Privacy Policy — bangawin

1. Information We Collect

When you interact with bangawin — whether by registering an account, making a deposit, placing a bet, playing a casino game, or contacting customer support — we collect personal information in the following categories:

1.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile number, and residential address in Bangladesh (district, city or upazila).
• Identity verification (KYC) documents: Scanned copies or photographs of your National Identity Card (NID), passport, or driving licence, along with proof of address documentation.
• Payment information: Your bKash, Nagad, Rocket, or Upay mobile wallet number; bank account details for DBBL, City Bank, or BRAC Bank transfers. bangawin does not store full card numbers or full mobile banking PINs — payment authentication is handled directly by the payment provider.
• Support communications: Messages, emails, and attachments you send to support@bangawin, including descriptions of account issues, disputes, or responsible gaming requests.
• Promotional preferences: Whether you have opted in or out of receiving emails or SMS notifications about BPL cricket promotions, Eid bonus offers, or other seasonal campaigns.

1.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, screen resolution, device identifiers, and mobile network information.
• Usage data: Pages visited on bangawin, games played, bet amounts and outcomes, session start and end times (Bangladesh Standard Time, UTC+6), clickstream data, and feature interactions.
• Cookie and tracking data: Information collected via cookies and similar technologies as described in Section 5 of this Policy.
• Geolocation data: Approximate location derived from your IP address, used to confirm Bangladesh-based access and enforce geographic eligibility checks.

1.3 Information from Third Parties

We may receive additional information about you from trusted third-party sources, including:

• Payment processors (bKash, Nagad, Rocket) confirming successful transaction completion or flagging suspected fraudulent activity.
• Identity verification service providers used to authenticate KYC documents.
• Fraud detection and anti-money-laundering (AML) screening services that check names against sanctions and watchlists.
• Game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may share session-level data (bet amounts, round IDs, RTP data) for dispute resolution and fair play audit purposes.

2. How We Use Your Data

bangawin uses the personal data we collect for the following specific purposes:

Purpose	Data Used
Account creation and management	Registration data, device data
Identity verification (KYC/AML)	KYC documents, name, date of birth, address
Processing deposits and withdrawals	Payment information, transaction records
Delivering and operating gaming services	Usage data, bet history, session data
Customer support and dispute resolution	Support communications, account activity logs
Fraud prevention and security monitoring	IP address, device data, payment data, usage data
Responsible gaming monitoring	Deposit patterns, session duration, loss frequency
Personalised promotions (where consented)	Email, game preferences, promotional opt-in status
Legal and regulatory compliance	All categories as required by applicable law
Platform analytics and improvement	Anonymised usage data, cookie data

We do not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a fresh legal basis for doing so.

3. Legal Basis for Processing

Every instance of personal data processing at bangawin is grounded in one of the following legal bases:

• Contractual necessity: Processing that is required to deliver the services you have contracted with us for — account operation, payment processing, game delivery, and customer support. Without this processing, bangawin cannot provide its services to you.
• Legal obligation: Processing we are required to carry out to comply with applicable laws, including KYC identity verification, anti-money-laundering checks, and retention of transaction records.
• Legitimate interests: Processing carried out for purposes that serve bangawin's legitimate business interests — including fraud prevention, platform security, abuse detection, and aggregate platform analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent — for example, to send you promotional emails about BPL cricket season offers or Eid bonus campaigns — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support@bangawin. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

4. Data Sharing and Disclosure

bangawin shares personal data only in the circumstances described below. We do not sell your data. We do not share it with third parties for their own independent marketing purposes.

4.1 Service Providers and Data Processors

We engage carefully selected third-party companies to process data on our behalf, strictly for the purposes described in this Policy. These processors include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC services used to authenticate identity documents submitted during account verification.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios — who receive session-level gameplay data necessary to operate the games you play.
• IT infrastructure providers: Cloud hosting and server providers used to store and process platform data securely.
• Customer support platforms: Helpdesk and live chat software providers used to manage support tickets and communications.
• Fraud and AML screening services: Services used to cross-check account holder details against sanctions lists and fraud databases.

All data processors are bound by data processing agreements that require them to handle your data only on bangawin's documented instructions, in accordance with applicable data protection standards, and to maintain appropriate security measures.

4.2 Legal and Regulatory Disclosure

We may disclose your personal data to government bodies, law enforcement agencies, or courts of competent jurisdiction where we are required to do so by law, regulation, legal process, or lawful authority. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and will notify you of such disclosure where we are legally permitted to do so.

4.3 Business Transfers

In the event that bangawin undergoes a merger, acquisition, restructuring, or sale of all or a substantial part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via the email address registered on your account before your personal data is transferred and becomes subject to a materially different privacy policy.

