Privacy Policy — bitinwin

1 Information We Collect

bitinwin collects personal data from players in several ways: directly through account registration and verification forms, automatically through your interactions with the platform, and occasionally from trusted third-party sources such as payment processors and identity verification providers. The categories of data we collect are described below.

1.1 Identity and Contact Information

When you register an account on bitinwin, we collect the following information to verify your identity, comply with know-your-customer (KYC) requirements, and communicate with you:

• Full legal name as it appears on your national identity document
• Date of birth (to confirm you meet the 18+ age requirement)
• Residential address, including district and division within Bangladesh
• Mobile phone number (used for OTP verification and account communications)
• Email address (used for account notifications and correspondence)
• National ID card number, passport number, or equivalent government-issued identifier, when required for enhanced verification

1.2 Financial and Transaction Data

To process your deposits and withdrawals, we collect and retain the following financial information:

• Mobile financial service account details (e.g., bKash account number, Nagad number, Rocket account) — retained as a reference identifier, not the full account credentials
• Bank account name and branch details for bank transfer transactions
• Transaction reference numbers, amounts, timestamps, and payment method identifiers
• Deposit and withdrawal history associated with your bitinwin account

1.3 Technical and Usage Data

When you access bitinwin — whether via a web browser on your smartphone in Dhaka, a tablet in Chittagong, or a desktop in Sylhet — our systems automatically record the following technical information:

• IP address and approximate geolocation data derived from it
• Device type, operating system, and browser version
• Pages visited, features accessed, and time spent on each section of the platform
• Game sessions played, bet history, and wagering patterns (used for responsible gaming monitoring and fraud prevention)
• Login timestamps, session duration, and logout events
• Referral source (e.g., which link or page directed you to bitinwin)

1.4 Communications Data

If you contact our support team via email or live chat, we retain a record of that correspondence including the messages exchanged, the date and time of contact, and any attachments or documents you provide. This data is used to resolve your query and to improve the quality of our customer service.

2 How We Use Your Data

bitinwin uses the personal data it collects only for legitimate, clearly defined purposes. We do not process your data in ways that are incompatible with the purposes described at the time of collection. The primary purposes for which we use your data are as follows:

If you have opted in to receive promotional communications from bitinwin — such as bonus offer announcements, BPL season promotions, or Eid special offers — you may withdraw that consent at any time by contacting our support team at [email protected]. Withdrawal of marketing consent does not affect your ability to use the platform or the processing of your data for non-marketing purposes.

3 Data Sharing & Disclosure

bitinwin does not sell your personal data. We share data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the relevant purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, bitinwin shares the relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other partner financial institutions. These providers are bound by their own data protection obligations and by contractual data processing agreements with bitinwin.

3.2 Identity Verification and KYC Providers

For enhanced account verification, bitinwin may use third-party identity verification providers to confirm the authenticity of identity documents submitted by players. These providers process identity data solely for the purpose of verification and are prohibited from using it for any other purpose.

3.3 Game Software Providers

Game providers such as Pragmatic Play, Microgaming, NetEnt, Evolution Gaming, Ezugi, and Spribe may receive anonymised or pseudonymised session data that is technically necessary to deliver game content and to resolve disputes relating to game outcomes. These providers do not receive your full personal profile.

3.4 Legal and Regulatory Disclosure

bitinwin may be required to disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or in connection with the investigation of suspected fraud, money laundering, or other criminal activity. We will notify you of any such disclosure where we are legally permitted to do so.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bitinwin's business assets, your personal data may be transferred as part of that transaction. In such circumstances, the acquiring entity would be bound to honour the terms of this Privacy Policy or to provide you with adequate prior notice of any material changes to your data rights.

4 Cookies & Tracking Technologies

bitinwin uses cookies and similar tracking technologies (including web beacons, local storage, and session tokens) to operate and improve the platform. Cookies are small text files placed on your device when you visit our website. They help us remember your preferences, keep you logged in securely, analyse platform performance, and deliver a consistent experience across sessions.

