Reference

How We Handle Your Privacy at winclub

We collect only what we need to run your account, process your bKash, Nagad or Rocket transactions, and keep your wallet secure.

Account Data ProtectionPayment Info HandlingYour Rights ExplainedCookie PracticesContact Paths
winclub How We Handle Your Privacy at winclub
PRIVACY HELP CHANNELS

How to Reach Us About Your Data

If you have a question about how your information is stored, want to request a copy of your data, or need something corrected, our support team handles privacy queries directly. You do not need to fill a separate form — just reach out through any of these paths and mention it is a data or privacy request.

Live Chat Open live chat from any page on winclub. Tag your message as a privacy request and the agent will route it to the data team.
Email Support Send your privacy query to our support email address listed in your account settings. Include your registered phone number or account ID so we can verify ownership before disclosing or modifying any records. Expect a response within a reasonable timeframe.
In-Account Request Log in, head to account settings, and look for the data request section. From there you can trigger an automated export of your transaction history, update personal details, or flag specific records you want reviewed by our privacy team.
DATA HANDLING PRACTICES

How We Protect and Manage Your Information

Your account holds sensitive details — payment credentials, identity documents, transaction history. We treat every piece of that data with operational care, not marketing spin. Here is what that looks like in practice across six areas that matter most to you as a winclub account holder.

Encryption in Transit and Storage

All data moving between your device and our servers travels through SSL-encrypted channels. Stored records — including your bKash or Nagad transaction logs — sit in encrypted databases.

Cookie and Tracking Practices

We use cookies to keep you logged in, remember device preferences, and measure which lobby sections load correctly on mobile. We do not run third-party advertising trackers.

Account Security Layers

Your account is protected by password plus OTP verification sent to your registered mobile number. If you access winclub from a new device, we prompt re-verification before allowing withdrawals.

Data Retention Windows

Active account records stay as long as you use your account. After closure, we retain transaction and identity data only for the period local regulations require — then securely delete or anonymise it.

Who Sees Your Data

Payment processors (bKash, Nagad, Rocket gateways) receive transaction details to clear your deposits and withdrawals. Identity verification partners see your submitted documents during the KYC step.

Requesting Changes or Deletion

Where local law grants you the right to correct, export, or delete personal data, we honour those requests through live chat or email.

Common Questions About Your Data Rights

These are real questions our support team fields from account holders in Bangladesh. If yours is not listed, reach out through live chat or email and reference your account ID so we can answer quickly.

We collect your name, email address, phone number, and date of birth during registration. If you deposit through bKash, Nagad, or Rocket, we also record the transaction reference numbers tied to those payments so we can match them to your account wallet.

Only with the payment gateway processing your transaction — for example, the bKash or Nagad clearing partner that completes your deposit. We never sell payment data to advertisers or unrelated third parties. Sharing beyond that happens only if required by law in your jurisdiction.

Log into your account, open the settings section, and submit a data export request. Alternatively, message live chat or email support with the subject line 'data export' and your account ID. We will compile and deliver the file to your registered email after verifying ownership.

Yes. Send a deletion request through live chat or email. After verifying your identity, we close the account and begin removing personal records. Some transaction data may be retained for the period local law mandates, but everything else is securely erased once that window passes.

We use session cookies to keep you logged in, preference cookies for language and device settings, and analytics cookies to monitor page performance. You can block or clear them through your browser. Blocking session cookies means you will need to log in each time you visit.

Your account requires password plus OTP sent to your registered number. Without that OTP, no one can authorise withdrawals or change account details from a new device. Contact support immediately to freeze your account if you suspect unauthorised access after losing your phone.

We send account-related notifications — deposit confirmations, withdrawal updates, policy changes — by default. Promotional messages are separate and opt-in. You can toggle marketing communications off in your account notification settings without affecting transactional alerts.

Retention depends on the regulatory requirements in your eligible region. Typically, transaction records are held for a mandated period post-closure, then securely deleted or anonymised. Ask our support team for the specific window that applies to your jurisdiction.

We notify you via your registered email or an in-account message before material changes take effect. The updated policy is posted on this page with a revision note. If you disagree with a change, you can request account closure and data deletion through our support channels.

No. Once your KYC is approved, the verification partner confirms your status to us and the original document image is retained only as long as regulations require. After that retention window, the image is permanently deleted from both our systems and the verification partner's storage.