Wintaka Privacy Policy — How We Protect Your Personal Data

01 Introduction

This Privacy Policy explains how Wintaka collects, uses, stores, and protects the personal information of players who register and use the Wintaka platform. It applies to all services offered through wintaka.io, including the website, the Wintaka mobile application, and all related services.

Wintaka takes privacy seriously. We understand that Bangladesh players trust us with sensitive personal and financial information, and we do not take that trust lightly. This policy is written in plain English — not legal language designed to confuse — so that every player on Wintaka knows exactly what happens to their data from the moment they register.

By registering an account on Wintaka or continuing to use the platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with how Wintaka handles personal data, you should not use the platform. If you have questions about anything in this policy, contact Wintaka support at [email protected] before registering.

02 Data We Collect

Wintaka collects personal data in three ways: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and information received from third-party service providers such as payment processors.

Information you provide directly to Wintaka:

• Full name and date of birth provided during registration
• Email address and mobile phone number
• Mobile banking account details (bKash, Nagad, or Rocket number) used for deposits and withdrawals
• Identity verification documents such as National ID or passport when requested
• Proof of address documents when requested for verification purposes
• Communications you send to Wintaka support, including chat transcripts and emails
• Responsible gaming preferences and self-exclusion requests

Information generated automatically when you use Wintaka:

• IP address and approximate geographic location derived from your IP address
• Device type, operating system, and browser information
• Session data including login times, session duration, and pages visited on Wintaka
• Game activity data including games played, bets placed, and outcomes
• Transaction history including all deposits and withdrawals on your Wintaka account
• Cookie and tracking data as described in Section 6 of this policy

03 How We Use Your Data

Wintaka uses the personal data we collect for specific, legitimate purposes. We do not use your data for purposes beyond those listed here without first obtaining your consent or being required to do so by law.

Wintaka uses game activity and session data to monitor for signs of problem gambling as part of our responsible gaming commitment. This monitoring is done to protect players, not to profile them for commercial purposes. If our systems detect patterns that suggest a player may be experiencing difficulties, the Wintaka responsible gaming team may reach out proactively.

04 Legal Basis for Processing

Wintaka processes personal data on the following legal bases, depending on the purpose of the processing:

• Contract performance: Processing your registration data, payment details, and account activity is necessary to fulfil the contract between you and Wintaka — that is, to provide you with access to the platform and its services.
• Legal obligation: Wintaka is required by anti-money laundering regulations and other applicable laws to collect and retain certain data, including identity verification documents and transaction records.
• Legitimate interests: Wintaka processes certain data — such as IP addresses and device information — on the basis of legitimate interests, specifically fraud prevention and platform security. These interests do not override your privacy rights.
• Consent: Where Wintaka processes data for marketing communications or optional features, we do so only with your explicit consent. You can withdraw consent at any time without affecting your ability to use the platform.

05 Data Sharing and Third Parties

Wintaka does not sell your personal data. We share data with third parties only where it is necessary to operate the platform, comply with legal obligations, or protect the security of the platform and its players. Every third party that receives Wintaka player data is bound by contractual data protection obligations.

The categories of third parties with whom Wintaka may share your data are:

• Payment processors: bKash, Nagad, and Rocket receive the minimum data necessary to process your deposit and withdrawal transactions. These providers have their own privacy policies that govern their handling of your payment data.
• Game providers: Third-party game providers whose games are available on Wintaka may receive anonymised session and game activity data for the purpose of game performance monitoring and RNG certification. They do not receive your name, contact details, or payment information.
• Identity verification services: When Wintaka requests identity verification, documents may be processed by a third-party verification service. These providers are contractually prohibited from using your data for any purpose other than verification.
• Legal and regulatory authorities: Wintaka will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by applicable law or a valid legal order.
• Fraud prevention services: Wintaka may share limited data with fraud prevention services to identify and prevent fraudulent activity on the platform. This sharing is done on the basis of legitimate interests in protecting the platform and its players.

06 Cookies and Tracking

Wintaka uses cookies and similar tracking technologies to make the platform work correctly, to remember your preferences, and to understand how players use the platform so we can improve it. This section explains what cookies Wintaka uses and how you can control them.

