win17 Privacy Policy

Introduction

win17 ("win17", "we", "us", "the Platform") is an online gambling platform serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur and Mymensingh. We operate the website at win17.io and all associated services, games, sportsbook markets and financial tools made available through that domain.

We understand that your personal data is sensitive and that you place trust in us by providing it. This Privacy Policy sets out precisely what information we collect from you, the purposes for which we use it, how long we retain it, the circumstances under which we may share it with third parties, and the rights you hold in relation to your data.

This Privacy Policy applies to all visitors to the win17 website and to all registered account holders. By accessing win17.io or creating an account, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data processing activities described herein. Where our processing relies on consent as its legal basis, you have the right to withdraw that consent at any time by contacting us at the details provided in Section 14.

This Privacy Policy should be read alongside the win17 Terms & Conditions, which govern the contractual relationship between you and win17.

Data Controller

For the purposes of this Privacy Policy, win17 acts as the data controller in respect of all personal data collected from players accessing the Platform from Bangladesh. As data controller, win17 determines the purposes and means by which your personal data is processed.

All data protection enquiries, subject access requests, deletion requests and consent withdrawal notices should be directed to the win17 data protection contact at [email protected]. win17 aims to acknowledge all data-related requests within five (5) business days and to resolve them within thirty (30) calendar days of receipt.

Information We Collect

win17 collects personal data through several distinct channels. The categories of information we may hold about you are as follows:

win17 does not collect or store full payment card numbers, CVV codes or full bKash/Nagad/Rocket PINs. Payment authentication is handled by the respective payment provider using their own secure systems. win17 receives only a transaction reference and a masked identifier to confirm that a payment has been processed.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, biometric data or health information unless this is specifically required to verify a responsible gaming self-exclusion request or to comply with a legal obligation, in which case the minimum necessary data will be collected.

How We Use Your Information

win17 uses the personal data it collects for the following purposes:

• Account management: To create, verify and maintain your player account, including processing your registration details and conducting identity verification (KYC) checks.
• Service delivery: To provide access to casino games, sportsbook markets, the Finance / Wallet tools and all other features of the win17 Platform.
• Payment processing: To facilitate BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa and Mastercard, and to maintain accurate financial records for each account.
• Fraud prevention and security: To detect, investigate and prevent fraudulent activity, multi-accounting, money laundering, bot usage and other prohibited conduct as defined in the win17 Terms & Conditions.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling, to administer deposit limits, session reminders and self-exclusion requests, and to fulfil our duty of care to players.
• Customer support: To respond to your enquiries, process your complaints and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Legal compliance: To meet obligations under applicable anti-money laundering (AML) regulations, age verification requirements and any other legal or regulatory obligations that apply to the win17 Platform.
• Marketing communications: To send you promotional offers, bonus notifications and platform updates, but only where you have opted in to receive such communications and subject to your right to opt out at any time.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the win17 user experience, optimise game performance and develop new features.

win17 does not use your personal data for automated decision-making that produces legal effects without human oversight, except where strictly required by AML or fraud-prevention obligations, in which case you have the right to request human review of any automated decision that materially affects your account.

Legal Bases for Processing

win17 processes your personal data on the following legal bases, depending on the specific purpose of the processing activity:

• Contract performance: Processing necessary to open your account, accept deposits, settle bets and facilitate withdrawals — all of which are required to fulfil the contractual relationship between you and win17.
• Legal obligation: Processing required to comply with age verification, anti-money laundering regulations, record-keeping requirements and any lawful request from a competent authority.
• Legitimate interests: Processing carried out for fraud detection, security monitoring, responsible gaming oversight and internal analytics — where win17's legitimate interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential cookie placement, where we rely on your freely given, specific, informed and unambiguous consent. You may withdraw this consent at any time without penalty.

Data Sharing & Third Parties

win17 does not sell, rent or trade your personal data to third parties for their own marketing purposes. We may, however, share your data with the following categories of third parties where strictly necessary to operate the Platform and meet our legal obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa and Mastercard — to facilitate deposits and withdrawals. These providers receive only the data necessary to process the specific transaction and are bound by their own privacy and security obligations.
• Game software providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi and other certified providers — to deliver casino games and sportsbook services. These providers may receive session identifiers and technical data required to operate the game interface.
• Identity verification services: Third-party KYC providers who assist in verifying the identity and age of players. Such providers process identity documents under strict data processing agreements.
• Fraud and security services: Specialist providers who assist win17 in detecting bot activity, multi-accounting and other fraudulent behaviour. Only technical and behavioural data is shared for this purpose.
• Legal and regulatory authorities: Competent government bodies, law enforcement agencies or courts where win17 is required by law to disclose information, or where disclosure is necessary to protect the rights and safety of win17 or its users.
• Professional advisers: Lawyers, auditors and accountants acting in a professional capacity and bound by appropriate confidentiality obligations.

All third parties with whom win17 shares personal data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection standards. win17 maintains data processing agreements with all third-party processors and conducts periodic reviews of their data security practices.

