Privacy Policy — ozwin 365

1. Information We Collect

ozwin 365 collects personal information from you in several ways: information you provide directly when registering or using the platform, information generated automatically through your interactions with the site, and information received from trusted third-party service providers. The categories of personal data we collect are described in detail below.

1.1 Information You Provide Directly

When you register for an account, complete identity verification, make deposits or withdrawals, contact customer support, or participate in promotions on ozwin 365, you may provide us with the following types of personal information:

• Identity Information: Full legal name, date of birth, gender, and nationality as it appears on your government-issued identity document.
• Contact Information: Residential address in Bangladesh (including district, city, and postcode), mobile phone number, and email address.
• Identity Documents: Copies of your Bangladesh National Identity Card (NID), passport, or driver's licence submitted during the KYC verification process.
• Financial Information: Payment method details including bKash account number, Nagad account number, Rocket account number, Upay account number, or masked card details for Visa and Mastercard transactions. We do not store full card numbers on our servers.
• Account Credentials: Your chosen username and a securely hashed version of your password. We never store passwords in plain text.
• Communications: The content of any messages you send to our customer support team via live chat, email, or any other contact channel, including records of those interactions for quality assurance and dispute resolution purposes.

1.2 Information Collected Automatically

When you visit and interact with the ozwin 365 platform, certain technical and behavioural data is collected automatically through your device and browser:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, time spent on each page, games played, bets placed, bet amounts, outcomes, session duration, navigation paths, and feature interactions.
• Location Data: Approximate geographic location derived from your IP address, used to verify that you are accessing the platform from a permitted jurisdiction.
• Log Data: Server-side logs of requests made to the ozwin 365 platform, including timestamps, error reports, and transaction records.

1.3 Information from Third Parties

In certain circumstances, ozwin 365 may receive personal information about you from trusted third-party sources, including:

• Payment Processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, Visa, and Mastercard to verify deposits and process withdrawals.
• Identity Verification Services: Results of identity document checks and database cross-references conducted by our KYC service providers.
• Fraud Prevention Services: Risk scores and flagged activity data from third-party fraud detection and anti-money-laundering screening services.
• Responsible Gaming Partners: Self-exclusion registrations and related notifications from national responsible gaming registries, where applicable.

2. How We Use Your Data

ozwin 365 uses the personal information we collect for the following specific purposes. We process your data only where we have a lawful basis for doing so — which may include the performance of a contract with you, compliance with a legal obligation, our legitimate business interests, or your explicit consent.

Purpose	Data Used	Lawful Basis
Account registration and management	Identity, contact, credentials	Contract performance
Identity verification (KYC)	Identity documents, financial info	Legal obligation
Processing deposits and withdrawals	Financial information, identity	Contract performance
Fraud prevention and AML screening	All categories	Legal obligation, legitimate interest
Customer support and dispute resolution	Communications, account data	Contract performance, legitimate interest
Responsible gaming monitoring	Usage data, financial info	Legal obligation, legitimate interest
Platform improvement and analytics	Usage data, technical data	Legitimate interest
Marketing communications (where consented)	Contact information	Consent

2.1 Marketing Communications

ozwin 365 will only send you promotional emails, SMS messages, or push notifications where you have given your explicit consent to receive such communications at the time of registration or subsequently through your account settings. You may withdraw your consent and unsubscribe from marketing communications at any time by updating your notification preferences within your account settings or by contacting the support team directly. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.

2.2 Automated Decision-Making

ozwin 365 may use automated processes to make certain decisions that affect your account, including fraud risk scoring, unusual betting pattern detection, and responsible gaming threshold alerts. Where an automated decision has a significant effect on you — such as account suspension or withdrawal restrictions — you have the right to request human review of that decision. To exercise this right, contact our support team at [email protected].

3. Data Sharing and Disclosure

ozwin 365 does not sell, rent, or trade your personal information to any third party. We share personal data only in the following specific and limited circumstances:

3.1 Service Providers

We engage trusted third-party service providers who assist us in operating the ozwin 365 platform. These providers act as data processors on our behalf and are bound by strict contractual data processing agreements that prohibit them from using your data for any purpose other than providing services to ozwin 365. Categories of service providers include:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, and card payment processors who facilitate your transactions.
• Identity Verification Providers: Third-party KYC and document verification services used to validate your identity during account setup and withdrawal processing.
• IT Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers who support the technical operation of the platform.
• Customer Support Platforms: Live chat and ticketing system providers used to manage and record customer support interactions.
• Analytics Providers: Aggregated, anonymised platform usage analytics services used to improve site performance and user experience.

3.2 Legal and Regulatory Disclosures

ozwin 365 may be required to disclose your personal information to governmental authorities, law enforcement agencies, financial intelligence units, or regulatory bodies where required by applicable law, court order, or binding regulatory directive. This includes disclosures required under anti-money-laundering (AML) legislation and counter-terrorism financing regulations applicable in Bangladesh. ozwin 365 will notify you of any such disclosure where we are legally permitted to do so.

3.3 Business Transfers

In the event that ozwin 365 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to the handling of your data that result from it, with a reasonable period to object before the transfer takes effect.

4. Cookies and Tracking Technologies

The ozwin 365 platform uses cookies and similar tracking technologies — including local storage, session storage, and pixel tags — to operate core platform functionality, enhance your user experience, and support responsible gaming monitoring. The following categories of cookies are used on the platform:

4.1 Strictly Necessary Cookies

These cookies are essential for the platform to function correctly. They manage your login session, maintain your account state across pages, protect against cross-site request forgery (CSRF), and enable secure payment processing flows. These cookies cannot be disabled without preventing you from using the platform. No consent is required for strictly necessary cookies as they are fundamental to the service you have requested.

