Reference

How wingold Handles Your Personal Information

We collect only what we need to run your account, process your bKash, Nagad or Rocket transactions, and keep your wallet secure.

Account Data ProtectionPayment PrivacyLocal Wallet SecurityTransparent RetentionYour Rights Explained
wingold How wingold Handles Your Personal Information
DATA HANDLING PRACTICE

How We Protect and Manage Your Information

Your data passes through encrypted channels from the moment you tap send on a bKash, Nagad or Rocket deposit to the point it lands in our system. Below are the specific practices we follow — each one designed to keep your account yours and give you control over what we store.

Encrypted Connections

Every page and API call runs over SSL encryption. Whether you are browsing slots like Crash Burst or checking your withdrawal status, the connection between your phone and our servers stays private. No data travels in plain text.

Cookie Management

We use session cookies to keep you logged in and preference cookies to remember your language and lobby layout. You can clear these from your browser at any time — doing so simply means you will need to log in again on your next visit.

Account Security Layers

Login relies on your registered mobile number plus an OTP sent to that number. If we detect a new device or unusual IP, you get an extra verification step. This means even if someone knows your password, they cannot access your wallet without your phone.

Data Retention Periods

Active account details persist while your account is open. Transaction logs stay for the retention window required by applicable law in eligible regions. Support chat transcripts are kept for twelve months, then purged unless an open dispute requires them.

Right to Correction and Deletion

You can ask us to fix incorrect data or remove records that are no longer necessary. Submit the request through live chat or email. We process corrections immediately and deletions within the retention rules that apply to your jurisdiction.

Third-Party Data Sharing

We share data only with payment processors like bKash, Nagad and Rocket to settle transactions, with anti-fraud partners to flag suspicious activity, and with authorities when legally required. We never sell your information or use it for third-party advertising.

PRIVACY HELP CHANNELS

How to Reach Us About Your Data

If you want to know what data we hold, need something corrected, or want to request deletion, reach out through any of the channels below. Our team handles privacy queries with the same priority as account issues — you will not be passed around. State your registered mobile number or email so we can locate your records quickly.

Team online

Live Chat

Open the chat widget from any page on our mobile site or desktop view. Tell the agent your query is about personal data and they will route you to the privacy queue. Expect a response within the same session for straightforward requests.

Email

Send your request to our support email with the subject line containing the word 'privacy'. Include your registered mobile number. We aim to acknowledge within one working day and resolve within five, depending on the complexity of your ask.

Account Settings

Log in and head to your profile section. You can update your name, email, and contact number directly. For deletion requests or data exports that cannot be self-served, the settings page links you straight to the privacy support form.

Common Questions About Your Data Rights

Below are the questions we hear most from account holders about how their personal information is stored, shared and removed. If your specific concern is not answered here, use the live chat or email channel and reference this privacy policy page.

We collect your name, mobile number, email address and date of birth. These are the minimum details needed to create your account, verify your identity and link a bKash, Nagad or Rocket wallet for deposits and withdrawals.

No. We never receive or store your mobile wallet PIN. When you make a deposit, the transaction is processed on the bKash, Nagad or Rocket side. We only receive a confirmation reference and the transfer amount once the payment clears.

Send an email to our support team with the subject line containing the word 'privacy' and your registered mobile number. We will compile your records — account details, transaction history and support transcripts — and deliver them within five working days.

Yes. Contact us via live chat or email with a deletion request. We will close your account and purge personal data, except where local regulation requires us to retain transaction records for a specific period in eligible jurisdictions.

We share data only with payment processors to settle bKash, Nagad and Rocket transactions, with fraud-prevention partners, and with authorities if compelled by law. We do not sell or rent your information to marketers or any unrelated third party.

We use session cookies for login persistence and preference cookies for language and layout. You can clear or block them in your browser settings at any time. Blocking cookies means you will need to log in again each session and some layout preferences will reset.

All data travels over SSL-encrypted connections. Account login uses OTP verification tied to your registered mobile number. If a login attempt comes from a new device or unusual location, we trigger an additional verification step before granting access.

Transaction records are retained for the period mandated by applicable regulation in your eligible region. Once that window passes and no dispute is open, the records are permanently removed from our active systems.

We may update this policy to reflect changes in local law or platform features. When we do, the revision date at the bottom of this page updates and we send a notification to your registered email so you can review the changes before they take effect.

Yes. Your rights regarding access, correction and deletion depend on the legal framework that applies in your region. We honour requests to the extent permitted by local law in eligible jurisdictions and will tell you if a specific request cannot be fulfilled.