Privacy Policy — How winclash Handles Your Data

01 Data We Collect

winclash collects personal data from players in Bangladesh through several channels: directly when you register an account or submit documentation, automatically when you use the platform, and occasionally from third-party verification services. Below is a comprehensive overview of the categories of data we collect and the specific data points within each category.

1.1 Registration and Identity Data

When you create a winclash account, we collect the following information:

• Full legal name (as it appears on your National Identity Card or Passport)
• Date of birth (to verify that you meet the 18+ age requirement)
• Email address (used for account communications and verification)
• Mobile phone number registered in Bangladesh (for OTP authentication)
• Preferred username and hashed password (we never store plaintext passwords)
• Residential address in Bangladesh (city, district — e.g., Dhaka, Chittagong, Sylhet)

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer process, we may request and store copies of:

• National Identity Card (NID) — front and back
• Passport biographical page
• Proof of address (utility bill, bank statement, or similar document)
• Screenshot or confirmation of your bKash, Nagad, or Rocket account details

These documents are stored in encrypted form and accessed only by authorised personnel for the purpose of identity verification and fraud prevention.

1.3 Financial Transaction Data

When you make deposits or withdrawals on winclash, we collect:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, bank transfer)
• Mobile wallet number or bank account reference associated with each transaction
• Transaction amounts in Bangladeshi Taka (BDT)
• Transaction timestamps and reference numbers
• Deposit and withdrawal history across your account lifetime

1.4 Gaming and Betting Activity Data

To operate the platform and maintain accurate records, we log:

• Games played, wagers placed, and outcomes recorded
• Sports betting selections, stake amounts, and settlement results
• Session start and end times
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated)
• Bonus activations, wagering progress, and expiry events

1.5 Technical and Device Data

When you access winclash from any device, our systems automatically collect:

• IP address and approximate geolocation (city/country level)
• Device type, operating system, and browser version
• Pages visited, time on page, and navigation paths within the platform
• Error logs and crash reports (used for debugging and platform improvement)

02 How We Use Your Data

winclash uses the personal data it collects for clearly defined, legitimate purposes. We do not use your data in ways that are inconsistent with the purposes described in this Privacy Policy. The following table summarises the primary uses of each data category.

2.1 Responsible Gaming Monitoring

winclash uses your gaming activity data — including session frequency, wager amounts, deposit patterns, and use of responsible gaming tools — to identify players who may be showing signs of problem gambling behaviour. This monitoring is conducted in the interest of player welfare and forms a core part of our commitment to responsible gaming. Where patterns of concern are identified, our team may reach out to the affected player with information about available support tools or self-exclusion options.

2.2 Marketing Communications

If you have provided explicit consent during registration, winclash may send you promotional communications about offers, bonuses, and platform updates relevant to your interests as a player in Bangladesh. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support@winclash. Withdrawal of marketing consent does not affect the processing of your data for other purposes described in this section.

03 Data Sharing & Third Parties

winclash does not sell, rent, or trade your personal information to any external party for commercial gain. However, in order to deliver our services effectively, we do share limited categories of data with a carefully selected set of third-party service providers and partners. All such sharing is governed by data processing agreements that require recipients to handle your data with equivalent standards of care to those described in this Privacy Policy.

3.1 Payment Processing Partners

To process your deposits and withdrawals, winclash shares relevant financial transaction data with payment processing partners including bKash, Nagad, Rocket, Upay, and supported banking institutions such as Dutch-Bangla Bank and City Bank. These partners receive only the minimum data necessary to execute your requested transaction and are not permitted to use it for any other purpose.

3.2 Identity Verification Services

winclash may use third-party identity verification providers to assist with KYC document checks. These providers process the identity documents you submit solely for the purpose of verifying the information you have provided and confirming your eligibility to hold a player account. Verification data is not retained by these providers beyond the period required to complete the verification process.

3.3 Game Software Providers

The games available on winclash are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers operate their own game servers and may receive certain anonymised session data (such as player session tokens and game round results) for the purpose of delivering game content and resolving technical disputes. Game providers do not receive your full personal profile or payment details.

3.4 Analytics and Platform Performance

winclash uses anonymised and aggregated platform usage data to understand how players interact with the platform, identify areas for improvement, and optimise the user experience. Where third-party analytics tools are employed, they receive only anonymised data that cannot be used to identify individual players.

3.5 Legal and Regulatory Disclosure

winclash may be required to disclose personal data to competent authorities, law enforcement agencies, or regulators in response to a lawful request, court order, or legal obligation. In all such cases, we will disclose only the minimum data required to comply with the relevant legal requirement and will, where legally permissible, notify the affected player of the disclosure.

04 Cookies & Tracking Technologies

winclash uses cookies and similar tracking technologies to make the platform function correctly, to remember your preferences, and to understand how players use the platform so that we can continue to improve it. This section explains the types of cookies we use and the purpose each serves.

4.1 Strictly Necessary Cookies

These cookies are essential for the winclash platform to operate. Without them, core functions such as account login, session management, deposit processing, and game loading would not work. These cookies cannot be disabled as they are integral to platform delivery. They include:

• Session authentication tokens (keeping you securely logged in during your visit)
• CSRF protection tokens (preventing cross-site request forgery attacks)
• Load balancing identifiers (ensuring stable platform performance during peak periods)

4.2 Functional Cookies

Functional cookies allow winclash to remember choices you have made on the platform — such as your preferred language, display settings, and responsible gaming limits — so that you do not have to reconfigure them on each visit. These cookies collect no personal data beyond what is needed to deliver the specific functionality they support.