4.2 Performance and Analytics Cookies

These cookies collect anonymised or aggregated data about how visitors use the ozwin 365 platform — such as which pages are visited most frequently, where users drop off in a registration flow, and how long sessions typically last. This data is used exclusively to improve the platform's performance and usability. No individually identifiable information is transmitted via these cookies.

4.3 Functional Cookies

Functional cookies remember your preferences and personalise your experience on the platform. This includes remembering your preferred language, your last visited game category, and any responsible gaming limits you have set in your account. Disabling functional cookies may reduce the convenience of certain features but will not prevent you from accessing the platform.

4.4 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings at any time. Most modern browsers allow you to view, block, and delete cookies. Please note that blocking all cookies — including strictly necessary ones — will prevent you from logging in to your ozwin 365 account and using core platform features. Detailed instructions for managing cookies in popular browsers are available in your browser's help documentation.

5. Data Security Measures

ozwin 365 takes the security of your personal information seriously and implements a comprehensive range of technical and organisational security measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

5.1 Technical Security Controls

• SSL/TLS Encryption: All data transmitted between your device and the ozwin 365 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. This is indicated by the padlock icon in your browser's address bar.
• Data Encryption at Rest: Sensitive personal data — including identity document files, financial account details, and KYC records — is stored in encrypted form in our databases using AES-256 encryption.
• Password Security: Account passwords are never stored in plain text. They are processed using a secure one-way cryptographic hashing algorithm before storage, meaning that even ozwin 365 personnel cannot retrieve your password.
• Access Controls: Access to personal data within the ozwin 365 organisation is governed by a strict role-based access control (RBAC) policy. Employees may only access the data required to perform their specific job function.
• Intrusion Detection: The platform is monitored continuously by automated intrusion detection and anomaly monitoring systems designed to identify and respond to security threats in real time.

5.2 Organisational Security Measures

In addition to technical controls, ozwin 365 enforces organisational policies that govern how employees and contractors handle personal data. All personnel with access to personal data are required to complete data protection and security training. Access to production data environments is restricted and logged. Third-party service providers are assessed for security compliance before being engaged and are contractually required to maintain equivalent security standards.

6. Data Retention Policy

ozwin 365 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	AML regulatory requirement
KYC / identity documents	Duration of account + 5 years post-closure	Legal and regulatory compliance
Transaction records	7 years from transaction date	Financial record-keeping obligations
Customer support communications	3 years from last interaction	Dispute resolution, quality assurance
Usage and behavioural data	2 years from collection date	Platform improvement, responsible gaming
Marketing consent records	Until consent is withdrawn + 1 year	Proof of consent compliance
Self-exclusion records	Permanently (minimum)	Responsible gaming safeguarding

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised and aggregated data derived from your usage — which cannot be used to identify you — may be retained indefinitely for statistical and platform improvement purposes.

7. Your Privacy Rights

As a player on the ozwin 365 platform, you hold a number of rights in relation to your personal data. These rights are described below along with guidance on how to exercise them.

7.1 Right of Access

You have the right to request a copy of the personal data that ozwin 365 holds about you. We will provide this information in a clear and structured format within a reasonable timeframe following receipt of a valid request. We may ask you to verify your identity before processing an access request to prevent unauthorised disclosure.

7.2 Right to Rectification

If any of the personal data ozwin 365 holds about you is inaccurate or incomplete, you have the right to request that we correct or update it. For account details such as your contact number or email address, you may be able to update these directly within your account settings. For identity and KYC records, correction requests must be submitted to our support team along with supporting documentation.

7.3 Right to Erasure

You may request that ozwin 365 delete the personal data we hold about you. However, this right is not absolute — we may be required to retain certain data to comply with legal obligations (such as AML record-keeping requirements), to resolve disputes, or to enforce our Terms and Conditions. Where we are unable to fulfil an erasure request in full, we will explain which data must be retained and why.

7.4 Right to Object and Restrict Processing

You have the right to object to the processing of your personal data where we are relying on our legitimate interests as the lawful basis for that processing. You also have the right to request that processing of your data be restricted in certain circumstances — for example, while the accuracy of data is being contested. Where processing is restricted, we will continue to store your data but will not carry out any further processing operations until the restriction is lifted.

7.5 Right to Data Portability

Where processing of your personal data is based on your consent or on the performance of a contract with you, and that processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.

7.6 Right to Withdraw Consent

Where ozwin 365 processes your personal data on the basis of your consent — for example, for the purpose of sending marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal. You can withdraw marketing consent through your account settings or by contacting our support team.

8. Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which ozwin 365 handles your personal data, we encourage you to contact us in the first instance so that we can address your concern directly and promptly.

8.1 Contact Details

You can reach the ozwin 365 data protection team via the following channel:

• Email: [email protected] (plain text only — not a clickable link)
• Subject Line: Please use "Privacy Enquiry" or "Data Rights Request" to ensure your message is routed to the correct team.
• Response Time: We aim to acknowledge all privacy-related enquiries within 2 business days and provide a substantive response within 30 days.

8.2 Updates to This Privacy Policy

ozwin 365 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or operational requirements. The date of the most recent update is displayed at the top of this page. Where changes are material, we will notify registered players via email prior to the changes taking effect. Your continued use of the ozwin 365 platform following notification of a material change will constitute your acceptance of the updated Privacy Policy.

We recommend reviewing this Privacy Policy periodically to stay informed of how we are protecting your information. If you do not agree with any changes to this Policy, you should cease use of the platform and may request account closure in accordance with the ozwin 365 Terms and Conditions.