Reference

Legal Policies That Protect Your Account

We keep our legal policies straightforward so you know exactly how your data, deposits and account access work. Whether you fund through bKash, Nagad or Rocket, these policies define how we handle your information and what rights you hold as an account holder.

Data ProtectionAccount RightsCookie TransparencyPayment PrivacyRegional Compliance
winboss Legal Policies That Protect Your Account
DATA AND SECURITY PRACTICES

How We Protect What Belongs to You

We take a practical approach to data handling — collect only what the account needs, encrypt it during transit and at rest, and give you controls to manage or remove it. Below are the specific practices that apply to every account holder regardless of how you deposit or which device you use.

Encryption Standards All data moving between your device and our servers travels through encrypted connections. Payment details from bKash, Nagad or Rocket are tokenised so raw credentials never sit in our database in readable form.
Cookie Management We use cookies for session persistence, fraud detection and anonymised analytics only. You can adjust or withdraw cookie consent at any time from the footer banner or within your account privacy settings.
Account Security Your account is protected by PIN verification and optional two-factor authentication. If we detect login attempts from an unfamiliar device, we trigger a verification step before granting access to your wallet or settings.
Data Retention We retain personal and transactional data for the minimum period required to fulfil regulatory obligations and resolve disputes. Once that window closes, data is anonymised or permanently deleted from active systems.
Your Rights You can request a full export of data we hold, ask for corrections to inaccurate records, or submit a deletion request. We process these through our support channels and confirm completion within a stated timeframe.
Policy Updates When we change these legal policies, we notify you through your registered email or account notification before the new terms apply. You always have the option to review changes and close your account if you disagree.
POLICY CONTACT PATHS

Reach Us About Legal Matters

If you have a question about how we handle your data, need to exercise a privacy right or want clarification on any legal policy, we have direct paths open for you. Our support team handles policy-related queries with the same priority as account issues, and you can reach us through the channels below without needing to log in first.

Live Chat Open a chat session from any page on our site. Policy queries get routed to a specialist who can explain data rights, cookie preferences and account restrictions in plain language without requiring your login credentials.
Email Support Send your legal or privacy query to our support email. We handle written requests for data access, correction and deletion through this channel so you have a documented trail of every response we provide.
Account Settings Inside your account dashboard, a dedicated section lets you view stored data, update contact preferences, manage cookie consent and submit formal requests for data export or deletion directly.

Common Legal Questions From Account Holders

These are the questions we hear most often from people reviewing our legal policies. Each answer gives you the practical detail without legal jargon, so you know exactly where you stand.

We collect your name, email, phone number and payment method details needed to verify identity and process deposits or withdrawals through bKash, Nagad or Rocket. We do not request documents beyond what account verification requires.

Yes. Submit a deletion request through live chat or email support. We will remove personal data from active systems after confirming your identity, subject to any regulatory retention period that applies to transaction records in your region.

Cookies handle session login, fraud detection and anonymised traffic analytics. You can manage preferences from the cookie banner or your account privacy settings. Disabling non-essential cookies does not affect core account functionality like deposits or withdrawals.

Payment credentials are tokenised during processing. We do not store your full bKash PIN, Nagad password or Rocket credentials in our systems. Only a transaction reference is kept for dispute resolution and audit purposes.

Reach our support team through live chat or email. Policy-related queries are flagged for priority handling. You do not need to be logged in — provide your registered email so we can locate your account and respond with relevant details.

Yes. Your eligibility to use our services depends entirely on the laws and regulations in your specific region. If local legislation restricts access, we may limit or suspend certain features for affected areas without prior individual notice.

We notify active account holders through their registered email before any policy update takes effect. A summary of what changed accompanies the notice, and the full updated document is available on this page immediately.

Absolutely. Request a data export through email support or the dedicated section in your account settings. We compile and deliver the export in a standard readable format within the timeframe stated in our acknowledgment message.

Personal data is queued for deletion once your account closes. Transaction records may be retained for the minimum regulatory period required in your jurisdiction. After that window, remaining data is anonymised or permanently removed.

We do not sell your data. Third-party access is limited to payment processors like bKash, Nagad and Rocket for transaction completion, and to service providers who maintain infrastructure under strict data-processing agreements with us.