Privacy Policy

01 Information We Collect

win365 collects personal data that is necessary to operate a safe, compliant, and high-quality online casino and sports betting platform for players in Bangladesh. We collect information in the following ways:

Information You Provide Directly

When you register an account, make a deposit, contact support, or participate in a promotion on win365, you may provide us with:

• Identity data: Full legal name, date of birth, national identity card number or passport number.
• Contact data: Email address, mobile phone number, residential address (including city, district, and postcode within Bangladesh).
• Financial data: Mobile financial service account details (bKash, Nagad, Rocket, Upay), bank account or card details used for deposits and withdrawals, and transaction history on your win365 account.
• Verification documents: Copies of government-issued photo identification, proof of address documents, and proof of payment method ownership submitted during KYC verification.
• Communications: The content of messages you send to win365 support via email or live chat, including any attachments or screenshots you provide.

Information Collected Automatically

When you visit and interact with the win365 platform, we automatically collect certain technical and behavioural data, including:

• Device and browser data: IP address, device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution.
• Usage data: Pages visited, games played, bets placed, session duration, click patterns, search queries entered on the platform, and referral source (the page or link that directed you to win365).
• Location data: Approximate geolocation derived from your IP address to determine country of access and support responsible gaming obligations.
• Cookie data: Information stored via cookies and similar tracking technologies as described in the Cookies section of this policy.

02 How We Use Your Data

win365 uses the personal data we collect for clearly defined purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which we process your personal data are set out below.

Marketing Communications

win365 will send you promotional communications about bonuses, new games, and special offers only where you have provided your explicit consent to receive such communications during or after registration. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting our support team at support@win365.my. Withdrawing consent for marketing does not affect the lawfulness of any processing carried out before withdrawal.

03 Legal Basis for Processing

win365 processes your personal data on one or more of the following legal grounds, depending on the specific purpose of processing:

• Contract performance: Processing is necessary to enter into and perform our contract with you — specifically, to operate your win365 account, process transactions, and deliver the gaming services you have requested.
• Legal obligation: Processing is required for win365 to comply with applicable legal requirements, including know-your-customer (KYC) obligations, anti-money laundering checks, and age verification duties.
• Legitimate interests: Processing is necessary for purposes of win365's legitimate interests, including fraud prevention, platform security, product improvement, and responsible gaming monitoring — provided those interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and the placement of non-essential cookies, win365 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting any other processing.

Where win365 relies on legitimate interests as the legal basis for processing, we have carried out a balancing assessment to confirm that our interests do not disproportionately override your rights and interests as a data subject.

04 Data Sharing & Disclosure

win365 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary to fulfil the purposes described in this Privacy Policy:

Service Providers and Technology Partners

We engage trusted third-party service providers to support the operation of the win365 platform, including payment processors (such as bKash, Nagad, and Rocket infrastructure partners), identity verification service providers, cloud hosting and infrastructure providers, customer support software vendors, and game content suppliers (such as Pragmatic Play, Evolution Gaming, and Spribe). These providers act as data processors on our behalf and are contractually bound to process your data only in accordance with our instructions and this Privacy Policy.

Legal and Regulatory Disclosure

win365 may disclose your personal data to government authorities, law enforcement agencies, courts, or regulators where required to do so by applicable law, court order, or regulatory direction. We may also disclose data where we believe in good faith that disclosure is necessary to prevent fraud, protect the safety of players or third parties, or enforce our Terms & Conditions.

Business Transfers

In the event that win365 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the relevant successor entity. We will notify affected players of any such transfer and the applicable privacy terms within a reasonable timeframe.

05 Cookies & Tracking Technologies

win365 uses cookies and similar tracking technologies (such as web beacons and local storage) on our platform. Cookies are small text files placed on your device that enable the platform to recognise your browser, remember your preferences, and gather usage information.

Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred game view, and display options. Disabling these cookies may affect your experience on the platform.
• Analytics cookies: Used to collect anonymised data about how players interact with the win365 platform — which pages are visited most, how long sessions last, and where players navigate from. This data helps us improve platform performance and content. Analytics cookies require your consent.
• Marketing cookies: Used to deliver promotional content that is relevant to your interests based on your browsing behaviour on win365. Marketing cookies require your explicit consent and can be withdrawn at any time.

Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block all cookies or selectively block certain types. Please note that blocking strictly necessary cookies will prevent the win365 platform from functioning correctly. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation. Disabling analytics or marketing cookies will not prevent you from accessing any core features of win365.

06 Data Security

The security of your personal data is a fundamental priority for win365. We implement a layered security framework covering technical, organisational, and procedural controls to protect your data against unauthorised access, disclosure, alteration, or destruction.

Technical Safeguards

• 256-bit SSL/TLS encryption for all data transmitted between your device and win365 servers.
• Encrypted data storage for sensitive fields including passwords, payment details, and identity document data.
• Firewall and intrusion detection systems that monitor network traffic for anomalous activity in real time.
• Regular vulnerability assessments and penetration testing by independent security specialists to identify and remediate weaknesses before they can be exploited.

Organisational Safeguards

• Role-based access controls limiting staff access to personal data strictly to what is necessary for their job function.
• Mandatory privacy and security awareness training for all personnel who handle player data.
• A documented data breach response plan with defined escalation procedures and notification timelines.

While win365 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — please use a strong, unique password and never share your login credentials with anyone. If you suspect any unauthorised activity on your account, contact support immediately at support@win365.my.

07 Your Rights as a Data Subject

As a player on the win365 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at support@win365.my with the subject line "Data Subject Request". We will acknowledge your request within 48 hours and respond fully within 30 calendar days.

• Right of access: You may request a copy of all personal data that win365 holds about you, along with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that certain data must be retained for legal compliance reasons (see Data Retention below) and cannot be deleted on request.
• Right to restriction of processing: You may request that we restrict processing of your data in certain circumstances, such as while a correction request is under review.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of win365's legitimate interests. win365 will cease such processing unless compelling legitimate grounds exist that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

08 Data Retention

win365 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention principles apply:

• Active account data: Personal data associated with an active win365 account is retained for the lifetime of the account and for a period of five (5) years following account closure, to meet our legal and regulatory obligations relating to financial records, anti-money laundering compliance, and dispute resolution.
• KYC and identity documents: Copies of identity and verification documents are retained for a minimum of five (5) years from the date of submission, in line with applicable anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction records — including deposits, withdrawals, and betting activity — are retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Customer support correspondence is retained for three (3) years from the date of the last interaction, to enable follow-up and dispute resolution.
• Marketing consent records: Records of marketing consent and consent withdrawal are retained for five (5) years to demonstrate compliance with consent obligations.
• Analytics data: Anonymised platform analytics data (which cannot be linked back to an individual player) may be retained indefinitely for product improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically immediately feasible (e.g., data held in encrypted backup archives), the data is isolated from further active processing until it can be securely purged.

Changes to This Privacy Policy

win365 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email to the address on file at least 14 days before the changes take effect. The date of the most recent revision is displayed at the top of this page. Continued use of the win365 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way win365 handles your personal data, please contact our support team. We are committed to addressing all privacy enquiries in a timely and transparent manner.

Email: support@win365.my