Privacy Policy

Introduction

win27 ("we", "us", "our") operates the online casino and sports betting platform at win27.bio. We take the privacy of our users seriously. This Privacy Policy describes how we collect, process, store, and protect the personal information of individuals who visit or use our platform, including registered account holders and unregistered visitors.

By accessing win27 or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please do not use our platform.

Privacy at a Glance

1. Information We Collect

We collect information about you in the following ways:

• Registration data: your name, date of birth, email address, mobile number, and the login credentials you create when opening a win27 account.
• Identity verification data: copies of government-issued identification documents and proof of address, collected when required by our KYC (Know Your Customer) obligations.
• Financial data: transaction records including deposit amounts, withdrawal requests, payment method references (e.g., masked bKash or Nagad wallet numbers), and account balance history.
• Gaming activity data: bet history, game session logs, win and loss records, bonus usage, and responsible gaming tool settings.
• Technical data: IP address, device type, operating system, browser type, session duration, pages visited, and referring URLs, collected automatically when you access our platform.
• Communications data: records of any support queries, emails, or chat messages you send to us, retained for quality assurance and dispute resolution purposes.

We collect only the information that is necessary for the purposes described in this policy. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, or religious beliefs unless specifically required by law.

2. How We Use Your Information

win27 processes your personal data for the following purposes:

• Account management: to create, maintain, and secure your win27 account, verify your identity, and manage your login access.
• Transaction processing: to facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests to your nominated wallet or card.
• Legal and regulatory compliance: to fulfil our KYC obligations, anti-money laundering screening requirements, age verification duties, and any other obligations imposed by applicable law.
• Platform improvement: to analyse usage patterns, diagnose technical issues, and improve the performance, security, and content of the win27 platform.
• Customer support: to respond to your enquiries, resolve disputes, investigate complaints, and maintain a record of our interactions with you.
• Responsible gaming: to monitor gaming behaviour and apply responsible gaming interventions such as deposit limits, session reminders, and self-exclusion when triggered by the user or required by our internal safeguarding procedures.

3. Payment Data and Financial Information

win27 takes particular care with financial data. When you make a deposit or request a withdrawal, your payment details are transmitted directly to the relevant payment processor (bKash, Nagad, Rocket, Upay, or card network). win27 does not store full payment card numbers or complete mobile wallet credentials on its own servers.

Transaction records — including amounts, dates, and masked payment method references — are retained for accounting, compliance, and dispute resolution purposes in accordance with our data retention schedule. These records may be reviewed by our internal compliance team or disclosed to regulatory authorities upon lawful request.

4. Sharing Your Information

win27 does not sell your personal data. We may share your information with third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network partners receive the transaction data necessary to process your deposits and withdrawals. Each processor is bound by its own data protection obligations.
• Technology and game providers: game studios (including Evolution Gaming, Ezugi, Pragmatic Play, Spribe, and others) receive session data necessary to deliver game content and determine outcomes. This data does not include your full identity or financial details.
• Regulatory and law enforcement authorities: we may disclose personal data where required to do so by applicable law, court order, or at the request of a competent regulatory or law enforcement authority. We will not notify you in advance if doing so would obstruct a lawful investigation.
• Business transfers: in the event of a merger, acquisition, or sale of all or substantially all of win27's assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

All third-party service providers who process personal data on our behalf are required by contract to implement appropriate technical and organisational security measures and to process that data only in accordance with our instructions.

5. Cookies and Tracking Technologies

win27 uses cookies and similar tracking technologies to operate the platform effectively and improve your experience. The types of cookies we use include:

• Essential cookies: required for the platform to function correctly, including session authentication, security tokens, and load-balancing identifiers. These cannot be disabled without preventing the platform from working.
• Analytics cookies: used to understand how users navigate the platform, which pages are most visited, and where technical errors occur. This data is aggregated and anonymised wherever possible.
• Preference cookies: store your language preference, display settings, and other platform customisations so that they persist between sessions.

You can manage cookie preferences through your mobile browser settings. Please note that disabling essential cookies will impair your ability to use the platform, including logging in and making transactions.

6. Data Retention

win27 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Specifically: account data is retained for the duration of your active account relationship with win27 and for a minimum of five years following account closure to satisfy anti-money laundering and regulatory record-keeping obligations. Transaction records are retained for a minimum of six years. Gaming session logs are retained for two years.

When personal data is no longer required and no legal obligation to retain it exists, we securely delete or anonymise it. Anonymised, aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

7. Your Rights

As a win27 user, you have the following rights with respect to your personal data:

• Right of access: you may request a copy of the personal data we hold about you. We will provide this within 30 days of a verified request.
• Right to rectification: if any personal data we hold is inaccurate or incomplete, you may request that we correct or supplement it.
• Right to erasure: subject to our legal retention obligations, you may request that we delete your personal data. We will honour such requests where we are not legally required to retain the data.
• Right to restrict processing: you may ask us to pause processing of your personal data in certain circumstances, for example while you contest its accuracy.
• Right to object: you may object to processing carried out on the basis of our legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please contact our support team at [email protected]. We may need to verify your identity before processing your request. There is no charge for making a data rights request.

8. Security Measures

win27 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for data in transit, encrypted storage for sensitive data at rest, role-based access controls limiting staff access to personal data on a need-to-know basis, regular security assessments, and incident response procedures.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring that your device is kept secure and up to date with security patches.

9. Children's Privacy

win27 is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that a minor has provided personal data to us, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on our platform, please notify us immediately at [email protected].

10. Changes to This Privacy Policy

win27 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered users via their registered email address or an in-platform notification.

Your continued use of win27 after a revised Privacy Policy has been posted constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your information.

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way win27 handles your personal data, please contact our support team. We are committed to addressing your concerns promptly and transparently.

Contact us at: [email protected]