Privacy Policy for
17winbd — Your Data, Protected

Information We Collect

When you register for and use your 17winbd account, we collect various categories of personal data in order to provide you with a safe, functional, and legally compliant gaming experience. The data we collect falls into two broad categories: information you provide to us directly and information we collect automatically as you interact with the platform.

Information you provide directly: This includes your full legal name, date of birth, residential address in Bangladesh (including city, district, and postcode), a mobile number registered in your name (including your bKash or Nagad wallet number where used for payment), a valid email address, a username and password of your choosing, and any identity documentation submitted during KYC verification such as a National Identity Card (NID), passport, or driving licence scan.

Financial information: We collect records of all deposits and withdrawals processed through your account, including the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, Mastercard), transaction timestamps, reference numbers, and amounts in BDT. We do not store full card numbers or mobile banking PINs — card details are handled exclusively by our PCI-DSS compliant payment processing partners.

Automatically collected information: When you access 17winbd, our servers and analytics systems automatically collect your IP address, device type and operating system, browser type and version, session start and end times, pages visited, games played, wagers placed, and clickstream data showing how you navigate the platform. This data is used for fraud prevention, platform optimisation, and responsible gaming monitoring purposes.

How We Use Your Data

17winbd uses the personal data we collect for clearly defined purposes, all of which are necessary to deliver the gaming services you have requested or to fulfil our legal obligations. We do not use your data for purposes incompatible with those described in this Privacy Policy without first obtaining your consent.

• Account creation and management: Your identity and contact data is used to set up and maintain your player account, verify your age and identity during KYC checks, and communicate essential account-related information such as password reset emails and security alerts.
• Payment processing: Financial data is used to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted methods, and to maintain accurate transaction records for audit and compliance purposes.
• Platform operation and improvement: Usage and technical data is analysed to monitor platform performance, identify and fix technical faults, and develop new features that improve the gaming experience for Bangladeshi players.
• Fraud prevention and security: IP addresses, device fingerprints, and behavioural patterns are monitored by our automated systems to detect suspicious activity such as duplicate account creation, bonus abuse, and unauthorised login attempts.
• Responsible gaming monitoring: Your wagering history, session length data, and deposit frequency are monitored by our responsible gaming systems to identify players who may be displaying signs of problem gambling behaviour. Where a concern is identified, our support team may make proactive contact.
• Legal and regulatory compliance: We are obligated to process and retain certain data to comply with anti-money laundering (AML) requirements, respond to lawful information requests from competent authorities, and resolve disputes.
• Marketing communications: Where you have opted in to receive promotional communications, we may use your email address or mobile number to send you information about bonuses, seasonal promotions (such as Eid or BPL season offers), and platform updates. You may opt out at any time by contacting support@17winbd.

Legal Basis for Processing

17winbd processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is used:

• Contractual necessity: Processing your identity, contact, and financial data is necessary to perform the contract between you and 17winbd — specifically, to create and manage your player account and process your transactions. Without this data, we cannot provide the service.
• Legal obligation: Certain processing activities — particularly KYC verification, transaction record-keeping, and AML monitoring — are required by applicable law. We are obligated to retain this data for defined periods regardless of your account status.
• Legitimate interests: We process technical and usage data on the basis of our legitimate interest in operating a secure, high-performance gaming platform, preventing fraud, and protecting the integrity of the player community. We have assessed that our legitimate interests in these processing activities do not outweigh the privacy rights of our players where appropriate safeguards are in place.
• Consent: Where we send you marketing communications, we do so on the basis of your prior consent given during registration or through a subsequent opt-in. You have the right to withdraw this consent at any time without affecting the lawfulness of any prior processing.

Data Sharing & Disclosure

17winbd does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment service providers: We share your name, mobile number, and transaction details with our payment processing partners (including the operators of bKash, Nagad, Rocket, and Upay integrations, and our bank partners including Dutch-Bangla Bank, BRAC Bank, and City Bank) solely to process your financial transactions. These partners operate under their own privacy policies and are contractually bound to handle your data securely.
• KYC and identity verification providers: We may share your identity documents with third-party KYC verification service providers to automate the verification process. These providers are contractually bound to use your data only for the purpose of identity verification on our behalf.
• Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and wager data in the course of operating their games on our platform. These studios do not receive your name, contact details, or payment information.
• Fraud prevention and security services: We may share IP addresses, device identifiers, and behavioural signals with specialist fraud prevention technology providers to protect the platform and its players from malicious activity.
• Legal and regulatory authorities: We will disclose your personal data to law enforcement, regulatory agencies, or other competent authorities where we are legally required to do so, or where we believe disclosure is necessary to protect the safety of our players or the public.
• Business transfers: In the event that 17winbd undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified via your registered email address in the event of such a transfer.

Cookies & Tracking

17winbd uses cookies and similar tracking technologies to operate the platform, remember your session, personalise your experience, and analyse usage patterns. A cookie is a small text file that is stored on your device when you visit our website. Cookies do not contain your name or payment details — they typically hold a session token or anonymous identifier.

We use the following categories of cookies on the 17winbd platform:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language preference (English), and keep your cart or game session active. You cannot opt out of strictly necessary cookies without ceasing to use the platform.
• Analytical / performance cookies: These cookies help us understand how players navigate the platform by collecting anonymous, aggregated data about page views, session durations, game selections, and error events. This data is used solely to improve the platform's performance and usability.
• Functional cookies: These cookies remember your preferences — such as your preferred payment method (e.g., bKash) or your responsible gaming limit settings — so that you do not need to re-enter them each time you log in.
• Security cookies: Used to detect and prevent fraudulent sessions, bot activity, and repeated failed login attempts. These cookies form part of our fraud prevention infrastructure.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 17winbd platform. We do not use advertising or third-party retargeting cookies.

