gowin Privacy Policy

gowin collects personal data from players through several means: directly from you when you register an account or contact support, automatically through your use of the platform, and from third-party service providers involved in payment processing and identity verification. The following table summarises the categories of data we collect and the primary reason for each.

Data We Do Not Collect

gowin does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than where required for identity document verification), or health data (other than where voluntarily disclosed in the context of responsible gaming self-assessment tools). We do not knowingly collect personal data from individuals under the age of 18.

gowin processes your personal data for the following specific purposes. Each purpose is tied to a legal basis that justifies the processing activity.

Account Management & Service Delivery

The primary use of your personal data is to create and maintain your gowin account, process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and local bank transfer, authenticate your login sessions, and deliver the games and features you use on the platform. Without this processing, gowin cannot provide its services to you.

Identity Verification & KYC Compliance

gowin is required to verify the identity and age of all players before processing withdrawals. We use your identity documents and personal details to confirm that you are who you say you are, that you are aged 18 or above, and that your payment methods are registered in your own name. This processing is a legal obligation that gowin cannot waive.

Fraud Prevention & Anti-Money Laundering

gowin monitors account activity, transaction patterns, device data, and IP addresses to detect and prevent fraud, collusion, multi-accounting, bonus abuse, and money laundering. Where suspicious activity is detected, we may suspend an account, request additional documentation, or report the activity to relevant authorities as required by applicable law. This processing is necessary for gowin's legitimate interests in maintaining a secure and compliant platform.

Responsible Gaming Monitoring

gowin uses your wagering history, deposit frequency, session duration data, and self-reported information from responsible gaming tools to identify potential signs of problem gambling. Where our systems flag a player as being at elevated risk, our trained support team may proactively reach out to offer responsible gaming resources and tools. This processing serves both our legal obligations and our genuine commitment to player welfare.

Customer Support

When you contact gowin's support team via live chat or email, we process your contact data and the content of your communications to resolve your query, maintain records of the interaction for quality assurance purposes, and improve our support processes. Support records are retained in accordance with the data retention schedule set out in Section 5 of this policy.

Marketing Communications

gowin may send you promotional emails, bonus notifications, and game updates if you have provided your explicit consent to receive marketing communications during registration or through your account notification settings. You may withdraw this consent at any time by updating your notification preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to use the gowin platform.

gowin does not sell, rent, or trade your personal data. We share player data with third parties only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

Service Providers & Data Processors

gowin works with a small number of carefully vetted third-party service providers who process personal data on our behalf as data processors. These providers are contractually bound to process your data only on gowin's instructions and to implement security measures equivalent to those described in this policy. Our key service provider categories include:

• Identity Verification Providers: Third-party KYC platforms that process your identity documents to confirm your name, age, and address. These providers are selected for their compliance with applicable data protection standards.
• Payment Processors: The technical infrastructure providers that facilitate transactions between gowin and your bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank accounts. These providers receive only the transaction data necessary to execute the payment.
• Game Studios: Third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate the game engines and, in the case of live casino studios, the streaming infrastructure. These providers receive technical session data necessary to deliver the game experience. They are subject to their own independent certification and data protection obligations.
• Cloud Infrastructure Providers: gowin's platform is hosted on enterprise-grade cloud infrastructure. Our hosting providers process data under strict data processing agreements and do not have access to unencrypted player data.
• Analytics Providers: gowin uses aggregated, anonymised analytics to understand platform usage patterns and improve the player experience. These providers do not receive personally identifiable data.

Legal & Regulatory Disclosures

gowin may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where required to do so by applicable law, court order, or regulatory directive. In such cases, gowin will disclose only the minimum data necessary to satisfy the legal obligation and will notify the affected player where permitted to do so.

Business Transfers

In the event that gowin undergoes a merger, acquisition, or sale of all or a substantial part of its assets, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified in advance of any such transfer and provided with information about how their data will be handled by the successor entity.

gowin uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and gather aggregated analytics about platform usage. This section explains what cookies we use, why we use them, and how you can control them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and recall information about your session, preferences, or prior interactions. Cookies are widely used across the internet and are a standard component of modern web platforms.

Types of Cookies gowin Uses

• Strictly Necessary Cookies: These cookies are essential for the gowin platform to function. They maintain your authenticated login session, handle game launch sequences, and ensure security tokens are correctly applied. Without these cookies, you cannot use gowin. Because they are essential to the service you have requested, they do not require your consent.
• Functional Cookies: These cookies remember your preferences — such as your chosen language display, notification settings, and last-used payment method — so you do not have to re-enter them on each visit. They are activated upon your first login and persist for the duration of your account's active status.
• Analytics Cookies: gowin uses privacy-respecting analytics tools to collect aggregated, anonymised data about how players use the platform — which games are most popular, where players encounter errors, and how navigation flows can be improved. This data never includes personally identifiable information and is used solely for platform improvement purposes.
• Security Cookies: Short-lived cookies used to detect and prevent fraudulent activity, credential stuffing attacks, and automated bot traffic. These cookies help gowin protect your account and the integrity of the platform.

