wimbd Privacy Policy

Introduction

wimbd is an English-language online betting and gaming platform serving players in Bangladesh. We operate at wimbd.io and provide services including sports betting, live casino, slots, and crash games. Deposits and withdrawals are processed exclusively via Bangladeshi mobile banking channels — bKash, Nagad, and Rocket — and all transactions are denominated in Bangladeshi Taka (BDT).

In the course of providing these services, wimbd necessarily collects and processes personal data about you. We take this responsibility seriously. This Privacy Policy has been written to be clear and accessible, not buried in unnecessary legal complexity. We want you to understand exactly what happens to your information when you use wimbd, and to feel confident that it is handled with care.

This Policy applies to all data collected through the wimbd website, mobile browser interface, customer support channels (live chat, WhatsApp, email), and any other service touchpoint associated with the wimbd Platform. It does not apply to third-party websites or services that may be linked to from the Platform — each third party operates under its own privacy terms.

If you have any questions about this Policy or about how your data is handled, please contact us at support at wimbd.io at any time. Our support team operates 24 hours a day via live chat and via WhatsApp between 8 AM and 11 PM Bangladesh Standard Time (BST, UTC+6).

Data We Collect

wimbd collects personal data in the following ways: (a) information that you provide directly to us during registration, identity verification, payment setup, and support interactions; (b) information that is generated automatically when you use the Platform; and (c) information received from trusted third-party service providers such as identity verification bureaus and payment processors.

The categories of personal data we collect include:

• Identity and registration data: Full legal name, date of birth, gender, national identity card (NID) number, passport number or driving licence number, and a photographic ID document where required for verification.
• Contact data: Mobile phone number (which must be a valid Bangladeshi number registered with a mobile operator), email address, and residential address including district and division.
• Payment and financial data: bKash, Nagad, or Rocket account numbers associated with your wimbd account, deposit and withdrawal amounts, transaction reference numbers, and account balance history. Full payment account credentials are never stored directly by wimbd — they are processed by the respective mobile banking operators.
• Account activity data: Login timestamps, session durations, IP addresses at login, games played, bets placed, wager amounts, outcomes, bonus usage, and withdrawal requests.
• Device and technical data: Device type, operating system, browser type and version, device fingerprint, screen resolution, and network information including IP address and approximate location derived from IP.
• Communications data: Records of live chat conversations, WhatsApp support messages, and email correspondence with the wimbd support team.
• Verification documents: Copies of identity documents, selfies, and proof-of-address documents uploaded during the KYC (Know Your Customer) process.

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data for the purpose of uniquely identifying a natural person, health data, or data concerning sexual orientation — except where a player voluntarily discloses such information in the course of a support interaction, in which case it is used solely to assist with that specific enquiry.

How We Use Your Data

wimbd uses the personal data it collects for the following purposes:

• Account creation and management: Processing your registration, maintaining your account, verifying your identity, and enabling you to access the Platform and its features.
• Age verification: Confirming that you meet the minimum age requirement of 21 years before allowing you to deposit, bet, or play any games on the Platform.
• Payment processing: Facilitating deposits via bKash, Nagad, and Rocket, and processing withdrawal requests to your nominated mobile banking account in BDT.
• Fraud prevention and security: Detecting and investigating suspicious account activity, identifying duplicate accounts, preventing money laundering, and protecting the integrity of the Platform and its players.
• Responsible gaming: Monitoring player activity for signs of problem gambling behaviour, enforcing self-exclusion and deposit limits, and reaching out proactively to players who may need support.
• Customer support: Responding to your queries, resolving disputes, processing complaints, and improving the quality of our support service based on interaction records.
• Legal and regulatory compliance: Meeting our obligations under applicable law, responding to lawful requests from competent authorities, and maintaining records required for audit purposes.
• Platform improvement: Analysing usage patterns, session data, and player feedback to improve the user experience, fix technical issues, and develop new features.
• Personalisation: Tailoring the content and promotions you see on the Platform to reflect your game preferences and activity history, where you have not opted out of personalisation.
• Marketing communications: Sending you information about promotions, bonuses, and seasonal offers by SMS, email, or WhatsApp where you have given consent. You may withdraw consent at any time via account settings or by contacting support.

