Privacy Policy — 268winbd

Section 1

Data We Collect

268winbd collects personal data from users through several channels: during account registration, through your ongoing use of the platform, via payment processing, through automated technical collection, and (where required) through our Know Your Customer (KYC) verification process. The categories of data we collect are set out below.

1.1 Registration Data

When you create a 268winbd account, we collect the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth ( used to verify that you meet the 18+ age requirement).
• Residential address in Bangladesh (city, district, and postal area).
• Valid email address used for account communications.
• Mobile phone number registered with your bKash, Nagad, or Rocket account.
• Chosen username and an encrypted version of your password (we never store passwords in plain text).

1.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify that users are aged 18 or above, 268winbd may request the following documents at any stage of your account lifecycle:

• National Identity Card (NID) — front and back copy.
• Valid passport — photo page copy.
• Driving licence issued by the Bangladesh Road Transport Authority.
• Recent utility bill, bank statement, or mobile financial service (bKash / Nagad) statement confirming your name and address (issued within the last 90 days).

1.3 Financial Transaction Data

When you deposit or withdraw funds via bKash, Nagad, Rocket, Upay, or any supported Bangladeshi bank, 268winbd records the following data associated with each transaction:

• Transaction reference number and timestamp (Bangladesh Standard Time, UTC+6).
• Amount in Bangladeshi Taka (BDT).
• Payment method used (e.g., bKash, Nagad, Dutch-Bangla Bank).
• Masked account or wallet identifier (we do not store your full bKash PIN or bank account credentials).
• Transaction status (pending, completed, failed, reversed).

1.4 Betting and Gaming Activity Data

To operate the platform and resolve disputes, we record a complete history of your betting and gaming activity, including: sports bets placed (market, selection, odds, stake, outcome); casino game sessions (game title, provider, bet size, result, session duration); Keno draw participation; and any bonus or promotion activity associated with your account.

1.5 Technical and Device Data

When you access 268winbd via a browser or mobile device, we automatically collect certain technical data, including:

• IP address and approximate geographic location derived from it.
• Device type, operating system, and browser version.
• Pages visited, time spent on each page, and navigation path through the platform.
• Session start and end times.
• Error logs and crash reports (used for platform debugging and improvement).

1.6 Communications Data

If you contact the 268winbd support team via live chat, email, or any other channel, we retain a record of that correspondence — including the content of your messages and any attachments — for quality assurance, dispute resolution, and compliance purposes.

Section 3

Data Sharing & Third Parties

268winbd does not sell or rent your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, 268winbd shares relevant transaction data with the payment service providers you select — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers operate under their own privacy policies and data security obligations. 268winbd does not transmit more data than is required to complete a specific transaction.

3.2 Game Content Providers

Casino and slot games on 268winbd are delivered by third-party game studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, and Microgaming. These providers may receive a session token and anonymised game-play data as part of the game delivery process. No personally identifiable information such as your name, address, or financial details is shared with game studios.

3.3 Analytics and Platform Operations

268winbd uses third-party analytics and infrastructure services to operate, monitor, and improve the platform. These service providers act as data processors on our behalf, under contractual obligations that restrict them from using your data for any purpose beyond the specific service they provide to us. All such providers are required to maintain data security standards consistent with those applied by 268winbd.

3.4 Legal and Regulatory Disclosure

268winbd may be required to disclose personal data to competent authorities, law enforcement agencies, financial intelligence units, or courts if we receive a lawful request, court order, or are under a legal obligation to do so. In such cases, we will disclose only the minimum data required to satisfy the legal obligation and, where legally permitted, will notify the affected user of the disclosure.

Section 5

Data Security

268winbd implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The key security controls in place include the following.

5.1 Technical Controls

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the 268winbd platform.
• Encryption at rest for all stored personal and financial data, including KYC documents and transaction records.
• Hashed and salted password storage — your password is never stored in readable form. Even 268winbd staff cannot see your password.
• Intrusion detection systems that continuously monitor for unauthorised access attempts and anomalous data access patterns.
• Regular security patching of all platform infrastructure and third-party dependencies.
• Access controls limiting staff access to personal data on a strict need-to-know basis, enforced through role-based permissions.

5.2 Organisational Controls

• All 268winbd staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Third-party service providers with access to personal data are subject to contractual data processing agreements that require them to maintain equivalent security standards.
• A documented incident response procedure is in place to enable rapid containment and notification in the event of a data breach.

5.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected users, 268winbd will notify affected users without undue delay and, where required, notify the relevant competent authority. Notification to users will be sent to the email address registered on the affected account and will include a description of the nature of the breach, the data categories affected, and the steps being taken to remediate the situation.

Section 7

Your Privacy Rights

As a user of 268winbd, you have the following rights in relation to your personal data. To exercise any of these rights, please contact support@268winbd with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to respond in full within 30 calendar days.

7.1 Right of Access

You have the right to request a copy of the personal data that 268winbd holds about you. We will provide this in a structured, commonly used format. Your first access request in any 12-month period is free of charge. For subsequent requests within the same period, we reserve the right to charge a reasonable administrative fee.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections (for example, changes to your registered name) may require supporting documentation before they can be processed.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent and there is no other legal basis for processing. Please note that we may be unable to erase certain data if we are under a legal obligation to retain it — for example, financial transaction records required by anti-money laundering law.

7.4 Right to Restrict Processing

You may request that 268winbd restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being considered. During any restriction period, we will continue to store your data but will not otherwise process it without your consent.

7.5 Right to Object

Where 268winbd processes your personal data on the basis of legitimate interest (for example, for platform analytics), you have the right to object to that processing. We will cease processing unless we can demonstrate a compelling legitimate ground that overrides your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.

7.6 Right to Withdraw Consent

Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal. Consent can be withdrawn via your account settings or by contacting support@268winbd.