The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable secure login sessions, maintain your account state during a session, and prevent cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: These cookies help us understand how players use the bitinwin platform — which game categories are most popular, where users encounter difficulties, and how platform performance can be improved. The data collected is aggregated and does not identify individual players directly.
• Functionality Cookies: These cookies remember your preferences such as your preferred language setting, last visited game category, and display settings, so you do not have to reconfigure them on every visit.
• Marketing Cookies: If you have opted in to promotional communications, these cookies help us personalise the offers and promotions we show you based on your gaming activity and preferences. You may opt out of marketing cookies at any time.

5 Data Retention

bitinwin retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. The retention periods we apply are as follows:

• Account and identity data: Retained for the duration of your active account relationship with bitinwin, plus a minimum period of five (5) years following account closure, to comply with anti-money-laundering (AML) record-keeping obligations.
• Transaction and financial data: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• Responsible gaming records: Self-exclusion records, deposit limit settings, and responsible gaming interaction history are retained for a minimum of five (5) years to prevent the circumvention of voluntary self-exclusion measures.
• Customer support communications: Retained for three (3) years from the date of the last interaction, unless the communication relates to an ongoing dispute in which case it is retained until that dispute is fully resolved.
• Technical and usage data: Retained in identifiable form for up to twelve (12) months, after which it may be retained in anonymised or aggregated form indefinitely for platform analytics purposes.
• Marketing preference records: Retained for as long as your account remains active, and for a reasonable period following account closure to maintain an accurate suppression record of your opt-out preferences.

When your personal data is no longer required for any of the above purposes, it will be securely deleted or anonymised so that it can no longer be linked back to you as an individual.

6 Your Privacy Rights

As a player using the bitinwin platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Support team at [email protected] with your full name, registered account email address, and a description of your request. We will respond within thirty (30) days.

• Right of Access: You have the right to request a copy of all personal data that bitinwin holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly through your account settings at any time.
• Right to Erasure: In certain circumstances, you have the right to request that your personal data be deleted. This right is subject to limitations — for example, we cannot delete financial transaction records that we are legally required to retain for AML compliance purposes.
• Right to Restrict Processing: You may request that bitinwin restrict the processing of your personal data in certain situations — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, so that you can transfer it to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on bitinwin's legitimate interests, including profiling for responsible gaming monitoring purposes. We will comply with your objection unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

7 Data Security Measures

bitinwin takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security practices include, but are not limited to, the following:

• Transport Layer Security (TLS): All data in transit between your device and the bitinwin platform is encrypted using TLS 1.2 or higher, ensuring that information exchanged during login, transactions, and gameplay cannot be intercepted.
• At-Rest Encryption: Sensitive personal data stored on bitinwin's servers is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to player data is restricted on a strict need-to-know basis. Staff members can only access the specific data required to perform their authorised role, and all access is logged and audited.
• Two-Factor Authentication (2FA): bitinwin offers and encourages the use of OTP-based two-factor authentication for all player accounts to reduce the risk of unauthorised access resulting from compromised passwords.
• Regular Security Audits: The bitinwin platform undergoes periodic security reviews and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, bitinwin has an incident response plan in place to contain the breach, assess its impact, and notify affected players and relevant authorities in a timely manner.

While bitinwin takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security against all possible threats. You also play an important role in keeping your account secure — please choose a strong, unique password, never share your login credentials with anyone, and contact us immediately at [email protected] if you suspect your account has been compromised.

8 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to bitinwin's handling of your personal data, please contact our support team using the details below. We are committed to resolving any privacy-related concern promptly and transparently.

Data Support Contact:
Email: [email protected]
Response time: within 30 days of receipt of your request
Available: 24 hours a day, 7 days a week

When contacting us about a data-related matter, please include your full name, the email address registered to your bitinwin account, and a clear description of your request or concern. This will allow us to locate your records promptly and respond to you efficiently.

If you are dissatisfied with our response to any privacy concern you have raised, you have the right to escalate your complaint to the relevant data protection authority or consumer protection body in your jurisdiction. bitinwin will cooperate fully with any such authority in the investigation of complaints.

bitinwin reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via the email address on their account and update the "Last Reviewed" date shown at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how your data is being protected.