win888 Privacy Policy

win888 operates as an online casino and sports betting platform serving players primarily located in Bangladesh. In the course of providing our services — which include cricket betting, live casino, slots, Callbreak, and Super Keno — win888 necessarily collects and processes personal data relating to the individuals who use the platform .

win888 is committed to protecting the privacy and security of all personal data it processes. This Policy sets out our data handling practices in clear, plain English so that you can make informed decisions about sharing your personal information with us. We collect only the data we genuinely need in order to provide and improve our services, meet our legal obligations, and keep our platform safe and secure for all users.

This Policy should be read alongside the win888 Terms & Conditions, which govern your use of the platform as a whole. In the event of any conflict between this Policy and the Terms & Conditions on matters relating to personal data, this Policy shall take precedence.

win888 collects personal data from you in three principal ways: information you provide directly, information generated automatically by your use of the platform, and information obtained from third-party sources such as payment providers and identity verification services. The categories of personal data we collect include, but are not limited to, the following:

win888 uses the personal data it collects for the following specific and legitimate purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected without first obtaining your consent.

• Account Registration & Management: To create, maintain, and administer your win888 account, including verifying your identity, processing password resets, and managing account-level settings.
• Service Delivery: To enable you to place sports bets, play casino games, access Callbreak and Super Keno, make deposits in BDT, and receive withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels.
• Identity & Age Verification: To confirm that you are at least 18 years of age and to comply with anti-money laundering (AML) and know-your-customer (KYC) obligations. win888 enforces a strict 18+ age policy for all users.
• Payment Processing: To facilitate deposits and withdrawals in Bangladeshi Taka (BDT), process refunds, and maintain accurate financial records in accordance with our obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, multiple account registrations, bonus abuse, money laundering, and other prohibited conduct on the platform.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to enforce deposit limits and self-exclusion decisions, and to provide personalised responsible gaming interventions where appropriate.
• Customer Support: To respond to your queries, complaints, and requests, and to maintain a record of support interactions for quality and training purposes.
• Marketing & Promotions: Where you have given explicit consent, to send you promotional communications about win888 offers, bonuses, seasonal promotions (such as Eid, Pohela Boishakh, or IPL/BPL season offers), and new product launches. You may withdraw marketing consent at any time by contacting support.
• Platform Improvement: To analyse aggregate usage data, identify technical issues, optimise platform performance, and improve the overall user experience for players across Bangladesh.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from competent authorities.

win888 processes your personal data only where there is a lawful basis for doing so. Depending on the specific processing activity, win888 relies on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between win888 and you — i.e., to operate your account and deliver the gaming and betting services you have requested.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including AML regulations, KYC requirements, and age verification duties.
• Legitimate Interests: Processing is necessary for win888's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and improving our services, provided those interests are not overridden by your privacy rights.
• Consent: For certain non-essential processing activities — in particular, direct marketing communications — win888 relies on your freely given, specific, and informed consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

win888 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard processing partners receive the financial data necessary to process your deposits and withdrawals. These providers are contractually bound to process your data only for the purposes we specify.
• Identity Verification Services: Third-party KYC and age verification providers receive identity documents and data to conduct verification checks on our behalf. All such providers operate under strict data processing agreements with win888.
• Game Content Providers: Studios including Evolution Gaming, Ezugi, Pragmatic Play, Microgaming, NetEnt, Play'n GO, and Spribe may receive limited technical and session data necessary to deliver and audit their game content on the win888 platform. These providers do not receive your full profile or financial data.
• Fraud Prevention & AML Partners: win888 may share data with specialist fraud prevention and AML screening services to identify and prevent financial crime, as required by our obligations.
• Legal & Regulatory Authorities: win888 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required by law, a valid court order, or a lawful regulatory instruction. win888 will notify affected users of such disclosures where legally permissible.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of win888's business, your personal data may be transferred to the acquiring entity as part of that transaction. win888 will notify affected users in advance of any such transfer that materially changes how their data is processed.

win888 uses cookies and similar tracking technologies on the platform to provide core functionality, improve performance, and — where you have consented — to personalise your experience. The categories of cookies used by win888 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the win888 platform to function. They enable secure login sessions, maintain your account state during a gaming session, and remember your language preference. These cookies cannot be disabled without significantly disrupting the service.
• Functional Cookies: These cookies remember choices you have made — such as responsible gaming settings, preferred deposit method, or session notification preferences — so that you do not have to reconfigure them on each visit.
• Analytics Cookies: win888 uses analytics tools to collect aggregated, anonymised data about how users navigate and interact with the platform. This helps us identify performance bottlenecks, improve page layouts, and prioritise product improvements. Individual users cannot be identified from analytics data.
• Security Cookies: Certain cookies are used to detect and prevent fraud, bot activity, and suspicious login behaviour. These cookies form part of win888's security infrastructure and are retained for the duration necessary to fulfil their security function.

