gitawin Privacy Policy — Your Data, Your Rights

Information We Collect

gitawin collects personal information from you when you register for an account, make deposits or withdrawals, place bets or play casino games, contact our support team, or interact with our platform in any other way. We also collect certain information automatically as you browse and use the gitawin website. The categories of data we collect are described in full below.

gitawin does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is contained in standard government-issued identity documents submitted for age and identity verification purposes. Where such data appears incidentally in a submitted document, it is not extracted, stored separately, or processed for any purpose other than verifying the document's authenticity and the account holder's identity.

How We Use Your Information

gitawin uses the personal information we collect for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your data are as follows:

• Account Creation and Management: We use your identity and contact data to create and manage your gitawin account, authenticate your logins, and ensure that your account is accessible only to you. This includes processing your username, password hash, email, and mobile number.
• Age and Identity Verification: gitawin is an 18+ platform. We process identity documents and date-of-birth data to confirm that all players meet the minimum age requirement before they can deposit or play. This is both a legal obligation and a core responsible gaming commitment.
• Payment Processing: We use your financial data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card payment channels. Transaction records are maintained for accounting, audit, and fraud-detection purposes.
• Fraud Prevention and Anti-Money Laundering (AML): gitawin uses technical data, usage data, and financial data to detect and prevent fraudulent activity, money laundering, and other forms of financial crime. Unusual patterns — such as rapid cycling of deposits and withdrawals with minimal gameplay — may trigger a compliance review.
• Customer Support: Communications data is used to respond to your support enquiries, investigate complaints, and resolve disputes. Support interactions are logged and may be reviewed for quality assurance and training purposes.
• Platform Improvement: Anonymised and aggregated usage data is analysed to understand how players use gitawin, which games and features are most popular, and where the user experience can be improved. This analysis does not identify individual players.
• Responsible Gaming: gitawin uses usage data and account history to monitor for signs of problem gambling behaviour — such as escalating deposit frequency, increasing bet sizes, or rapid loss sequences. This data informs our responsible gaming interventions including spending alerts and self-exclusion prompts.
• Marketing Communications: If you have opted in to receive promotional communications, gitawin uses your contact data to send you information about bonuses, promotions, and new features. You can opt out of marketing emails at any time by clicking the unsubscribe link in any communication or by contacting [email protected].
• Legal and Regulatory Compliance: gitawin processes your data as necessary to comply with applicable laws, respond to lawful requests from government authorities, and fulfil obligations under our operating terms. This includes retaining transaction records for the minimum periods required by applicable financial regulations.

Legal Basis for Processing

gitawin relies on the following legal bases to process your personal data. For each major processing activity, we identify the applicable basis below so that you can understand why we are entitled to process your information:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to perform the contract between you and gitawin — specifically, to open your account, verify your eligibility, process your payments, and deliver the betting and gaming services you have requested. Without this data, gitawin cannot provide its services to you.
• Legal Obligation: Certain data processing activities — particularly age verification, identity verification, AML monitoring, and transaction record-keeping — are required by law. gitawin processes this data to comply with applicable anti-money laundering regulations, financial crime prevention frameworks, and age-gating obligations applicable to operators of gambling and gaming platforms.
• Legitimate Interests: gitawin processes technical and usage data on the basis of legitimate interests — specifically, to maintain the security of the platform, detect and prevent fraud, improve the quality of our services, and conduct internal analytics. Where we rely on legitimate interests, we have conducted a balancing test and concluded that our interests do not override your fundamental rights and freedoms.
• Consent: Where gitawin processes your data for marketing communications, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before your withdrawal.

Sharing Your Information

gitawin does not sell or rent your personal information to any third party. We share your data only in the specific, limited circumstances described below, and only with parties who are contractually bound to handle it securely and in accordance with applicable data protection standards.

• Payment Processors: To process your deposits and withdrawals, gitawin shares relevant financial data with our payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and card processing networks (Visa, Mastercard). Each payment provider operates under its own privacy policy and data handling obligations. gitawin shares only the minimum data required to complete the transaction.
• Identity Verification Providers: gitawin works with third-party identity and age verification services to cross-reference the information you provide at registration against official records. These providers are contractually bound to use your data solely for verification purposes and may not retain or reuse it for any other purpose.
• Game Providers: gitawin's casino and sports betting content is powered by third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Certain anonymised usage data (game session identifiers, bet amounts) may be shared with these providers for the purpose of game delivery, fairness auditing, and jackpot tracking. No identifiable personal data such as your name, NID, or contact details is shared with game providers.
• Fraud Prevention and AML Networks: gitawin may share data with industry-wide fraud prevention databases and AML screening services where there are reasonable grounds to suspect fraudulent activity or financial crime. This sharing is carried out under strict data-sharing agreements and in compliance with applicable legal frameworks.
• Regulatory and Legal Authorities: gitawin will disclose personal data to government bodies, law enforcement agencies, or courts when required to do so by law, court order, or enforceable regulatory instruction. gitawin will not make such disclosures on a voluntary basis beyond what is legally required.
• Business Transfers: In the event that gitawin undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered to your account before the transfer takes effect, and your rights under this Privacy Policy will be preserved.

