ozwin Privacy Policy – How We Handle Your Personal Data

1.1 Information You Provide Directly

• Full legal name and date of birth provided during account registration.
• Email address and contact phone number used for account communications.
• Residential address provided for identity verification and KYC compliance.
• Government-issued identification documents submitted during the KYC process.
• Payment method details including mobile wallet identifiers (bKash, Nagad, Rocket) and card information where applicable.

1.2 Information Collected Automatically

• Device information including device type, operating system, and browser type used to access the platform.
• IP address and general location data derived from network connection at the time of access.
• Session activity data including login timestamps, pages visited, games played, bets placed, and transaction history.
• Cookie and tracking data as described in Section 5 of this policy.

1.3 Information from Third Parties

In certain circumstances ozwin may receive information about you from third-party identity verification services engaged to assist with KYC compliance, from payment processing partners (including bKash, Nagad, and Rocket) as part of transaction processing, and from fraud prevention and anti-money-laundering databases. Information received from these sources is used solely for the purpose for which it was obtained and is handled in accordance with this Privacy Policy.

2.1 Core Platform Purposes

• Account registration, authentication, and ongoing account management including password resets and security alerts.
• Processing deposits and withdrawals, verifying payment method ownership, and maintaining accurate transaction records.
• Delivering customer support, responding to account queries, and resolving disputes or complaints.
• Complying with anti-money-laundering (AML), Know Your Customer (KYC), and responsible gaming obligations.

2.2 Platform Improvement and Analytics

ozwin uses aggregated and anonymised session data to analyse platform usage patterns, identify technical issues, improve game loading performance, and make informed decisions about new features. This analysis is conducted on data that does not identify individual players. No individually identifiable data is shared with analytics providers without your consent.

2.3 Marketing Communications

With your consent, ozwin may use your email address or phone number to send you information about promotions, bonuses, and platform updates relevant to your account. You may withdraw consent for marketing communications at any time by contacting [email protected] or by using the unsubscribe link in any marketing email. Withdrawal of marketing consent does not affect the processing of your data for core platform purposes.

3.1 Contractual Necessity

Processing your registration data, payment information, and account activity records is necessary for ozwin to fulfil its contractual obligations to you as a platform user. Without this data, ozwin cannot provide the services you have requested. This basis covers account creation, transaction processing, customer support, and account security operations.

3.2 Legal Obligation

Processing identity verification documents, transaction records, and responsible gaming data is required for ozwin to comply with applicable AML regulations, KYC requirements, and responsible gaming standards. This data must be retained for defined periods regardless of whether the player closes their account.

3.3 Legitimate Interests

ozwin processes certain data — including session activity logs and fraud detection signals — on the basis of legitimate interests in maintaining platform security, preventing fraud, protecting other players, and improving the quality of the service. Where legitimate interests are relied upon, ozwin has assessed that its interests are not overridden by your fundamental rights and freedoms.

4.1 Service Providers and Technology Partners

ozwin engages trusted technology partners to operate aspects of the platform, including payment processors (bKash, Nagad, Rocket, and card payment gateways), identity verification services, game studio content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), cloud hosting providers, and customer support infrastructure. These partners are contractually bound to process your data only as instructed by ozwin and in compliance with applicable data protection standards.

4.2 Regulatory and Legal Disclosure

ozwin may be required by law, court order, or competent regulatory authority to disclose certain personal data. In such cases ozwin will comply with the disclosure requirement and, where legally permitted, will notify the affected player of the disclosure request. ozwin does not volunteer player data to law enforcement beyond what is legally required.

4.3 Business Transfers

In the event that ozwin undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, player data may be transferred to the acquiring entity as part of that transaction. Where such a transfer occurs, players will be notified in advance and the acquiring entity will be required to honour the commitments made in this Privacy Policy or to provide players with a meaningful opportunity to opt out of the transfer.

5.1 Types of Cookies Used

• Essential cookies: required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without preventing you from using the platform.
• Functional cookies: used to remember your language preference, display settings, and other personalisation choices across sessions.
• Analytics cookies: used to collect anonymised data about how players navigate and interact with the platform. This data informs platform improvements and is not linked to your personal identity.
• Security cookies: used to detect and prevent fraudulent login attempts, account takeover, and suspicious session activity.

5.2 Managing Your Cookie Preferences

You may adjust your browser settings to refuse or delete cookies at any time. Please be aware that disabling essential cookies will impair the functionality of the ozwin platform and may prevent you from logging in or completing transactions. Most modern mobile browsers provide cookie management options accessible through the browser's privacy or settings menu. For specific instructions on managing cookies in your browser, please consult your browser's help documentation.

6.1 Retention During Active Account

While your ozwin account remains open, we retain all personal data necessary to provide the platform services, maintain your account history, fulfil our regulatory obligations, and resolve any disputes that may arise. Your transaction history, gameplay records, and account communications are retained for the lifetime of your account and for the period required by applicable regulations thereafter.

6.2 Retention After Account Closure

Following closure of your ozwin account, we will retain certain categories of personal data for the minimum period required by applicable law or regulation. Typically, transaction records and identity verification data are retained for a period of five years following account closure to satisfy AML and financial record-keeping requirements. After the applicable retention period expires, data is securely deleted or anonymised in accordance with our internal data disposal procedures.

8.1 Mobile Wallet Transactions

When you use bKash, Nagad, Rocket, or Upay to deposit or withdraw funds from your ozwin account, the transaction is processed directly through the respective payment provider's infrastructure. ozwin receives only the transaction confirmation data necessary to credit or debit your account balance. ozwin does not store your mobile banking PIN, full mobile wallet credentials, or any data that would allow ozwin to initiate a transaction on your behalf without your active participation.

8.2 Card Payment Data

Card payments made on the ozwin platform are processed through PCI-DSS compliant payment gateways. ozwin does not store full card numbers, card verification values (CVV), or card expiry dates on its own servers. Card details entered during a payment transaction are transmitted directly to the payment gateway using encrypted connections and are handled exclusively by the gateway provider in accordance with their own security standards.

10.1 Updates to This Privacy Policy

ozwin reserves the right to update this Privacy Policy at any time. Where a material change is made to how we collect or use your personal data, we will provide reasonable notice via a platform notification or by email to your registered address before the change takes effect. The date of the most recent update is shown at the top of this page. Continued use of the ozwin platform following any update to this Privacy Policy constitutes your acceptance of the revised terms.

10.2 Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how your personal data has been handled, please contact the ozwin support team by email at [email protected]. We will acknowledge your request within 5 business days and aim to provide a full response within 30 days. For complex requests, we may require up to an additional 30 days, in which case we will notify you of the extension and the reason for it.