Winbox Privacy Policy — How Your Data Is Protected

Winbox (winbox.express) takes your personal information seriously. This Privacy Policy explains what data Winbox collects, why it is collected, where it is stored, and who it is shared with. This policy applies to all Winbox services — including the website, mobile app, live chat, and email communications.

By opening an account or using Winbox's services, you agree to this Privacy Policy. Any changes to this policy will be announced on the website, and for significant updates, a notice will be sent to your registered email address.

Winbox collects information in several ways: directly from you, automatically through your use of the platform, and from third-party sources.

Information Provided Directly by You

• Name, date of birth, and gender — collected at registration.
• Email address and mobile number — used for communication and verification.
• Home address — collected during KYC verification.
• National ID or passport details — used to verify your identity.
• Payment method details — bKash, Nagad, or bank account number.

Automatically Collected Information

• IP address and device type.
• Browser type and operating system.
• Pages visited and time spent — session logs.
• Betting and gaming history.
• At the time of login and logout.

Winbox uses collected data only for specific, defined purposes — nothing beyond that. The primary uses are:

• Service Delivery: Managing your account, processing bets, awarding prizes, and completing payments.
• Identity Verification: Completing the KYC process and preventing underage account registrations.
• Security: Preventing fraud, money laundering, and unauthorized access.
• Contact: Sending important notices, transaction confirmations, and support messages.
• Service Improvement: Analysing user experience to continuously improve the platform.
• Legal Obligations: Storing and providing information as required by law or regulatory authorities.

Winbox may use your information to send you relevant offers or promotions. To opt out of such communications, go to your account settings and update your notification preferences.

Winbox does not sell your data. However, limited information may be shared with certain parties in specific circumstances in order to provide our services:

Game Provider

Only the information necessary to run games is shared with providers such as Pragmatic Play, Evolution, or others. All providers are required to comply with their own privacy policies.

Payment Processors

Information necessary to process transactions is shared with bKash, Nagad, or your bank. This data is used solely for payment processing.

For legal purposes

Winbox may be required to disclose certain information to relevant authorities under court orders, government investigations, or anti-money laundering laws. Where possible, you will be notified in advance.

Winbox uses internationally recognised security technology to protect your data. The layers of protection include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser and our servers is secured with 256-bit encryption.
• Encrypted database: All stored data is kept in encrypted form — unreadable even if someone gains direct access to the server.
• Two-Factor Authentication (2FA): An OTP is sent to your mobile at login — so even if your password is compromised, your account stays secure.
• Firewall & intrusion detection: Unauthorized access attempts are automatically blocked.
• Regular security audits: Third-party security experts regularly audit Winbox's systems.
• Staff Training: Winbox staff members who have access to member data are bound by strict confidentiality agreements.

Despite all these safeguards, no one can guarantee absolute security on the internet. You also have a role to play — keep your password strong, never share it, and avoid logging in over public Wi-Fi.

The Winbox website uses cookies to function properly and to improve your experience. Cookies are small text files stored in your browser.

Non-essential cookies can be disabled from your browser settings. However, disabling session and security cookies may prevent Winbox from functioning properly.

Winbox believes you have the right to control your own data. The following rights are available to you as a Winbox member:

To exercise any of these rights, email support@winbox.express. Winbox will respond within 30 business days. If any data must be retained for legal reasons, this will be explained to you.

Winbox does not retain data longer than necessary. Retention periods vary depending on the type of information:

• Account Information: For the full duration the account remains active. Up to 5 years after account closure (as required by law).
• Transaction & Betting Records: 5 years from the date of the last transaction — for financial dispute resolution and anti-money laundering compliance.
• KYC Documents: 5 years from the date verification is completed.
• Support contact: 2 years — retained as evidence for dispute resolution.
• Session & Log Data: 90 days.

Once the retention period ends, data is securely deleted or disposed of in a way that makes recovery impossible.

Winbox does not collect data from or provide services to anyone under the age of 18. Age verification is mandatory at registration. If underage data is collected for any reason, the account will be closed and all associated data permanently deleted as soon as it is identified.

If you suspect a minor in your household is using Winbox, please contact support@winbox.express immediately — Winbox will take prompt action.

Winbox may update this Privacy Policy from time to time. When changes are made, the "Last Updated" date at the top of the page will be revised. For significant changes, registered members will be notified via email.

Continued use of Winbox after any changes take effect will be considered acceptance of the updated policy. If you do not agree with the revised policy, you may request to close your account.

If you have any questions about the Privacy Policy or wish to exercise your data rights, please contact Winbox:

You may also raise privacy-related queries via live chat. However, for formal requests such as data deletion or download, submitting a request by email is required.