Data & Privacy
Your Privacy Matters at winraj
This Privacy Policy explains exactly what personal data winraj collects from players in Bangladesh, how that data is used, how it is stored securely, and what rights you have over your own information. Transparency and trust are central to how winraj operates.
Privacy at a Glance
Six Commitments We Make to Every Player
Before diving into the full policy, here is a plain-English summary of our core privacy commitments. These principles apply to every player on the winraj platform, across Dhaka, Chittagong, Sylhet, Khulna, and beyond.
Minimal Data Collection
winraj collects only the personal data that is strictly necessary for account management, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively.
Bank-Grade Encryption
All data transmitted between your device and winraj servers is protected by 256-bit SSL/TLS encryption. Sensitive fields such as payment details are additionally encrypted at rest using industry-standard protocols.
No Data Selling
winraj does not sell, rent, lease, or trade your personal data to any third party for marketing or commercial purposes. Your information is used solely to operate and improve the winraj platform.
Player Control
You have the right to access, correct, export, or request deletion of your personal data at any time by contacting our support team. winraj will action all valid data requests within 30 calendar days.
Defined Retention Periods
winraj retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. We do not store data indefinitely.
Marketing Opt-Out
Promotional communications from winraj are optional. You may opt out of marketing emails and SMS notifications at any time via your account settings or by contacting our 24/7 support team directly.
Section 1
Data We Collect
winraj collects personal data in three ways: information you provide directly when registering or using the platform, information generated automatically as you interact with the platform, and information received from trusted third-party service providers such as payment processors and identity verification agencies.
Information you provide directly:
- Registration data: Your full legal name, date of birth, residential address, email address, and mobile phone number.
- Identity verification documents: Government-issued ID (National ID card, passport, or driving licence), proof of address documents, and selfie photographs where required for KYC (Know Your Customer) verification.
- Payment information: Mobile banking account details (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) required for deposit and withdrawal processing. Full card numbers are not stored on winraj servers — they are processed directly by our PCI-DSS-compliant payment partners.
- Communications: Records of your correspondence with winraj support via Live Chat, WhatsApp, or email, including the content of those communications and any attachments you provide.
- Responsible gaming preferences: Deposit limits, time-out elections, session reminders, and self-exclusion requests you submit through your account settings.
Information collected automatically:
- Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
- Usage data: Pages visited, games played, wagers placed, session duration, navigation paths, and feature interactions within the winraj platform.
- Geolocation: General geographic location derived from your IP address. winraj does not request or use precise GPS-level location data.
- Cookies and tracking technologies: Session cookies, persistent cookies, and similar technologies as described in the Cookies section of this policy.
Information received from third parties:
- Identity verification results from KYC/AML screening partners.
- Payment confirmation and transaction status data from payment processors.
- Fraud risk scores and device fingerprint data from security and anti-fraud service providers.
Data Categories Summary
| Category | Examples | Source |
|---|---|---|
| Identity | Name, DOB, NID | You / KYC partner |
| Contact | Email, phone, address | You |
| Financial | bKash / card info | You / payment processor |
| Technical | IP, device, browser | Automatic |
| Behavioural | Games played, bets | Automatic |
| Communications | Support chat logs | You |
Section 2
How We Use Your Data
winraj processes your personal data only where we have a valid legal basis to do so. The primary bases we rely on are: fulfilment of a contract with you (operating your account), compliance with legal obligations (KYC, AML), our legitimate interests as a platform operator (fraud prevention, platform security), and your consent (marketing communications).
The specific purposes for which winraj uses your data are as follows:
- Account Creation and Management: To register your account, verify your identity, maintain your player profile, and manage account settings including responsible gaming preferences.
- Payment Processing: To facilitate deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard) and to maintain an accurate transaction history for your account.
- Identity and Age Verification: To confirm that you are at least 18 years of age and that the identity you have provided is accurate, as required by our responsible gaming obligations.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, bonus abuse, and other prohibited conduct as described in our Terms & Conditions.
- Platform Operation and Improvement: To analyse usage patterns, troubleshoot technical issues, optimise game performance, and improve the overall winraj player experience.
