wintk Privacy Policy

wintk collects personal data through several channels: directly from you during account registration and subsequent platform use, automatically through your interactions with the wintk website, and from third-party sources such as payment providers and identity verification services. The following table summarises the categories of data we collect and the primary source of each category.

wintk processes your personal data only where we have a lawful basis to do so. The principal lawful bases we rely upon are: performance of a contract (processing necessary to provide the services you have requested), legitimate interests (processing that serves genuine operational or security needs without overriding your rights), compliance with a legal obligation, and, in limited cases, your explicit consent.

2.1 Contract Performance

The following processing activities are necessary for wintk to provide the gaming and betting services you have contracted for when creating your account:

• Creating and maintaining your account, including authentication and credential management;
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer;
• Verifying your identity through the KYC process before enabling withdrawal functionality;
• Calculating, recording, and crediting winnings and bonus fund balances;
• Providing customer support in response to your queries and complaints;
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and account alerts.

2.2 Legal Obligations

wintk is subject to various legal and regulatory obligations that require the processing of personal data, including:

• Anti-money laundering (AML) screening and transaction monitoring;
• Age verification to prevent underage gambling;
• Fraud detection and prevention;
• Responding to lawful requests from law enforcement or competent regulatory authorities;
• Maintaining financial records for the minimum periods required by applicable law.

2.3 Legitimate Interests

Where wintk relies on legitimate interests as its lawful basis, we process data to:

• Monitor platform security, detect and investigate suspicious activity, and protect both players and the platform from fraud;
• Conduct anonymised analytics to improve platform performance, game selection, and user experience;
• Apply responsible gaming controls, including automatic alerts when a player's spending or session patterns suggest potential problem gambling behaviour;
• Enforce the Terms & Conditions, including multi-account detection and bonus abuse prevention.

2.4 Consent-Based Processing

With your explicit consent, wintk may send you promotional emails, SMS notifications, or in-platform messages about new games, bonus offers, seasonal promotions (including Eid and Pohela Boishakh specials), and platform updates. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting customer support. Withdrawal of consent for marketing communications does not affect the lawfulness of any processing carried out prior to withdrawal, and does not affect processing carried out on other lawful bases.

wintk does not sell your personal data to any third party. We share data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Payment Processors

When you make a deposit or request a withdrawal, wintk shares the transaction data necessary to complete that payment with the relevant payment service provider — which may include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank. These providers act as independent data controllers for the data they process in connection with their own payment infrastructure and are subject to Bangladesh Bank's applicable data protection guidance.

3.2 Identity Verification Services

To complete the KYC verification process, wintk may transmit your identity documents and biographic data to a third-party identity verification provider. This provider processes data solely for the purpose of confirming the authenticity of the documents and the accuracy of the information you have submitted. Verification providers engaged by wintk are contractually bound to data processing terms that are consistent with the standards set out in this Privacy Policy.

3.3 Game Providers and Technology Partners

The wintk platform is powered by game content from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. In delivering their games within the wintk environment, these providers may receive limited technical data (such as anonymised session identifiers and game-round outcomes) necessary to render game content and calculate results. Game providers do not receive your name, contact details, or financial data.

3.4 Law Enforcement and Regulatory Authorities

wintk will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or official regulatory directive. Where legally permitted to do so, wintk will notify affected players of such a disclosure request. In cases involving suspected money laundering or fraud, wintk may be legally prohibited from providing such notice.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of wintk's business assets, personal data held by wintk may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and of any material change to the privacy terms governing their data prior to the transfer taking effect.

wintk uses cookies and similar tracking technologies — including local storage and session storage — on the wintk.bid website. Cookies are small text files placed on your device by the website you are visiting. They serve a range of functions, from keeping you logged in to helping us understand how players navigate the platform so we can improve it.

4.1 Types of Cookies We Use

wintk retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations, whichever is longer. The following retention periods apply to the principal data categories we hold:

• Account and identity data: Retained for the duration of the active account relationship, plus seven years following account closure. This period reflects standard financial record-keeping requirements applicable to businesses processing payment transactions.
• KYC documents: Retained for seven years from the date of verification or from the date of account closure, whichever is later, in accordance with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for seven years from the date of each transaction.
• Customer support communications: Retained for three years from the date of the most recent communication in a support thread.
• Marketing consent records: Retained for the duration of the consent plus three years following its withdrawal, to demonstrate compliance in the event of a regulatory inquiry.
• Anonymised analytics data: Retained indefinitely, as this data cannot be used to identify any individual player.
• Responsible gaming records (self-exclusion, deposit limits): Retained for the duration of the active account relationship plus seven years, to support any future responsible gaming investigations or regulatory reviews.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where deletion is technically complex (for example, data held in encrypted backup archives), wintk will take steps to ensure that the data is not further processed and is deleted at the earliest practicable opportunity during the next scheduled backup rotation cycle.

wintk takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• Encryption in transit: All communication between your browser or device and the wintk platform is encrypted using TLS 1.2 or higher, with HTTPS enforced across all pages of wintk.bid.
• Encryption at rest: Sensitive personal data and financial records stored in wintk's databases are encrypted using AES-256 encryption.
• Access controls: Access to personal data within wintk's systems is restricted on a need-to-know basis. Staff members who require access to player data for support or compliance purposes are subject to role-based access controls, and all access events are logged and auditable.
• Network security: wintk's infrastructure is protected by firewalls, intrusion detection systems, and regular penetration testing conducted by independent security professionals.
• Two-factor authentication: Two-factor authentication is available for all player accounts and is strongly recommended for all wintk users, particularly those with significant account balances.
• Incident response: wintk maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay.

While wintk employs robust security measures, no online platform can guarantee absolute security. You are responsible for keeping your own account credentials confidential and for ensuring that any device you use to access wintk is adequately protected with up-to-date security software.

As a player on the wintk platform, you hold a set of rights over the personal data we hold about you. wintk is committed to facilitating the exercise of these rights promptly and without unnecessary barriers. To submit a request relating to any of the rights described below, please contact our support team. We will respond to verified requests within 30 calendar days of receipt.

8.1 Changes to This Policy

wintk may update this Privacy Policy from time to time to reflect changes in our data processing practices, operational requirements, or applicable legal obligations. When we make material changes to this policy, we will notify registered players by email to their registered email address and update the "Effective" date displayed at the top of this document. Minor clarifications or corrections that do not materially affect your rights will be made without formal notice.

Your continued use of the wintk platform following notification of a material policy update constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with the changes, you should close your account before the updated policy comes into effect.

8.2 Contact Details

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data wintk holds about you, please contact our data support team. All privacy-related correspondence should be addressed in writing to:

wintk Data Support Team
Email: [email protected] (plain text — not a clickable link)
Response time: within 30 calendar days of a verified request, in accordance with our stated commitments above.

When submitting a data subject rights request, please include your full registered name, the email address associated with your wintk account, and a clear description of the right you wish to exercise. We may request additional information to verify your identity before processing the request.

8.3 Third-Party Links

The wintk platform may contain references to third-party services such as payment providers (bKash, Nagad) and game studios. This Privacy Policy applies solely to data processed by wintk through the wintk.bid platform. wintk is not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any external service you interact with in connection with your use of wintk.