Winbox Privacy Policy — Your data is safe with us

When you create an account on Winbox or use the platform, certain information naturally comes to us. In this Privacy Policy, we are straightforward about it — what data we collect and why, how we store it, who we share it with, and how long we keep it. We are not trying to hide anything behind legal language.

Winbox believes your personal data is an asset — and that asset belongs to you, not us. We only retain the information that is strictly necessary to provide our services. Collecting anything beyond that goes against our policy.

This policy applies to the Winbox website, mobile app, and all associated services. If you use any of our partner sites or third-party services, their own privacy policies will apply.

Winbox collects three types of data — information you provide directly, data generated automatically through your use of the platform, and verification-related information received from third parties.

Information You Provide Directly:

Automatically collected data: When you use Winbox, some technical information is collected automatically — such as device type, operating system, browser, IP address, session duration, and time spent on each page. This data is not used to identify you personally; it is used to resolve technical issues on the platform and improve your overall experience.

Winbox uses your data solely to provide and improve its services. Selling data to advertisers or using it for unrelated purposes is strictly against our policy.

How your data is used:

• Account Management: To manage login, identity verification, and account security
• Payment Processing: To process deposits and withdrawals and to maintain your transaction history
• Customer Support: To understand your issue and provide the right assistance
• Security Monitoring: To detect fraud, money laundering, and account hacking attempts
• Legal Obligation: To fulfill mandatory reporting requirements from regulatory authorities
• Service Improvement: To understand which features are working well and where users may be experiencing issues
• Relevant Contact: To send important updates, transaction confirmations, and (where consent has been given) promotional offers

Winbox never uses your data to make automated decisions that could negatively affect you — for example, any decision to close an account is always subject to human review.

This is one of the most important questions you can ask — and we want to be completely transparent. Winbox does not sell, rent, or trade your data. That said, we do share limited information with specific parties where necessary to deliver our services.

Payment Processors: The relevant transaction details are shared with the respective payment gateway to process bKash, Nagad, or card payments. This information is used solely for transaction verification.

Game Providers: When you play games from providers such as Pragmatic Play or Evolution Gaming, an anonymous player ID is shared. Your name, mobile number, and payment details are never shared with game providers.

Legal Obligation: We may be legally required to share your information with relevant authorities in response to a court order, regulatory request, or money laundering investigation. Where possible, we will endeavor to notify you in advance.

Technology Service Providers: Certain technology companies are given limited access to data for the purposes of server hosting, cybersecurity monitoring, and customer service software. All such companies are bound by strict confidentiality agreements.

Winbox uses cookies and similar technologies on its website and app. Cookies are small text files stored on your device that help make your browsing experience smoother.

Types of cookies used on Winbox:

Essential Cookies: These cookies are essential for the site to function properly. They handle login sessions, temporarily store form data, and manage security tokens. They cannot be disabled.

Performance Cookies: This helps us understand which pages get the most traffic and where issues occur, so we can improve the site. This data is aggregated and anonymous — no individual user can be identified from it.

Preference Cookies: Used to remember your language preference, theme setting, or the last game you viewed. These can be disabled, but doing so means you will need to reconfigure your preferences each time you visit the site.

Winbox does not retain any data longer than necessary. However, certain information must be kept for a specified period due to legal obligations.

If you close your account, most of your personal data will be deleted within the timeframes outlined above. However, certain information must be retained for a specific period due to legal retention obligations — this is outside our control.

You have certain fundamental rights regarding your personal data. Winbox respects these rights and has made it as easy as possible for you to exercise them.

Winbox uses multiple layers of security to protect your information — not just in words, but backed by real technical safeguards.

• 256-bit SSL/TLS Encryption: All data transmitted from your device to Winbox servers is encrypted. No one can intercept or read it in transit.
• Password Hashing: Your password is never stored in plain text — it is hashed using the bcrypt algorithm.
• Two-Factor Authentication (2FA): An additional layer of login protection is available via OTP.
• Suspicious Activity Detection: Automated alerts are triggered whenever unusual login attempts or transactions are detected.
• Regular Security Audits: An independent third-party cybersecurity firm conducts an audit at least once a year.
• Data center security: Winbox servers are hosted in ISO 27001-certified data centers with both physical and digital security measures in place.
• Staff Training: All staff with access to user data receive regular privacy and security training.

That said, keeping your account fully secure also requires your cooperation — use a strong password, keep 2FA enabled, and avoid accessing your account over public Wi-Fi.

This Privacy Policy may be updated from time to time — due to new legal requirements, technical changes, or service updates. You will be notified in advance of any significant changes.

How You Will Be Notified of Changes: For major changes, you will be notified at least 15 days in advance via SMS to your registered mobile number or by email. Minor changes will only be reflected by updating the "Last Updated" date at the top of the page.

By continuing to use the service after changes take effect: Continued use of the platform will be taken as acceptance of the updated policy. If you do not agree, you may close your account.

Privacy Complaints: If you have any concerns or complaints regarding this policy, please reach out to us directly first. Most issues can be resolved through support chat or email.