Privacy Policy — How wainbd Handles Your Personal Data

wainbd ("we", "our", "us", "Platform") is committed to safeguarding the privacy and personal data of every individual who accesses the wainbd website and its associated services, including casino gaming, sports betting, and payment processing. This Privacy Policy ("Policy") sets out a transparent and detailed account of how wainbd collects, uses, stores, shares, and protects personal information in connection with the operation of the wainbd platform.

This Policy applies to all players, visitors, and users of the wainbd platform, with particular relevance to players based in or accessing the platform from Bangladesh. It forms part of the wider wainbd legal framework alongside the Terms & Conditions and the Responsible Gaming policy.

By registering a wainbd account or by continuing to use the platform after having been presented with this Policy, you acknowledge that you have read, understood, and consented to the data practices described herein. If you do not agree with any part of this Policy, you should cease using the platform and may request account closure by contacting the wainbd support team.

wainbd collects personal data across several categories depending on the nature of your interaction with the platform. The following table summarises the main categories of personal data we collect and examples of the specific data points within each category:

wainbd does not collect or store full payment card numbers, mobile wallet PINs, or full bank account numbers. Financial transaction references are stored only to the extent necessary for reconciliation, dispute resolution, and anti-money laundering compliance.

wainbd collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a wainbd account, you actively provide your mobile number, chosen password, full name, and date of birth.
• Identity Verification: When you submit identity or age verification documents ahead of your first withdrawal, wainbd's verification process captures and stores copies of those documents.
• Payment Transactions: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or bank transfer, the relevant transaction reference and amount are recorded in association with your account.
• Platform Usage: Automated systems record technical and usage data (IP address, device type, pages visited, games played, session timestamps) as you interact with the platform, even if you do not complete registration.
• Cookies and Tracking Technologies: The wainbd website uses cookies and similar technologies to maintain your session, remember preferences, and analyse aggregate usage patterns. See Section 7 for full details.
• Customer Support Interactions: Communications you initiate with the wainbd support team via live chat or email are recorded and stored as part of your account record.
• Third-Party Sources: In limited circumstances, wainbd may receive identity or fraud-risk information from third-party identity verification services engaged to assist with know-your-customer (KYC) processes.

wainbd processes your personal data only for specific, defined purposes. The table below maps each processing purpose to the categories of data used:

wainbd does not use your personal data to serve third-party advertising, build advertising profiles, or enable retargeting by external advertisers. Usage and Technical Data used for platform improvement is analysed in aggregate and anonymised form wherever possible.

wainbd processes personal data on the basis of the following legal grounds, each of which applies to specific processing activities described in this Policy:

• Contractual Necessity: The majority of processing carried out by wainbd — including account management, payment processing, and identity verification — is necessary for the performance of the contract between wainbd and the player as set out in the Terms & Conditions. Without this processing, wainbd cannot provide its services.
• Legitimate Interests: wainbd processes Technical Data and Usage Data for fraud prevention, platform security, and aggregate service improvement on the basis of its legitimate interest in operating a secure, reliable, and fair platform. These interests do not override the fundamental rights of players.
• Legal Obligation: Certain processing — particularly in relation to anti-money laundering procedures, record retention, and identity verification — is carried out to comply with applicable legal and regulatory obligations.
• Consent: Where wainbd relies on consent as a legal basis for processing (for example, in relation to optional marketing communications), you may withdraw consent at any time by contacting the support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

wainbd shares personal data with third parties only where strictly necessary to deliver the platform's services or to comply with applicable obligations. The categories of third parties with whom data may be shared are as follows:

• Payment Processors: Transaction references and account-level details are shared with bKash, Nagad, Rocket, Upay, and participating Bangladeshi banks (including BRAC Bank, City Bank, Islami Bank, Sonali Bank, and Dutch-Bangla Bank) solely for the purpose of processing deposits and withdrawals.
• Identity Verification Services: Where wainbd uses a third-party KYC provider to assist with document verification, relevant identity data is shared with that provider under a formal data processing agreement that restricts onward use.
• Game Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited technical session data necessary to run their game software within the wainbd platform environment. Game providers do not receive your full identity or financial records.
• IT and Hosting Providers: Server hosting, database management, and platform infrastructure providers may have access to data as part of their technical service delivery, subject to strict confidentiality obligations.
• Legal Authorities: wainbd will disclose personal data to law enforcement agencies, courts, or regulatory authorities where required to do so by law, legal process, or court order.

The wainbd website uses cookies and similar browser-based storage technologies to support the operation of the platform and to help us understand how the platform is used. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your security preferences, and enable core platform features. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language setting and display options — to provide a more personalised experience. They are set only with your consent.
• Analytics Cookies: wainbd uses privacy-respecting analytics tools to understand aggregate usage patterns, identify technical issues, and improve the platform experience. Analytics data is anonymised before analysis wherever possible and is never linked back to individual player identities for marketing purposes.
• Security Cookies: Short-lived cookies are used as part of fraud detection and bot-prevention measures to protect the platform and its players from malicious activity.