Managing Cookies

You can control cookie settings through your web browser's built-in privacy controls. Most modern browsers allow you to block or delete cookies on a per-site basis. Please note that blocking strictly necessary cookies will prevent the gowin platform from functioning correctly and may make it impossible to log in to your account. For instructions on managing cookies in your specific browser, consult your browser's help documentation.

gowin retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply to the main categories of player data held by gowin.

Upon the expiry of the applicable retention period, gowin will securely delete or anonymise your personal data. Anonymised data — which cannot be used to identify you — may be retained indefinitely for aggregated analytics and platform improvement purposes.

Where a player requests account closure before the end of a retention period, gowin will cease active use of the data immediately but will retain it in a secure, restricted archive for the duration required by the relevant retention period. Players may request confirmation of what data remains held during this archive period.

gowin implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed and updated regularly to address evolving threats.

Technical Safeguards

• Transport Layer Encryption: All data transmitted between your device and gowin's servers is encrypted using TLS 1.3, preventing interception of your login credentials, payment data, or personal information in transit.
• Data Encryption at Rest: Personal data stored in gowin's databases is encrypted using AES-256 encryption. Encryption keys are managed separately from encrypted data and are subject to their own access controls.
• Access Controls: Access to player personal data within gowin's systems is strictly restricted to staff whose role requires it. All internal access is logged and audited. Privileged access is subject to multi-factor authentication.
• Intrusion Detection: gowin's platform infrastructure is monitored continuously for signs of unauthorised access, unusual activity, and potential security incidents. Automated alerting systems notify our security team in real time.
• Penetration Testing: gowin engages independent security specialists to conduct regular penetration testing of our platform infrastructure and web applications to identify and remediate vulnerabilities before they can be exploited.

Organisational Safeguards

All gowin staff who handle personal data receive mandatory data protection training. Confidentiality obligations are a standard component of all gowin employment and contractor agreements. gowin maintains an internal data breach response procedure that defines roles, notification timelines, and remediation steps in the event of a security incident.

What To Do If You Suspect Unauthorised Access

If you believe your gowin account has been accessed without your authorisation, contact our support team immediately at [email protected] or via live chat. Our security team will investigate the matter promptly and take appropriate protective action, including password resets, session invalidation, and temporary account suspension if necessary.

As a gowin player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our data team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within three (3) business days and respond in full within thirty (30) days.

Right to Access

You have the right to request a copy of all personal data that gowin holds about you, including the categories of data, the purposes for which it is processed, and details of any third parties with whom it has been shared. We will provide this information in a structured, readable format at no charge.

Right to Rectification

If any personal data gowin holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For core identity data, corrections may require supporting documentation to maintain KYC compliance. We will process rectification requests within fourteen (14) business days of receiving adequate supporting information.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. However, please note that gowin is required by anti-money laundering and KYC regulations to retain certain categories of data for specified periods even after account closure. Where erasure is not possible due to a legal obligation, we will notify you of the relevant retention period and the reason it applies.

Right to Data Portability

Where gowin processes your data on the basis of your consent or for the performance of your account contract, you have the right to receive a copy of that data in a structured, machine-readable format (such as JSON or CSV) that you can transfer to another service provider.

Right to Withdraw Marketing Consent

You may withdraw your consent to receive marketing communications from gowin at any time by updating your notification preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent takes effect immediately and does not affect your ability to use the gowin platform.

Right to Lodge a Complaint

If you believe that gowin has processed your personal data in a manner that is inconsistent with this Privacy Policy or applicable data protection law, you have the right to lodge a complaint. We encourage you to contact gowin's support team in the first instance so we can attempt to resolve the issue directly. If you remain unsatisfied after gowin's response, you may escalate your complaint to the relevant data protection authority in your jurisdiction.

gowin reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The "Effective" date shown at the top of this page will be updated whenever a new version is published.

How We Notify You of Changes

Where changes to this Privacy Policy are material — meaning they significantly affect how your data is used, who it is shared with, or what rights you have — gowin will notify registered players via email at least seven (7) days before the updated policy takes effect. For minor clarifications or corrections that do not alter the substance of the policy, the updated version will be published on this page without a separate notification.

Your continued use of the gowin platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must cease using the platform and request account closure before the effective date of the update.

Contacting gowin About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or gowin's data practices, please contact our team using the details below. All privacy-related enquiries are handled by trained staff and are treated with strict confidentiality.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 via the gowin platform
• Response Time: We aim to respond to all privacy enquiries within one (1) business day

gowin serves players across Bangladesh from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All support and privacy communications are conducted in English. gowin's support team is available around the clock, every day of the year, including during public holidays such as Eid, Durga Puja, Independence Day (March 26), and Victory Day (December 16).