jiwin Privacy Policy

1Who We Are and How to Contact Us

jiwin is an online casino and sports betting platform operated under the brand name "jiwin" and accessible at https://jiwin.io. For the purposes of this Privacy Policy, jiwin acts as the data controller in respect of the personal data collected from players who access the platform from Bangladesh.

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us using the details below. Note that our email address is provided as plain text and is not a clickable link:

• Privacy enquiries email: [email protected]
• Support hours: 9:00 AM – 11:00 PM Bangladesh Standard Time (BST, UTC+6)
• Response time: Within 30 days for formal data subject requests; typically within 5 business days for general privacy enquiries

2The Personal Data We Collect

jiwin collects personal data in the following categories. We collect only what is necessary for the identified purposes and do not seek to acquire information that exceeds those legitimate requirements.

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (required for age verification — players must be 21 years of age or older)
• Registered email address
• Mobile phone number
• Residential address including district, city, and postcode within Bangladesh
• Nationality

2.2 Identity Verification Documents

• Copies of government-issued identity documents submitted as part of the Know Your Customer (KYC) verification process, such as the National Identity Card (NID), passport, or driving licence
• Source-of-funds documentation where required under anti-money laundering (AML) procedures

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts (in BDT), timestamps, and payment method used
• Mobile banking account references for bKash, Nagad, Rocket, and Upay (account numbers are stored in masked/tokenised form where technically feasible)
• Card payment tokenisation references for Visa and Mastercard transactions (full card numbers are never stored on jiwin systems)
• Bonus credit allocation and wagering requirement completion records

2.4 Account and Activity Data

• Username and encrypted password (passwords are stored using one-way hashing — plain-text passwords are never retained)
• Game session logs including game titles played, wager amounts, outcomes, and session duration
• Sports betting market selections, stake amounts, and settlement records
• Responsible gaming settings including any deposit limits, cooling-off periods, or self-exclusion periods applied to the Account

2.5 Technical and Device Data

• IP address at the time of registration and each subsequent login
• Device type, operating system, and browser version
• Geolocation data (country and city level) derived from IP address
• Session identifiers and authentication tokens
• Cookie identifiers and similar tracking data (see Section 7)

2.6 Communications Data

• Records of correspondence between you and jiwin customer support, including email content, chat transcripts, and any attachments
• Records of formal complaints and their resolution
• Feedback, survey responses, and voluntary testimonials submitted to jiwin

3How We Collect Your Personal Data

jiwin collects personal data through the following means:

3.1 Directly From You

The majority of personal data jiwin holds is provided directly by you during the account registration process, KYC verification, payment transactions, customer support interactions, and when completing responsible gaming forms. You control what information you submit, subject to the minimum requirements needed to open and maintain a verified Account.

3.2 Automatically Through Platform Use

When you access and use the jiwin platform, certain technical and behavioural data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, session duration, pages visited, games launched, and device characteristics. This data is used for platform security, fraud prevention, and service optimisation purposes.

3.3 From Payment Service Providers

When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment service provider may share transaction confirmation data with jiwin to reconcile your Account balance. jiwin does not receive full payment credentials through this process; only transaction identifiers and masked account references are shared.

3.4 From Identity Verification Services

Where jiwin uses third-party identity verification or KYC services to assist with document validation, those services may return verification outcome data (pass/fail status and document type confirmed) to jiwin. The underlying document images are handled in accordance with the relevant service provider's data processing agreement with jiwin.

3.5 From Third-Party Game Providers

Game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may share game session data with jiwin for the purposes of account reconciliation, dispute resolution, and regulatory record-keeping. This data typically comprises game round identifiers, wager amounts, and outcomes — not additional personal identifiers beyond your Account ID.

4Legal Bases for Processing

jiwin processes your personal data on the following legal bases:

5How We Use Your Personal Data

5.1 Account Operations

Your identity and contact data is used to create and maintain your jiwin Account, authenticate your logins, reset credentials when requested, and communicate Account-related notices such as withdrawal confirmations, security alerts, and policy updates.

5.2 Payment Processing

Transaction data is used to process your deposits and withdrawals accurately, reconcile your Account balance, investigate payment discrepancies, and maintain the financial records required for business operations.

5.3 Identity and Age Verification

Verification document data is used exclusively to confirm that you meet the minimum age requirement of 21 years, that you are who you say you are, and that your Account is not being used for fraudulent, impersonation, or money laundering purposes. Verification data is not used for any marketing purpose.

