No Data Sold to Third Parties
winfast does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data is used solely to provide, operate, and improve your experience on the winfast platform.
TLS Encryption at Every Step
All data transmitted between your device and winfast is protected by Transport Layer Security (TLS) encryption. This applies to your login session, deposit and withdrawal requests, KYC document uploads, and all support communications.
You Control Your Data
Bangladesh players have the right to request access to the personal data winfast holds about them, to request corrections, and in certain circumstances to request deletion. Contact our support team at support@winfast to exercise any of these rights.
Minimal Data Collection
winfast collects only the personal data that is genuinely necessary to operate the platform, verify player identities, process payments, and comply with anti-money-laundering obligations. We do not collect data speculatively or beyond what our stated purposes require.
Transparent Cookie Use
winfast uses cookies and similar tracking technologies to keep you logged in, remember your preferences, and understand how players interact with the platform. Our cookie practices are explained in full in the Cookies section of this policy.
Opt-Out of Marketing Emails
Promotional communications from winfast are opt-in. If you no longer wish to receive promotional emails or SMS notifications, you may unsubscribe at any time via the link in any marketing email or by contacting our support team directly.
Section 1
1. Data We Collect
winfast collects personal data from players in Bangladesh through several channels: directly from you when you register an account or contact support; automatically through your use of the platform; and from third-party service providers such as payment processors and identity verification agencies. The categories of personal data we collect are described below.
1.1 Registration Data
When you create a winfast account, we collect the following information: your full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and mobile phone number. This information is required to create your account, verify your identity, and communicate with you about your account activity.
1.2 Identity Verification (KYC) Data
To comply with our anti-money-laundering (AML) obligations and to confirm that all players are aged 18 or above, winfast may request copies of government-issued identity documents. These may include your National Identity Card (NID), passport, or driving licence. We may also request proof of address such as a bank statement or utility bill. KYC documents are stored securely and are used solely for identity verification purposes.
1.3 Financial & Payment Data
When you make a deposit or request a withdrawal, winfast collects the details of the payment method you use. For mobile banking methods such as bKash, Nagad, Rocket, and Upay, this includes the mobile wallet number associated with the transaction. For bank transfers, this includes your account number and the name of your bank. winfast does not store full payment card numbers on its own servers — card transactions, where applicable, are processed by PCI-DSS-compliant third-party payment processors.
1.4 Usage & Technical Data
As you use the winfast platform, we automatically collect certain technical data including your IP address, device type, operating system, browser type and version, screen resolution, and session timestamps. We also collect gameplay data such as the games you play, bet amounts, win/loss outcomes, and session duration. This data is used to detect fraud, troubleshoot technical issues, and improve the platform's performance and game offering.
1.5 Communications Data
If you contact our support team via live chat or email, we retain a record of that communication, including the content of the exchange, timestamps, and any files or screenshots you share with us. These records are kept to assist with follow-up queries, quality assurance, and dispute resolution.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, date of birth, address, email, mobile number | Account creation, identity verification, communications |
| KYC Documents | NID, passport, proof of address | Age verification, AML compliance |
| Payment Data | bKash/Nagad wallet number, bank account details | Processing deposits and withdrawals |
| Technical Data | IP address, device type, browser, session logs | Fraud detection, platform security, performance |
| Gameplay Data | Bets placed, games played, win/loss records | Account history, responsible gaming monitoring |
| Communications Data | Support chat transcripts, emails | Dispute resolution, quality assurance |
Section 3
3. Data Sharing & Third Parties
winfast does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary to fulfil the stated purpose.
3.1 Payment Processors
To process your deposits and withdrawals, winfast shares necessary transaction details with our payment processing partners. These include mobile financial service providers such as bKash, Nagad, Rocket, and Upay, as well as banking partners including City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Each of these partners operates under its own privacy and data security obligations. winfast shares only the minimum data required to execute and confirm each transaction.
3.2 Identity Verification Providers
To fulfil our KYC obligations, winfast may use third-party identity verification services. Where your identity documents are submitted through such a service, the provider processes your data under strict confidentiality terms and is not permitted to use your data for any purpose other than verification on behalf of winfast.
3.3 Game Providers
The casino games on winfast are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Hacksaw Gaming, and Ezugi. These providers may receive a session token or anonymous player identifier when you launch their games. They do not receive your full personal details such as your name, NID number, or payment information.
3.4 Legal & Regulatory Disclosure
winfast may disclose your personal data to law enforcement agencies, courts, or regulatory authorities where required to do so by applicable law, by a valid legal order, or where disclosure is necessary to protect the safety of our players or staff or to defend against legal claims brought against winfast.
Section 5
5. Data Security
winfast takes the security of your personal data seriously. We maintain a range of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.
5.1 Technical Measures
All data transmitted between your device and winfast is encrypted using TLS (Transport Layer Security). Passwords are stored using industry-standard one-way hashing algorithms and are never stored in plain text. Access to production databases is restricted to authorised personnel and is controlled through role-based access permissions. Our servers are hosted in secure data centres with physical access controls, redundant power supplies, and 24/7 monitoring.
5.2 Organisational Measures
Internal access to player personal data is granted on a strict need-to-know basis. Staff who handle personal data are trained in data protection obligations and are subject to confidentiality agreements. winfast conducts periodic internal reviews of its data handling procedures to identify and address any vulnerabilities or gaps in its security posture.
5.3 Data Breach Response
In the event of a data breach that poses a risk to your rights and freedoms, winfast will notify affected players without undue delay, providing clear information about what data was affected, the likely consequences of the breach, and the steps we have taken or plan to take to address it. Notifications will be sent to the email address registered on your account.
Section 7
7. Your Privacy Rights
As a player on the winfast platform, you have a number of rights in relation to your personal data. winfast respects these rights and will respond to all valid requests within a reasonable timeframe. To exercise any of the rights described below, please contact our support team at support@winfast with the subject line "Privacy Rights Request" and a description of your request.
7.1 Right of Access
You have the right to request a copy of the personal data that winfast holds about you. This is commonly referred to as a Subject Access Request (SAR). We will provide you with a summary of your data in a structured, readable format. We may ask you to verify your identity before processing a SAR to ensure that data is not disclosed to an unauthorised party.
7.2 Right to Rectification
If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For certain categories of data — such as your registered email address or mobile number — you may be able to update these directly within your account settings. For other categories such as your name or date of birth, please contact our support team to request a correction, and be prepared to provide supporting documentation.
7.3 Right to Erasure
In certain circumstances you have the right to request that winfast delete your personal data. This right is not absolute — it is subject to our overriding legal obligations, including our AML record-keeping requirements. Where we are legally required to retain certain data, we will explain this clearly in our response to your erasure request and will delete or anonymise all data that we are not legally obligated to retain.
7.4 Right to Object to Marketing
You have the right to object to the processing of your personal data for direct marketing purposes at any time. To exercise this right, unsubscribe via the link in any marketing email or contact our support team. We will honour your objection promptly and without requiring you to provide a reason.
7.5 Right to Data Portability
Where winfast processes your data on the basis of your consent or on the basis of a contractual obligation, you have the right to receive that data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider. Please contact our support team to make a portability request.
Questions About Your Privacy?
Our support team is available around the clock to help with any privacy concerns. You can also explore our FAQ for quick answers, or review the full Terms & Conditions for the complete rules that govern your winfast account.