• Essential cookies: These cookies are required for the Wintaka platform to function. They manage your login session, remember your language preference, and ensure that the platform loads correctly on your device. You cannot opt out of essential cookies without stopping your use of Wintaka.
• Functional cookies: These cookies remember your preferences — such as your preferred game category or responsible gaming settings — so you do not have to set them every time you visit Wintaka. They are not strictly necessary but improve your experience on the platform.
• Analytics cookies: Wintaka uses anonymised analytics data to understand how players navigate the platform, which games are most popular, and where technical issues occur. This data is aggregated and does not identify individual players. You can opt out of analytics cookies from your account settings.
• Security cookies: These cookies help Wintaka detect and prevent fraudulent activity, including bot traffic and account takeover attempts. They are essential for platform security and cannot be disabled.

You can manage cookie preferences through your browser settings or through the Wintaka cookie preference centre accessible from the footer of the platform. Note that disabling certain cookies may affect the functionality of the Wintaka platform on your device.

07 Data Retention

Wintaka retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data Wintaka holds:

After the applicable retention period has expired, Wintaka will securely delete or anonymise your personal data. Anonymised data — from which all personal identifiers have been removed — may be retained indefinitely for statistical and analytical purposes without affecting your privacy.

08 Data Security

Wintaka implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Security is not an afterthought at Wintaka — it is built into every layer of the platform from the ground up.

• Encryption in transit: All data transmitted between your device and Wintaka's servers is encrypted using TLS 1.3, the current industry standard for secure web communications.
• Encryption at rest: Personal and financial data stored on Wintaka's servers is encrypted using AES-256 encryption. Even in the unlikely event of a server breach, encrypted data cannot be read without the decryption keys.
• Access controls: Access to personal data within Wintaka is restricted on a strict need-to-know basis. Only staff members who require access to specific data to perform their job functions are granted that access, and all access is logged and audited.
• Two-factor authentication: Wintaka supports two-factor authentication for player accounts. We strongly recommend that all Bangladesh players enable this feature to add an extra layer of security to their Wintaka account.
• Regular security audits: Wintaka's security infrastructure is subject to regular independent security audits and penetration testing to identify and address vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that affects player data, Wintaka will notify affected players and relevant authorities within 72 hours of becoming aware of the breach, in accordance with applicable data protection law.

09 Your Privacy Rights

As a Wintaka player, you have the following rights over your personal data. To exercise any of these rights, contact Wintaka support at [email protected]. Wintaka will respond to all data rights requests within 30 days.

10 Children's Privacy

The Wintaka platform is strictly for adults aged 18 and over. Wintaka does not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered on Wintaka or provided personal data to Wintaka, please contact us immediately at [email protected].

Upon receiving a credible report that a minor has registered on Wintaka, we will immediately suspend the account, delete all personal data associated with the account, and return any deposits made to the original payment method. Wintaka takes underage access to gambling platforms extremely seriously and cooperates fully with parents, guardians, and authorities in addressing any such cases.

11 Changes to This Policy

Wintaka may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to the platform. When we make changes, the updated policy will be published on this page with a revised "Last Updated" date at the top.

For significant changes that materially affect how we handle your personal data, Wintaka will notify registered players via email or platform notification at least 7 days before the changes take effect. This gives you time to review the changes and, if you do not agree with them, to close your account and request deletion of your data before the new policy applies.

Your continued use of the Wintaka platform after a revised Privacy Policy has been published constitutes your acceptance of the updated policy. We encourage all Bangladesh players to review this page periodically to stay informed about how Wintaka protects their privacy.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Wintaka handles your personal data, please get in touch with the Wintaka privacy team using the contact details below. We take all privacy enquiries seriously and aim to respond within 2 business days.

• Email: [email protected] — use the subject line "Privacy Enquiry" for fastest routing to the privacy team.
• Live Chat: Available 24/7 directly from the Wintaka platform. Ask to be connected to the privacy team for data-related requests.
• FAQ: Common privacy questions are answered on the Wintaka FAQ page.