Reference

How winbaji Handles Your Personal Data

This Privacy Policy sets out what data we collect when you open an account, deposit via bKash, Nagad or Rocket, and use the lobby — and exactly how we protect it. Access to our platform depends on your local law and eligible regions.

Account data protectionbKash, Nagad, Rocket payment dataCookie and device dataYour right to request changesBangladesh-eligible access only
winbaji How winbaji Handles Your Personal Data
DATA HANDLING STANDARDS

How We Protect and Manage Your Information

We apply a set of consistent data-handling practices across account security, cookie use, payment data retention and your right to make changes. Each area below covers a specific part of how your information moves through the platform.

Account Security

Your account is protected by OTP verification on login and on payment method changes. If we detect a new device or location, we require re-verification before access is restored.

Cookies and Device Data

We use session cookies to keep you logged in and analytics cookies to understand how the lobby is used. You can manage cookie preferences from your browser settings at any time.

Payment Data Retention

Transaction records linked to bKash, Nagad and Rocket deposits are retained for the period required by applicable financial rules. After that period, they are deleted or anonymised.

Requesting Data Changes

You can ask us to correct your registered name, email or phone number through the account settings page. Requests to delete your account and associated data are handled via our support channels.

PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you want to request a copy of your data, ask us to correct something, or raise a concern about how your information is handled, our support team can take that request directly. We aim to respond to data-related queries within a reasonable time. You can reach us through any of the channels below.

Team online

Live Chat

Open the chat window from your account dashboard. A support agent will take your data request and log it under your account reference.

Email Support

Send your query to our support address with your registered account details. We use your account email to verify the request before acting on it.

Account Help Centre

The Help Centre inside your account has a dedicated privacy request form. Submit it there and we will confirm receipt with a reference number.

Common Questions About Your Privacy on winbaji

Below are the questions we hear most often about how your data is stored, who can see it, and what you can do about it. Each answer reflects how we actually handle this on the platform.

We collect your name, email address, phone number and the payment method you register — such as a bKash or Nagad number. We also log the device and IP address used at sign-in.

Yes. Any mobile wallet number you add — bKash, Nagad or Rocket — is stored in encrypted form. It is used only to process your deposit and withdrawal requests and is never shared with other parties for marketing.

You can. Submit a data access request through the Help Centre form in your account or contact our support team via live chat. We will verify your identity first, then provide a summary of your stored data.

We retain account and transaction records for the period required under applicable financial record-keeping rules. Once that period ends, your data is deleted or anonymised. The exact duration depends on local law.

We share data only with payment processors when it is needed to complete a transaction — for example, when routing a Rocket withdrawal. We do not sell your data or pass it to advertisers.

Reach out via live chat or our support email with your account reference. We take privacy complaints seriously and will respond with a reference number and next steps within a reasonable timeframe.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.