5.4 Responsible Gaming

Account activity data and any responsible gaming settings you establish (such as deposit limits or self-exclusion requests) are used to enforce those settings, send session duration reminders where configured, and flag unusual patterns of play that may indicate a player is experiencing gambling-related harm. If a self-exclusion is in place, jiwin will use your email address to suppress marketing communications for the duration of the exclusion period.

5.5 Fraud Prevention and Platform Security

Technical and device data — including IP addresses, session identifiers, and device fingerprints — is used to detect and prevent account takeover attempts, fraudulent registrations, bonus abuse, and other security threats. Where suspicious activity is detected, jiwin may suspend an Account pending investigation without prior notice.

5.6 Customer Support

Communications data from support interactions is used to resolve your queries, handle formal complaints, improve the quality of support responses, and maintain the records required to demonstrate complaint resolution outcomes.

5.7 Analytics and Platform Improvement

Aggregated and anonymised usage data (which cannot identify you individually) is used to understand how players navigate the platform, which games are most popular, and where technical or usability improvements can be made. Personalised analytics (linking activity to your specific Account) are used to improve the relevance of game recommendations and promotions shown to you, subject to any marketing preferences you have set.

6Sharing Your Personal Data

6.1 Payment Service Providers

To process your deposits and withdrawals, jiwin shares the minimum necessary transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, or Mastercard). These providers act as independent data controllers in respect of your payment credentials and are subject to their own privacy policies and regulatory obligations.

6.2 Identity Verification and KYC Service Providers

Where jiwin engages third-party providers to assist with document authentication or identity verification, your verification documents and associated data are shared with those providers under data processing agreements that prohibit use of your data for any purpose other than completing the verification service for jiwin.

6.3 Game Software Providers

To deliver casino games and sports betting markets on the platform, jiwin shares your Account identifier and game session data with licensed game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. These providers receive only the data necessary to deliver, log, and settle game rounds associated with your Account.

6.4 IT Infrastructure and Security Providers

jiwin uses cloud hosting, content delivery, and cybersecurity service providers to maintain the technical operation of the platform. These providers may process personal data stored on jiwin's systems in the course of providing infrastructure services. They are engaged under data processing agreements that restrict processing to jiwin's documented instructions.

6.5 Legal and Regulatory Authorities

jiwin will disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where required to do so by applicable law, court order, or where jiwin has a good-faith belief that disclosure is necessary to protect the rights, property, or safety of jiwin, its players, or the public. jiwin will, where lawfully permitted, notify you of any such disclosure request.

6.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of jiwin's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified by email prior to any such transfer taking effect, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

7Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly, improve performance, and provide information to site operators. jiwin uses cookies and similar technologies (such as local storage objects and session tokens) on its platform.

7.2 Types of Cookies Used by jiwin

7.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via their privacy or security settings menus. Please note that disabling strictly necessary cookies will impair your ability to log in and use the platform. Disabling functional cookies may reset your saved preferences on each visit.

8Data Retention

jiwin retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

After the relevant retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to you. Anonymised aggregated data may be retained indefinitely for statistical and business analysis purposes.

9Data Security

9.1 Technical Safeguards

jiwin implements the following technical security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and jiwin servers
• Encryption at rest for sensitive data fields including identity document copies and financial account references
• One-way cryptographic hashing for all stored passwords — plain-text passwords are never retained
• Tokenisation of payment credentials so that full card numbers and mobile banking account numbers are not held on jiwin's primary systems
• Intrusion detection systems and real-time monitoring for anomalous access patterns
• Regular penetration testing and vulnerability assessments conducted by independent security specialists

9.2 Organisational Safeguards

Access to personal data within jiwin is restricted to staff members who have a legitimate need to access that data in order to perform their job functions. All staff with data access are subject to confidentiality obligations. jiwin conducts regular internal training on data protection responsibilities and privacy-compliant data handling procedures.

9.3 Data Breach Response

In the event of a confirmed personal data breach that is likely to result in a risk to your rights and freedoms, jiwin will notify affected Players by email to their registered address without undue delay. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps jiwin has taken or proposes to take to address the breach and mitigate its effects.

10Your Rights

As a jiwin player, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within 30 days of receiving a valid request.

10.1 Right of Access

You have the right to request a copy of the personal data jiwin holds about you, together with information about how that data is used, the categories of recipients it has been shared with, and the retention period applicable to it. We will provide this information in a clear, structured format at no charge for the first request in any 12-month period.

10.2 Right to Rectification

If any personal data jiwin holds about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented. For certain data fields — such as your registered name or date of birth — correction requests may require submission of supporting documentary evidence before the change can be applied.

