Privacy Policy – How winner Protects Your Data

The organization operating winner-app.com takes your privacy seriously. This Privacy Policy explains what personal data winner collects, why it is collected, and what steps are taken to keep it secure.

This policy applies to winner's website, mobile app, and all related services. By using winner's services, you consent to the collection and use of your data as described in this policy. If you are under 18, you are prohibited from using winner's services, and winner does not retain any data from such accounts.

Winner operates in accordance with international data protection standards. Data belonging to members in Bangladesh is managed in compliance with local law and international best practices.

Winner only collects the data it needs to deliver its services. This falls into two categories — what you provide directly, and what is generated automatically as you use the platform.

Information You Provide Directly:

• Identity Information: Full name, date of birth, National ID number (collected during KYC)
• Contact Information: Mobile number, email address
• Payment Information: Mobile banking numbers (bKash, Nagad, Rocket), bank account numbers — never your PIN or password
• KYC Documents: Front and back photo of NID, selfie — for verification purposes only

Automatically Collected Data:

• Device & Network Information: IP address, device type, operating system, browser version
• Usage Data: Login timestamps, list of games played, betting history, wallet transaction logs
• Cookies & Tracking: Session cookies, preference cookies — details below

Winner uses your data for specific, limited purposes only. Data collected for one purpose is never used for another.

Winner never uses your data for advertising or to promote third-party products. Your betting history and financial information never leave winner.

Winner does not generally share your data with anyone. However, in a limited number of specific situations, sharing with certain third parties may be necessary — and the reason is always clearly defined.

• Payment Processor: Information required to process transactions via bKash, Nagad, or bank is shared with the relevant payment provider — solely for that specific transaction.
• KYC Verification Services: winner may use licensed KYC service providers to verify your identity. These providers are also bound by strict privacy policies.
• Legal Obligation: If a court or regulatory authority requests information through a lawful order, winner is legally required to comply. In such cases, winner will make every effort to notify the member as early as possible.
• Security Investigation: Where money laundering or fraud is suspected, relevant information may be shared with the appropriate authorities.

Winner has dedicated measures to protect financial data, as it is the most sensitive type of information.

When you deposit via bKash or Nagad, the payment is processed directly through that mobile banking service's secure gateway. Your bKash PIN or mobile banking password never reaches winner's servers — winner only receives confirmation of whether the transaction was successful.

• winner does not store payment PINs or passwords
• Credit or debit card numbers are never stored in winner's system
• Mobile banking numbers are used solely for transaction verification
• Every transaction log is stored in encrypted form
• Payment data is regularly verified through third-party security audits

The winner website and app use cookies. Cookies are small text files stored in your browser that help improve your experience on the site.

• Essential Cookies: These cookies are essential for keeping your login session active and maintaining security. They cannot be disabled.
• Functional Cookies: Used to remember your preferred language and display settings. These are optional.
• Analytics Cookies: Data on which pages are viewed most and which features are popular is used to improve winner's services. This data is not personally identifiable.
• Advertising Cookies: winner does not use third-party advertising tracking cookies.

You can control or delete most cookies through your browser settings. However, disabling essential cookies may prevent you from logging in to winner.

Winner believes you should have full control over your own data. The rights listed below are yours, and winner respects them.

To exercise these rights, reach out via winner's live chat or support@winner-app.com Reach us by email. winner typically responds within 7 business days.

Winner does not store data indefinitely. A defined retention period is set for each type of data.

• Account Information: For as long as your account remains active. After closure, up to 5 years in accordance with legal retention requirements.
• Transaction Records: Retained for a minimum of 5 years in compliance with financial regulatory requirements.
• KYC Documents: Retained for up to 5 years after account closure, then permanently deleted.
• Log Files & Session Data: Automatically deleted after 90 days as a general rule.
• Support Conversations: Retained for 12 months for quality control and reference purposes.
• Marketing Preferences: Withdrawing consent takes effect immediately.

Certain data may not be deletable before a set period due to legal requirements — winner will always be upfront about this.

To keep your data secure, winner employs both technical and organizational security measures, built to the highest industry standards.

• SSL/TLS Encryption: All communications on the winner website and app are secured with 256-bit SSL encryption. You will see a padlock icon in your browser.
• Database Encryption: Sensitive data stored on our servers is also encrypted, so even if server access is gained, the data remains unreadable.
• Two-Factor Authentication: OTP verification is required at account login to prevent unauthorized access.
• Regular Security Audits: Third-party security specialists regularly audit and test winner's systems.
• Access Control: Within winner's staff, only those who need it can access specific data.
• Real-Time Threat Detection: Unusual login attempts or transactions are automatically detected and the member is alerted.

That said, no system on the internet is 100% secure. winner strives to provide the highest level of protection, but you can also help keep your account safe — use a strong password and never share it with anyone.

Winner may update this Privacy Policy when necessary. If changes are made, winner will notify members via SMS to their registered mobile number or by email. At least 7 days' notice will be given before any significant changes take effect.

Continued use of winner after any changes are made will be considered acceptance of the updated policy. If you do not agree with the new policy, please stop using winner's services, withdraw your balance, and request account closure.

This page always displays the latest version of the Privacy Policy. Check the "Last Updated" date at the top of the page to see when it was most recently revised.