djwin Privacy Policy

This Privacy Policy ("Policy") describes how djwin ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of users ("you", "Player", "User") who access or use the djwin platform at djwin.io. This Policy applies to all djwin services, including sports betting, live casino, slots, table games, and any related customer support interactions.

By registering a djwin account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the platform and contact us to close your account.

1 Introduction

djwin is an online betting and casino platform serving the Bangladesh market. As part of operating a licensed offshore gaming service, we are required to collect certain personal information from players in order to verify identity, process payments, prevent fraud, and comply with anti-money laundering (AML) obligations.

We take our responsibilities as a data controller seriously. Our approach to privacy is built on the principle that your personal data should be used only to provide and improve the djwin service — never as a commodity to be traded or exploited. This Policy sets out in plain terms exactly what we do with your data and what choices you have.

2 Data We Collect

djwin may collect the following categories of personal data from players:

Category	Examples	Purpose
Identity Data	Full name, date of birth, nationality, government-issued ID number	Account registration, KYC verification, age verification
Contact Data	Mobile number, email address, residential address	Account communications, support, notifications
Financial Data	bKash/Nagad wallet number, bank account details, transaction history	Payment processing, fraud prevention, AML compliance
Technical Data	IP address, device type, browser type, operating system, session logs	Security monitoring, platform optimisation, fraud detection
Usage Data	Betting history, game sessions, login timestamps, pages visited	Service personalisation, responsible gaming monitoring
Communication Data	Support chat transcripts, email correspondence, complaint records	Customer service, dispute resolution, quality assurance
Verification Documents	Copies of national ID, passport, utility bills, selfies for liveness checks	KYC verification, withdrawal processing, identity confirmation

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law. If you voluntarily disclose such information in a support communication, it will be handled with the highest level of care and used solely to address your query.

3 How We Collect Your Data

djwin collects personal data through the following channels:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion;
• Automated Technical Collection: Data gathered automatically when you use the platform, including IP addresses, device identifiers, browser fingerprints, and session activity logs collected via server logs and cookies;
• Payment Providers: Transaction confirmation data received from payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard when you initiate a deposit or withdrawal;
• Third-Party Verification Services: Identity and document verification data from KYC/AML service providers used to validate your submitted documents against authoritative databases;
• Public Sources: In limited circumstances related to fraud or AML investigations, we may cross-reference data against publicly available records or sanctions screening databases.

4 How We Use Your Data

djwin uses your personal data for the following purposes:

• Account Administration: Creating, maintaining, and managing your djwin account, including processing login requests and applying account settings you configure;
• Identity & Age Verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 21 years before allowing access to betting and gaming services;
• Payment Processing: Facilitating deposits and withdrawals via your chosen payment method, reconciling transactions, and investigating payment disputes;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and any other activity that may harm the platform or other players;
• AML Compliance: Monitoring transactions for suspicious activity in line with our anti-money laundering obligations and reporting requirements;
• Customer Support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance;
• Responsible Gaming: Monitoring betting patterns and account activity to identify potential signs of problem gambling and applying player-requested restrictions such as deposit limits and self-exclusion;
• Service Improvement: Analysing aggregated usage data to improve platform performance, game offerings, and the overall user experience;
• Marketing Communications: Sending promotional offers, bonus notifications, and event announcements — only where you have provided consent and only via channels you have opted into. You may opt out at any time by contacting support at [email protected];
• Legal Compliance: Retaining records and responding to lawful requests from regulatory authorities or law enforcement agencies where required by applicable law.

5 Legal Basis for Processing

djwin processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and djwin — including account creation, payment processing, and service delivery — is carried out on this basis;
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC/AML obligations and lawful requests from authorities, is carried out on this basis;
• Legitimate Interests: Processing carried out to protect the security and integrity of the platform, prevent fraud, and improve our services, where these interests are not overridden by your privacy rights;
• Consent: Where we send marketing communications or use non-essential cookies, we do so on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

djwin does not sell your personal data to any third party. We may share your data with the following categories of recipients only where necessary and only to the extent required:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — solely to process your deposit and withdrawal transactions;
• KYC & Identity Verification Providers: Third-party services engaged to verify the authenticity of identity documents and conduct liveness checks during the verification process;
• Game Software Providers: Licensed game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe may receive limited technical session data necessary for game integrity and RNG auditing purposes;
• IT & Security Service Providers: Cloud hosting, server management, and cybersecurity vendors who process data strictly on our behalf under confidentiality agreements;
• Legal & Regulatory Authorities: Law enforcement agencies, financial intelligence units, or regulatory bodies where disclosure is required by applicable law or by a lawful order;
• Professional Advisers: Lawyers, auditors, or compliance consultants engaged by djwin, subject to professional confidentiality obligations.