You may manage cookie preferences through your browser settings. Please be aware that disabling strictly necessary cookies may prevent you from logging in or using core features of the win888 platform. win888 does not use third-party advertising cookies or behavioural profiling cookies for the purpose of targeting advertisements on external websites.

win888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, win888 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

win888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the win888 platform is encrypted using industry-standard SSL/TLS protocols. This applies to login events, deposit and withdrawal flows, personal data submissions, and customer support communications.
• Data Encryption at Rest: Sensitive personal data stored within win888's systems — including identity documents and financial records — is encrypted at rest using strong encryption algorithms.
• Access Controls: Access to personal data within win888's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific job functions, and all access is logged and auditable.
• OTP & Two-Factor Authentication: win888 employs OTP verification for new device logins, password resets, and significant account activity, providing an additional layer of protection against unauthorised account access.
• Regular Security Reviews: win888's technical infrastructure undergoes regular security assessments to identify and address vulnerabilities before they can be exploited.
• Incident Response: win888 maintains a documented data breach response procedure. In the event of a confirmed personal data breach that is likely to result in harm to affected users, win888 will notify affected users promptly and take all reasonable steps to contain and remediate the breach.

As a user of the win888 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact win888 customer support at [email protected]. win888 will respond to all valid rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data win888 holds about you, together with information about how that data is used and shared.
• Right to Rectification: If any personal data win888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request that win888 delete your personal data. Please note that this right is subject to legal retention obligations — win888 may be required to retain certain data for AML, KYC, or financial record-keeping purposes even after an erasure request.
• Right to Restrict Processing: You may request that win888 suspend the processing of your personal data in certain circumstances, for example while a dispute about its accuracy is resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract with you and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to win888 processing your personal data on the basis of legitimate interests, including direct marketing. win888 will cease processing for direct marketing purposes immediately upon receipt of an objection.
• Right to Withdraw Consent: Where win888 relies on your consent as the legal basis for any processing activity, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

The win888 platform is strictly for adults aged 18 and above. win888 does not knowingly collect, process, or store personal data from individuals under the age of 18. Age verification is conducted at the point of account registration, and win888 reserves the right to request supporting identity documentation at any stage to confirm a user's age.

If win888 becomes aware that personal data has been collected from a person under the age of 18, we will take immediate steps to close the relevant account, delete the associated personal data, and — where applicable — return any funds in accordance with our responsible gaming obligations. If you believe that a minor has registered an account on win888, please contact us immediately at [email protected].

The win888 platform may contain references to third-party services, game studios, and payment providers. Where such references include links, those links direct to services operated independently of win888. win888 is not responsible for the privacy practices of third-party websites or services, and this Policy does not apply to data collected by any third party.

win888 encourages you to review the privacy policies of any third-party service you access in connection with your use of win888, particularly the privacy policies of payment providers such as bKash, Nagad, and Rocket, whose own privacy practices govern their handling of your mobile wallet and transaction data.

win888 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, legal obligations, or platform functionality. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we may notify registered users via the contact details associated with their account.

Your continued use of the win888 platform following the publication of any updated version of this Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you should stop using the platform and may request account closure by contacting customer support.

If you have any questions, concerns, or requests relating to this Privacy Policy or to win888's handling of your personal data, please contact our support team using the details below. All privacy-related queries are handled in English and are treated with strict confidentiality.

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, including all Bangladeshi public holidays
• Response Time: Within 24 hours for standard privacy queries; within 72 hours for formal data rights requests
• Language: English

win888 is committed to resolving all privacy concerns promptly and transparently. If you submit a formal data rights request (such as a right of access or right to erasure), win888 will acknowledge receipt within 5 business days and provide a full response within 30 calendar days of the date the request is received.