win baje Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") describes how win baje ("we", "us", "the Platform", "the Operator") collects, processes, stores, and protects personal data relating to individuals ("Players", "Users") who access or use the win baje online casino and sports betting platform at win-baje.com. By registering an account or otherwise using our services, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy.

win baje operates as an offshore online gaming platform accessible to players in Bangladesh and takes the privacy and security of player data with the utmost seriousness. We apply industry-standard technical and organisational measures — including 256-bit SSL encryption, access-controlled data systems, and regular security auditing — to safeguard all personal information held within our systems.

This Policy should be read alongside the win baje Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and together form the complete legal framework governing your use of the Platform. If you have any concerns about how your data is handled, please contact our support team via Live Chat or at the email address provided in the Contact section of this Policy.

Data We Collect

win baje collects personal data through several channels: information you provide directly during registration and account management, data generated automatically through your use of the Platform, and in limited cases, information received from third-party payment and identity verification providers. The categories of personal data we collect are set out below.

1.1 — Registration Data: When you create a win baje account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to create and manage your account, verify your age (18+ requirement), and communicate with you about your account activity.

1.2 — Identity Verification (KYC) Data: To process your first withdrawal and comply with our anti-money-laundering (AML) obligations, we collect a copy of a valid government-issued photo identification document (National Identity Card or passport) and a selfie photograph. Additional documents such as proof of address or source of funds may be requested where our compliance team considers it necessary.

1.3 — Financial Transaction Data: We record all deposits and withdrawals made through your account, including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), transaction amounts in Bangladeshi Taka (৳ BDT), transaction reference numbers, timestamps, and transaction status. This data is retained for financial reconciliation and AML compliance purposes.

1.4 — Gaming Activity Data: We collect records of all games played, bets placed, outcomes, bonus claims, wagering history, and session durations. This data is used to operate the Platform, calculate winnings, manage bonuses, and monitor for responsible gaming indicators.

1.5 — Technical and Device Data: When you access win baje, our systems automatically collect your IP address, device type and model, operating system and version, browser type and version, screen resolution, time zone setting, and referral URL. This data is used for platform security, fraud detection, and to optimise the Platform experience across different devices.

1.6 — Communications Data: If you contact win baje support via Live Chat, email, or any other channel, we retain records of those communications, including the content of messages, timestamps, and resolution notes. These records are used to manage your support requests and to improve our customer service quality.

How We Use Your Data

win baje processes personal data only for lawful, specified, and legitimate purposes directly related to the operation of the Platform and the fulfilment of our contractual and legal obligations to you. The specific purposes for which we use your personal data are as follows:

• Account Operation: To create, manage, and maintain your win baje account, including processing logins, account updates, password resets, and security alerts.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other supported payment providers in Bangladeshi Taka (৳ BDT).
• Identity Verification: To verify that you meet the minimum age requirement of 18 years and to confirm your identity in compliance with our KYC and AML obligations before processing withdrawals.
• Game and Platform Delivery: To operate casino games, sports betting markets, Pool Rummy sessions, and Swimming game events, and to calculate and credit winnings accurately to your BDT Wallet.
• Bonus and Promotion Management: To administer promotional offers, track wagering requirements, and detect and prevent bonus abuse in accordance with our Terms & Conditions.
• Responsible Gaming Monitoring: To monitor gaming behaviour for indicators of problem gambling, to enforce deposit limits and self-exclusion requests, and to respond to responsible gaming interventions in accordance with our Responsible Gaming Policy.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, multiple-account creation, and other prohibited conduct described in our Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, process account closure requests, and improve the quality of our support services.
• Marketing Communications: To send you promotional emails, SMS notifications, and in-platform messages about win baje bonuses, tournaments, and seasonal offers — but only where you have not opted out of such communications. You may unsubscribe from marketing communications at any time.
• Legal and Compliance Obligations: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce our contractual rights where necessary.
• Platform Improvement: To analyse aggregated and anonymised usage data in order to improve the Platform's design, game offering, payment processing efficiency, and overall player experience.

Data Sharing & Disclosure

win baje does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. However, in order to operate the Platform effectively and meet our legal obligations, we share personal data with a limited set of trusted third-party service providers and, where legally required, with authorised public bodies. All third-party recipients of personal data are contractually required to handle that data securely and in accordance with applicable data protection standards.

3.1 — Payment Service Providers: We share necessary financial transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other payment partners to process your deposits and withdrawals. These providers receive only the minimum data required to complete the relevant transaction.

3.2 — Identity Verification Partners: We may use third-party KYC and identity verification service providers to assist in validating government-issued identification documents submitted during the withdrawal verification process. These providers are bound by strict data processing agreements and may not use your KYC data for any purpose other than identity verification for win baje.

3.3 — Game Content Providers: Licensed game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited technical session data (such as your anonymous Player ID and session token) to operate their games on the Platform. These providers do not receive your personal registration data or financial details.

3.4 — Law Enforcement and Regulatory Disclosure: We may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are legally obliged to do so, where we have received a valid legal order or request, or where we reasonably believe that disclosure is necessary to prevent serious harm, fraud, or criminal activity.

3.5 — Business Transfers: In the event that win baje undergoes a merger, acquisition, or sale of all or part of its business assets, personal data held by the Platform may form part of the transferred assets. In such circumstances, win baje will take reasonable steps to ensure that the acquiring party is bound by data protection obligations consistent with this Policy, and will notify affected players where legally required to do so.