10.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis applies, or where the data has been unlawfully processed. Note that jiwin may be unable to honour erasure requests in full where retention is required by law — for example, financial transaction records subject to mandatory retention periods.

10.4 Right to Restriction of Processing

You may request that jiwin restrict the processing of your personal data while the accuracy of that data is being contested, or where processing is unlawful but you prefer restriction over erasure, or where jiwin no longer needs the data but you require it for a legal claim.

10.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON). You may also request that this data be transmitted directly to another data controller where technically feasible.

10.6 Right to Object

You have the right to object to processing of your personal data where that processing is based on jiwin's legitimate interests. jiwin will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defence of legal claims. You have an absolute right to object to processing for direct marketing purposes at any time.

10.7 Rights Related to Automated Decision-Making

Where jiwin uses automated processes (such as automated fraud scoring or account risk assessment) that produce decisions with significant effects on you, you have the right to request human review of such decisions, to express your point of view, and to contest the decision. jiwin will provide a clear explanation of the logic involved in any automated decision that materially affects you upon request.

11Marketing Communications

11.1 Consent-Based Marketing

jiwin will only send you promotional emails, SMS messages, and push notifications if you have given your explicit consent to receive such communications during the registration process or subsequently through your Account settings. Your consent is entirely voluntary and will not affect your ability to use the platform if you choose not to provide it.

11.2 Withdrawing Marketing Consent

You may withdraw your consent to marketing communications at any time by:

• Updating your notification preferences in your Account dashboard
• Clicking the unsubscribe link included in any marketing email sent by jiwin
• Emailing [email protected] with a clear request to be removed from all marketing communications

Withdrawal of consent takes effect within 5 business days of receipt of your request. You may continue to receive transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) that are necessary for the operation of your Account regardless of your marketing preference.

11.3 Self-Excluded Players

Players who have applied a self-exclusion through jiwin's responsible gaming controls will be automatically removed from all marketing communications for the duration of their exclusion period. jiwin will take reasonable steps to suppress marketing messages to self-excluded players across all channels.

12Children and Minors

During the registration process, jiwin requires all applicants to confirm their date of birth and to provide identity documentation that verifies they are aged 21 or above. Accounts where age verification cannot be completed to jiwin's satisfaction will be suspended until satisfactory verification is provided, or closed permanently if verification fails.

If jiwin becomes aware that personal data has been collected from a player who is under the age of 21, jiwin will promptly close the Account, reverse any deposits to the original payment source, and securely delete all personal data associated with that Account. If you believe an underage individual has registered on the platform, please report this immediately to [email protected].

13Third-Party Links and Services

The jiwin platform may contain references to third-party game providers and payment services. When you interact with payment providers such as bKash, Nagad, Rocket, or Upay, you are also subject to those providers' own privacy policies and terms of service. jiwin is not responsible for the privacy practices of third-party service providers in respect of data that those providers collect independently through their own platforms and interfaces.

jiwin does not include outbound hyperlinks to unrelated third-party websites within its platform. Where integration with a third-party service is technically necessary (for example, loading a game from a provider's servers), jiwin ensures that data processing arrangements with those providers are governed by appropriate contractual protections.

14Changes to This Policy

jiwin reserves the right to update or modify this Privacy Policy at any time. When material changes are made — meaning changes that significantly affect how your personal data is collected, used, or shared — jiwin will notify you by sending an email to your registered address at least 14 days before the updated Policy takes effect.

For minor or non-material changes (such as typographical corrections or clarifications that do not alter the substance of our data practices), jiwin may update the Policy without prior individual notification, updating the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically to stay informed about how your data is protected.

Your continued use of the jiwin platform after the effective date of any updated Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should close your Account before the effective date of the changes.

15Contact and Data Requests

For all privacy-related enquiries, data subject access requests, rectification requests, erasure requests, or complaints regarding jiwin's data handling practices, please contact our support team using the details below. All contact details are provided as plain text — they are not clickable links.

• Email: [email protected]
• Subject line for data requests: "Privacy Request — [Your Account Username]"
• Response time: Within 30 calendar days for formal data subject requests; typically within 5 business days for general enquiries
• Support hours: 9:00 AM – 11:00 PM Bangladesh Standard Time (BST, UTC+6)

When submitting a formal data subject request, please include your full name as registered on your Account, your registered email address, and a clear description of your request. For account-level requests, we may need to verify your identity before processing the request to protect against unauthorised access to your data.