Privacy Policy — wainbd Platform

This Privacy Policy ("Policy") describes how wainbd ("we", "us", "our") collects, uses, stores, discloses, and protects the personal information of players and visitors ("you", "your") who access the wainbd platform at wainbd.pro. This Policy is an integral part of the wainbd Terms and Conditions, and by registering an account or using any part of the platform you confirm that you have read and understood how we handle your data.

We are committed to handling all personal data responsibly, in accordance with internationally recognised data protection principles. We collect only the information we genuinely need, we use it only for the purposes stated in this Policy, and we apply appropriate technical and organisational security measures to protect it at every stage of processing.

If you have any questions about this Policy or about how your personal data is handled, please contact our support team directly at [email protected].

Registration Data. When you create a wainbd account we collect your full name, date of birth, email address, mobile phone number, and chosen username. This information is used to create and manage your account, verify your identity, and comply with our age-verification obligations. Players must be 21 years of age or older — date of birth is collected specifically to enforce this requirement.

Identity Verification Documents. In certain circumstances — particularly before processing a withdrawal above a specified threshold, or where unusual activity is detected — we may request a copy of a government-issued photo ID (such as a National Identity Card or passport) and a recent proof of address. These documents are used solely for identity verification and fraud prevention purposes and are stored securely with restricted access.

Financial Data. We record deposit and withdrawal transactions, the payment methods used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in BDT, timestamps, and transaction reference numbers. We do not store full card numbers or mobile banking PINs — payment data is tokenised and handled by PCI-compliant payment processors.

Gaming Activity Data. We maintain a record of your betting and gaming history, including games played, stakes placed, winnings and losses, session start and end times, and responsible gaming tool usage (deposit limits, time-outs, self-exclusion requests). This data is used to provide the service, resolve disputes, enforce responsible gaming policies, and detect fraudulent or collusive behaviour.

Device and Technical Data. When you access wainbd we automatically collect your IP address, device type, operating system, browser type and version, unique device identifiers, and session duration. This information helps us maintain platform security, detect suspicious login attempts, and optimise the user experience for the mobile devices most commonly used in Bangladesh.

Communications Data. If you contact our support team at [email protected] we retain the content of that communication and any attachments, together with the date and time of the exchange, for the purpose of resolving your query and for quality assurance. We do not use support communications for any marketing purpose.

Cookies and Similar Technologies. wainbd uses essential cookies to maintain your authenticated session and remember your platform preferences. We do not use third-party advertising cookies. You can manage cookie settings through your browser; however, disabling essential cookies may prevent certain platform features from functioning correctly.

wainbd processes personal data for the following lawful purposes:

• Account management: creating, maintaining, and securing your wainbd account; authenticating your identity at login; enabling password reset and account recovery.
• Service delivery: providing access to casino games, sports betting markets, and all other platform features; processing deposits and withdrawals through your chosen payment method; crediting winnings to your account balance.
• Age and identity verification: confirming that you meet the 21+ age requirement at registration and, where required, at the point of withdrawal.
• Fraud prevention and security: detecting, investigating, and preventing fraudulent transactions, collusion, bonus abuse, money laundering, and other unlawful activities on the platform.
• Responsible gaming: monitoring gaming behaviour for indicators of problem gambling; applying deposit limits, time-outs, and self-exclusion requests; proactively reaching out where our responsible gaming monitoring flags a concern.
• Customer support: responding to your queries, complaints, and disputes in a timely and accurate manner.
• Legal compliance: meeting our obligations under applicable anti-money-laundering, counter-terrorism financing, and consumer protection requirements, and cooperating with lawful requests from competent authorities.
• Platform improvement: analysing aggregated, anonymised usage data to improve platform performance, fix technical issues, and develop new features. Individual player data is not used for this purpose without anonymisation.
• Transactional communications: sending you deposit confirmations, withdrawal notifications, password-change alerts, and other service messages directly related to your account activity. You cannot opt out of transactional communications while your account is active, as they form part of the platform's security framework.

wainbd does not use your personal data for behavioural advertising, does not share it with advertising networks, and does not build advertising profiles based on your gaming activity.

wainbd shares personal data with third parties only in the limited circumstances described below. In every case, we require that the recipient processes your data solely for the specified purpose and maintains appropriate security measures.

Payment Processors. To complete deposit and withdrawal transactions we share the minimum necessary financial information with our payment processing partners, including bKash, Nagad, Rocket, Upay, and card network processors for Visa and Mastercard transactions. These processors are contractually bound to use your data only for payment processing and are subject to their own regulatory security obligations.

Game Technology Providers. Our casino game content is supplied by licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. A game session identifier and your account reference may be shared with the relevant provider to operate the game session, resolve disputes, and ensure fair play certification. These providers do not receive your full name, phone number, or payment details.

Identity Verification Services. Where enhanced identity checks are required, we may engage a regulated identity verification provider to validate documents you submit. These providers process your identity documents under strict confidentiality obligations and return only a pass/fail result together with the verified attributes to wainbd.

Legal and Regulatory Authorities. We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity. We will notify you of any such disclosure wherever legally permitted to do so.

Business Transfers. In the event of a merger, acquisition, or sale of all or part of the wainbd business, personal data held by wainbd may be transferred to the acquiring entity. We will notify registered players of any such transfer and the applicable privacy arrangements before it takes effect.

We do not share personal data with social media platforms, advertising networks, data brokers, or any other third party not listed above.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within one Bangladesh Standard Time (BST, UTC+6) business day and fulfil it within thirty calendar days. We may need to verify your identity before processing your request to protect against unauthorised access to another player's data.

Please note that certain rights are subject to limitations. For example, we cannot erase transaction records that we are legally required to retain for anti-money-laundering compliance purposes, and we cannot provide access to data that would reveal information about another individual. Where a limitation applies, we will explain the reason clearly in our response.

Technical Security Measures. wainbd employs industry-standard security controls to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, multi-factor authentication for administrative access to production systems, automated intrusion detection and alerting, and regular security assessments of platform infrastructure.

Organisational Security Measures. Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff who handle personal data are trained in data protection obligations. We conduct regular internal reviews of data processing activities to ensure ongoing compliance with this Policy.

Retention Schedule. We retain different categories of data for different periods depending on the purpose and legal requirements:

• Account and registration data: retained for the duration of your account and for five years after account closure, to comply with legal obligations and to handle any post-closure disputes.
• Financial transaction records: retained for a minimum of six years from the date of the transaction, in line with standard anti-money-laundering record-keeping requirements.
• Identity verification documents: retained for five years from the date of verification or account closure, whichever is later.
• Gaming activity logs: retained for three years from the date of the session, used for dispute resolution and responsible gaming monitoring.
• Customer support communications: retained for two years from the date of the last communication in the thread.
• Device and technical logs: retained for twelve months, used for security monitoring and fraud detection.

When a retention period expires, data is securely deleted using irreversible deletion methods or anonymised such that it can no longer be linked to any individual.

Data Breach Response. In the unlikely event of a data breach that is likely to result in a risk to the rights and freedoms of players, wainbd will take immediate containment steps and notify affected players as promptly as possible, providing clear information about the nature of the breach, the data affected, and the steps being taken to remedy the situation and prevent recurrence.

wainbd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. The "Last Updated" date at the top of this page indicates when the current version was published.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide advance notice to registered players via the email address associated with their account, or through a prominent in-platform notification, before the amended Policy takes effect. For non-material clarifications or corrections, the updated Policy will be published on this page without individual notification.

Your continued use of the wainbd platform after the effective date of any revised Policy constitutes your acceptance of the changes. We encourage you to review this page periodically to stay informed of how we protect your information.