jwin Privacy Policy — How We Handle Your Data

Our Privacy Commitments

jwin operates as a Bangladesh-focused platform and takes the privacy of its players seriously. The following six commitments summarise how jwin approaches data protection. The full details are in the numbered sections below.

1Introduction

jwin (accessible at jwin.asia) is an online casino and sports betting platform serving players in Bangladesh. jwin is the data controller for all personal information collected through the jwin platform. This Privacy Policy describes the types of personal data jwin collects from users, the purposes for which it is processed, the parties with whom it may be shared, and the measures jwin takes to protect it.

By registering an account with jwin, making a deposit, or using any feature of the platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you should not use the jwin platform. This policy should be read together with jwin's Terms & Conditions, which are published at jwin.asia/terms-conditions.

2Information We Collect

jwin collects personal data in three main ways: information you provide directly, information generated by your use of the platform, and information obtained from third parties in connection with payment processing and identity verification.

Information You Provide Directly

• Registration data: your full legal name, date of birth, mobile phone number, and any other information required to create a jwin account. This information is mandatory — you cannot register without providing it.
• KYC documents: copies of your National ID card, passport, driving licence, proof of address, and payment method ownership documents that you submit as part of the identity verification process.
• Communications: messages, emails, or chat transcripts from your interactions with jwin's customer support team, including complaints, requests, and feedback.
• Responsible gaming inputs: self-exclusion requests, deposit limit settings, and session time-out preferences you submit through jwin's responsible gaming tools.

Information Generated by Platform Use

• Betting and gaming activity: records of bets placed, games played, stakes wagered, outcomes, winnings, and bonus claims. This data is required for account management, dispute resolution, and regulatory compliance.
• Transaction records: all deposit and withdrawal transactions, including the payment method used, amount, date, time, and transaction reference. These records are retained for anti-money-laundering compliance and audit purposes.
• Technical data: your IP address, device type, browser type and version, operating system, screen resolution, and session timestamps. This data is used for fraud detection, security monitoring, and platform optimisation.

Information from Third Parties

• Payment processor data: confirmation of payment transactions, payment method ownership verification results, and fraud risk signals provided by bKash, Nagad, Rocket, Upay, Visa, and Mastercard's payment infrastructure.
• Identity verification providers: results of automated identity checks conducted by third-party KYC providers, including document authenticity assessment and biometric match scores where applicable.
• Game providers: game session data, RNG outcomes, and technical game logs provided by certified game studios. This data is used to verify game outcomes in the event of disputes or technical investigations.

3How We Use Your Information

jwin processes personal data only for the purposes set out below. We do not use your data for any purpose not listed in this policy without first obtaining your explicit consent.

4Legal Basis for Processing

jwin processes your personal data on one or more of the following legal grounds:

• Contractual necessity: processing required to perform the contract between you and jwin — including registering your account, processing deposits and withdrawals, and providing access to games and betting markets.
• Legal obligation: processing required for jwin to comply with applicable laws and regulations, including anti-money-laundering obligations, age verification requirements, and data retention rules mandated by applicable law.
• Legitimate interests: processing undertaken for jwin's legitimate business interests, including fraud detection and prevention, platform security, responsible gaming monitoring, and improving the platform's services — where those interests are not overridden by your privacy rights.
• Consent: processing based on your explicit consent, such as where you opt in to receiving promotional communications from jwin. You may withdraw consent at any time by contacting [email protected], without affecting the lawfulness of processing before withdrawal.

5Sharing Your Information

jwin does not sell, rent, or trade your personal data to any third party. jwin shares personal data only with the categories of recipient described below, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for the security of data within their own systems.
• KYC and identity verification providers: third-party providers who assist jwin with age verification, identity document checks, and anti-money-laundering screening. These providers are contractually bound to process data only on jwin's instructions and for no other purpose.
• Game providers: certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session data necessary to deliver and certify game outcomes. Game providers do not receive your identity or financial data beyond what is required for game delivery.
• Regulatory and law enforcement authorities: jwin may disclose personal data to relevant government bodies, regulators, or law enforcement agencies in Bangladesh where required to do so by law or by a valid legal order. jwin will not disclose more data than is required to satisfy the specific legal obligation.

6Payment Data and Financial Information

jwin processes payment data in connection with deposits and withdrawals made via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. jwin does not store full card numbers on its own servers. Card payment data is handled directly by the card processor's secure environment. For mobile financial service transactions (bKash, Nagad, Rocket, Upay), jwin retains records of transaction references, amounts, dates, and the mobile number associated with the transaction for audit and compliance purposes.

All financial transaction data is retained by jwin for a minimum period required under applicable anti-money-laundering and financial record-keeping obligations. During this retention period, financial data is stored in encrypted form and access is restricted to authorised jwin compliance personnel only. Transaction records are not accessible to marketing, customer-facing, or product teams unless specifically required for account dispute resolution.