7 Cookies & Tracking Technologies

djwin uses cookies and similar tracking technologies to ensure the platform functions correctly, to protect security, and to understand how players use the service. The types of cookies we use include:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as session authentication, login state persistence, and security token management. These cookies cannot be disabled;
• Functional Cookies: These cookies remember your preferences, such as language settings and game display options, to deliver a more personalised experience;
• Analytics Cookies: We use anonymised analytics data to understand how players navigate the platform, which pages are most visited, and where technical issues occur. This data is used solely to improve platform performance;
• Security Cookies: These cookies help us detect and prevent fraudulent activity, bot traffic, and suspicious login attempts.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to log in or use core platform features.

8 Data Security

djwin implements a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the djwin platform;
• Encryption at rest for all databases storing personal and financial data;
• Strict role-based access controls limiting which staff members can access personal data, based on operational necessity;
• Multi-factor authentication requirements for internal system access;
• Regular independent security audits and penetration testing;
• Real-time fraud monitoring and anomaly detection systems;
• Documented incident response procedures to address any data breach swiftly and notify affected parties where required.

While djwin takes all reasonable steps to protect your data, no system is entirely immune to security threats. In the event of a data breach that poses a risk to your rights, we will notify affected players promptly and take all available steps to mitigate harm.

9 Data Retention

djwin retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your account relationship with djwin plus a post-closure period of at least 5 years to satisfy AML record-keeping obligations;
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in line with financial record-keeping requirements;
• KYC Verification Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later;
• Customer Support Communications: Retained for 3 years from the date of the interaction, or longer if the communication relates to an ongoing dispute or legal matter;
• Marketing Consent Records: Retained for the duration of your consent, plus a reasonable period thereafter to demonstrate compliance;
• Technical & Log Data: Retained for up to 24 months for security and fraud monitoring purposes, after which it is anonymised or deleted.

When the retention period for any category of data expires, that data is securely deleted or anonymised so that it can no longer be linked to any individual player.

10 Your Rights Over Your Personal Data

As a djwin player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us in writing at [email protected] with your registered account username and a clear description of your request.

• Right of Access: You may request a copy of the personal data djwin holds about you, along with information about how it is being used;
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected without undue delay;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the original purpose, where you have withdrawn consent, or where processing was unlawful. This right is subject to our legal retention obligations — we cannot delete data we are required by law to keep;
• Right to Restriction: You may ask us to restrict processing of your data in certain circumstances, such as while an accuracy dispute is being resolved;
• Right to Data Portability: Where processing is based on your consent or on a contractual relationship, you may request that we provide your data in a structured, commonly used, machine-readable format;
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

djwin will respond to all verifiable data rights requests within 30 days. In complex cases, we may extend this period by a further 30 days with notice to you explaining the reason for the extension.

11 Children & Minors

djwin is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 21. Our registration process includes age verification steps designed to prevent minors from accessing the platform.

If we become aware that personal data has been collected from a person under the age of 21 without appropriate consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the platform, please notify us immediately at [email protected].

12 Third-Party Links & Services

The djwin platform may display informational references to third-party service providers such as payment partners and game studios. djwin is not responsible for the privacy practices of any third-party website, application, or service. This Privacy Policy applies exclusively to data collected and processed by djwin through the djwin.io platform.

We recommend that you review the privacy policies of any third-party services you use in connection with the djwin platform, including your mobile wallet provider (bKash, Nagad, Rocket, Upay) and your bank.

13 Updates to This Privacy Policy

djwin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will notify registered players by email or by displaying a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date at the top of this document indicates when the most recent revision was published. We encourage you to review this Policy periodically. Continued use of the djwin platform following publication of a revised Policy constitutes your acceptance of the updated terms.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way djwin handles your personal data, please contact our support team:

For data erasure requests, account closure, or self-exclusion enquiries, please also contact us at the same address, clearly stating the nature of your request in the subject line of your message.