getwin Privacy Policy

1. Introduction

getwin ("we", "us", "our", "the Platform") is committed to protecting the privacy and security of every registered player. This Privacy Policy sets out, in plain and formal terms, how getwin collects, processes, stores, shares, and safeguards personal data in connection with the operation of the getwin platform at getwin.lat.

The getwin platform is designed exclusively for Bangladeshi adults aged 18 years and above. All personal data collected through the platform is handled in accordance with reasonable data protection standards and with due regard for the security and confidentiality expectations of our players. This policy should be read alongside our Terms and Conditions and Responsible Gaming Policy, which together form the complete agreement between the player and getwin.

We may update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal obligations, or the services we offer. Where changes are material, we will notify players via their registered contact details. The effective date at the top of this document will always reflect the date of the most recent revision. Continued use of the getwin platform after the effective date of any revision constitutes acceptance of the updated policy.

2. Data Controller

For the purposes of this Privacy Policy, getwin acts as the data controller in respect of all personal data collected from registered players and site visitors. As the data controller, getwin determines the purposes and means of processing your personal data and is responsible for ensuring that such processing meets the standards described in this policy.

If you have any questions, concerns, or requests relating to your personal data, you may contact the getwin data team via the support email address: [email protected]. We aim to respond to all data-related enquiries within five (5) business days of receipt, calculated on Bangladesh Standard Time (BST, UTC+6).

3. Personal Data We Collect

getwin collects personal data across several categories, depending on the nature of your interaction with the platform. The categories and specific data points collected are set out below.

3.1 Registration Data

When you create a getwin account, we collect:

• Full legal name
• Registered Bangladeshi mobile number
• Date of birth (to verify the 18+ age requirement)
• Account username and encrypted password
• City or district of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar)

3.2 Identity Verification Data

When account verification is requested or required, we may collect:

• Copy of a government-issued National Identity Card (NID), passport, or driver's licence
• Selfie or photograph for biometric identity confirmation
• Source-of-funds documentation where transaction volumes require it

3.3 Financial Transaction Data

In connection with deposits and withdrawals via bKash, Nagad, Rocket, or Upay, we collect:

• Registered mobile financial service number
• Transaction reference numbers
• Transaction amounts in BDT
• Timestamps of all deposit and withdrawal activities

3.4 Gaming and Betting Activity Data

As part of normal platform operation, getwin logs:

• All bets placed, games played, and wagers settled
• BDT balance history and bonus credit/debit history
• Session durations and game round outcomes
• Responsible gaming tool activations (deposit limit changes, self-exclusion requests, cooling-off periods)

3.5 Technical and Device Data

Automatically collected when you access the getwin platform:

• IP address and approximate geolocation
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Referring URL and pages visited within the platform
• Session timestamps and duration

3.6 Communications Data

When you contact the getwin support team:

• Content of live chat transcripts
• Email correspondence and support ticket records
• Response timestamps and resolution notes

4. How We Collect Your Data

getwin collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal request, or contacting support.
• Automated collection: Technical and device data gathered automatically when you access, browse, or interact with the getwin platform, including through cookies and session tracking technologies.
• Third-party game providers: Aggregated game round and outcome data passed to getwin by certified studio partners for settlement, dispute resolution, and audit purposes.
• Payment service providers: Transaction confirmation data received from bKash, Nagad, Rocket, and Upay when a deposit or withdrawal is initiated or completed.
• Identity verification services: Confirmation responses from document verification processes used to authenticate player identity.

5. Purpose and Legal Basis for Processing

getwin processes personal data only for specific, legitimate purposes. The table below summarises the primary purposes for which your data is used and the corresponding basis for that processing.

getwin will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.

6. Data Sharing and Disclosure

getwin does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes. We share personal data only in the limited circumstances set out below, and only to the extent strictly necessary for the stated purpose.

6.1 Game and Technology Providers

Certified third-party game studios — including providers of slots, live casino, and card games — receive limited gaming session data (such as session tokens and round outcomes) necessary to deliver their games within the getwin platform. These providers are contractually prohibited from using this data for any purpose other than game delivery and technical support.

6.2 Payment Service Providers

Transaction data is shared with bKash, Nagad, Rocket, and Upay solely for the purpose of initiating and confirming deposit and withdrawal transactions. getwin shares only the minimum data required by each provider to execute the relevant transaction.

6.3 Identity Verification Services

Where identity verification is required, document data may be transmitted to a third-party verification service. Such services operate under strict data processing agreements and are not permitted to retain or use verification data beyond the scope of the specific verification request.

6.4 Legal and Regulatory Disclosures

getwin may disclose personal data where required to do so by applicable law, court order, or the direction of a competent authority. In such cases, getwin will disclose only the data specifically requested and will, where legally permissible, notify the affected player of the disclosure.

6.5 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of the getwin business, player personal data may be transferred as part of that transaction. Players will be notified prior to any such transfer, and the receiving party will be bound by the same data protection obligations as set out in this policy.