4.3 Analytics Cookies

winclash uses anonymised analytics cookies to collect aggregate information about how players navigate and use the platform. This data helps us understand which features are popular, where players encounter friction, and how overall platform performance can be improved. Analytics cookies do not identify individual players and the data they generate is reviewed only in aggregated form.

4.4 Managing Your Cookie Preferences

You may adjust your cookie preferences at any time through the settings of your web browser. Most modern browsers allow you to block, delete, or restrict specific categories of cookies. Please be aware that disabling strictly necessary cookies will prevent certain platform features — including login and payment processing — from functioning correctly. winclash does not use third-party advertising cookies or cross-site tracking technologies of any kind.

05 Data Retention & Storage

winclash retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to maintain accurate financial and gaming records, and to comply with applicable legal and regulatory obligations. Once data is no longer required for any of these purposes, it is securely deleted or irreversibly anonymised.

5.1 Retention Periods by Data Category

5.2 Storage Location and Security

All personal data collected by winclash is stored on secured servers protected by industry-standard encryption, access controls, and intrusion detection systems. Access to personal data is restricted to authorised winclash personnel who have a legitimate operational need to access it. All staff with access to personal data are subject to confidentiality obligations.

5.3 Data Minimisation on Deletion

Where retention periods have elapsed and deletion is triggered, winclash applies a data minimisation approach: all directly identifying data points (name, NID number, email, phone number) are deleted first, and any remaining aggregated or anonymised records are retained only in a form that cannot be linked back to any identifiable individual.

06 Your Privacy Rights

As a player on the winclash platform, you hold meaningful rights over your personal data. winclash is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described in this section, please contact us at support@winclash with the subject line "Data Rights Request" and a description of the right you wish to exercise.

6.1 Right of Access

You have the right to request a copy of the personal data that winclash holds about you. Upon receipt of a verified access request, we will provide you with a summary of the data categories we hold, the specific data points within each category, the purposes for which your data is being processed, and the third parties with whom it has been shared. We aim to respond to access requests within 30 days.

6.2 Right to Rectification

If any personal data that winclash holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections — such as updates to your contact email or mobile number — can be made directly through your account settings. Corrections to identity data (name, date of birth) require submission of supporting documentation via the support team.

6.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (where consent was the legal basis for processing), or where you object to processing and no overriding legitimate grounds exist. Please note that winclash may be required to retain certain data categories (particularly financial transaction records) for mandatory legal retention periods, and erasure requests cannot override these obligations.

6.4 Right to Restrict Processing

Where you have contested the accuracy of your data, or where processing is unlawful but you prefer restriction over erasure, you may request that winclash restrict the processing of your data while the matter is under review. During a restriction period, we will continue to store your data but will not actively process it for any other purpose.

6.5 Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes. If you exercise this right, winclash will immediately cease sending you marketing communications. This right can be exercised at any time through your account settings or by contacting support@winclash.

07 Data Security Measures

winclash takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures designed to protect your information against unauthorised access, loss, alteration, or disclosure. The following describes the primary security controls in place on the winclash platform.

7.1 Encryption in Transit and at Rest

All data transmitted between your device and winclash is encrypted using TLS 1.2 or higher (256-bit SSL). Sensitive data stored in our systems — including identity documents, payment details, and account credentials — is encrypted at rest using industry-standard encryption algorithms. Passwords are never stored in plaintext; they are hashed using a modern cryptographic hashing algorithm with unique per-account salting.

7.2 Access Controls

Access to personal data within the winclash organisation is strictly controlled on a need-to-know basis. Employees and contractors are granted only the minimum level of data access required to perform their specific role. All access events are logged and subject to periodic review. Access rights are revoked immediately upon termination of employment or contract.

7.3 Fraud Detection and Monitoring

winclash operates continuous automated monitoring systems that scan for unusual account activity, suspicious login patterns, anomalous transaction behaviour, and potential security threats. Where a security concern is identified, the affected account may be temporarily suspended pending investigation, and the account holder will be notified by email.

7.4 Data Breach Response

In the event of a data breach that poses a risk to the rights and freedoms of players, winclash will take immediate containment action and notify affected players as promptly as practically possible. Notification will be delivered to the email address registered on your account and will include a description of the breach, the categories of data affected, the steps winclash has taken in response, and any actions you are advised to take to protect yourself.

7.5 Your Role in Security

While winclash maintains robust security infrastructure, the security of your account is also partly your responsibility. You should use a strong, unique password for your winclash account, enable two-factor authentication where available, never share your login credentials with any other person, and log out of your account when using a shared or public device. If you suspect any unauthorised activity on your account, contact support@winclash immediately.

08 Policy Updates & Contact

winclash reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, legal obligations, or data processing practices. The "Effective" date displayed at the top of this page and in the hero section above reflects the date of the most recent revision to this Policy.

8.1 Notification of Changes

Where a change to this Privacy Policy is material — meaning it significantly affects the way we collect, use, or share your personal data — winclash will notify registered players via the email address associated with their account at least 14 days before the updated Policy takes effect. Your continued use of the winclash platform after the effective date of a revised Policy constitutes your acceptance of the changes.

8.2 Minor Updates

Non-material updates — such as corrections of typographical errors, clarifications of existing language, or changes to contact information — may be made without advance notice. The "Effective" date on this page will be updated to reflect any revision, however minor.

8.3 Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way winclash handles your personal data, please contact us using the details below. Our support team is available around the clock and will respond to all privacy-related enquiries in English.

• Email: support@winclash (plain text — not a clickable link)
• Subject line for privacy queries: "Privacy Policy Enquiry" or "Data Rights Request"
• Response time: Within 5 business days of receipt
• Support language: English
• Availability: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)