diuwin Privacy Policy

diuwin ("we", "us", "the Platform") is committed to protecting the privacy and personal data of every individual who accesses or uses the diuwin platform. This Policy has been drafted in accordance with internationally recognised data protection principles and is designed to give you a clear and transparent account of our data practices.

We understand that trust is the foundation of any relationship between a gaming platform and its players. Bangladeshi players who choose diuwin as their preferred online casino and sports betting platform deserve to know exactly how their information is handled. This Policy answers that question in full, in plain language, without ambiguity.

Throughout this document, references to "personal data" mean any information that identifies or could reasonably be used to identify a living individual. References to "processing" mean any operation performed on personal data, including collection, storage, use, disclosure, and deletion. References to "Account" mean a registered diuwin player account. References to "you" or "Player" mean any individual using the Platform or whose data is processed by diuwin.

This Policy should be read alongside the diuwin Terms & Conditions and the Responsible Gaming policy, both of which contain additional provisions relevant to the processing of your data.

diuwin collects personal data in several categories depending on the nature of your interaction with the Platform. The following table sets out the categories of data we collect and their purpose:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where explicitly required for responsible gaming self-exclusion processes, in which case such data is handled with the highest level of confidentiality and is never used for any other purpose.

diuwin collects personal data through the following channels and mechanisms:

Data you provide directly to diuwin when you register an Account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or respond to any promotional communication. This is the primary source of identity, contact, financial, and document data.

Data collected automatically when you access the Platform, including IP addresses, device identifiers, browser fingerprints, session timestamps, and click-stream data. This information is generated passively as a natural consequence of using any web-based service and is necessary for platform security and performance monitoring.

When you initiate a transaction via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the respective payment service provider may share transaction confirmation data with diuwin, including the sender's account identifier and transaction reference. diuwin does not receive or store full card numbers or full mobile banking PINs.

In certain cases, diuwin may use third-party identity verification services to cross-reference the identity documents you submit during KYC against official databases, solely for the purpose of confirming your identity and age and satisfying anti-money laundering obligations.

diuwin uses cookies and similar tracking technologies as described in Section 7 of this Policy. These tools collect usage data automatically when you visit or interact with the Platform.

diuwin processes your personal data only for specific, legitimate, and clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following sets out our key processing activities:

• Account Management: Creating, maintaining, and administering your diuwin Account, including authentication, password resets, and account settings management.
• Identity and Age Verification (KYC): Confirming that all Players are aged 18 or above and are who they claim to be, in fulfilment of responsible gaming and anti-fraud obligations.
• Payment Processing: Facilitating deposits and withdrawals in BDT (৳) via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and reconciling transaction records.
• Game and Service Delivery: Providing access to cricket betting markets, live casino games, slots, dice, colour game, and all other products available on the Platform.
• Responsible Gaming Compliance: Monitoring gaming activity for signs of problem gambling behaviour, applying deposit limits, processing self-exclusion requests, and communicating with Players who may be at risk.
• Fraud Prevention and Anti-Money Laundering (AML): Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
• Customer Support: Responding to enquiries, complaints, and disputes submitted through our support channels, and maintaining records for quality assurance.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Players who have consented to receive such communications. Players may opt out at any time by contacting [email protected].
• Legal Compliance: Fulfilling obligations imposed by applicable laws, including responding to lawful requests from regulatory and law enforcement authorities.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the performance, design, and content of the Platform.

diuwin processes personal data on one or more of the following legal grounds, depending on the specific processing activity involved:

• Contractual Necessity: Processing is necessary to perform the contract represented by the diuwin Terms & Conditions, including delivering gaming services, processing payments, and managing your Account. Without this processing, diuwin cannot provide the services you have requested.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including KYC/AML regulations, responsible gaming requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing is necessary for diuwin's legitimate business interests, provided those interests are not overridden by your fundamental rights. Legitimate interests relied upon include fraud prevention, platform security, multi-accounting detection, and service quality improvement.
• Consent: For optional data processing activities such as marketing communications and non-essential cookies, diuwin relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

diuwin does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share personal data only in the following strictly defined circumstances:

Transaction data is shared with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to the extent necessary to process your deposit or withdrawal. These providers operate under their own privacy policies and are bound by applicable financial data protection standards.

Where third-party KYC verification services are used, the identity documents and personal details you submit during verification are shared with those service providers solely for the purpose of completing the verification process. These partners are contractually prohibited from using your data for any other purpose.

Studio partners such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may process certain technical session data (such as player session tokens) to deliver live casino and RNG game content. These providers do not receive your identity or financial data beyond what is operationally necessary.

diuwin may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or where diuwin has a good-faith belief that disclosure is necessary to investigate or prevent illegal activity, including fraud and money laundering. Where legally permissible, diuwin will notify you of such disclosures.

In the event of a merger, acquisition, restructuring, or sale of all or part of diuwin's business, personal data held by diuwin may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and your rights under this Policy will continue to apply.

diuwin uses cookies and similar technologies on the Platform to ensure core functionality, enhance security, and improve the user experience. A cookie is a small text file placed on your device by a website you visit. Cookies cannot execute programs or transmit viruses to your device.

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and multi-account behaviour. These are a core component of diuwin's account security infrastructure.
• Functional Cookies: Remember your preferences (such as language settings, game lobby view, and responsible gaming settings) to provide a personalised experience.
• Analytics Cookies: Collect anonymised data about how visitors use the Platform, including pages visited, session duration, and navigation paths. This data helps diuwin identify areas for improvement and optimise the user experience.