Data Retention

17winbd retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention principles apply to our data categories:

• Active account data: Your identity, contact, and account preference data is retained for the full duration of your active relationship with 17winbd. If your account is closed at your request and no regulatory hold applies, this data is deleted or anonymised within 90 days of account closure.
• Financial transaction records: Deposit, withdrawal, and wagering transaction records are retained for a minimum of five (5) years from the date of each transaction to satisfy AML and financial record-keeping obligations. This period may be extended if a transaction is subject to an ongoing investigation.
• KYC documentation: Identity verification documents (NID scans, passport copies) are retained for a minimum of five (5) years following account closure, in line with applicable know-your-customer regulatory requirements.
• Support communications: Records of customer support interactions, including chat logs and email correspondence, are retained for two (2) years from the date of the last interaction.
• Technical and usage data: Server logs and platform analytics data are typically retained for a maximum of twelve (12) months, after which they are aggregated or deleted.
• Marketing consent records: Records of your marketing opt-in consent are retained for as long as you remain an active subscriber plus three (3) years after opt-out, to evidence consent compliance.

When your data reaches the end of its retention period, it is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

Your Privacy Rights

As a user of the 17winbd platform, you hold a number of rights with respect to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact us at support@17winbd from your registered email address, clearly stating the nature of your request.

• Right of access: You have the right to request a copy of all personal data that 17winbd holds about you. We will provide this information in a structured, commonly used format within thirty (30) days of receiving your verified request.
• Right to rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic contact details directly from your account settings; for changes to identity or KYC data, please contact support.
• Right to erasure: You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw your consent and no other legal basis applies. Please note that some data (particularly financial transaction records and KYC documents) must be retained to comply with legal obligations and cannot be erased on request.
• Right to restriction: You may request that we restrict the processing of your data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to data portability: Where we process your data on the basis of your consent or contractual necessity, you have the right to receive a copy of your data in a machine-readable format and to transmit it to another service provider.
• Right to object: You have the right to object to our processing of your data where we rely on legitimate interests as our legal basis, including profiling for fraud prevention purposes. We will comply with your objection unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where we process your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time by contacting support@17winbd.

Data Security

17winbd employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. All data transmitted between your device and the 17winbd platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption strength. Our servers are hosted in secure data centre environments with physical access controls and 24/7 monitoring.

Password storage uses one-way hashing with modern salted algorithms — plain-text passwords are never stored on our systems. Access to personal data within the 17winbd organisation is strictly controlled on a need-to-know basis. Staff who handle personal data are subject to confidentiality obligations and receive regular data security training.

In the event of a personal data breach that poses a risk to your rights and freedoms, 17winbd will notify affected players via their registered email address within 72 hours of becoming aware of the breach, and will take immediate steps to contain and remediate the incident.

While we take every reasonable precaution to secure your data, no digital platform can guarantee absolute security. You also have a responsibility to keep your account credentials confidential and to notify us immediately at support@17winbd if you suspect your account has been compromised.

Third-Party Services

The 17winbd platform integrates with several carefully selected third-party services to deliver our full range of features. While we take steps to ensure that our partners maintain high data protection standards, each third party operates under its own privacy policy, and we encourage you to review those policies where relevant.

• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi provide game software that runs within the 17winbd platform. These studios may process anonymised gameplay data to power their game logic and reporting systems. They do not receive personally identifiable information about 17winbd players beyond a pseudonymous session identifier.
• Payment gateways: Our payment integration partners process your financial transactions and are independently PCI-DSS compliant. Your full card numbers and mobile banking credentials are handled exclusively by these partners and are never stored on 17winbd servers.
• Identity verification (KYC) providers: We use specialist KYC technology providers to automate the verification of identity documents. These providers receive the documents you submit during verification and return a verification result to 17winbd. They are contractually prohibited from using your documents for any other purpose.
• Analytics platforms: We use internal analytics tools to track aggregated, anonymised platform usage data. We do not use Google Analytics or any advertising-network analytics tool on the 17winbd platform.
• Email and messaging providers: Transactional emails (account confirmations, withdrawal notifications, security alerts) and promotional communications are delivered via third-party email and SMS infrastructure providers operating under strict data processing agreements.

17winbd is not responsible for the privacy practices of any third-party website or service that you access via a link from our platform. This Privacy Policy applies solely to the 17winbd website and its directly integrated services.

Policy Updates & Contact

17winbd reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this Policy, we will update the "Last Updated" date displayed at the top of this page and will notify registered players via email at their registered address. For non-material changes (such as typographical corrections or clarifications that do not alter your rights), we may update the page without direct notification.

We recommend bookmarking this page and reviewing it periodically. Your continued use of the 17winbd platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must stop using the platform and contact us to close your account.

If you have any questions, concerns, or complaints about this Privacy Policy or the way 17winbd handles your personal data, please contact our privacy team at support@17winbd. We aim to respond to all privacy-related enquiries within 10 business days during Bangladesh Standard Time (BST, UTC+6) working hours. Please include your full name, registered email address, and a clear description of your query to help us assist you as efficiently as possible.