gitawin requires all third-party service providers who receive your personal data to implement appropriate technical and organisational measures to protect that data against unauthorised access, disclosure, alteration, or destruction. Providers who fail to meet these standards are terminated from gitawin's approved vendor list.

Cookies & Tracking Technologies

gitawin uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and maintain the security of your session. This section explains the types of cookies we use and how you can manage your cookie preferences.

gitawin does not use third-party advertising cookies that track your browsing activity across websites outside of gitawin.org. You will not see gitawin advertisements following you around the internet as a result of cookies placed on this platform.

You can control non-essential cookies through your browser's settings. Most modern browsers allow you to view, block, and delete cookies at any time. Please note that disabling analytics or preference cookies may affect your experience on the gitawin platform — for example, your game preferences may not be remembered between sessions. Disabling essential or security cookies will prevent core platform functions from operating correctly.

Data Retention

gitawin retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data we hold:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of 5 years after account closure. This extended retention is required to meet anti-money laundering record-keeping obligations and to resolve any post-closure disputes or regulatory enquiries.
• Financial Transaction Records: All deposit, withdrawal, and bet transaction records are retained for a minimum of 5 years from the date of the transaction. This retention period supports audit, fraud investigation, and regulatory compliance requirements.
• Communications and Support Data: Support tickets, live chat transcripts, and email correspondence are retained for 2 years from the date of the last interaction. Records relating to formal complaints or dispute proceedings are retained for 5 years.
• Verification Documents: Copies of identity documents submitted for KYC or AML purposes are retained for 5 years after account closure or the completion of the verification process, whichever is later.
• Technical and Usage Data: Anonymised or aggregated technical and usage data used for analytics purposes may be retained indefinitely. Data that can be linked to an individual account is deleted or anonymised within 12 months of account closure.
• Marketing Consent Records: Records of your marketing consent (or withdrawal of consent) are retained for the full duration of your account lifetime plus 2 years, to demonstrate compliance in the event of a query or complaint.

When a retention period expires and no other legal basis for continued storage exists, gitawin securely deletes or anonymises the relevant data. Deletion is carried out via industry-standard secure erasure methods that prevent recovery of the deleted data.

Your Privacy Rights

As a gitawin user, you hold a number of rights with respect to the personal data we hold about you. gitawin is committed to honouring these rights promptly and transparently. All rights requests should be submitted to [email protected] with the subject line "Privacy Rights Request" and must include sufficient information to verify your identity before we can act on the request.

Contact & Data Inquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or gitawin's data handling practices, please contact us using the details below. gitawin takes all privacy enquiries seriously and is committed to providing clear, helpful responses.

• General Privacy Enquiries: Contact gitawin's support team at [email protected] with the subject line "Privacy Enquiry". The support team handles general questions about this policy, how to manage your cookie preferences, and how to update your account information.
• Rights Requests: To exercise any of the privacy rights described in Section 7 above, email [email protected] with the subject line "Privacy Rights Request". Please include your registered account email address and a description of the right you wish to exercise. gitawin may ask for additional information to verify your identity before processing the request.
• Data Breach Notifications: In the unlikely event of a personal data breach that poses a high risk to your rights and freedoms, gitawin will notify affected account holders via the registered email address on file within 72 hours of becoming aware of the breach, where technically feasible. The notification will describe the nature of the breach, the categories of data affected, and the steps gitawin has taken or plans to take to address it.
• Policy Updates: gitawin reserves the right to update this Privacy Policy at any time to reflect changes in our data handling practices, new legal obligations, or improvements to our privacy controls. Material changes will be communicated to all registered players via email before they take effect. The most current version of this policy will always be available at gitawin.org/privacy-policy. The date at the top of this policy indicates when it was last updated.

gitawin thanks you for taking the time to read this Privacy Policy in full. Transparency is a core value of our platform, and we believe that players who understand how their data is used are better equipped to make informed decisions about their interaction with gitawin. If anything in this policy is unclear, please do not hesitate to reach out — our team is available around the clock to assist.

This Privacy Policy was last reviewed and updated in January 2026. 18+