bitwin Privacy Policy

This Privacy Policy describes how bitwin ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data belonging to users ("you", "the Player") of the bitwin online betting and casino platform accessible at bitwin.ws.

This policy applies to all data processing activities carried out by bitwin in connection with your use of the Service, including account registration, identity verification, deposits and withdrawals via Bangladeshi payment methods, sports betting, casino gameplay, customer support interactions, and any communications between you and bitwin.

bitwin is committed to handling personal data with care, transparency, and respect for the privacy rights of all players. This policy should be read in conjunction with the bitwin Terms & Conditions, which form the primary legal agreement governing your use of the platform.

bitwin collects personal data in the following categories. We collect only what is necessary to operate the Service safely and in compliance with applicable standards.

bitwin does not intentionally collect data from individuals under the age of 21. If we become aware that an account holder is under 21, the account will be closed immediately and any personal data associated with it will be deleted or anonymised, subject to legal retention obligations.

bitwin collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or submitting a complaint.
• Automated technologies: Technical and usage data collected automatically when you access the platform, including cookies, session tracking, and server log files. See Section 9 for our full Cookie Policy.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other approved payment partners when you make a deposit or withdrawal.
• Identity verification partners: Where bitwin uses a third-party KYC service to verify your identity documents, that partner may return verification status data and document authenticity scores to bitwin.
• Game providers: Aggregate gameplay data (such as game session start/end times and round outcomes) provided by certified game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe for the purpose of dispute resolution and responsible gaming monitoring.

bitwin processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the Service you have registered for — including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including identity verification, anti-money laundering checks, and record-keeping obligations.
• Legitimate interests: Processing carried out for bitwin's legitimate operational interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests do not override your fundamental privacy rights.
• Consent: Where bitwin sends you optional promotional communications (such as bonus offers, seasonal promotions for Eid, Pohela Boishakh, or BPL cricket season), this is done on the basis of your explicit consent. You may withdraw consent at any time by contacting support.

bitwin does not sell or rent your personal data. We may share your data with the following categories of third parties, strictly for the purposes described:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive only the minimum data required to process your transaction (e.g., wallet number, transaction amount in BDT, reference ID).
• Identity verification providers: KYC partners receive copies of your identity documents solely for the purpose of verifying your identity. They are contractually prohibited from using your data for any other purpose.
• Game providers: Certified providers receive only a pseudonymous player session identifier — never your full name, contact details, or financial information.
• Technology and hosting partners: Cloud hosting and infrastructure providers that store and process platform data on bitwin's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or a lawful request from a relevant authority, bitwin may disclose your data to law enforcement or regulatory bodies. bitwin will notify you of such disclosures where legally permitted to do so.

bitwin retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active account relationship and for a minimum of five years following account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Support and communication records: Retained for three years from the date of the last interaction, or longer if related to an unresolved complaint or legal matter.
• Technical and usage data: Retained for up to 24 months in identifiable form, after which it is anonymised or deleted.
• Responsible gaming records: Retained for the duration of any active self-exclusion or limit agreement, and for five years thereafter.

When data is no longer required and no legal retention obligation applies, bitwin securely deletes or irreversibly anonymises it so that it can no longer be associated with any individual.

As a player on bitwin, you hold the following rights in respect of your personal data. To exercise any of these rights, contact the support team using the email address in the footer of this page:

• Right of access: You may request a copy of all personal data bitwin holds about you. We will provide this within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic profile data directly from your account settings.
• Right to erasure: You may request that we delete your personal data. We will comply with all valid erasure requests subject to legal retention obligations (see Section 6). Note that erasure requests do not affect data required for anti-money laundering compliance or ongoing dispute resolution.
• Right to restriction: In certain circumstances — for example, where you contest the accuracy of data we hold — you may request that we restrict processing of your data while the matter is resolved.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests where you feel your individual rights and freedoms outweigh those interests.

bitwin implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and bitwin servers.
• Encryption of sensitive data fields (including identity document data and financial references) at rest in the database.
• Role-based access controls ensuring that bitwin staff can only access player data necessary for their specific job function.
• Real-time fraud detection and anomaly monitoring systems that flag unusual account activity, including suspicious login locations and atypical betting patterns.
• Regular internal security reviews and vulnerability assessments of the platform infrastructure.
• Mandatory security training for all staff who handle player data.

Despite these measures, no internet-based platform can guarantee absolute security. If you become aware of any security vulnerability or suspect that your account has been accessed without your authorisation, you must notify bitwin support immediately. bitwin will investigate all reported security incidents promptly and will notify affected players of any confirmed data breach within a reasonable timeframe.

bitwin uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the Service is used. The following categories of cookies are in use:

• Essential cookies: Required for core platform functionality including session management, login state persistence, and security token validation. These cookies cannot be disabled without breaking the Service.
• Functional cookies: Store your preferences such as language settings, preferred payment method, and display preferences to improve your experience across sessions.
• Analytics cookies: Used to understand how players interact with the platform — for example, which games are most frequently launched, how long sessions last, and where users encounter errors. This data is collected in aggregate and pseudonymous form.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and suspicious login pattern recognition.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in and using core platform features. bitwin does not use third-party advertising or tracking cookies for the purpose of serving targeted advertisements on external websites.

bitwin is strictly an adults-only platform for players aged 21 and above. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Registration by underage individuals is prohibited under the bitwin Terms & Conditions.

If a parent or guardian believes that their child has registered an account on bitwin, they should contact the support team immediately using the email address in the footer of this page. bitwin will investigate the report promptly, close the account if the allegation is confirmed, and delete all associated personal data subject to any applicable legal retention requirements.

bitwin supports responsible gaming tools including age verification checks at registration, and encourages parents and guardians to make use of device-level parental controls to prevent underage access to gambling platforms.

bitwin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal standards. Where changes are material — for example, where a new category of data is collected or a new third-party processor is introduced — registered players will be notified via their registered contact details or via an on-platform notice prior to the changes taking effect.

The effective date at the top of this page will be updated each time the policy is revised. Continued use of the bitwin platform after a revised policy has been published constitutes your acceptance of the updated terms. It is your responsibility to review this policy periodically. The current version is always accessible at bitwin.ws/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bitwin handles your personal data, please contact the support team. The contact email address is displayed as plain text in the footer of this page. bitwin aims to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 days.

When submitting a data access, rectification, or erasure request, please include your registered username and a brief description of the request so that the team can locate your account and respond efficiently.