Privacy Policy — windbet

Section 1

Data We Collect

windbet collects personal data through several distinct channels in the course of operating its platform and delivering services to players in Bangladesh. The categories of personal data we collect are described below.

Data provided directly by you: When you register a windbet account, you provide your full name, date of birth, email address, mobile phone number, and residential address. When you complete KYC verification, you upload a copy of your government-issued National ID Card or passport. When you make a deposit or request a withdrawal, you provide payment method details including mobile wallet numbers (bKash, Nagad, Rocket, Upay) or card information. When you contact our support team, you provide the content of your enquiry and any supporting documentation you choose to attach.

Data collected automatically: When you access the windbet platform, our servers automatically record your IP address, the date and time of access, the pages and games you interact with, your device type and operating system, browser version, and referring URL. This data is collected via server logs, cookies, and analytics tools operated by windbet.

Data from third-party payment providers: When you transact via bKash, Nagad, Rocket, Upay, or a card payment gateway, windbet receives a transaction confirmation record from the payment provider containing the transaction amount, reference number, and masked payment identifier. windbet does not store full card numbers or mobile banking PINs.

Data from identity verification partners: Where windbet uses a third-party KYC or identity verification service to validate your submitted documents, that partner may return a verification status, a confidence score, and extracted identity fields to windbet. windbet uses this data solely for the purpose of confirming your eligibility to hold a real-money account.

Section 2

How We Use Your Data

windbet processes your personal data only for lawful, specified, and legitimate purposes. The primary purposes for which your data is used are set out below, together with the legal basis for each processing activity.

windbet will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent. Where we rely on legitimate interest as a legal basis, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms as a data subject.

With respect to marketing communications, windbet will send you promotional emails, SMS messages, or in-platform notifications regarding bonuses, seasonal promotions (including BPL and IPL cricket offers), and new game releases only if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw your marketing consent at any time by contacting support@windbet.

Section 3

Data Sharing & Disclosure

windbet does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared with third parties only in the specific circumstances described below.

• Payment processing partners: Your transaction data is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card processing gateways (Visa, Mastercard) solely for the purpose of executing your requested deposits and withdrawals. These partners act as independent data controllers for their own financial services and are subject to their own privacy obligations.
• Identity verification providers: Your KYC documents and identity data may be shared with a trusted third-party identity verification service for the purpose of validating your age and identity. Such providers are engaged under data processing agreements that restrict their use of your data to the verification purpose only.
• Game content providers: When you play a game on windbet supplied by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), technical session data — including your player session token and bet/result records — is shared with that provider to render the game and record results. These providers do not receive your identity or contact data.
• Analytics and platform infrastructure providers: windbet uses cloud hosting, analytics, and security services provided by trusted technology partners. These providers process data on behalf of windbet under data processing agreements and are not permitted to use the data for their own independent purposes.
• Legal and regulatory authorities: windbet will disclose personal data to competent law enforcement agencies, courts, regulators, or government bodies where required to do so by applicable law, court order, or in response to a lawful request. We will notify affected players of such disclosures where we are legally permitted to do so.

Section 4

Cookies & Tracking

windbet uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform, authenticate your session, remember your preferences, and gather analytics data that helps us improve the user experience for players across Bangladesh.

The categories of cookies used on windbet are described below:

• Strictly necessary cookies: These cookies are essential for the platform to function and cannot be disabled. They include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. Without these cookies, core features such as login, game play, and transaction processing cannot operate.
• Functional cookies: These cookies remember your preferences — such as your preferred language, saved game settings, and notification preferences — so that you do not have to re-enter them on each visit. They are set only for the duration of your session or for a defined period specified in the cookie itself.
• Analytics cookies: windbet uses first-party analytics tools to measure page views, session duration, feature usage, and error rates. These cookies collect data in aggregated, anonymised form and are used solely to improve platform performance and content relevance.
• Security and fraud-detection cookies: These cookies help windbet identify unusual or suspicious access patterns — such as multiple account logins from a single device — that may indicate fraud, bonus abuse, or account takeover activity. They are a component of our responsible and secure platform operation.

windbet does not use third-party advertising or behavioural tracking cookies. We do not permit advertising networks to place tracking cookies on the windbet platform for the purpose of building advertising profiles based on your browsing activity.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or using real-money features on the windbet platform.

