Winnings' Privacy Policy — Your data, our responsibility

Thank you for trusting Winnings. This Privacy Policy ("Policy") provides a complete overview of how your personal information is collected, stored, used, and protected while you use the Winnings platform.

Winnings believes your privacy is a fundamental right. We manage our data practices in line with international data protection standards — particularly GDPR principles. This policy has been written in plain, accessible language with Bangladeshi users in mind, so every point is completely clear to you.

By using our services through the Winnings website, mobile app, or any other channel, you are considered to have accepted this Privacy Policy. Please read it carefully, and reach out to us if you have any questions.

Winnings only collects information that is necessary. No unnecessary data is requested. The types of data collected are detailed below:

Identity Information

• Full name, date of birth, nationality
• National ID (NID) or passport number (for KYC verification)
• Address & Postal Code

Contact Information

• Email Address
• Mobile Number

Financial Information

• Mobile banking number (bKash, Nagad, Rocket)
• Transaction History & Amounts
• Balance & Withdrawal Records

Technical Information

• IP address and device type
• Browser version and operating system
• Login time and session data
• Data from Cookies & Tracking Pixels

Behavioral Data

• Betting History & Preferences
• Time spent on the platform and navigation patterns
• Promotion and bonus usage records

Winnings collects information in several ways. You have the right to know about each of them:

Winnings uses the information it collects only for specific, legitimate purposes. Each purpose is clearly outlined below:

Service Delivery & Operations

• Creating and managing your account
• Processing bets, deposits, and withdrawals
• Managing bonuses and promotions
• Providing Customer Support

Security & Compliance

• Identity Verification & Fraud Prevention
• Compliance with Anti-Money Laundering (AML) Policy
• Preventing access by minors
• Meeting Legal & Regulatory Obligations

Experience Enhancement

• Creating a Personalized Betting Experience
• Analyzing & Improving Platform Performance
• Offering Promotions Tailored to Your Preferences

Contact

• Sending Important Account Notifications
• Transaction confirmation and receipt issuance
• Sending Promotional Messages with Your Consent

Winnings does not sell your personal data. However, in certain limited circumstances, information may be shared with specific third parties:

Service Provider Partners

Only the necessary data is shared with selected partners for payment processing, identity verification, and technical support. These partners are required to comply with our privacy standards.

Legal Authorities

We may disclose information in response to a valid legal request from authorities in Bangladesh or any other country, or pursuant to a court order. In such cases, we will make every legally permissible effort to notify you.

Business Transfer

In the event of an acquisition or merger involving Winnings, user data may be transferred. In such cases, the new owner will be required to comply with this privacy policy.

Winnings follows industry-leading security standards to keep your data safe. Our security framework includes:

• TLS/SSL Encryption: All data transmissions are secured with 256-bit SSL encryption.
• Database Encryption: All stored data is kept in encrypted format.
• Firewall & DDoS Protection: Advanced firewall systems and intrusion prevention measures are active.
• Two-Factor Authentication (2FA): Option to enable 2FA for an extra layer of account security.
• Regular Security Audits: Regular penetration testing conducted by independent third-party experts.
• Restricted Access: Only authorized personnel have access to specific data.
• 24/7 Monitoring: Round-the-clock cybersecurity monitoring.

Keep in mind — no one can guarantee 100% security on the internet. That's why you should keep your account password strong and never share it with anyone.

Winnings uses cookies and similar tracking technologies to enhance your platform experience. Cookies are small text files stored in your browser.

You can control or delete cookies at any time through your browser settings. However, disabling essential cookies may limit certain features of the platform.

Winnings does not retain your data beyond the required period. Retention durations by data type are listed below:

• Account Information: For the duration of the active account and for 5 more years after closure (as required by law).
• Financial Transaction Records: 7 years (as required by Bangladesh financial regulatory requirements).
• KYC Documents: 5 years after account closure.
• Support Contact: 3 years.
• Technical Logs: 1 year.
• Marketing Data: Deleted immediately upon withdrawal of consent.

As a Winnings user, you have several important rights regarding your data. They are detailed below:

Winnings is a platform exclusively for adults. We do not knowingly collect any information from individuals under the age of 18.

Date of birth is verified at registration, and age is confirmed through the KYC process. If an underage account is identified, it is immediately suspended and all associated data is deleted.

If you believe a minor is using our platform, please notify us immediately at support@winnings.im.

Winnings may update this Privacy Policy from time to time, in response to changes in our services, new legal obligations, or user feedback.

For significant changes, we'll notify you via email or an in-platform notification. For minor updates, the "Last Updated" date at the top of the page will be revised.

Continued use of the platform after any changes takes effect constitutes your acceptance of the updated policy. We recommend checking this page regularly.

If you have any questions, comments, or requests regarding this privacy policy, please contact us:

When submitting a data rights request, please include "Data Privacy Request" in the subject line of your email. We will do our best to respond within 48 hours.