djwin Privacy Policy

1. Introduction & Scope

This Privacy Policy describes how djwin collects, processes, stores, and protects the personal data of individuals who visit, register on, or otherwise interact with the djwin platform at djwin.club. It applies to all djwin services including sports betting, live casino, slots, bingo games, and any other products made available through the platform, whether accessed via desktop browser or mobile device.

By registering a djwin account or by continuing to use the djwin platform after this Privacy Policy has been published or updated, you acknowledge that you have read and understood its contents and consent to the collection and processing of your personal data as described herein.

djwin is committed to handling all personal data responsibly, transparently, and in accordance with the principles of data minimisation, purpose limitation, and storage limitation. We treat the privacy of every player on our platform — whether located in Dhaka, Chittagong, Sylhet, Khulna, or anywhere else in Bangladesh — with the same high standard of care.

Changes to This Policy

djwin reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. The updated policy will be published at djwin.club/privacy-policy with a revised effective date at the top of the document. Where changes are material, djwin will make reasonable efforts to notify registered players via the email address or mobile number on file. Your continued use of the djwin platform following the publication of an updated policy constitutes acceptance of the revised terms.

2. Data We Collect

djwin collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the platform, and in limited cases from trusted third parties involved in payment processing or identity verification.

Data You Provide Directly

When you register a djwin account or interact with our platform, you may provide the following categories of personal data:

Data Collected Automatically

When you access and use the djwin platform, we automatically collect certain technical data about your device and session. This data helps us maintain platform security, improve user experience, and detect fraudulent activity:

• Device information: Device type, operating system, browser type and version.
• Network information: IP address, approximate geographic location derived from IP, ISP name.
• Usage data: Pages visited, games played, bet history, session duration, click patterns, feature interactions.
• Log data: Access timestamps, error logs, API call records.
• Cookie and tracking data: Session cookies, analytics cookies, preference cookies (see Section 5 for full details).

Data from Third Parties

In limited circumstances, djwin may receive personal data about you from trusted third-party partners, including:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard may share transaction confirmation data with djwin to verify deposit and withdrawal status.
• Identity verification providers: Third-party KYC service providers may share identity verification outcomes (pass/fail) with djwin as part of the account verification process.
• Fraud prevention services: Specialised fraud detection vendors may share risk-score data or flagged identity indicators where there is a legitimate security concern related to an account.

3. How We Use Your Data

djwin processes your personal data for specific, legitimate purposes only. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following table summarises the primary purposes for which djwin uses personal data and the legal basis for each:

Marketing Communications

With your consent, djwin may send you promotional communications about new games, bonus offers, tournaments, and platform updates via SMS or email. You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or by following the unsubscribe instructions included in any marketing message. Withdrawal of marketing consent does not affect the processing of your data for other purposes listed above.

4. Data Sharing & Third Parties

djwin does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only where it is necessary to deliver our services, comply with legal obligations, or protect the integrity of the platform.

Service Providers and Processors

djwin works with a limited number of trusted third-party service providers who process personal data on our behalf. These providers are contractually bound to process your data only according to djwin's instructions and in accordance with applicable data protection standards. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners process transaction data to facilitate deposits and withdrawals.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session data necessary to operate their respective games on the djwin platform. Game studios do not receive your full identity data.
• KYC and identity verification providers: Specialist verification services receive copies of identity documents to fulfil mandatory age and identity checks.
• Fraud prevention vendors: Risk management partners receive technical signals (e.g., IP data, device fingerprints) to assist with fraud and money laundering detection.
• Analytics providers: Web analytics services receive anonymised or pseudonymised usage data to help djwin understand platform performance.
• Cloud infrastructure providers: djwin's platform is hosted on secure cloud infrastructure. Hosting providers may process data incidentally as part of their infrastructure services but do not access or use your data independently.

Legal Disclosure

djwin may disclose your personal data to law enforcement agencies, regulatory authorities, or other governmental bodies where we are legally required to do so, where we receive a valid legal request, or where disclosure is necessary to protect the safety of users or the integrity of the platform. djwin will take reasonable steps to notify you of any such disclosure where legally permissible.

