wln bd Privacy Policy

wln bd collects personal data through multiple channels: directly from you when you register an account or contact support, automatically when you interact with the platform, and from third-party verification providers where required to meet our compliance obligations. The categories of personal data we collect are set out below.

Registration Data

When you create a wln bd account, we collect your full legal name, date of birth, email address, mobile phone number, and preferred payment method. This data is required to establish your account, verify your minimum age of 18, and communicate with you about account activity.

Identity Verification (KYC) Documents

Prior to processing your first withdrawal — and in certain other circumstances triggered by our internal compliance procedures — we require you to submit documents to verify your identity and payment method. These may include:

• Bangladesh National Identity Card (NID), valid passport, or driving licence.
• Proof of address: utility bill, bank statement, or official government document dated within the past three months.
• Proof of payment method: a screenshot or confirmation from your bKash, Nagad, Rocket, or Upay wallet, or a card statement for card-based deposits.

KYC documents contain sensitive biometric and identity data. They are stored in an access-controlled, encrypted document vault and are accessible only to authorised compliance personnel.

Financial Transaction Data

We record all deposit and withdrawal transactions, including the amount in BDT, the payment method used, the transaction reference number, and the timestamp. This data is retained for a minimum of five (5) years to satisfy our anti-money laundering (AML) record-keeping obligations.

Platform Usage Data

When you use the wln bd platform, we automatically collect technical data including your IP address, device type and operating system, browser type and version, session start and end times, pages and game screens visited, bet history, and game results. This data is used for fraud detection, responsible gaming monitoring, and platform performance improvement.

Communications Data

If you contact the wln bd support team via email at [email protected] or through the on-platform live chat, we retain records of those communications for quality assurance, dispute resolution, and regulatory purposes. Email communications are stored in encrypted form on our internal CRM system.

wln bd processes your personal data only where a lawful basis for doing so exists. The table below sets out the primary purposes for which your data is processed, together with the corresponding lawful basis for each purpose.

Automated Decision-Making

wln bd employs automated systems for real-time fraud detection and responsible gaming risk scoring. These systems may automatically flag an account for review or temporarily restrict account activity without human intervention where a defined risk threshold is met. Automated decisions that materially affect your account — such as a temporary payment restriction — will be notified to you promptly, and you have the right to request a human review of any such decision by contacting [email protected].

Marketing Communications

wln bd will send you promotional emails, SMS notifications, and in-platform messages about bonuses, seasonal offers, and new game releases only if you have actively opted in to marketing communications during registration or subsequently through your account preferences. You may withdraw marketing consent at any time by clicking the unsubscribe link in any marketing email or by contacting the support team. Withdrawal of marketing consent does not affect the processing of your data for other lawful purposes.

wln bd does not sell or rent personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Service Providers and Technology Partners

We engage third-party companies to provide specific technical functions that are integral to the operation of the wln bd platform. These include:

• Game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe): Limited session and account data is shared to facilitate authenticated game sessions. Game providers do not receive your payment credentials or KYC documents.
• Payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, Mastercard): Transaction reference data is shared with the relevant payment provider to initiate and confirm deposits and withdrawals. Payment providers process this data under their own privacy policies and regulatory obligations.
• Identity verification providers: KYC documents may be transmitted to a third-party identity verification service for automated or manual review. Such providers are contractually bound to process your data solely for the purpose of identity verification and to delete it upon completion of the verification process or within the period specified by our data processing agreement.
• Cloud infrastructure and hosting providers: wln bd's platform operates on secure cloud infrastructure. The hosting provider has access to server-level data only and is subject to strict data processing agreements that prohibit independent use of any data held on our infrastructure.

Legal and Regulatory Disclosure

wln bd may be required to disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a valid legal process, or in connection with the investigation of fraud, money laundering, or other criminal activity. We will notify you of any such disclosure request where we are legally permitted to do so.

