bbwin Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") describes how bbwin ("we", "us", "the platform") collects, processes, stores, and protects personal data belonging to individuals ("you", "the player", "the user") who access or use the bbwin online gaming platform at bbwin.im. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

1. Information We Collect

1.1 Information You Provide Directly

When you register a bbwin account, use our services, or contact our support team, you voluntarily provide information that we collect and store. This includes:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and chosen username.
• Identity verification (KYC) documents: National ID card, passport, driving licence, proof of address (utility bill or bank statement), and selfie photographs submitted to satisfy our Know Your Customer obligations.
• Payment information: bKash or Nagad mobile number, Rocket account reference, Upay ID, or the last four digits and expiry date of a Visa or Mastercard used for deposits. Full card numbers are never stored by bbwin.
• Communication records: Messages sent to bbwin support via email, live chat, or any other channel, including support ticket history and call recordings where applicable.
• Responsible gaming preferences: Deposit limit settings, session time reminders, cooling-off elections, and self-exclusion requests made through the bbwin account dashboard.

1.2 Information Collected Automatically

When you access bbwin.im or use the platform, certain technical data is collected automatically by our systems:

• Device and browser data: IP address, device type (mobile or desktop), operating system version, browser type and version, screen resolution, and unique device identifiers.
• Usage data: Pages visited, games played, betting history, session duration, navigation paths through the platform, and features interacted with.
• Transaction logs: Timestamped records of all deposits, withdrawals, wagers, game outcomes, and bonus activations associated with your account.
• Geolocation data: Approximate geographic location derived from your IP address, used solely for fraud prevention, responsible gaming compliance, and regulatory purposes. bbwin does not use GPS-level precise location data.
• Cookies and similar technologies: Session tokens, analytics identifiers, and preference cookies as described in the Cookies section of this Policy.

Data Category	Examples	Collection Method
Identity Data	Name, date of birth, NID / passport	Provided by player at registration / KYC
Contact Data	Email address, mobile number	Provided by player at registration
Financial Data	bKash / Nagad reference, last 4 card digits	Provided by player at deposit / withdrawal
Technical Data	IP address, device type, browser	Collected automatically on access
Usage Data	Games played, session duration, betting history	Collected automatically during platform use
Communications Data	Support chat logs, email correspondence	Collected when you contact bbwin support

2. How We Use Your Data

bbwin processes personal data only for lawful, specified, and legitimate purposes. We do not use your data in any manner inconsistent with the purposes described below. The legal basis for each processing activity is noted in parentheses.

• Account creation and management: To register your account, verify your identity, and maintain the ongoing operation of your player profile. (Contractual necessity)
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records for your account. (Contractual necessity)
• KYC and fraud prevention: To verify that you meet the 18+ age requirement, confirm your identity, detect and prevent fraudulent transactions, money laundering, and multi-accounting. (Legal obligation and legitimate interest)
• Platform operation and improvement: To deliver games, sports betting markets, live casino content, and promotional features; to diagnose technical issues; and to improve platform performance based on aggregated usage patterns. (Contractual necessity and legitimate interest)
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling, apply player-elected deposit and session limits, and contact players who may be at risk. (Legal obligation and legitimate interest)
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of your support interactions. (Contractual necessity)
• Legal and regulatory compliance: To retain financial and identity records as required by applicable laws, respond to valid legal requests from authorities, and fulfil audit obligations. (Legal obligation)
• Marketing communications: To send you promotional emails, bonus notifications, and personalised offers — but only where you have opted in to receive such communications. You may withdraw your marketing consent at any time from your account settings. (Consent)

3. Data Sharing & Third Parties

bbwin does not sell, rent, or trade your personal data to third parties for commercial purposes. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 Payment Processors

When you make a deposit or withdrawal, relevant transaction data is shared with the payment processor handling that transaction — for example, bKash, Nagad, Rocket, Upay, or the relevant card network. These processors operate under their own privacy policies and comply with applicable financial data protection standards. bbwin does not store full payment credentials on its own servers.

3.2 Game Providers

To deliver games on the platform, bbwin shares a session token and non-personally identifiable gameplay parameters with certified third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers do not receive your name, address, payment details, or KYC documents.

3.3 Identity Verification Partners

bbwin may engage third-party KYC and identity verification service providers to assist with document checks. These partners are contractually bound to use your identity data exclusively for verification purposes and to apply data protection standards no less stringent than those described in this Policy.

3.4 Analytics Providers

bbwin uses privacy-respecting analytics tools to understand platform usage patterns at an aggregate level. Data shared with analytics providers is anonymised or pseudonymised and cannot be used to identify individual players.

3.5 Legal and Regulatory Authorities

bbwin may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where legally compelled to do so, or where bbwin has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity. bbwin will notify affected players of such disclosures where legally permitted to do so.