- Customer Support: To respond to your enquiries, process your support requests, and maintain records of our communications with you.
- Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, apply any self-imposed limits or exclusions, and deliver responsible gaming prompts where appropriate.
- Marketing Communications (with your consent): To send you information about promotions, bonuses, new games, and platform updates by email or SMS. You may withdraw this consent at any time.
- Legal and Regulatory Compliance: To fulfil our obligations under applicable laws, respond to lawful requests from competent authorities, and maintain records as required by financial regulations.
winraj does not use your personal data to make solely automated decisions that produce significant legal effects on you without human review. Any decision to close or permanently restrict an account is reviewed by a member of our compliance team before being implemented.
Section 3
Data Sharing and Disclosure
winraj does not sell your personal data to any third party. We share your data only in the following specific circumstances, and only to the extent strictly necessary for each purpose:
- Payment Service Providers: We share payment-related data with our payment processing partners (including bKash, Nagad, Rocket, Upay, and card network processors) solely to execute your deposit and withdrawal instructions. These partners are contractually bound to process your data only for that purpose.
- Identity Verification Partners: We share identity documents and personal details with our KYC/AML verification partners to complete mandatory player identification checks. These partners operate under strict data processing agreements and may not use your data for any other purpose.
- Fraud Prevention and Security Services: We share technical data (IP address, device fingerprint, transaction patterns) with anti-fraud and cybersecurity service providers to protect the platform and its players from fraudulent activity.
- Game Providers: Where you play games provided by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), certain technical data (session tokens, bet amounts, game results) is shared with those providers to facilitate gameplay. These providers operate under data processing agreements with winraj.
- Legal and Regulatory Authorities: winraj may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory authorities in response to a lawful order, warrant, or legal obligation. winraj will, where legally permitted, notify affected players of such disclosures.
- Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of the winraj business, player data may be transferred to the acquiring entity. Affected players will be notified in advance where legally required.
All third parties with whom winraj shares personal data are required to implement appropriate technical and organisational security measures and to process your data only for the purposes for which it was shared. winraj remains responsible for ensuring that these partners comply with applicable data protection standards.
Payment Partners
bKash, Nagad, Rocket, Upay, Visa, Mastercard — transaction data only, under strict data processing agreements.
KYC Providers
Identity document verification only. Documents are not retained by verification partners beyond the verification window.
Legal Authorities
Disclosed only when required by a lawful legal order. winraj does not proactively share player data with government bodies.
Section 5
Data Security Measures
winraj takes the security of your personal data seriously and implements a layered approach to protecting it against unauthorised access, disclosure, alteration, and destruction. Our security framework includes both technical controls and organisational policies.
Technical security measures in place at winraj include:
- Transport Layer Encryption: All data transmitted between your browser or app and winraj servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption, indicated by the HTTPS protocol and padlock indicator in your browser.
- Encryption at Rest: Sensitive personal data fields, including identity document images and payment account references, are encrypted at rest using AES-256 encryption on our database servers.
- Access Controls: Access to production systems and player data is restricted to authorised personnel only, governed by a role-based access control framework. All administrative access is logged and regularly audited.
- Intrusion Detection: winraj employs real-time intrusion detection and prevention systems (IDS/IPS) to monitor for and respond to anomalous network activity.
- Penetration Testing: The winraj platform undergoes scheduled penetration testing by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
- Secure Development Practices: winraj's engineering team follows secure software development lifecycle (SSDLC) practices, including code reviews, dependency audits, and security testing as part of the deployment pipeline.
Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, winraj will notify affected players as promptly as practically possible and will take immediate remedial action to contain the breach and prevent recurrence.
You also have a responsibility to keep your winraj account secure. Use a strong, unique password, do not share your credentials, and contact our support team immediately if you believe your account has been compromised.
Section 6
Data Retention Policy
winraj retains your personal data only for as long as is necessary to fulfil the specific purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Once the applicable retention period has expired, data is securely deleted or anonymised so that it can no longer be associated with you.