5. Cookies and Tracking Technologies

bangawin uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) on its platform. Cookies are small text files placed on your device when you visit bangawin. They serve the following functions:

5.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in to your bangawin account during a session, and security cookies that help detect and prevent fraudulent activity. These cannot be disabled.
• Functional cookies: Store your preferences — such as your preferred language, last-used payment method, and responsible gaming deposit limit settings — so you do not need to re-enter them on every visit.
• Performance and analytics cookies: Collect anonymised or pseudonymised data about how players use the bangawin platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data is used solely to improve the platform's performance and user experience.
• Marketing and personalisation cookies (consent-based): Used only where you have provided consent, to deliver promotional content relevant to your game preferences — for example, tailored BPL cricket promotions during the tournament season. You may withdraw consent at any time via your account settings.

5.2 Managing Cookies

You can control the use of non-essential cookies at any time through your account preferences on bangawin. You may also configure your browser to block or delete cookies; however, please note that disabling strictly necessary cookies will prevent you from logging in to your bangawin account and using core platform features.

6. Data Security and Storage

bangawin implements a comprehensive, layered approach to data security. The specific measures in place include:

• Encryption in transit: All data transmitted between your browser or device and the bangawin platform is encrypted using TLS 1.2 or higher. Our SSL certificate is kept current and renewed automatically.
• Encryption at rest: Sensitive personal data — including KYC document scans, payment details, and account credentials — is encrypted at rest using AES-256 encryption within our data storage infrastructure.
• Access controls: Access to personal data is strictly limited to bangawin employees and contractors who have a documented business need. All access is logged, audited, and subject to role-based permission controls.
• Password hashing: Player account passwords are stored as salted cryptographic hashes using industry-standard algorithms. No bangawin employee can view your password in plain text.
• Vulnerability management: We conduct regular security assessments and apply security patches to our platform infrastructure promptly.
• Incident response: In the event of a confirmed personal data breach that is likely to result in a risk to your rights and freedoms, bangawin will notify affected players promptly at the email address registered on their account, describing the nature of the breach, the data affected, and the steps being taken to address it.

Despite these measures, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your bangawin account and to enable any two-factor authentication options available in your account settings.

7. Your Rights as a Data Subject

As a player registered on bangawin, you have the following rights in relation to your personal data. To exercise any of these rights, contact our data team at support@bangawin with "Data Rights Request" in the subject line. We will acknowledge your request within 3 business days and action it within 30 days.

8. Data Retention Policy

bangawin retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

• Active account data: Retained for the full duration of your account's active status on bangawin plus a minimum of five (5) years following account closure. This retention period reflects our legal obligations under anti-money-laundering regulations and is necessary to resolve any post-closure disputes.
• Transaction records: Deposit and withdrawal records, including payment method details and amounts in BDT, are retained for a minimum of seven (7) years from the date of the transaction.
• KYC identity documents: Retained for the duration of your account plus five (5) years after closure, or longer if required by a specific regulatory instruction or investigation.
• Support communications: Retained for three (3) years from the date of the last interaction, unless a dispute is ongoing, in which case they are retained until final resolution.
• Marketing preference data: Retained until you withdraw consent or close your account. Opted-out preferences are retained for a shorter period purely to honour your opt-out instruction.
• Cookie and analytics data: Anonymised analytics data may be retained indefinitely for platform improvement. Non-essential cookies expire within 13 months of placement.

9. Third-Party Services and Links

The bangawin platform integrates content from third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — whose game engines operate within iframes or embedded environments on our platform. These studios may process limited technical and gameplay data for the purpose of operating their games and preventing fraud within their networks. Their data practices are governed by their own privacy policies, which we encourage you to review independently if you have concerns about how a specific studio handles data.

bangawin does not control third-party data practices and is not responsible for the privacy practices of external studios, payment processors acting in their own capacity, or any website you reach by following a link from bangawin (note: outbound links to third-party websites are not present on this platform). When a third party processes your data as a data processor on our behalf, they do so under contract and under our instructions only.

10. Updates to This Privacy Policy

bangawin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will:

• Post a revised version of this Policy at bangawin/privacy-policy with an updated effective date.
• Send a notification to the email address registered on your bangawin account summarising the key changes.
• Display a notice on the bangawin platform for a reasonable period following the update.

Your continued use of bangawin after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with the changes, you may close your account by contacting support@bangawin and withdrawing your remaining balance before closure.

We recommend bookmarking this page and checking it periodically, particularly before each new cricket season or major promotional period such as BPL, T20 World Cup, or Eid, when platform features and data practices may evolve.