jwin7 Privacy Policy — Your Data, Protected

This Privacy Policy ("Policy") describes how jwin7 ("we", "us", "our", "Platform") collects, uses, stores, shares, and protects personal data submitted by users ("you", "Player", "User") when accessing or using the jwin7 website at https://jwin7.bio and all associated services, games, payment interfaces, and customer support channels.

By registering an account, making a deposit, placing a wager, or otherwise using the jwin7 platform, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the jwin7 Terms & Conditions and Responsible Gaming Policy.

1 Introduction

jwin7 operates as an online entertainment platform serving players primarily in Bangladesh. As part of delivering a safe, reliable, and legally compliant gaming service, jwin7 is required to collect certain categories of personal data from registered players. This obligation arises from the need to verify player identity, prevent underage gambling, detect and prevent fraud and money laundering, process financial transactions, and provide effective customer support.

jwin7 takes its data protection responsibilities seriously. We process personal data only for defined, legitimate purposes and apply appropriate technical and organisational safeguards to protect your information from unauthorised access, disclosure, loss, or misuse. This Policy sets out those purposes and safeguards in plain, accessible English so that every player on the jwin7 platform can make fully informed decisions about their data.

2 Categories of Personal Data We Collect

jwin7 may collect the following categories of personal data depending on how you interact with the Platform:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, gender, nationality, National ID number, passport number	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration & account management
Financial Data	bKash / Nagad / Rocket account numbers, bank account details, crypto wallet addresses, transaction history	Deposit, withdrawal & KYC
Gaming Data	Wager history, game session logs, bonus usage, win/loss records, sports betting selections	Continuous during gameplay
Technical Data	IP address, device type, operating system, browser type, session timestamps, geolocation (country-level)	Automatic — each visit
Communications Data	Live chat transcripts, support email content, complaint records	When you contact support
Document Data	Copies of government-issued ID, utility bills, payment method screenshots submitted during KYC	KYC verification process

3 How We Collect Your Data

jwin7 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when completing the registration form, KYC verification upload, deposit or withdrawal request, or contact form submission.
• Automated technical collection: Data collected automatically by our servers when you visit jwin7.bio, including IP addresses, browser fingerprinting for fraud detection, session cookies, and gameplay event logs.
• Third-party verification partners: Identity and age verification data returned by our KYC partners when we submit your identity documents for verification during the account opening or withdrawal process.
• Payment processors: Transaction confirmation data, payment status notifications, and chargeback alerts received from bKash, Nagad, Rocket, Upay, and other integrated payment service providers.
• Customer support interactions: Data captured in live chat sessions, email correspondence, and any attachments or screenshots you send to the jwin7 support team.

4 Purpose of Processing

jwin7 processes your personal data for the following clearly defined purposes only:

• Account management: To create, maintain, and administer your jwin7 player account, including login authentication, account preference storage, and responsible gaming tool configuration.
• Identity and age verification (KYC): To confirm that you are a real person aged 21 or older before allowing withdrawals or continued high-volume play, in compliance with our anti-money-laundering obligations.
• Payment processing: To process deposit and withdrawal transactions via your chosen payment method and to reconcile your account balance accurately.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance.
• Responsible gaming compliance: To monitor for indicators of problem gambling, enforce self-exclusion requests, apply deposit limits, and provide appropriate interventions where required.
• Legal and regulatory compliance: To retain records as required by applicable anti-money-laundering laws and to respond to lawful requests from competent authorities.
• Platform improvement: To analyse anonymised, aggregated usage data to improve the jwin7 platform, game lobby, and user experience. Individual profiles are never sold or shared for this purpose.
• Service communications: To send you transactional notifications (deposit confirmations, withdrawal updates, account security alerts). Promotional communications are sent only with your explicit prior consent and may be opted out of at any time.

5 Legal Basis for Processing

jwin7 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as set out in the jwin7 Terms & Conditions — including account registration, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable law, including anti-money-laundering record-keeping requirements, age verification mandates, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as promotional email communications, where we have obtained your explicit opt-in consent. You may withdraw consent at any time by contacting [email protected].

6 Data Sharing with Third Parties

jwin7 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We share your data only with the following categories of carefully selected third parties, and only to the extent necessary to deliver the services described in this Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and crypto payment processors — solely to process transactions initiated by you.
• KYC and identity verification partners: Third-party services that verify your identity documents, age, and address as part of the account verification process.
• Fraud prevention and security services: Providers of IP analysis, device fingerprinting, and behavioural analytics tools used to detect and prevent fraudulent activity on the Platform.
• Game content providers: Studio partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and game-specific event data necessary to deliver game content. These providers do not receive your full identity or financial data.
• Legal and regulatory authorities: Competent government bodies or law enforcement agencies when disclosure is required by applicable law, court order, or legally binding authority request.
• IT infrastructure and hosting providers: Cloud hosting and server management providers who process data on our behalf under strict data processing agreements and are prohibited from using your data for their own purposes.

7 International Data Transfers

jwin7 operates digital infrastructure that may involve the transfer and storage of your personal data in servers located outside of Bangladesh. Where personal data is transferred internationally, jwin7 takes steps to ensure that appropriate safeguards are in place, including contractual data transfer agreements with receiving parties that impose obligations equivalent to those described in this Policy.