Section 5

Data Retention

windbet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account relationship with windbet, and for a minimum of five (5) years following account closure, in order to comply with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC documents: Retained for the duration of your account relationship and for five (5) years following account closure or the date of the most recent transaction, whichever is later.
• Support correspondence: Retained for three (3) years from the date of the most recent communication in a support thread, unless the correspondence relates to a formal dispute, in which case it is retained until the dispute is fully resolved plus an additional two (2) years.
• Behavioural and analytics data: Aggregated, anonymised analytics data may be retained indefinitely. Individually identifiable behavioural data is retained for a maximum of twenty-four (24) months from the date of collection.
• Marketing preferences and consent records: Retained for the duration of your account relationship and for two (2) years following account closure or consent withdrawal, to demonstrate compliance with consent-based marketing obligations.

Upon the expiry of the applicable retention period, windbet will securely delete or permanently anonymise your personal data so that it can no longer be associated with you as an individual. You may request early deletion of certain categories of data subject to the conditions described in the "Your Rights" section below.

Section 6

Data Security Measures

windbet takes the security of your personal data seriously and implements a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, and unlawful processing.

Our technical security measures include:

• TLS/SSL encryption: All data transmitted between your device and the windbet platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. The presence of a valid SSL certificate is indicated by the padlock symbol in your browser's address bar.
• Encrypted data storage: Sensitive fields — including passwords, payment identifiers, and identity document references — are stored using strong cryptographic hashing and encryption algorithms. Plain-text passwords are never stored by windbet.
• Access control and authentication: Internal access to player data is restricted to authorised windbet personnel on a strict need-to-know basis. All internal access is logged and subject to periodic access review. Multi-factor authentication is required for all administrative access to production systems.
• Automated fraud and intrusion detection: windbet's platform is monitored around the clock by automated systems that detect and alert on anomalous access patterns, brute-force login attempts, unusual transaction volumes, and other indicators of compromise.
• Regular security assessments: windbet conducts periodic vulnerability assessments and platform security reviews to identify and remediate potential weaknesses before they can be exploited.

Despite these measures, no method of electronic transmission or data storage is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, windbet will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

Section 7

Your Rights as a Data Subject

As a player whose personal data is processed by windbet, you hold a number of rights with respect to that data. windbet is committed to respecting and facilitating the exercise of these rights in a timely and transparent manner.

• Right of access: You have the right to request a copy of the personal data that windbet holds about you, together with information about how it is being used. windbet will respond to verified access requests within thirty (30) calendar days of receipt.
• Right to rectification: If any personal data that windbet holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. Please note that corrections to identity data (name, date of birth, national ID) may require the submission of supporting documentation.
• Right to erasure: You may request that windbet delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent, or where the data has been unlawfully processed. Please note that this right is subject to windbet's legal obligations to retain certain data for the periods described in Section 5.
• Right to restrict processing: You may request that windbet restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where windbet processes your data on the basis of your consent or for the performance of a contract, and where processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing carried out on the basis of legitimate interest, on grounds relating to your particular situation.
• Right to withdraw consent: Where windbet processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

To exercise any of the rights described above, please submit a written request to support@windbet with the subject line "Data Rights Request". windbet may need to verify your identity before processing your request, in order to protect against unauthorised access to another player's data. windbet will not charge a fee for the exercise of your rights unless a request is manifestly unfounded, repetitive, or excessive.

Section 8

Privacy Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which windbet handles your personal data, please contact our privacy team in writing at:

support@windbet — Subject line: "Privacy Enquiry"

windbet will acknowledge receipt of all privacy enquiries within two (2) business days and will aim to provide a substantive response within fourteen (14) calendar days. Complex requests or those requiring extensive data retrieval may take up to thirty (30) calendar days; windbet will notify you if an extended timeframe applies to your request.

If you are not satisfied with windbet's response to your privacy complaint, you retain the right to escalate the matter to the competent data protection authority or seek redress through the appropriate legal channels available in Bangladesh.

windbet reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The Effective Date displayed at the top of this page will be updated whenever a material change is made. We encourage you to review this policy periodically. Continued use of the windbet platform after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.