Legal Bases for Processing

Every instance of personal data processing by wimbd is conducted under one or more of the following recognised legal bases:

• Contractual necessity: Processing that is required to fulfil the contract between you and wimbd — for example, verifying your identity to open an account, processing your payment to credit your balance, or settling a bet. Without this processing, wimbd cannot provide the service.
• Legal obligation: Processing required to comply with applicable law — for example, retaining financial transaction records for the period required by law, responding to a lawful request from a financial intelligence authority, or verifying age to comply with responsible gambling obligations.
• Legitimate interest: Processing that serves a legitimate business interest of wimbd that does not override your fundamental rights and freedoms — for example, fraud detection and prevention, security monitoring, platform analytics, and duplicate account identification. We conduct a balancing test before relying on legitimate interest as a basis.
• Consent: Processing that you have explicitly agreed to — for example, receiving promotional SMS or email communications, or allowing the Platform to use behavioural data for personalisation. You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Data Sharing and Disclosure

wimbd does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, and Rocket receive the transaction data necessary to process your deposits and withdrawals. Each of these providers operates under its own privacy policy and is subject to Bangladeshi financial regulation.
• Identity verification providers: Third-party KYC services may process your identity documents and compare them against official records to complete age and identity verification. These providers are contractually bound to use your data only for verification purposes.
• Fraud detection and security services: Specialist fraud prevention providers may receive device data, IP information, and transaction patterns to identify and respond to suspected fraudulent activity. Data shared for this purpose is subject to strict confidentiality obligations.
• Game content providers: Game studios and live casino operators such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi may receive session-level data necessary to deliver their games within the wimbd Platform. They do not receive your full identity or payment data.
• Legal and regulatory authorities: wimbd will disclose personal data to competent authorities — including law enforcement, financial intelligence units, and regulatory bodies — where required to do so by law, court order, or valid legal process. We will notify you of such disclosures where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of wimbd's assets, your personal data may be transferred to the acquiring entity. We will notify affected players in advance of any such transfer and explain the privacy implications.

Payment Data and Mobile Banking

Given that wimbd operates exclusively with Bangladeshi mobile banking channels, the handling of payment-related data warrants specific explanation. When you make a deposit via bKash, Nagad, or Rocket, the transaction is initiated through the respective mobile banking app or USSD channel on your device. wimbd receives a confirmation of the completed transaction, including the amount in BDT, a transaction reference number, and the masked mobile account number associated with the deposit.

wimbd does not store your mobile banking PIN, OTP, or full account credentials. These are processed exclusively by the mobile banking operator and are never transmitted to or stored on wimbd's servers. If you receive a communication purporting to be from wimbd requesting your bKash, Nagad, or Rocket PIN or OTP, you should treat it as fraudulent and report it to our support team immediately.

Withdrawal requests are processed to the mobile banking account registered against your wimbd profile. For security, withdrawals cannot be redirected to a different mobile number or account without completing an additional verification step. Transaction records are retained in accordance with the data retention schedule described in Section 9 of this Policy.

Cookies and Tracking Technologies

wimbd uses cookies and similar tracking technologies to operate the Platform, remember your session preferences, detect fraud, and understand how the Platform is used. Cookies are small text files stored on your device by your browser when you visit the Platform.

The types of cookies used on wimbd include:

• Strictly necessary cookies: These are essential for the Platform to function. They maintain your login session, remember your language preference, and support security features. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: These remember your in-Platform preferences such as game display settings, notification preferences, and deposit method selection, saving you from re-entering these each session.
• Analytical cookies: These collect aggregated, anonymised data about how players navigate the Platform — which pages are visited, how long sessions last, and which features are most used. This data is used to improve the Platform. You may opt out of analytical cookies via account settings.
• Security cookies: These support our fraud detection systems by recording device and session characteristics that help us identify unusual account access patterns.

wimbd does not use third-party advertising cookies or cross-site tracking technologies. We do not participate in ad exchanges or retargeting networks. The cookies placed by wimbd are first-party only, with the exception of those set by game content providers operating within the Platform's iFrame environment, which are subject to their own respective privacy practices.

Data Security

wimbd implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption on all data transmissions between your device and wimbd's servers.
• Encryption of sensitive data fields — including identity document copies and payment references — in our databases at rest.
• Role-based access controls that restrict which wimbd staff members can access different categories of player data, based on their specific job function.
• Regular internal security audits and penetration testing to identify and remediate vulnerabilities.
• Two-factor authentication (2FA) for staff access to internal systems holding personal data.
• Automated monitoring for unusual data access patterns, bulk export attempts, and other indicators of potential data breach activity.

Despite these measures, no data transmission over the internet or electronic storage system is completely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, wimbd will notify affected players and relevant authorities in accordance with our incident response procedures and applicable legal obligations.

You also play an important role in keeping your data secure. Please choose a strong, unique password for your wimbd account, never share your login credentials with anyone, and contact support immediately if you suspect that your account has been compromised.

