wlnvlp Privacy Policy

1 Data We Collect

wlnvlp collects personal data from you when you register an account, use our services, make deposits or withdrawals, contact support, or interact with our platform in any way. The categories of personal data we collect are described below. We collect only the minimum data necessary to deliver a functional, secure, and legally compliant gaming service to players in Bangladesh.

1.1 Registration & Identity Data

When you create a wlnvlp account, we collect the following information:

• Full legal name — as it appears on your government-issued identity document.
• Date of birth — to verify that you meet the 18+ age requirement.
• Email address — used for account communications, security alerts, and support.
• Mobile phone number — used for account verification and, where applicable, for mobile payment services such as bKash and Nagad.
• Residential address — including city, district, and postcode within Bangladesh.
• Username and encrypted password — passwords are stored as one-way cryptographic hashes; we do not store plaintext passwords.

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process, we may request the following documents at the time of registration, before processing your first withdrawal, or during a periodic account review:

• National Identity Card (NID) issued by the Bangladesh Electoral Commission.
• Passport — for players who use a passport as their primary identification document.
• Driver's licence issued by the Bangladesh Road Transport Authority (BRTA).
• Proof of address — such as a recent utility bill, bank statement, or official correspondence showing your name and registered address.
• Payment method verification — such as a screenshot or confirmation of the mobile wallet account (bKash/Nagad) used to deposit, to confirm ownership.

1.3 Financial & Transaction Data

We collect records of all financial transactions conducted on your wlnvlp account, including:

• Deposit amounts, dates, times, and payment methods used.
• Withdrawal requests, amounts, processing status, and destination payment details.
• Transaction reference numbers and gateway response codes.
• Bonus and promotional credit adjustments.

We do not store full card numbers, CVV codes, mobile banking PINs, or bKash/Nagad account PINs on wlnvlp servers. Payment credentials are handled exclusively by our PCI-DSS compliant payment processor partners.

1.4 Gameplay & Behavioural Data

We automatically record data about your activity on the wlnvlp platform, including:

• Games played, bet amounts, win/loss records, and session durations.
• Sports betting markets accessed and wagering history.
• Bonus offers viewed, claimed, and wagering progress.
• Responsible gaming tool usage (e.g., deposit limit settings, cooling-off periods).

1.5 Technical & Device Data

When you access wlnvlp via a web browser or mobile device, we automatically collect certain technical data including:

Data Type	Examples	Purpose
IP Address	IPv4 / IPv6 address	Fraud prevention, geographic eligibility check
Device identifiers	Device model, OS version	Platform compatibility, security monitoring
Browser data	Browser type, version, language settings	Session integrity, UI optimisation
Log data	Access timestamps, pages visited, errors	Debugging, abuse detection
Connection data	ISP name, connection type	Service quality, fraud detection

1.6 Communications Data

If you contact wlnvlp's support team via live chat or email, we retain a record of that correspondence. This includes the content of your messages, timestamps, the support agent who handled your query, and any resolution or outcome. These records are used for quality assurance, dispute resolution, and to maintain a complete account history.

2 How We Use Your Data

wlnvlp uses the personal data it collects for specific, explicit, and legitimate purposes. We do not use your data in any manner that is incompatible with the purposes described at the time of collection. The following table summarises the primary purposes for which we process your personal data and the legal basis for each:

Purpose	Data Used	Legal Basis
Account creation & management	Registration data, device data	Contractual necessity
Age & identity verification (KYC)	KYC documents, registration data	Legal obligation
Payment processing	Financial & transaction data	Contractual necessity
Fraud prevention & AML compliance	Transaction data, IP address, device data	Legal obligation / Legitimate interest
Responsible gaming monitoring	Gameplay data, financial data	Legal obligation / Legitimate interest
Customer support	Communications data, account data	Contractual necessity
Platform improvement & analytics	Gameplay data, technical data	Legitimate interest
Marketing & promotional offers	Email, gameplay preferences	Consent (opt-in only)

2.1 Marketing Communications

wlnvlp will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, or seasonal offers if you have explicitly opted in to receive such communications during registration or via your account preferences. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting the support team. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.

