bbwin Privacy Policy – How We Handle Your Data

This Privacy Policy applies to all personal data collected, stored, and processed by bbwin in connection with your use of the bbwin platform, accessible at https://bbwin.io, including all associated services, mobile interfaces, and customer support channels. It applies to all registered players and visitors located in Bangladesh and any other jurisdiction from which the platform is accessible.

bbwin is the data controller in respect of all personal data collected through the platform. This means bbwin determines the purposes and means by which your personal data is processed. Any questions about this Policy or about how bbwin handles your data should be directed to the bbwin data support team at [email protected].

By registering an account on bbwin or continuing to use the platform after the effective date of this Policy, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein. Where processing is based on consent, you retain the right to withdraw that consent at any time — see Section 9 for your full rights.

bbwin collects personal data only to the extent necessary to provide our services, comply with legal obligations, and maintain platform integrity. The categories of data we collect are set out below.

bbwin uses collected personal data strictly for the purposes described in this Policy. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which we process your personal data are:

• Account Management: Creating and maintaining your bbwin player account, managing login authentication, and processing account settings changes.
• Service Delivery: Processing bets, settling game outcomes, crediting winnings to your wallet, and facilitating deposits and withdrawals via bKash, Nagad, Rocket, and Upay.
• Identity and Age Verification: Confirming that you meet the mandatory 21+ age requirement and verifying your identity to prevent fraud and comply with our platform policies.
• Fraud Prevention and Security: Monitoring transactions and account activity for signs of fraud, money laundering, or prohibited conduct as defined in the Terms & Conditions. This includes automated pattern analysis and manual review where necessary.
• Responsible Gaming: Administering the deposit limits, session controls, cooling-off periods, and self-exclusion settings you configure, and monitoring for signs of problem gambling behaviour where you have engaged our responsible gaming tools.
• Customer Support: Responding to your support enquiries, resolving disputes, processing complaints, and managing formal complaints under the complaints procedure.
• Marketing Communications: Sending you promotional offers, bonus notifications, and seasonal campaign communications (Eid specials, BPL promotions, etc.) where you have given explicit consent. You may withdraw consent at any time.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the bbwin platform, optimise game selection, and enhance the user experience for players in Dhaka, Chittagong, Sylhet, and across Bangladesh.
• Legal Compliance: Meeting our obligations under applicable laws, responding to lawful requests from competent authorities, and maintaining records required for regulatory and audit purposes.

bbwin processes your personal data on the following legal bases, depending on the specific purpose of each processing activity:

• Contractual Necessity: The majority of processing activities — including account management, payment processing, bet settlement, and customer support — are necessary for the performance of the contract between you and bbwin (i.e., the Terms & Conditions). Without this processing, bbwin cannot provide its services.
• Legal Obligation: Identity verification (KYC), transaction record retention, and cooperation with lawful authority requests are carried out to comply with applicable legal and regulatory requirements.
• Legitimate Interests: Fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring are conducted on the basis of bbwin's legitimate interests in operating a safe, fair, and sustainable platform. These interests do not override your fundamental privacy rights.
• Consent: Marketing communications and the use of non-essential cookies are processed only where you have given explicit, freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bbwin does not sell, rent, or broker your personal data to third parties. Data is shared only in the following limited and controlled circumstances:

• Payment Providers: Transaction data is shared with bKash, Nagad, Rocket, and Upay to the extent necessary to process deposits and withdrawals. Each provider operates under its own privacy and data protection terms, which govern their handling of your information.
• KYC Verification Partners: Identity documents submitted for verification are processed by accredited third-party KYC verification service providers who operate under strict data processing agreements with bbwin. These providers are contractually prohibited from using your data for any purpose other than identity verification on behalf of bbwin.
• Game Providers: Technical session data is shared with game providers (including Evolution Gaming, Ezugi, Pragmatic Play, Spribe, and Microgaming) to facilitate gameplay, resolve disputes, and maintain game integrity. These providers receive only the minimum data required for these purposes.
• Legal and Regulatory Authorities: bbwin may disclose personal data to competent governmental or regulatory authorities where required by applicable law, court order, or legally binding regulatory directive. bbwin will, where legally permitted to do so, inform you of any such disclosure.
• Professional Advisers: bbwin's legal, accounting, and auditing advisers may access limited account or transaction data under strict confidentiality obligations where necessary to provide their professional services.

bbwin uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit bbwin. The types of cookies used on the bbwin platform are:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Remember your preferences such as your preferred language settings and account display options to personalise your experience on return visits.
• Analytics Cookies: Used to collect anonymised, aggregated data about how players interact with the bbwin platform (pages visited, session duration, feature usage). This data helps bbwin identify performance bottlenecks and improve the user experience. Analytics cookies are only placed with your consent.
• Marketing Cookies: Used to track whether you arrived at bbwin from a partner or referral source, and to measure the effectiveness of bbwin promotional campaigns. These are only placed with your explicit consent and can be withdrawn at any time.