Data Retention

wimbd retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active account data: Personal data associated with an active wimbd account is retained throughout the lifetime of the account and for a period of at least five years after account closure, in order to comply with financial record-keeping obligations and to resolve any disputes that may arise after account closure.
• Identity verification documents: KYC documents are retained for the period required by applicable anti-money laundering (AML) regulations, which is typically five years from the date of verification or from the date of the last transaction, whichever is later.
• Transaction records: Deposit and withdrawal records are retained for a minimum of five years to support financial audit trails and comply with regulatory requirements.
• Support communications: Chat transcripts, email correspondence, and WhatsApp support records are retained for up to three years after the interaction, to support quality assurance and dispute resolution.
• Marketing consent records: Records of your consent to receive marketing communications are retained for the duration of your account and for two years after account closure, as evidence of the lawful basis for any communications sent.
• Anonymised analytics data: Usage and behavioural data that has been fully anonymised (where no individual can be identified from the data or from a combination of data) may be retained indefinitely for platform improvement purposes.

When personal data reaches the end of its retention period, it is securely deleted from wimbd's systems or, where deletion is not immediately technically feasible, it is isolated from further processing until deletion can be carried out.

International Data Transfers

wimbd's primary player base is located in Bangladesh, and our core data processing activities are carried out with this in mind. However, some of our third-party service providers — including game content providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi — operate servers and processing infrastructure outside Bangladesh.

Where personal data is transferred to a country outside Bangladesh, wimbd takes steps to ensure that adequate safeguards are in place to protect your data to a standard equivalent to the protections afforded within Bangladesh. These safeguards include contractual clauses within our agreements with third-party providers that impose data protection obligations on the recipient of the data.

By registering a wimbd account and using the Platform, you acknowledge that your personal data may be processed in countries outside Bangladesh as part of the service delivery chain, including for game rendering, fraud screening, and identity verification purposes.

Children and Minors

wimbd is strictly prohibited to persons under the age of 21. We do not knowingly collect, process, or retain personal data from individuals under 21 years of age. Our registration process includes an age declaration and, where our systems flag a potential age concern, we require documentary proof of age before allowing any betting or gaming activity.

If wimbd discovers that personal data has been collected from a person under the age of 21 — whether through a false age declaration at registration or by any other means — the account will be immediately suspended, all bets voided, any deposits returned where possible, and all personal data associated with the underage account will be deleted promptly from our systems.

Your Rights Over Your Personal Data

As a wimbd player, you hold the following rights over your personal data. These rights may be exercised at any time by contacting us at support at wimbd.io with the subject line "Data Rights Request":

• Right of access: You may request a full copy of the personal data wimbd holds about you. We will provide this in a structured, readable format within 30 days of receiving your verified request.
• Right to rectification: If any data we hold about you is inaccurate or incomplete, you may request that it be corrected. Minor profile details such as your contact number or address can be updated directly via your account settings.
• Right to erasure: You may request that we delete your personal data in circumstances where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been unlawfully processed. This right is subject to legal retention obligations — we cannot delete financial records that we are required by law to keep.
• Right to restrict processing: You may ask us to restrict the processing of your personal data while the accuracy of data is being contested, or while a complaint or objection is being resolved.
• Right to data portability: You may request a copy of your personal data in a portable, machine-readable format (such as JSON or CSV) so that it can be transferred to another service provider.
• Right to object: You may object to processing based on legitimate interest, including profiling, and to direct marketing. Where you object to marketing, we will cease sending promotional communications immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing that took place before withdrawal.

We will respond to all valid data rights requests within 30 days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We do not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee.

Changes to This Privacy Policy

wimbd reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to our services, new legal or regulatory requirements, changes in our data processing practices, or improvements to the clarity of this document.

When material changes are made to this Policy — that is, changes that significantly affect how your personal data is used or your rights in relation to it — we will notify registered players via the email address or mobile number associated with their account at least 14 days before the changes take effect. Continued use of the Platform after the effective date of an updated Policy constitutes acceptance of the revised terms.

The "Last Updated" date at the top of this page will always reflect when the most recent version of this Policy was published. We encourage you to review this Policy periodically to stay informed about how wimbd protects your data.

Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about how wimbd handles your personal data, please contact us using any of the following channels. We are committed to addressing all privacy-related enquiries promptly and thoroughly.

• Email: support at wimbd.io — please use the subject line "Privacy Enquiry" for the fastest response.
• Live Chat: Available 24 hours a day, 7 days a week via the wimbd Platform.
• WhatsApp Support: Available between 8 AM and 11 PM Bangladesh Standard Time (BST, UTC+6).

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection or consumer protection authority in Bangladesh. We will always cooperate fully with any such authority in the investigation of a complaint.