GrabWin Privacy Policy — Your Data is Fully Secure

1 What Data We Collect

GrabWin collects certain essential information to deliver the best online gaming experience. We only retain data that is necessary to keep our services running and to ensure your security.

Information collected at registration:

• Full name and date of birth (for age verification)
• Mobile Number & Email Address
• Payment method details (bKash, Nagad, Rocket number)
• Password (stored in encrypted form)

Information collected automatically during use:

• Device type, operating system, and browser information
• IP Address and Approximate Location
• Session duration, game history, and transaction records
• Cookies and Local Storage Data

During identity verification (KYC):

• Copy of National ID or Passport
• Selfie or photo (if required)
• Proof of Address

2 How We Use Your Data

GrabWin uses collected data only for the purposes listed below. Your data is never used for commercial or unauthorized purposes.

• Account Management: To support login, security, and service functionality.
• Payment Processing: To process deposits and withdrawals.
• Customer Support: To resolve issues and provide customer support.
• Fraud Prevention: To detect and flag suspicious activity.
• Legal Obligations: Data retained as required by regulatory authorities.
• Platform Improvement: Analytics to improve your gaming experience.
• Promotional Communications: To send you offers and updates, subject to your consent.

GrabWin never uses your data for ad profiling or retargeting without your explicit consent.

3 Who We Share Your Data With

GrabWin does not sell your data. However, limited information may be shared with trusted partners where necessary to operate our services.

• Payment Processors: Minimum required details shared with bKash, Nagad, and Rocket to process transactions.
• Game Provider: Anonymized data used for game operations.
• Security Services: Providers of fraud detection technology.
• Legal Authorities: To comply with court orders or government directives.

4 Data Protection Measures

GrabWin uses industry-leading technology to protect your data. Our security infrastructure operates across multiple layers.

• SSL/TLS Encryption: All data transfers are secured with 256-bit encryption.
• Firewall & DDoS Protection: Advanced systems to protect against external attacks.
• Two-Factor Authentication (2FA): An extra layer of security at account login.
• Regular Backups: Regular backups to minimize the risk of data loss.
• Access Controls: Only authorized personnel may access data on a need-to-know basis.
• Penetration Testing: Regular third-party security testing.

That said, no data transmission over the internet is entirely risk-free. GrabWin takes every precaution, but some responsibility is yours as well — especially keeping your password confidential.

5 Cookies Policy

GrabWin uses cookies to keep the website running smoothly and to improve your experience.

• Essential Cookies: To maintain login sessions and ensure security.
• Performance Cookies: To measure site speed and performance.
• Functionality Cookies: To remember your preferred language and settings.

We do not use third-party advertising cookies. You can manage or delete cookies through your browser settings, though some features may not function as expected.

6 Your Data Rights

GrabWin believes you have full rights over your own data. You can exercise any of the rights below at any time.

7 Children's Privacy

GrabWin is strictly for users aged 18 and above. We do not knowingly collect data from anyone under the age of 18.

• Age is verified at the time of registration.
• If a minor is found to have created an account, that account is immediately closed and all collected data is deleted.
• If you suspect underage use, please contact our support team.

8 Third-Party Services

The GrabWin platform may include third-party games and services. These services have their own privacy policies, and GrabWin is not responsible for them.

• Game providers only receive the information necessary to operate the games.
• Payment gateways adhere to their own security standards.
• GrabWin holds all partners to binding data protection agreements.

9 Data Retention Period

GrabWin does not retain data longer than necessary. Retention periods depend on the type of data and applicable legal requirements.

• Account Information: For the duration the account is active and up to 5 years after closure.
• Transaction Records: Up to 7 years where legally required.
• KYC Documents: 5 years after account closure.
• Log Files: Up to 12 months.
• Cookies Data: At the end of the session or up to 30 days, whichever comes first.

Once the retention period expires, data is securely deleted or anonymized.

10 Privacy Policy Updates

GrabWin may update this privacy policy as needed. Any changes will be published as a new version on this page.

• You will be notified of any important changes via email or app notification.
• Continued use of the platform after any changes will be considered acceptance of the updated policy.
• The date of the latest update will always be shown at the top of the page.

11 Contact Us

For any questions, complaints, or requests regarding our Privacy Policy, please reach out to our dedicated Privacy Team.

• Email: [email protected]
• Response Time: Typically within 48 hours
• Language: Support available in both Bengali and English

When submitting any data-related request, please write from the email address registered to your account to help us verify your identity quickly.