The following retention periods apply to the main categories of data winraj holds:
- Account and Registration Data: Retained for the duration of your active account, plus a minimum of 5 years following account closure, to fulfil anti-money-laundering record-keeping obligations.
- Identity Verification Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, in compliance with KYC and AML regulatory requirements.
- Transaction Records: All deposit and withdrawal records are retained for a minimum of 5 years to satisfy financial record-keeping obligations.
- Gameplay and Betting Records: Retained for a minimum of 3 years from the date of the activity to support dispute resolution and fair play auditing.
- Customer Support Communications: Retained for 2 years from the date of the last communication in a support thread.
- Marketing Consent Records: Retained for the duration of your account plus 1 year after account closure, to demonstrate compliance with consent obligations.
- Technical and Log Data: Server logs, access logs, and security event logs are retained for 90 days in standard operation, or longer where required for an active security investigation.
Where a legal hold or active investigation requires data to be preserved beyond the standard retention period, we will retain the relevant data until the hold is lifted, after which the standard deletion process will apply.
Retention Periods Summary
| Data Type | Retention Period |
|---|---|
| Account & Registration | Active + 5 years |
| KYC Documents | 5 years from verification |
| Transaction Records | 5 years |
| Gameplay Records | 3 years |
| Support Communications | 2 years |
| Marketing Consent | Active + 1 year |
| Technical / Server Logs | 90 days |
Section 7
Your Privacy Rights
Every winraj player has the following rights in respect of their personal data. To exercise any of these rights, contact our support team via Live Chat, WhatsApp, or email. winraj will respond to all valid requests within 30 calendar days.
Right of Access
You have the right to request a copy of all personal data winraj holds about you. We will provide this in a structured, commonly used, machine-readable format.
Right to Rectification
If any personal data winraj holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections (such as legal name changes) may require supporting documentation.
Right to Erasure
You may request that winraj delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. This right is subject to our legal data retention obligations — we cannot delete records we are legally required to keep.
Right to Restriction of Processing
You may request that winraj restrict processing of your data in certain circumstances — for example, while a dispute about its accuracy is being resolved, or where you have objected to processing and a balancing assessment is underway.
Right to Data Portability
Where processing is based on your consent or a contract, you have the right to receive your personal data in a portable format so that you can transfer it to another service provider of your choice.
Right to Object
You have the right to object to winraj processing your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests; winraj will cease unless it can demonstrate compelling legitimate grounds that override your interests.
Right Against Solely Automated Decisions
winraj does not make solely automated decisions that produce significant legal effects on you without human review. Where automated systems flag your account for investigation, a member of our compliance team will review the case before any significant action is taken.
Section 8
Policy Updates and Contact
winraj reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable laws, and platform features. When we make a material change to this policy, we will notify registered players by email to their registered address and by a prominent notice on the winraj platform, at least 14 days before the changes take effect.
The effective date at the top of this page indicates when the current version came into force. We recommend bookmarking this page and reviewing it periodically, even between formal notifications. Continued use of the winraj platform after the effective date of a revised policy constitutes acceptance of the updated terms.
A version history log is maintained internally. If you wish to review a previous version of this Privacy Policy, you may request it by contacting our support team.
Children and Minors: winraj is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered an account or provided personal data to winraj, that account will be immediately closed and all associated data will be deleted, subject to any legal hold obligations. If you believe a minor has registered on winraj, please contact our support team immediately.
International Data Transfers: winraj's servers are operated in secure data centres. In cases where personal data is processed by third-party service providers located outside Bangladesh, we ensure that adequate safeguards are in place through contractual data transfer mechanisms, including data processing agreements that incorporate appropriate data protection obligations.
Contact Details: All privacy-related enquiries, data subject access requests, and complaints should be directed to our support team. We aim to resolve all privacy concerns promptly and fairly. If you are not satisfied with our response to a complaint, you may have the right to escalate to an applicable regulatory authority.
Explore winraj — Bangladesh's Trusted Gaming Platform
Now that you understand how winraj protects your data, browse our full game library, check our FAQ for common questions, or log in to your account and start playing today. 18+ only. Play responsibly.