches promptly. In the event of a breach that poses a risk to your rights, we will notify affected players within 72 hours of becoming aware of the incident.

8.3 Player Responsibilities

While winbd 17 takes all reasonable steps to protect your data, the security of your account also depends on your own practices. You are responsible for keeping your login credentials confidential, logging out of your account after each session on shared devices, using a strong and unique password for your winbd 17 account, and promptly reporting any suspected unauthorised access to our support team. winbd 17 cannot be held liable for breaches of security resulting from your failure to follow these basic precautions.