7Cookies and Tracking Technologies

jwin uses cookies and similar tracking technologies on the platform to ensure it functions correctly, to keep you securely logged in between sessions, and to analyse platform usage patterns that help improve the service. jwin does not use third-party advertising cookies or share cookie data with advertising networks.

Types of Cookies Used

• Essential cookies: required for the platform to function. These include session authentication cookies, security tokens, and preference cookies. You cannot opt out of essential cookies without affecting your ability to use jwin.
• Analytics cookies: used to understand how players navigate the platform, which pages are visited most, and where technical errors occur. Analytics data is aggregated and not linked to individual player identities.
• Security cookies: used to detect and prevent fraudulent sessions, bot activity, and unauthorised account access attempts. These cookies record signals such as mouse movement patterns, typing cadence, and device fingerprint to distinguish human users from automated scripts.

You may manage cookie preferences through your mobile browser settings. Blocking all cookies may prevent some platform features from working correctly. For questions about specific cookies used on jwin, please contact [email protected].

8Data Retention

jwin retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data and KYC documents: retained for the lifetime of your jwin account plus a minimum of 5 years following account closure, in accordance with standard financial record-keeping requirements applicable to online platforms operating in Bangladesh.
• Transaction records: retained for a minimum of 5 years from the date of each transaction, in line with anti-money-laundering record-keeping obligations. Transaction records may be retained for longer where they are subject to an active investigation or legal proceeding.
• Customer support communications: retained for 3 years from the date of each communication, unless the communication is relevant to an unresolved dispute or compliance matter, in which case it is retained until that matter is fully resolved.

When the applicable retention period expires and there is no legal basis for continued processing, jwin will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual. Anonymised, aggregated data (such as aggregate betting statistics) may be retained indefinitely as it no longer constitutes personal data.

9Data Security

jwin implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and jwin's servers, ensuring that your personal and financial data cannot be intercepted in transit.
• Encrypted data storage: personal data held on jwin's systems is stored in encrypted databases. Access to stored data is restricted to authorised personnel using role-based access controls, with all access events logged for audit review.
• Fraud and anomaly detection: jwin's security systems continuously monitor account activity, transaction patterns, and login events for signs of fraudulent or suspicious behaviour. Accounts flagged by automated systems are reviewed by jwin's security team.
• Staff access controls: jwin employees who have access to personal data are subject to confidentiality obligations and receive data protection training. Access to sensitive data is granted on a need-to-know basis only.

No security system is completely impenetrable. In the event of a data breach that is likely to result in a risk to your rights or freedoms, jwin will notify affected players promptly and take all reasonable steps to contain and remediate the breach. If you suspect that your jwin account has been compromised, please contact [email protected] immediately.

10Your Rights Over Your Personal Data

As a jwin player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact [email protected] with your registered mobile number and a description of your request. jwin will respond within 5 business days:

• Right of access: you may request a copy of all personal data jwin holds about you, including the categories of data, the purposes for which it is processed, and the parties with whom it has been shared.
• Right of rectification: if any personal data jwin holds about you is inaccurate or incomplete, you may request that it be corrected. For account data such as your name or date of birth, jwin may require supporting documentation before making any correction.
• Right of erasure: subject to jwin's legal retention obligations, you may request the deletion of your personal data. jwin cannot delete data it is legally required to retain — such as transaction records subject to anti-money-laundering retention periods — but will delete all other personal data upon a valid erasure request.
• Right to restrict processing: you may request that jwin restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you believe jwin's processing is unlawful but you do not want the data deleted.
• Right to withdraw consent: where jwin processes your data based on your consent (for example, for promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

jwin will make every reasonable effort to fulfil your data rights request within 5 business days of receipt. In complex cases, jwin may require up to 30 days and will notify you if an extension is needed. jwin may ask you to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised person.

11Children and Underage Users

jwin's platform is strictly for adults aged 21 and above. jwin does not knowingly collect personal data from any person under the age of 21. As part of the registration and KYC process, jwin verifies the age of all players before permitting any real-money activity. If jwin discovers that it has inadvertently collected personal data from an underage individual, that data will be deleted immediately and the associated account will be permanently closed.

12Changes to This Privacy Policy

jwin reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, jwin's data processing practices, or the services offered on the platform. When changes are made, the updated policy will be published at jwin.asia/privacy-policy with a revised effective date. Material changes — those that significantly affect your rights or how your data is used — will be communicated to registered players via their registered mobile number or by a prominent notice displayed upon login.

Your continued use of jwin after a revised Privacy Policy has been published constitutes your acceptance of the changes. If you do not accept the revised policy, you must stop using the platform. You may request account closure by contacting [email protected].

13Contact jwin About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by jwin, please contact the jwin support team at [email protected]. Please include your registered mobile number, your full name as registered on your account, and a clear description of your privacy request or concern so the team can assist you efficiently.

Privacy-related requests are handled by jwin's dedicated compliance team. jwin aims to acknowledge all privacy requests within 2 business days and to provide a full response within 5 business days. Where a request is complex or involves a large volume of data, jwin may require up to 30 days and will inform you of this within the initial 5-day acknowledgement window.