You can manage your cookie preferences at any time through your browser settings. Note that disabling cookies beyond the strictly necessary category may affect the functionality of certain platform features. For detailed instructions on managing cookies in your specific browser, consult your browser's help documentation.

bbwin retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention schedule is as follows:

After the applicable retention period expires, bbwin securely deletes or permanently anonymises personal data so that it can no longer be associated with any identifiable individual. Data that has been fully anonymised falls outside the scope of this Privacy Policy and may be retained indefinitely for statistical purposes.

bbwin employs a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and the bbwin platform is encrypted using industry-standard TLS/SSL protocols, ensuring that your session data and credentials cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive data fields — including passwords, identity document references, and payment method tokens — are stored using strong, one-way cryptographic hashing or encryption algorithms. Plain-text storage of sensitive credentials is strictly prohibited within bbwin's systems.
• Access Controls: Access to personal data within bbwin's internal systems is restricted on a strict need-to-know basis. Staff are granted only the minimum access permissions required to perform their specific role. All internal access is logged and subject to regular audit.
• Intrusion Detection and Monitoring: bbwin operates continuous network monitoring and intrusion detection systems to identify and respond to anomalous activity in real time.
• Vulnerability Management: The bbwin platform undergoes regular security assessments and penetration testing by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data breach that poses a risk to player rights, bbwin will notify affected players as promptly as practicable and take all reasonable steps to contain and remediate the breach.

While bbwin takes all reasonable and practicable steps to protect your data, no online platform can guarantee absolute security. Players are strongly encouraged to use a strong, unique password for their bbwin account, to enable any available two-factor authentication, and to never share their login credentials with any other person.

As a bbwin player, you have the following rights in respect of your personal data. These rights may be exercised at any time by contacting [email protected] with the subject line "Data Rights Request – [Your Username]":

• Right of Access: You have the right to request a copy of all personal data that bbwin holds about you. bbwin will provide this within 30 days of a verified request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by bbwin. Where data is inaccurate, please also update your account profile directly where possible.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data. bbwin will action erasure requests within 30 days, subject to mandatory legal retention obligations. Data we are legally required to retain (e.g., financial transaction records) cannot be deleted until the mandatory retention period expires.
• Right to Restriction of Processing: You may request that bbwin temporarily restricts the processing of your data — for example, while a correction request is being verified — without requesting full deletion.
• Right to Data Portability: Where technically feasible, you may request your registration and activity data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to marketing, bbwin will cease sending marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

The bbwin platform is strictly intended for adults aged 21 years and above. bbwin does not knowingly collect personal data from any individual under the age of 21. Our registration process includes mandatory age declaration, and all accounts are subject to KYC age verification before withdrawal privileges are activated.

If bbwin becomes aware, through KYC review, player reporting, or any other means, that an account has been registered by or is being used by an individual under the age of 21, bbwin will immediately suspend the account, commence a full review, forfeit all account balances in accordance with the Terms & Conditions, and permanently close the account. Any deposits made by a minor will be handled in accordance with applicable law.

Parents and guardians who have reason to believe that a minor in their care has registered on bbwin should contact [email protected] immediately. bbwin takes all such reports seriously and will investigate and act on them promptly.

bbwin reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, the services we offer, or applicable legal requirements. Where changes are material — meaning they significantly affect how your data is processed or the rights available to you — bbwin will provide at least 14 days' advance notice via the mobile number or email address associated with your account, and will display a prominent notice on the bbwin platform.

For minor, non-material updates (such as corrections to wording, clarifications, or formatting changes), bbwin will update the "Last Updated" date at the top of this Policy and the change will take effect upon publication. We encourage you to review this Policy periodically to remain informed about how bbwin protects your information.

Continued use of the bbwin platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the revised Policy, you must discontinue use of the platform and may close your account by contacting [email protected].

For all privacy-related enquiries, data rights requests, consent withdrawals, or concerns about how bbwin handles your personal data, please contact our data support team using the details below. All communications must be in English to ensure accurate and efficient processing.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "Data Rights Request – [Your Username]"
• Subject Line for Privacy Concerns: "Privacy Concern – [Brief Description]"
• Response Time: bbwin acknowledges all data-related enquiries within 48 hours (Bangladesh Standard Time, BST UTC+6) and aims to provide a full response within 30 days.