Business Transfers

In the event that wln bd undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity via the email address registered to your account, with a minimum of thirty (30) days' notice before the transfer takes effect.

wln bd uses cookies and similar client-side tracking technologies (including local storage and session tokens) to operate core platform functionality and to improve the player experience. The table below describes the categories of cookies deployed on the wln bd platform.

Managing Cookies

You may configure your browser to block or delete cookies at any time. Instructions for managing cookies are available in your browser's help documentation. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your wln bd account and may render core features of the platform inoperable. wln bd does not deploy third-party advertising or retargeting cookies on its platform.

wln bd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to meet our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The retention periods applicable to the main categories of personal data we hold are set out below.

• Account registration data: Retained for the duration of the account relationship plus five (5) years following account closure, to satisfy AML record-keeping obligations.
• KYC and identity documents: Retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with anti-money laundering regulations.
• Support communications: Retained for three (3) years from the date of the communication, unless the communication forms part of a formal dispute, in which case it is retained until the dispute is fully resolved plus an additional two (2) years.
• Platform usage and analytics data: Retained in anonymised, aggregated form for up to twenty-four (24) months. Raw session logs containing IP addresses are deleted after twelve (12) months.
• Marketing preference records: Retained for as long as your account is active and for one (1) year following withdrawal of marketing consent, as evidence of the consent decision.

Data Storage Location

wln bd's platform data is stored on servers located in jurisdictions that maintain adequate data protection standards. All data transfers between processing locations are conducted over encrypted channels. Where data is transferred to a jurisdiction that does not offer an equivalent level of protection to the jurisdiction in which it was collected, wln bd applies appropriate safeguards including standard contractual clauses and encryption of data in transit and at rest.

As a player whose personal data is processed by wln bd, you hold the following rights with respect to your personal information. To exercise any of these rights, submit a written request to [email protected] from the email address registered to your wln bd account. We will respond within thirty (30) calendar days of receiving a verified request.

wln bd maintains a comprehensive information security programme designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The key technical and organisational measures in place are described below.

Technical Controls

• TLS/SSL encryption: All data transmitted between your browser or mobile device and the wln bd platform is protected by TLS 1.2 or higher encryption. We enforce HTTPS across all platform pages without exception.
• AES-256 encryption at rest: All personal data and financial records stored in wln bd's databases are encrypted using AES-256 symmetric encryption. Encryption keys are managed through a dedicated key management service with strict access controls.
• Access controls: Access to systems containing personal data is governed by role-based access control (RBAC). Staff are granted access only to the data necessary for their specific job function. All access is logged and audited.
• Network security: The wln bd platform is protected by a web application firewall (WAF), distributed denial-of-service (DDoS) mitigation, and real-time intrusion detection systems.
• Penetration testing: wln bd commissions independent penetration testing of its platform infrastructure at least annually, with critical findings remediated within defined SLA timescales.

Organisational Controls

• All wln bd employees and contractors who handle personal data are subject to contractual confidentiality obligations and receive training on data protection responsibilities.
• A designated data protection lead is responsible for overseeing compliance with this Privacy Policy and for managing data subject requests and breach response.
• In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, wln bd will notify affected players without undue delay and, where required, within 72 hours of becoming aware of the breach.

wln bd reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes to our data processing activities, or improvements to how we communicate our privacy practices to players.

Material changes to this Privacy Policy — those that affect how your personal data is collected, used, or shared in ways that differ significantly from the practices described in the version of the policy you originally accepted — will be communicated to you via the email address registered to your wln bd account at least fourteen (14) days before they take effect. Non-material changes (such as clarifications of existing practices or updates to contact information) may be made without prior notice.

The effective date of the current version of this Privacy Policy is displayed in the hero section at the top of this page. We encourage you to review this page periodically to stay informed of how your personal data is being handled.

Continued use of the wln bd platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change, you should close your account by contacting the support team at [email protected] before the revised policy takes effect.

Contact the Data Protection Team

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the wln bd data protection team at [email protected]. Please include "Privacy Request" in the subject line of your email and send it from the email address registered to your wln bd account so we can verify your identity efficiently.