International Data Transfers

The win17 Platform serves players in Bangladesh. Some of the third-party service providers engaged by win17 — including certain game software providers and technical infrastructure partners — operate from locations outside Bangladesh. Where your personal data is transferred to a third country, win17 takes steps to ensure that appropriate safeguards are in place, including the use of standard contractual clauses, data processing agreements incorporating internationally recognised data protection standards, and selection of providers that maintain robust independently audited security programmes.

win17 does not transfer your data to jurisdictions that do not offer an adequate level of protection without first implementing contractual and technical safeguards designed to maintain the equivalent level of protection that applies when your data is processed within Bangladesh.

Data Retention

win17 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with win17, plus a minimum of five (5) years following account closure, to meet AML and financial record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping requirements.
• Gaming activity logs: Retained for three (3) years from the date of each session, or longer where required for dispute resolution or legal proceedings.
• Customer support communications: Retained for two (2) years from the date of the last communication in a support thread, or longer where the matter remains unresolved.
• Marketing preference data: Retained until you withdraw consent or opt out, at which point marketing processing will cease and the relevant preference record will be updated immediately.
• Technical and log data: Retained for up to twelve (12) months from collection, unless specific records are flagged for retention in connection with a security investigation.

Upon expiry of the applicable retention period, win17 will securely delete or anonymise your personal data so that it can no longer be attributed to you as an individual. Where full deletion is not immediately practicable for technical reasons, the data will be isolated from active processing until deletion can be carried out.

Cookies & Tracking Technologies

win17 uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences and analyse how users interact with the site. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing your ability to use win17.
• Functional cookies: Used to remember your preferences such as language settings, display preferences and last-visited game categories. These improve your experience but are not essential to core functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how visitors navigate the win17 website. This data helps us understand which features are most used, identify technical issues and improve the overall platform experience. No personally identifiable information is included in analytics reports.
• Marketing cookies: Placed only where you have given explicit consent. These cookies track your engagement with win17 promotions to help us deliver relevant offers. You may withdraw consent for marketing cookies at any time.

Most web browsers allow you to manage your cookie preferences through the browser settings menu. Disabling strictly necessary cookies may prevent you from accessing some or all of the win17 Platform. For detailed guidance on managing cookies, refer to your browser's help documentation.

Your Privacy Rights

As a player whose personal data is processed by win17, you hold the following rights in relation to that data. To exercise any of these rights, please contact win17 at [email protected]:

• Right of access: You may request a copy of the personal data that win17 holds about you, together with information about how it is being used.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated without undue delay.
• Right to erasure: You may request that win17 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where the data has been unlawfully processed. This right is subject to win17's legal retention obligations, which may require certain data to be retained even after an account is closed.
• Right to restriction of processing: You may request that win17 restrict the processing of your data while an accuracy dispute is being resolved, or where you have objected to processing based on legitimate interests pending verification of whether our interests override yours.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where that processing is based on win17's legitimate interests. win17 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where win17 relies on consent as the legal basis for processing — such as for marketing communications or non-essential cookies — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

win17 will not charge a fee for handling straightforward privacy rights requests and will respond within thirty (30) calendar days. Where a request is complex or where a large number of requests have been received simultaneously, win17 may extend this period by a further thirty (30) days, notifying you of the extension and the reasons for it within the initial thirty-day window.

Security Measures

win17 employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the win17 servers, ensuring that login credentials, financial data and personal information cannot be intercepted in transit.
• Encrypted data storage for sensitive fields including identity document details and financial account references held in the win17 database.
• Access controls and role-based permissions that restrict internal access to personal data to only those win17 employees and contractors who require it to perform their specific job functions.
• Continuous security monitoring including intrusion detection systems, anomaly detection and automated alerting for unusual access patterns or login activity.
• Regular security assessments including vulnerability scanning and periodic review of data processing systems and access logs.
• Staff training on data protection obligations and secure data handling practices, conducted on a regular basis for all personnel with access to player data.

While win17 takes all reasonable and appropriate steps to protect your personal data, no digital system is entirely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, win17 will notify affected players without undue delay and take all necessary steps to contain and remediate the breach.

Children & Minors

The win17 Platform is strictly for adults aged 21 years and above. win17 does not knowingly collect personal data from any person under the age of 21. Account registration requires confirmation that the applicant meets the minimum age requirement, and win17 conducts age verification checks on all accounts as part of its KYC process.

If win17 becomes aware that personal data has been submitted by or on behalf of a person under the age of 21, that data will be deleted immediately, the associated account will be permanently closed, and any funds held in that account will be processed in accordance with the win17 Terms & Conditions. If you believe that a minor has created an account on win17, please contact us immediately at [email protected].

Changes to This Policy

win17 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our Platform. The date of the most recent revision is displayed at the top of this page.

Where changes to this Privacy Policy are material — meaning they significantly affect the way in which we collect, use or share your personal data — win17 will provide advance notice to registered players by displaying a prominent notification on the Platform or by sending a communication to the email address registered on your account. Your continued use of win17 following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

win17 recommends that you review this Privacy Policy periodically to stay informed about how we protect your information. If at any point you do not accept the terms of the current Privacy Policy, you must discontinue use of the Platform and contact support to close your account.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or need to report a data protection concern, please contact the win17 data protection team using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 directly within the Platform following login
• Response commitment: All data-related enquiries will be acknowledged within five (5) business days and resolved within thirty (30) calendar days (Bangladesh Standard Time, UTC+6)

For urgent matters relating to account security, suspected unauthorised access, or data breach concerns, please use the 24/7 live chat channel as the fastest route to the win17 security team.