2.2 Automated Decision-Making

wlnvlp uses automated systems for certain account management decisions, including fraud detection, bonus eligibility assessment, and responsible gaming risk flagging. Where an automated decision significantly affects your account (for example, a temporary account restriction triggered by a fraud alert), you have the right to request a manual review of that decision by contacting our support team at [email protected] (plain text — not a link).

3 Data Sharing & Third Parties

wlnvlp does not sell your personal data to third parties. We may share your data with trusted partners strictly on a need-to-know basis and only for the purposes described in this Privacy Policy. All third-party partners with whom we share data are contractually obligated to maintain confidentiality and to process your data in accordance with applicable data protection principles.

3.1 Categories of Third Parties

• Payment processors — bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum data necessary to authorise and process your transactions. These providers operate under their own privacy policies and are subject to Bangladesh Bank regulatory oversight.
• Game providers — Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Habanero, and Spribe may receive session identifiers and wagering data necessary to deliver game content and verify game outcomes. Game providers do not receive your full name, address, or payment details.
• KYC and identity verification providers — Third-party verification services may process your identity documents to confirm your age and identity. These providers operate under strict data security standards and do not retain your documents beyond the verification period.
• Fraud prevention and AML services — Specialist fraud detection and anti-money laundering compliance tools may access transaction patterns and device data to identify suspicious activity. These services are used to protect you and the integrity of the platform.
• IT infrastructure and cloud hosting providers — Our hosting partners provide the secure server infrastructure on which wlnvlp operates. Access to your data by these providers is restricted to system administration tasks only.
• Legal and regulatory authorities — wlnvlp will disclose personal data to law enforcement agencies, regulators, or courts where required to do so by law, court order, or regulatory directive. We will, where legally permissible, notify you of such a disclosure.

3.2 International Data Transfers

Some of our third-party service providers may be located outside Bangladesh. Where personal data is transferred internationally, wlnvlp ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that required within Bangladesh. We do not transfer your data to jurisdictions that do not provide adequate data protection guarantees without implementing additional safeguards.

4 Cookies & Tracking Technologies

wlnvlp uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and (with your consent) improve your experience through analytics. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies do not contain executable code and cannot install software on your device.

4.1 Types of Cookies We Use

Cookie Type	Purpose	Required?
Strictly Necessary	Session management, login authentication, security tokens, CSRF protection	Yes — cannot be disabled
Functional	Remembering your language preference, display settings, responsible gaming tool states	Optional (default: on)
Analytics	Understanding which pages and features are most used, identifying errors, improving platform performance	Optional (requires consent)
Fraud Detection	Device fingerprinting for security, identifying suspicious patterns across sessions	Yes — required for platform security

4.2 Managing Your Cookie Preferences

You can manage or disable optional cookies through your browser settings. Most browsers allow you to block or delete cookies via their privacy or security settings menus. Please note that disabling strictly necessary cookies will prevent you from logging into your wlnvlp account and using core platform features. Disabling functional cookies may result in a degraded user experience, such as your settings not being remembered between sessions.

5 Data Retention & Storage

wlnvlp retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following retention periods apply as a general guide:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	AML compliance, dispute resolution
KYC identity documents	Duration of account + 5 years post-closure	Regulatory requirement
Transaction records	7 years from transaction date	Financial reporting, AML obligations
Gameplay history	5 years from last activity	Dispute resolution, responsible gaming review
Support communications	3 years from last interaction	Quality assurance, dispute history
Marketing preferences & consent records	Until consent is withdrawn + 2 years	Evidence of consent basis
Technical/log data	13 months from collection	Security monitoring, fraud detection

When your data reaches the end of its applicable retention period, it is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual. Where anonymised aggregate data is retained for analytical purposes beyond these periods, it cannot be used to identify any individual player.