Cookies & Tracking

win baje uses cookies and similar tracking technologies (such as local storage objects and pixel tags) on its website and within its Platform interface. These technologies allow the Platform to function correctly, remember your preferences, maintain your login session, and provide us with analytical data about how players use the service. By continuing to use win baje after being informed of our cookie usage, you consent to the placement of cookies on your device in accordance with this Policy.

4.1 — Strictly Necessary Cookies: These cookies are essential for the Platform to operate. They enable core functions such as session management (keeping you logged in during a gaming session), security token validation, and load balancing across our servers. These cookies cannot be disabled without disrupting your use of the Platform.

4.2 — Functional Cookies: Functional cookies remember your preferences and settings — such as your chosen language display, preferred payment method, and responsible gaming limit configurations — so that you do not need to reconfigure them on each visit.

4.3 — Analytical Cookies: We use analytical cookies to collect anonymised data about how players navigate and interact with the Platform — including which games are most popular, average session durations, and common support queries. This data helps us improve the Platform's design, performance, and game offering. Analytical data is aggregated and does not identify individual players.

4.4 — Security and Fraud Detection Cookies: These cookies assist our security systems in detecting unusual or potentially fraudulent activity — for example, identifying a login attempt from an unfamiliar device or geographic location. They form part of our player account protection infrastructure.

Data Retention

win baje retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply to the principal categories of personal data we hold:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data forms part of an active dispute, legal proceeding, or regulatory investigation, the relevant records will be retained for the duration of that matter regardless of the standard retention schedule.

Data Security

The security of your personal data is a core operational priority at win baje. We implement a comprehensive set of technical and organisational security measures to protect player data against unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to the following:

• 256-bit SSL/TLS Encryption in Transit: All data exchanged between your device and win baje's servers is encrypted using 256-bit SSL/TLS encryption protocols, preventing interception by third parties during transmission.
• Encryption at Rest: Sensitive data — including KYC documents, financial records, and account credentials — is encrypted when stored on win baje's servers using AES-256 encryption.
• Access Controls and Role-Based Permissions: Access to personal data is restricted to authorised win baje personnel on a strict need-to-know basis. Access rights are managed through role-based permission systems and are reviewed regularly.
• Multi-Factor Authentication for Internal Systems: win baje employees and contractors who access internal data systems are required to use multi-factor authentication (MFA). Player-facing 2FA via SMS OTP is strongly recommended and available to all registered players.
• Fraud Detection and Anomaly Monitoring: Automated security monitoring systems operate continuously to detect unusual account activity, suspicious login attempts, and potential fraud indicators in real time.
• Regular Security Audits: win baje's security infrastructure is subject to regular internal audits and periodic independent security assessments to identify and address vulnerabilities proactively.
• Incident Response Procedures: In the event of a data security incident that may affect player personal data, win baje maintains documented incident response procedures, including assessment, containment, notification, and remediation steps. Affected players will be notified in a timely manner where required.

Your Privacy Rights

win baje recognises that players have legitimate rights and interests in relation to their personal data. The following rights are available to all registered players, subject to applicable legal constraints and our operational obligations:

7.1 — Right of Access: You have the right to request a copy of the personal data that win baje holds about you. Access requests will be fulfilled within a reasonable timeframe — typically within 10 BST business days of receipt. We may ask you to verify your identity before fulfilling a data access request to protect against unauthorised disclosure.

7.2 — Right to Rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For registration data corrections, you may update certain details directly within your account settings or by contacting support. KYC data corrections require re-submission of verification documents.

7.3 — Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data where you believe there is no longer a legitimate basis for win baje to retain it. Please note that data erasure requests may be declined — in whole or in part — where retention is required by law (e.g., AML record-keeping obligations) or where data is necessary to resolve an outstanding dispute or enforce our Terms & Conditions.

7.4 — Right to Restrict Processing: You may request that win baje temporarily restrict its processing of your personal data — for example, while an accuracy dispute is being investigated. During a restriction period, win baje will retain your data but limit its active use.

7.5 — Right to Object to Marketing: You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid marketing opt-out request, win baje will cease sending promotional communications within 5 BST business days. Transactional and account-related communications are not affected by marketing opt-outs.

7.6 — Right to Data Portability: Where technically feasible and where win baje holds data processed on the basis of your consent or for the performance of a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.

Policy Updates

win baje reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made in response to shifts in applicable data protection standards, updates to the services we offer, changes in our data processing practices, or other operational or legal considerations.

Where a proposed amendment is considered material — meaning it substantively alters how we collect, use, or share your personal data — win baje will provide at least 7 days' advance notice by email to the address registered on your account and via a prominent in-platform notification. Non-material changes (such as typographical corrections, restructured formatting, or minor clarifications that do not affect your rights or our data practices) may be applied immediately without prior notice.

The "Last Updated" date displayed at the top of this page reflects the date on which the most recent version of this Privacy Policy took effect. We encourage you to revisit this page periodically to stay informed of how win baje handles your personal data. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree to an updated Privacy Policy, you should stop using the Platform and may request account closure in accordance with the Terms & Conditions.

In the event of any conflict or inconsistency between the English-language version of this Privacy Policy and any summarised or translated version, the English-language version shall take precedence in all respects.