Wintaka Privacy Policy

Wintaka is an online gaming platform operating at wintaka.asia, built specifically for players in Bangladesh. When this Privacy Policy refers to "Wintaka", "we", "us", or "our", it means the Wintaka platform and the team responsible for operating it.

Wintaka acts as the data controller for all personal information collected through the platform. This means Wintaka determines the purposes and means of processing your personal data and is responsible for keeping it secure. If you have any questions about how your data is handled, the first point of contact is [email protected].

Wintaka collects only the data that is necessary to operate your account, process your BDT transactions, and comply with legal obligations. The table below sets out the categories of personal data Wintaka collects and why each category is needed.

Wintaka does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless you voluntarily provide it in the context of a responsible gaming request.

Wintaka collects your personal data through the following channels:

• Direct registration: When you create a Wintaka account, you provide your name, email address, mobile number, and date of birth directly through the registration form.
• Deposits and withdrawals: When you make a BDT transaction via bKash, Nagad, or Rocket, Wintaka receives the mobile number and transaction reference associated with that payment.
• Identity verification: If Wintaka requests KYC documents, you provide identity data directly by uploading documents through the secure verification portal.
• Platform activity: Wintaka automatically logs your gaming activity, session data, and technical information each time you use the platform.
• Support interactions: When you contact Wintaka support by email or live chat, the content of those communications is stored as part of your account record.
• Cookies and tracking technologies: Wintaka uses cookies and similar technologies to collect usage data. See Section 7 for full details.

Wintaka uses your personal data only for legitimate purposes directly related to operating your account and providing the gaming service. The specific purposes are:

• Account management: Creating, maintaining, and securing your Wintaka account, including password resets and security notifications.
• Payment processing: Executing BDT deposits and withdrawals via your registered mobile money account. Wintaka cannot process payments without your payment data.
• Age and identity verification: Confirming that you meet the 18+ age requirement and that your account details are genuine, as required by Wintaka's operating standards.
• Fraud and security monitoring: Detecting and preventing unauthorised account access, bonus abuse, money laundering, and other prohibited activities.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and applying responsible gaming tools where appropriate.
• Customer support: Responding to your queries, resolving disputes, and providing technical assistance.
• Platform improvement: Analysing usage data to improve the Wintaka platform, fix bugs, and optimise the player experience.
• Legal compliance: Retaining records as required by applicable anti-money laundering and financial regulations.

Wintaka does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. If an automated system flags your account for investigation, a member of the Wintaka compliance team reviews the case before any action is taken.

Wintaka does not sell, rent, or trade your personal data. Data is shared only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, and Rocket receive your mobile number and transaction details solely to process your BDT deposits and withdrawals. These providers operate under their own privacy policies and are not permitted to use your data for any other purpose.
• Identity verification providers: If KYC verification is required, your identity documents are processed by a certified verification partner. Documents are not stored by the verification provider beyond the period needed to complete the check.
• Game software providers: Game providers receive anonymised session data necessary to operate the games you play. They do not receive your name, payment details, or contact information.
• Regulatory and law enforcement authorities: Wintaka will disclose personal data to competent authorities when required by law or when there is a legitimate legal basis to do so, such as a court order or a formal request from a financial intelligence unit.
• IT and security service providers: Wintaka uses third-party infrastructure and security services to host and protect the platform. These providers act as data processors under strict contractual obligations and cannot use your data for their own purposes.

Wintaka takes the security of your BDT payment data seriously. All payment transactions are processed over encrypted connections using TLS 1.2 or higher. Wintaka does not store full payment credentials on its own servers — payment processing is handled entirely by the respective mobile money gateway.

The only payment information Wintaka retains is the mobile number associated with your registered payment method and the transaction reference numbers for your deposit and withdrawal history. This information is stored in encrypted form and is accessible only to authorised Wintaka staff for the purposes of resolving payment disputes.

• Wintaka will never ask for your bKash, Nagad, or Rocket PIN via email, chat, or phone. Your mobile money PIN is never required by Wintaka and should never be shared with anyone.
• If you receive a communication claiming to be from Wintaka and asking for your mobile money PIN or full account credentials, treat it as fraudulent and report it to [email protected] immediately.
• Wintaka's payment pages are served over HTTPS. Always check for the padlock icon in your browser before entering any payment-related information.

Wintaka uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use the site. The cookies Wintaka uses fall into the following categories:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit. You cannot opt out of essential cookies without disabling the platform entirely.
• Functional cookies: Remember your preferences such as language settings and responsible gaming tool configurations. These improve your experience but are not strictly necessary.
• Analytics cookies: Collect anonymised data about how players navigate the Wintaka platform. This data is used to identify usability issues and improve the site. No personally identifiable information is included in analytics data.
• Security cookies: Help Wintaka detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the Wintaka platform, but some features may not work as expected. Disabling essential cookies will prevent you from logging in.

Wintaka retains your personal data for as long as your account is active and for a defined period after account closure. The retention periods below reflect both operational needs and legal obligations:

• Account and identity data: Retained for the lifetime of your account plus 5 years after closure, to comply with anti-money laundering record-keeping requirements.
• Payment and transaction records: Retained for 5 years from the date of each transaction, in line with financial record-keeping standards.
• Gaming history: Retained for 3 years from the date of each session, for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for 2 years from the date of the last interaction, to provide context for future support queries.
• Technical and usage data: Retained for 12 months on a rolling basis, after which it is anonymised or deleted.

When the applicable retention period expires, Wintaka securely deletes or anonymises your personal data so that it can no longer be linked to you. If you request account deletion before the end of a retention period, Wintaka will delete all data that is not subject to a legal retention obligation and will clearly explain what data must be retained and why.

As a Wintaka player, you have the following rights over your personal data. To exercise any of these rights, contact [email protected] with your registered email address and a description of your request. Wintaka will respond within 30 days.

Wintaka is strictly an 18+ platform. Wintaka does not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered on the Wintaka platform, contact [email protected] immediately. Wintaka will close the account and delete all associated personal data without delay.

Wintaka uses date-of-birth verification during registration and may request additional age verification documents at any point. Any account where the holder cannot confirm they are 18 or older will be suspended pending verification and closed if verification cannot be completed.

Wintaka may update this Privacy Policy from time to time to reflect changes in the platform, applicable regulations, or data processing practices. When material changes are made, registered players will be notified by email at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page reflects when the policy was most recently revised. Minor clarifications that do not affect how your data is processed may be made without prior notice. Continued use of the Wintaka platform after the effective date of any change constitutes acceptance of the updated policy.

If you disagree with any changes to this Privacy Policy, you have the right to close your Wintaka account before the changes take effect. Contact [email protected] to request account closure and data deletion.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how Wintaka handles your personal information, the support team is available 24 hours a day, 7 days a week.

• Email: [email protected]
• Subject line for data requests: "Privacy Request – [Your Registered Email]"
• Response time: Wintaka aims to acknowledge all privacy-related requests within 24 hours and resolve them within 30 days.