By using the jwin7 platform, you acknowledge and consent to the transfer of your personal data to servers and service providers located in jurisdictions outside Bangladesh where necessary to deliver the services described in this Policy. jwin7 will never transfer your data to a jurisdiction without ensuring that equivalent protections are applied.

8 Data Retention

jwin7 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum and maximum retention rules:

• Active account data: Retained for the full duration of your account relationship with jwin7 plus a minimum of five years following account closure.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction to satisfy anti-money-laundering record-keeping requirements.
• KYC identity documents: Retained for five years following account closure or the last transaction, whichever is later. Document copies are stored in encrypted form.
• Customer support communications: Retained for three years from the date of the interaction unless the communication forms part of an ongoing dispute or regulatory inquiry.
• Technical and session logs: Retained for 12 months for security monitoring and fraud investigation purposes, then automatically deleted or anonymised.
• Marketing consent records: Retained for the duration of the consent plus three years following withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted from jwin7 systems using industry-standard data destruction methods. Anonymised, non-identifiable data may be retained indefinitely for statistical and platform improvement purposes.

9 Your Data Rights

As a user of the jwin7 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and your registered account username. We will acknowledge your request within 2 business days and provide a full response within 10 business days.

• Right of Access: You may request a copy of all personal data we hold about you, together with information about how it is processed and with whom it has been shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your jwin7 account profile.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that data subject to AML retention requirements cannot be deleted before the mandatory minimum retention period has elapsed.
• Right to Restriction of Processing: You may request that jwin7 restrict the processing of your personal data to storage only while a dispute regarding its accuracy or lawfulness is pending.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to jwin7, in a structured, commonly used format, for transmission to another service provider.
• Right to Object: You may object at any time to processing carried out on the basis of our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10 Cookies & Similar Technologies

jwin7 uses cookies and similar browser storage technologies to operate the Platform effectively. A cookie is a small text file placed on your device by the jwin7 web server when you visit jwin7.bio. The table below describes each category of cookie we use:

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, remember your game lobby preferences, and enable secure navigation between pages. Cannot be disabled without breaking Platform functionality.	Session / up to 24 hours
Functional	Remember your language preference, display settings, and responsible gaming tool configurations between visits.	Up to 12 months
Analytics	Collect anonymised, aggregated data about how players navigate the Platform — pages visited, session duration, and feature engagement — to help us improve the user experience.	Up to 24 months
Security	Support fraud detection and bot prevention mechanisms including device fingerprinting and IP reputation analysis.	Session / up to 30 days

jwin7 does not use behavioural advertising cookies or third-party tracking pixels. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform.

11 Children's Privacy

The jwin7 platform is strictly for adults aged 21 and above. jwin7 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has registered an account or provided personal data, we will suspend the account immediately, delete the data without delay, and void any associated transactions in accordance with our Terms & Conditions and Responsible Gaming Policy.

If you have reason to believe that a minor has registered an account on jwin7, please contact us immediately at [email protected]. We take underage gambling prevention extremely seriously and will act on all credible reports without delay.

12 Security Measures

jwin7 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and jwin7 servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records.
• Access controls: Personal data is accessible only to jwin7 staff and authorised processors who require access to fulfil their specific job functions. Access is granted on a least-privilege basis and logged.
• Two-factor authentication is available for player accounts and is mandatory for all jwin7 internal administrative access.
• Regular security audits and penetration testing conducted by independent third-party security specialists to identify and remediate vulnerabilities.
• Incident response procedures: In the event of a data security incident that poses a risk to your rights and freedoms, jwin7 will notify affected players without undue delay and provide clear guidance on protective steps you can take.

While jwin7 applies rigorous security standards, no digital system can guarantee absolute security. You also have a role in protecting your account: use a strong, unique password, enable two-factor authentication, and never share your credentials with any person.

13 Third-Party Links

The jwin7 Platform does not contain links to external third-party websites. All navigation within jwin7.bio remains within the jwin7 domain. However, certain game content provided by third-party studios such as Pragmatic Play, Evolution Gaming, and Spribe may load within an embedded frame sourced from the respective studio's servers. When interacting with embedded game content, the studio's own privacy and data handling practices may apply to game-specific technical data. jwin7 is not responsible for the data practices of embedded third-party game content providers beyond the contractual obligations described in Section 6 of this Policy.

14 Amendments to This Policy

jwin7 reserves the right to update or replace this Privacy Policy at any time. When material changes are made, we will notify registered players via the email address associated with their account and display a prominent notice on the Platform upon their next login. The effective date at the top of this document will be updated to reflect the date on which the revised Policy takes effect.

We encourage you to review this Policy periodically to remain informed of any changes. Your continued use of the jwin7 Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you disagree with any change to this Policy, you must cease using the Platform and request account closure by contacting [email protected] before the revised Policy takes effect.

15 Contact & Data Protection Enquiries

If you have any questions, concerns, or formal complaints regarding this Privacy Policy or jwin7's handling of your personal data, please contact our data protection team using the details below. All enquiries are handled in English and responded to within 10 business days (Bangladesh Standard Time).

• Email: [email protected] — subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available on the Platform 24/7 — response under 2 minutes
• Response time (email): Acknowledgement within 2 BST business days; full response within 10 BST business days

For formal data rights requests (access, erasure, portability, rectification), please include your registered username, the specific right you wish to exercise, and a valid form of identity verification so we can process your request securely and efficiently.