win011 Privacy Policy

This Privacy Policy ("Policy") describes how win011 ("we", "us", "our", "win011"), operating the website at https://win011.app, collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who visit, register on, or interact with the win011 platform.

By creating an account on win011 or by continuing to use the platform after the effective date of this Policy, you acknowledge that you have read and understood its contents and consent to the collection and processing of your personal data as described herein.

win011 is committed to maintaining the confidentiality, integrity, and availability of all personal information entrusted to us by players across Bangladesh. This Policy applies to all data collected through the win011 website, mobile browser interface, customer support channels, and any associated promotional communications.

🛡️ Our Data Protection Principles

win011 processes personal data in accordance with the following core principles, which guide every decision we make about how player information is handled.

1. Personal Data We Collect

win011 collects personal data through several touchpoints across the platform lifecycle. The categories of data we collect and the context in which each is gathered are set out below.

When you create a win011 account, we collect the following information to establish and maintain your account:

• Full legal name — used for identity verification and account correspondence.
• Date of birth — used to verify that you meet the minimum age requirement of 21 years.
• Mobile phone number — used for account authentication, two-factor verification, and transaction notifications.
• Email address — used for account communications, promotional offers (where opted in), and password reset.
• Residential address — used for KYC verification and fraud prevention purposes.
• Username and password (hashed) — used to authenticate access to your account.

To comply with anti-money laundering (AML) obligations and to protect the integrity of the platform, win011 may request the following documentary evidence before processing your first withdrawal or at any stage where a compliance review is triggered:

• National Identity Card (NID) — front and back
• Passport biodata page
• Driving licence
• Proof of address (utility bill, bank statement dated within 3 months)
• Selfie photograph for liveness verification
• Payment method ownership evidence (screenshot of bKash/Nagad/Rocket wallet registered in your name)

All KYC documents are stored in encrypted form and accessed only by authorised compliance personnel. Documents are retained for the period required by applicable law and then securely destroyed.

• Deposit and withdrawal amounts, dates, and timestamps
• Payment method identifiers (mobile wallet number, last four digits of card, bank account reference — never full card numbers or PIN/OTP codes)
• Transaction reference numbers issued by payment processors
• Running account balance history

• Sports bets placed, odds accepted, markets selected, and settlement outcomes
• Casino game sessions, stakes, results, and game round identifiers
• Bonus offer redemptions and wagering progress
• Session start and end times (Bangladesh Standard Time, UTC+6)

• IP address at the time of login and transaction
• Device type, operating system, and browser version
• Referring URL and on-site navigation path
• Cookie identifiers and session tokens (see Section 7 for full cookie details)
• Approximate geolocation derived from IP address (country and city level only — win011 does not use GPS-level location data)

When you contact win011 via email at [email protected], we retain a record of the correspondence — including the content of your messages, attachments, and any personal data you voluntarily include — for quality assurance, dispute resolution, and regulatory compliance purposes.

2. How We Use Your Data

win011 uses the personal data it collects for the following specific purposes. We will never use your data for a purpose not listed here without first notifying you and, where required, obtaining your consent.

Where win011 relies on legitimate interests as a legal basis for processing, we have carried out a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms. You may request a copy of any such assessment by contacting [email protected].

3. Data Sharing

win011 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may share your data with the following categories of recipient, strictly on a need-to-know basis and under binding contractual data protection obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum data necessary to execute and verify your payment transactions.
• Identity verification providers: Third-party KYC/AML service providers may receive copies of your identity documents and biometric data strictly for the purpose of completing verification checks. These providers are contractually prohibited from using your data for any other purpose.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and other studio partners may receive a session token and anonymised player identifier to facilitate game session management. Full personal details are not passed to game studios.
• IT and infrastructure partners: Cloud hosting, server management, and cybersecurity vendors may process data on our behalf under strict data processing agreements that prohibit independent use of your information.
• Legal and regulatory authorities: win011 will disclose personal data to law enforcement agencies, courts, regulatory bodies, or other competent authorities where required to do so by a lawful order or legal obligation, including for the prevention, detection, or prosecution of financial crime.
• Successor entities: In the event of a merger, acquisition, restructuring, or sale of win011 assets, player data may be transferred to the acquiring entity under equivalent data protection terms.