5. Cookies & Tracking

djwin uses cookies and similar tracking technologies on the djwin.club website. Cookies are small text files placed on your device by your browser when you visit a website. They enable the website to remember information about your visit, such as your session state and preferences, which makes your next visit easier and more personalised.

Types of Cookies djwin Uses

Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling essential session cookies will prevent you from logging in to your djwin account and will impair the core functionality of the platform. Disabling analytics cookies will not affect your ability to use djwin but will limit our ability to improve the service based on usage patterns.

djwin does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on external websites. Tracking on djwin.club is limited to the purposes described in the table above.

6. Data Retention

djwin retains personal data only for as long as it is necessary for the purposes described in this Privacy Policy, or for as long as we are required to do so by applicable law. The following retention periods apply as general guidelines:

• Account and identity data: Retained for the duration of your active account relationship with djwin, plus a minimum of 5 years after account closure to satisfy legal and regulatory obligations.
• Transaction and financial records: Retained for a minimum of 7 years from the date of the transaction, in line with financial record-keeping requirements.
• KYC and verification documents: Retained for the duration of your account plus 5 years post-closure, or longer if required by a legal obligation or ongoing investigation.
• Support communications: Retained for 3 years from the date of the last interaction, to allow for dispute resolution and quality assurance purposes.
• Platform usage and analytics data: Retained in pseudonymised form for up to 24 months, after which it is either deleted or further anonymised such that it can no longer be attributed to an individual.
• Marketing consent records: Retained for the period during which you have given consent, plus 3 years post-withdrawal of consent, for audit and compliance purposes.

Data Deletion

When personal data reaches the end of its applicable retention period, djwin will securely delete or anonymise that data in accordance with our internal data disposal procedures. Secure deletion processes are applied to both electronic records and physical document copies where applicable.

7. Your Data Rights

As a user of the djwin platform, you have a number of rights in relation to the personal data we hold about you. djwin is committed to facilitating the exercise of these rights promptly and transparently. To exercise any of the rights listed below, please contact djwin's data support team at [email protected] with the subject line "Data Rights Request".

• Right of Access: You have the right to request a copy of the personal data djwin holds about you. djwin will respond to verified access requests within a reasonable timeframe, providing the data in a structured and readable format.
• Right to Rectification: If any personal data djwin holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain information directly from within your djwin account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing exists. Please note that erasure requests may be subject to overriding legal retention obligations (see Section 6).
• Right to Restriction of Processing: You have the right to request that djwin restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where data is processed on the basis of your consent or a contractual relationship, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing based on djwin's legitimate interests, though this right may be overridden where djwin can demonstrate compelling grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

8. Data Security

djwin implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes, but is not limited to, the following controls:

• SSL/TLS encryption: All data transmitted between your browser or device and the djwin platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted data storage: Sensitive personal data including identity documents and financial records is stored in encrypted form at rest on secured cloud infrastructure.
• Access controls: Access to personal data within djwin's organisation is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Two-factor authentication (2FA): djwin supports 2FA for all player accounts via SMS OTP to the registered mobile number. djwin strongly recommends that all players enable 2FA to protect their accounts.
• Fraud detection systems: Automated systems continuously monitor account activity for patterns indicative of fraud, account takeover, or money laundering.
• Penetration testing: djwin's platform and infrastructure undergo regular security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: djwin maintains a documented data breach response procedure. In the event of a security incident that affects your personal data, djwin will notify affected users and relevant authorities in accordance with applicable obligations.

Your Responsibilities

While djwin takes robust measures to protect the security of your data on our end, the security of your account also depends on steps you take as an account holder. You are responsible for maintaining the confidentiality of your login credentials, using a strong and unique password, and keeping your registered mobile number up to date. If you believe your account has been compromised, contact [email protected] immediately.

9. Contact & Updates

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way djwin handles your personal data, please contact our support team at any time:

• Email: [email protected] (please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate)
• Response time: djwin aims to respond to all privacy-related communications within 5 business days (Bangladesh Standard Time, UTC+6)
• Support hours: 24 hours a day, 7 days a week

This Privacy Policy was last updated on 1 January 2026. djwin will publish all future updates to this document at djwin.club/privacy-policy. The effective date at the top of the document will always reflect the date on which the current version came into force. We encourage you to review this policy periodically to stay informed about how djwin protects your personal data.