7. Cookies and Tracking Technologies

The getwin platform uses cookies and similar tracking technologies to deliver a secure, personalised, and functional user experience. Cookies are small data files stored on your device by your browser when you visit the platform. They do not contain executable code and cannot access other files on your device.

getwin uses the following categories of cookies:

• Essential cookies: Required for the platform to function correctly. These include session authentication tokens, security identifiers, and load-balancing cookies. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to collect anonymised data on how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve platform performance and user experience.
• Preference cookies: Store non-sensitive player preferences such as display settings and previously visited game categories to personalise the platform experience between sessions.
• Security cookies: Used to detect and prevent fraudulent activity, suspicious login attempts, and automated bot access to the platform.

You may manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the performance or personalisation features of the getwin platform. getwin does not use third-party advertising cookies or cross-site tracking technologies for external marketing purposes.

8. Data Retention

getwin retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The general retention principles applied by getwin are as follows:

• Active account data: Retained for the duration of the account's active status and for a minimum of five (5) years following permanent account closure, to meet financial compliance and audit requirements.
• Identity verification documents: Retained for a minimum of five (5) years from the date of verification, in accordance with applicable anti-money laundering obligations.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with standard financial record-keeping obligations.
• Support and communications records: Retained for three (3) years from the date of the last interaction, or longer where a complaint or dispute remains unresolved.
• Technical and device logs: Retained for a rolling period of twelve (12) months for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification of the data subject.

9. Data Security

getwin implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the getwin platform, ensuring that no data is readable in transit.
• Encrypted password storage using industry-standard cryptographic hashing algorithms. getwin never stores plaintext passwords.
• Token-based session management with automatic session timeout on inactivity, reducing the risk of account takeover through unattended sessions.
• Role-based access controls ensuring that internal access to player personal data is restricted to staff with a verified operational need.
• Continuous security monitoring for unusual account activity, suspicious login patterns, and potential data breach indicators.
• Regular security assessments of platform infrastructure, third-party integrations, and internal data handling procedures.

While getwin takes all reasonable precautions to secure your personal data, no online platform can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords for their getwin accounts and to report any suspected security incidents to [email protected] immediately.

10. Your Data Rights

As a registered getwin player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with your registered mobile number and a clear description of your request. We will respond within five (5) business days.

• Right of access: You may request a copy of the personal data getwin holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing: You may request that getwin limit the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful.
• Right to data portability: You may request that certain personal data be provided to you in a structured, machine-readable format where technically feasible and where processing is based on consent or contractual necessity.
• Right to withdraw consent: Where processing is based on your consent (for example, receipt of promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interest, including profiling for marketing purposes, at any time.

Please note that certain rights may be subject to limitations where getwin has overriding legal obligations — for example, the right to erasure cannot be applied to financial transaction records that getwin is legally required to retain for a specified period.

11. Children's Privacy

The getwin platform is strictly for adults aged 18 years and above. getwin does not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and have reason to believe that a minor has registered an account or provided personal data to getwin, please contact us immediately at [email protected]. Upon confirmation, we will delete the relevant account and all associated personal data without undue delay.

getwin employs date-of-birth verification at the point of registration and may request supporting identity documents where a player's age cannot be conclusively confirmed from registration data alone. Any account found to belong to a person under 18 years of age will be suspended immediately, all balances frozen, and all personal data associated with the account deleted following the mandatory compliance review period.

12. Third-Party Services and Links

The getwin platform integrates content and services from certified third-party game studios and payment providers. While getwin carefully selects and contracts its third-party partners, we are not responsible for the privacy practices or data handling policies of those third parties in respect of data they independently control.

getwin does not include external links to third-party websites within the platform. Any content accessed through the getwin platform that originates from a third-party studio is delivered within the getwin platform environment and is governed by the data sharing agreements in place between getwin and those studios, as described in Section 6 above.

13. Changes to This Privacy Policy

getwin reserves the right to update this Privacy Policy at any time. Where revisions are material — for example, where we introduce a new category of data collection, a new sharing arrangement, or a change to retention periods — we will notify registered players via their registered mobile number or account notification channel at least fourteen (14) days prior to the changes taking effect.

Minor, non-material amendments (such as clarifications of existing language, correction of typographical errors, or reformatting) may be made without prior notice. The updated policy will always be published at getwin.lat/privacy-policy with the revised effective date clearly displayed at the top of the document.

Players who do not agree to any revised version of this policy may request account closure in accordance with Section 14 of the getwin Terms and Conditions. Continued use of the platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way getwin handles your personal data, please reach out to the getwin data support team using the contact details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

Support and data enquiries: [email protected]

Operating hours: Available 24 hours a day, 7 days a week. Written data enquiries will receive a formal response within five (5) business days on Bangladesh Standard Time (BST, UTC+6).