4. Data Retention

win011 retains personal data only for as long as it is necessary for the purpose for which it was collected, or for as long as we are required to retain it under applicable legal, regulatory, or contractual obligations.

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from win011 systems or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

5. Your Data Rights

win011 respects your rights in relation to your personal data. You may exercise any of the following rights at any time by contacting us at [email protected] from the email address registered on your win011 account. We will respond to all valid requests within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data win011 holds about you, together with information about how it is being processed. This is commonly referred to as a Subject Access Request (SAR).
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay.
• Right to erasure: In certain circumstances, you have the right to request that win011 delete your personal data. This right is subject to our legal obligations to retain certain records (see Section 4). We will inform you clearly if an erasure request cannot be fully honoured due to a conflicting legal retention requirement.
• Right to restrict processing: You may request that win011 restricts the processing of your personal data while a dispute about its accuracy or the legitimacy of its use is being resolved.
• Right to data portability: Where technically feasible, you may request that win011 provides a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to object: You have the right to object to processing of your personal data where that processing is based on win011's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., receipt of promotional emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to opt out of marketing: You may unsubscribe from promotional communications at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected] with the subject line "Unsubscribe".

6. Security Measures

win011 implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, disclosure, alteration, and destruction.

• Encryption in transit: All data transmitted between your browser or device and the win011 servers is encrypted using TLS 1.2 or higher. Our SSL certificate is renewed regularly and validated by a trusted certificate authority.
• Encryption at rest: Sensitive personal data fields (including identity document copies and payment identifiers) stored on win011 servers are encrypted using AES-256 encryption.
• Password security: User passwords are never stored in plaintext. All passwords are hashed using a strong, salted cryptographic algorithm before storage. win011 staff cannot view your password at any point.
• Two-factor authentication (2FA): SMS-based 2FA is available to all win011 account holders and is strongly recommended. Enabling 2FA significantly reduces the risk of unauthorised access even if your password is compromised.
• Access controls: Access to personal data within win011 is governed by role-based access controls (RBAC). Only personnel with a verified operational need are granted access to personal data, and all such access is logged and audited.
• Fraud monitoring: win011 operates automated real-time fraud detection systems that monitor login activity, transaction patterns, and betting behaviour for anomalies consistent with account compromise or identity fraud. Suspicious activity triggers an immediate security review.
• Vulnerability management: win011's technical infrastructure is subject to regular security assessments, including penetration testing and vulnerability scanning, carried out by qualified security professionals.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. In the unlikely event of a data breach that is likely to result in a high risk to your rights and freedoms, win011 will notify affected players promptly and take all reasonable remedial steps.

7. Cookies & Tracking

win011 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your logged-in session, and analyse how the site is used. A summary of the cookies win011 deploys is provided below.

You can manage your cookie preferences at any time through your browser settings. Disabling essential cookies will impair your ability to log in and use the platform. Disabling analytics or marketing cookies will not affect your ability to play games or place bets.

win011 does not use cookies to track your browsing activity on websites other than https://win011.app. We do not engage in cross-site behavioural tracking for advertising purposes.

8. Children's Data

win011 is strictly for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. All account registrations are subject to mandatory age verification.

If win011 discovers that personal data has been submitted by a person under the age of 21, that data will be immediately deleted, the associated account will be permanently closed, and any funds deposited will be handled in accordance with our responsible gaming procedures.

If you are a parent or guardian and believe that a minor has created a win011 account using your details or otherwise, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and act on all such reports as a matter of priority.

9. Changes to This Policy

win011 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we may notify registered players by email.

We encourage you to review this Policy periodically to stay informed about how win011 protects your personal data. Your continued use of the platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you have any questions about this Privacy Policy, or if you wish to raise a concern about how win011 has handled your personal data, please contact us at [email protected]. We will acknowledge your query within 48 hours and provide a full response within 30 calendar days.