You can manage or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging into and using the wainbd platform. wainbd does not use third-party advertising cookies or cross-site tracking technologies.

wainbd retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The general retention framework applied by wainbd is as follows:

• Active Account Data: Personal data associated with an active wainbd account is retained for the full duration of the account's active status.
• Closed Account Data: Following voluntary account closure, wainbd retains identity and financial records for a minimum period of five years to comply with anti-money laundering record-keeping requirements. This period may be extended where an account was subject to a fraud or AML investigation.
• Transaction Records: Individual deposit and withdrawal transaction records are retained for a minimum of five years from the date of the transaction.
• Support Communications: Customer support chat transcripts and email correspondence are retained for a minimum of two years from the date of the interaction, or longer if the interaction relates to an unresolved dispute or regulatory matter.
• Responsible Gaming Records: Self-exclusion and cooling-off period records are retained for the full duration of the exclusion and for a minimum of five years thereafter, to prevent the re-registration of excluded players.
• Analytics and Usage Data: Anonymised aggregate usage data may be retained indefinitely for platform improvement purposes. Any personal identifiers are removed from usage data prior to long-term retention.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

wainbd implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• 256-Bit SSL Encryption: All data transmitted between your device and the wainbd platform is encrypted using 256-bit SSL/TLS encryption — the same standard employed by major Bangladeshi banks and financial institutions. Bank Grade
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial transaction references, is stored in encrypted form within wainbd's secure server infrastructure.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised wainbd personnel with a legitimate operational reason may access player records, and all access is logged and auditable.
• Password Security: Player account passwords are stored using industry-standard one-way hashing algorithms. wainbd staff cannot view your password in plain text at any time.
• Fraud Monitoring Systems: Automated systems continuously monitor account activity, login patterns, and transaction behaviour for indicators of fraud, account takeover, or suspicious activity. Anomalous activity triggers review by the wainbd security team.
• Regular Security Reviews: wainbd conducts periodic internal security reviews of its infrastructure, access controls, and data handling procedures to identify and remediate vulnerabilities.

As a person whose personal data is processed by wainbd, you hold the following rights in relation to that data. To exercise any of these rights, please contact the wainbd support team using the contact details in Section 14.

• Right of Access: You have the right to request a copy of the personal data that wainbd holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data wainbd holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to wainbd's legal retention obligations. Where a legal retention requirement applies (such as AML record-keeping), wainbd may be unable to delete the data until the retention period expires.
• Right to Restriction of Processing: You may request that wainbd restrict the active processing of your personal data in certain circumstances — for example, where you contest the accuracy of data or where you have objected to processing pending verification of legitimate grounds.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where wainbd relies on legitimate interests as the legal basis for processing. wainbd will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where consent is the legal basis for processing, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

wainbd will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case wainbd will notify you of the extension and the reasons for it within the initial 30-day window.

The wainbd platform is strictly intended for adults aged 18 years and above. 18+ wainbd does not knowingly collect personal data from any individual under the age of 18. The platform's registration process includes a mandatory date-of-birth declaration, and age verification is required before the first withdrawal is processed.

If wainbd becomes aware or has reasonable grounds to believe that personal data has been collected from an individual who was under the age of 18 at the time of registration, the following actions will be taken without delay:

• The account will be permanently closed and access to the platform suspended immediately.
• All funds held in the account — including deposits, bonus balances, and any winnings — will be forfeited in full.
• Personal data associated with the account will be retained only to the extent necessary to fulfil legal obligations and to prevent re-registration, and will then be securely deleted.

Parents and guardians who have reason to believe that a minor in their care has registered a wainbd account are urged to contact the support team immediately at [email protected] so that the matter can be investigated and the account closed promptly.

wainbd operates as an offshore platform. As a result, personal data collected from players in Bangladesh may be stored and processed on servers located outside of Bangladesh. In all cases where personal data is transferred internationally, wainbd takes steps to ensure that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Policy.

These safeguards include contractual data protection clauses with all third-party processors and hosting providers who handle personal data on wainbd's behalf, requiring those parties to process data only for the purposes specified by wainbd and to maintain security standards consistent with those described in Section 9 of this Policy.

Players who are uncomfortable with international data transfers should be aware that the nature of the wainbd offshore platform means that some degree of international data transfer is inherent to the service. If you do not wish your data to be transferred internationally, you should not register an account or, if already registered, should request account closure and data deletion as described in Section 10.

wainbd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. When material changes are made — particularly those that affect the categories of data collected, the purposes of processing, or your rights — wainbd will notify registered players by posting a prominent notice on the platform and/or communicating the change to the registered contact details on your account.

For non-material changes, such as typographical corrections or minor clarifications, the Policy will be updated with immediate effect and the "Effective Date" at the top of the page will be revised. Your continued use of the wainbd platform following any update constitutes your acknowledgement of the revised Policy.

wainbd encourages all players to review this Privacy Policy periodically to stay informed about how their personal data is being handled. The most current version of this Policy will always be available at wainbd.vip/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which wainbd handles your personal data, please contact the wainbd data support team using the following details:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, directly within the wainbd platform interface
• Response Time: All privacy-related enquiries are acknowledged within 24 hours Bangladesh Standard Time (BST, UTC+6) and resolved within 30 days
• Subject Line: For data rights requests, please use the subject line "Data Rights Request" to ensure priority handling by the wainbd team

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the wainbd privacy statement.