5.1 Data Storage Location

wlnvlp's primary data storage infrastructure is hosted on enterprise-grade servers with physical security controls, redundant power supplies, and geographic redundancy to ensure continuous availability. All stored data is encrypted at rest using AES-256 encryption. Backups are encrypted and stored separately from primary data, with access restricted to a limited number of authorised system administrators.

6 Your Privacy Rights

As a wlnvlp player, you hold meaningful rights over the personal data we hold about you. We are committed to honouring these rights promptly and without placing unnecessary barriers in your way. The following rights apply to all registered players on the wlnvlp platform:

• Right of Access: You may request a copy of all personal data that wlnvlp holds about you at any time. We will provide this information in a readable format within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update certain information (such as your email address or phone number) directly via your account settings. For more significant corrections (such as your legal name or date of birth), please contact support with documentary evidence.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that certain data must be retained to comply with legal obligations (such as AML record-keeping), and erasure requests that conflict with these obligations will be partially fulfilled within those constraints.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or while you are awaiting the outcome of an objection.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interests, though wlnvlp may continue processing if it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

6.1 How to Exercise Your Rights

To exercise any of the rights described above, please contact the wlnvlp privacy team via the 24/7 live chat support inside your account, or by sending a written request to [email protected] (plain text — not a link). We will respond to all verified requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, and you will be notified of the extension and the reason for it within the initial 30-day window.

7 Data Security Measures

wlnvlp applies a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal information against unauthorised access, accidental loss, alteration, or disclosure. Our security programme is reviewed regularly and updated in response to emerging threats and industry best practices.

7.1 Technical Safeguards

• TLS/SSL encryption on all data in transit between your device and our servers.
• AES-256 encryption for all personal data stored at rest on our servers and backup systems.
• One-way password hashing using modern bcrypt or Argon2 algorithms — we cannot recover your password in plaintext.
• Two-factor authentication (2FA) available to all players for account login.
• Intrusion detection and prevention systems (IDS/IPS) monitoring network traffic for anomalous patterns.
• Web Application Firewall (WAF) protecting against SQL injection, XSS, and other common web-based attacks.
• DDoS mitigation to ensure platform availability and prevent service disruption.

7.2 Organisational Safeguards

• Access to personal data is restricted to employees and contractors who require it to perform their role, on a strict least-privilege basis.
• All staff with access to personal data receive regular training on data protection obligations and security practices.
• Third-party partners are vetted for security compliance before being granted access to any wlnvlp systems or data.
• Internal data access is logged and audited regularly to detect and investigate any unauthorised access attempts.

7.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, wlnvlp will notify affected players without undue delay. Notification will be delivered to the email address registered on your account and will include a description of the nature of the breach, the categories and approximate number of records affected, the likely consequences, and the measures wlnvlp has taken or proposes to take to address the breach.

8 Policy Updates & Contact

wlnvlp reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When we make a material change to this Policy — meaning a change that meaningfully affects how we collect, use, or share your personal data — we will notify you via the email address registered on your account and/or via a prominent notice within the platform, at least 14 days before the change takes effect.

For non-material changes (such as corrections of typographical errors, clarifications of existing practices, or reorganisation of the document structure), we may update the Policy without prior notice, updating the "Effective Date" shown at the top of this document. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the wlnvlp platform after any update to this Policy constitutes your acceptance of the revised terms.

8.1 Privacy Contact

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which wlnvlp handles your personal data, please contact us through any of the following channels:

• Live chat support: Available 24/7 inside your wlnvlp account — the fastest way to reach us.
• Email (plain text — not a link): [email protected] — responses within 12 hours.

All privacy-related enquiries are handled by our dedicated privacy team and are treated with strict confidentiality. We aim to resolve all privacy concerns within 30 calendar days of receiving a verified request.