4. Cookies & Tracking Technologies

bbwin uses a minimal set of cookies and similar tracking technologies to operate the platform effectively. A summary of cookie categories in use is provided below.

Cookie Type	Purpose	Duration	Optional?
Strictly Necessary	Session authentication, security tokens, load balancing	Session (deleted on browser close)	No — required for platform to function
Functional	Remembering language preference, display settings, last-visited game category	30 days	Yes — stored only with your acceptance
Analytics	Aggregated page-view counts, error logging, performance monitoring	90 days	Yes — stored only with your acceptance
Fraud Prevention	Device fingerprinting for anti-fraud and responsible gaming monitoring	12 months	No — required for security compliance

bbwin does not use third-party advertising cookies, retargeting pixels, or social media tracking tags. You may manage cookie preferences from within your browser settings or your bbwin account preferences panel at any time. Disabling strictly necessary or fraud prevention cookies may impair your ability to use the platform.

5. Data Security & Retention

5.1 Security Measures

bbwin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bbwin servers
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records
• Role-based access controls limiting internal data access to authorised personnel only, on a need-to-know basis
• Multi-factor authentication enforced for all bbwin staff accessing production systems
• Regular penetration testing and third-party security audits conducted by independent firms
• Continuous intrusion detection monitoring and automated anomaly alerting on all critical systems
• Incident response procedures designed to detect, contain, and report any data breach within the timeframes required by applicable law

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bbwin will notify affected players without undue delay and take all reasonable steps to mitigate the impact.

5.2 Data Retention Periods

bbwin retains personal data for no longer than is necessary for the purposes described in this Policy, subject to legal and regulatory minimum retention requirements:

• Account and identity data: Retained for the duration of your active account relationship with bbwin, plus a mandatory post-closure period of 5 years for financial crime prevention and audit purposes.
• KYC documents: Retained for 5 years from the date of account closure or the date the document was superseded, whichever is later.
• Transaction records: Retained for 5 years from the date of the transaction, in line with standard financial record-keeping requirements.
• Support communications: Retained for 3 years from the date of the last interaction in a given support thread.
• Marketing preferences and consent records: Retained for the duration of your account, plus 1 year post-closure to evidence consent history.
• Analytics and usage data: Aggregated or anonymised within 90 days and then retained in de-identified form indefinitely for platform improvement purposes.

6. Your Privacy Rights

All bbwin players retain meaningful rights over their personal data. bbwin is committed to honouring these rights promptly and transparently. You may exercise any of the following rights by contacting bbwin support at [email protected]:

Please note that certain rights are subject to legal limitations — for example, bbwin cannot delete financial transaction records that we are legally required to retain for anti-money-laundering compliance. Where a request cannot be fulfilled in full, bbwin will explain the reason clearly and confirm what partial action can be taken.

7. Minors & Data Protection

The bbwin platform is strictly for adults aged 18 years and above. bbwin does not knowingly collect personal data from any individual under the age of 18. Age verification is performed at registration and may be repeated at bbwin's discretion as part of its ongoing KYC obligations.

If bbwin discovers that personal data has been collected from a person under 18, that data will be deleted immediately, the associated account will be closed, and any deposits will be returned to the verified payment source. Parents or guardians who believe their child may have registered on bbwin are encouraged to contact the support team at [email protected] immediately so that appropriate action can be taken without delay.

bbwin recommends that households with minors make use of parental control software to prevent underage access to online gambling platforms. Information on available tools can be found on the bbwin Responsible Gaming page.

8. Policy Updates & Contact

8.1 Policy Updates

bbwin reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable laws, or the services we offer. When material changes are made, bbwin will notify registered players by email and/or by displaying a prominent notice on bbwin.im prior to the changes taking effect. The "Effective Date" at the top of this Policy indicates when the current version came into force.

Continued use of the bbwin platform after a notified Policy update constitutes acceptance of the revised terms. If you disagree with any change, you may close your account before the effective date of the update by contacting bbwin support.

8.2 Governing Language

This Privacy Policy is published in English. In the event of any ambiguity arising from a translated or summarised version, the English-language text published at bbwin.im/privacy-policy shall be the authoritative version.

8.3 Contact Information

If you have any questions, concerns, or complaints about how bbwin handles your personal data, or if you wish to exercise any of your privacy rights, please reach out to the bbwin data protection team using the contact details below. Our support team is available in English, 24 hours a day, 7 days a week — including during Eid, Pohela Boishakh, and BPL season.

Email: [email protected]
Live Chat: Available inside your bbwin account dashboard after login.

bbwin aims to resolve all privacy-related enquiries within 5 business days and all formal data subject requests within 30 calendar days of receipt.