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential or security cookies may prevent you from accessing certain features of the Platform, including logging in to your Account. Analytics and functional cookies can be disabled without affecting your ability to use core Platform features.

By continuing to use the Platform after being notified of our use of cookies, you consent to the placement of non-essential cookies on your device in accordance with this Policy.

diuwin takes the security of your personal data seriously and employs a layered, defence-in-depth approach to protecting the information we hold. Our technical and organisational security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the diuwin Platform is encrypted using industry-standard TLS protocols, preventing interception by third parties.
• Hashed Password Storage: Account passwords are stored using one-way cryptographic hashing algorithms. Plain-text passwords are never stored and cannot be retrieved by any member of diuwin staff.
• Two-Factor Authentication (2FA): Players are encouraged to enable OTP-based two-factor authentication on their Accounts to provide an additional layer of login security beyond the password.
• Access Control: Internal access to personal data is restricted on a strict need-to-know basis. Role-based access controls ensure that staff members can only access data necessary for their specific job function. All access is logged and audited.
• Regular Security Audits: diuwin conducts periodic security assessments of its infrastructure, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses.
• Incident Response: diuwin maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, you will be notified without undue delay and in accordance with applicable legal obligations.

diuwin retains personal data for no longer than is necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law. The following retention principles apply:

• Active Account Data: All personal data associated with an active Account is retained for the duration of the Account's existence on the Platform.
• Closed Account Data: Following the closure of an Account, diuwin retains identity, financial, and transaction data for a minimum of 5 years to satisfy anti-money laundering record-keeping requirements and to support the resolution of any post-closure disputes.
• KYC Documents: Identity documents submitted for KYC verification are retained for a minimum of 5 years from the date of submission or the date of account closure, whichever is later.
• Gaming Activity Records: Wager history and game session records are retained for a minimum of 3 years from the date of the relevant transaction, supporting dispute resolution and responsible gaming monitoring.
• Support Communications: Email and chat records with the diuwin support team are retained for 2 years from the date of the communication for quality assurance and dispute reference purposes.
• Analytics Data: Aggregated, anonymised usage data may be retained indefinitely as it cannot be used to identify individual users.

When personal data is no longer required and no legal retention obligation applies, diuwin will securely delete or anonymise the data using industry-standard data destruction procedures.

As a diuwin Player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact the diuwin Data Privacy team at [email protected] with your full name, account username, and a clear description of your request. We will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data diuwin holds about you, along with information about how it is processed and with whom it has been shared.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. For account-level corrections, you may also update certain information directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing based on legitimate interests. This right is subject to overriding legal retention obligations — for example, AML regulations require us to retain certain transaction records for 5 years regardless of an erasure request.
• Right to Restriction: You may request that diuwin restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending verification of whether our legitimate interests override yours.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another service provider.
• Right to Object: You have the right to object at any time to the processing of your personal data where that processing is based on legitimate interests, including profiling for responsible gaming monitoring purposes. You have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where diuwin processes your data on the basis of consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

diuwin employs age verification controls as part of its KYC process to prevent underage access to the Platform. All Accounts are subject to age verification, and Accounts where the registered user is determined to be under 18 will be immediately suspended and any deposited funds returned to the original payment method.

If you believe that a person under the age of 18 has registered an Account on the diuwin Platform or has submitted personal data to diuwin, please contact us immediately at [email protected]. We will investigate and take prompt corrective action, including deletion of any data collected in relation to the underage individual.

Parents and guardians in Bangladesh are encouraged to use parental control software on shared devices to prevent access to online gambling platforms, including diuwin. For further information on available parental control tools, please refer to our Responsible Gaming page.

The diuwin Platform integrates with third-party services to deliver certain functionality, including live casino game streaming (Evolution Gaming, Ezugi), RNG game content (Pragmatic Play, NetEnt, Microgaming, Spribe), and payment processing (bKash, Nagad, Rocket, Upay, Visa, Mastercard). When you interact with these integrated services, your data may be processed by those third parties in accordance with their own privacy policies.

diuwin selects its technology and service partners carefully and requires all partners to operate appropriate data protection standards as a condition of their engagement. However, diuwin does not control and is not responsible for the privacy practices of third-party service providers beyond the scope of data shared through the Platform integration.

The diuwin Platform does not contain links to third-party websites beyond those already listed in the site navigation structure. If you navigate away from the Platform to any external site, this Policy ceases to apply and you should review the privacy policy of that external site before submitting any personal data to it.

diuwin may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or developments in responsible gaming and data protection standards. The most recent version of this Policy will always be available at diuwin.bio/privacy-policy, with the effective date clearly displayed at the top of the document.

Where changes to this Policy are material — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — diuwin will notify registered Players via the mobile number or email address associated with their Account at least 7 days before the changes take effect.

Your continued use of the Platform following notification of a material change constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you must discontinue use of the Platform and may request the deletion of your Account and personal data in accordance with Section 10 of this Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way diuwin handles your personal data, please contact our Data Privacy team using the details below. All communications are handled in English on Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week.

When contacting us about a privacy matter, please include your full name, your registered diuwin username, and a clear description of your request or concern. This will allow us to locate your Account and respond accurately and efficiently. We will acknowledge your message within 5 business days and provide a full response within 30 calendar days.

For urgent security concerns — such as suspected unauthorised access to your Account or a potential data breach — please mark your message as URGENT: SECURITY in the subject line so that our team can prioritise it accordingly.