Reference

How winboss Handles Your Privacy

We collect only what we need to run your account and process your payments through bKash, Nagad or Rocket. This page explains what data we hold, why we hold it, and what you can do about it.

Data CollectionPayment PrivacyAccount ControlCookie PracticesYour Rights
winboss How winboss Handles Your Privacy
DATA HANDLING PRACTICES

How We Protect and Manage What You Share

We operate with a straightforward principle: hold only what is necessary, protect it properly, and give you control where we can. Below are the specific practices we follow when handling your account and transaction data across our platform.

Encryption in Transit

All data moving between your device and our servers travels through encrypted connections. This covers login credentials, payment confirmations from bKash, Nagad or Rocket, and any personal details you submit through forms or chat.

Cookie Usage

We use cookies to keep you logged in across sessions and to remember your device for faster access next time. You can clear cookies from your browser settings at any time, though this means you will need to log in again on that device.

Account Security Layers

Your account is protected by your password plus OTP verification sent to your registered phone number. If someone tries to access your account from an unrecognised device, the OTP step blocks them before they reach your wallet or personal details.

Data Retention Rules

Active account data stays as long as your account is open. Transaction records linked to bKash, Nagad or Rocket payments are retained per applicable regulation in your jurisdiction. Once you close an account, personal identifiers are anonymised.

Third-Party Sharing Limits

We share data only with payment processors to complete your deposits and withdrawals, and with legal authorities if required by law. We do not pass your information to advertisers, data brokers or any entity looking to market unrelated products to you.

How to Request Changes

You can update basic details like email and phone number directly in account settings. For data deletion, a full export of your stored information, or corrections to transaction records, contact support via live chat or email with your account ID.

PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you have questions about your personal information, want to request a copy of your data, or need something corrected or removed, we have direct channels open for you. Our support team handles privacy-related requests with priority routing so your query goes to the right people without bouncing between departments.

Team online

Live Chat

Open the chat widget from any page on mobile or desktop. Tell the agent your request is about personal data and they will route it to the privacy queue. Available around the clock, responses typically come within the same session.

Email Request

Send a message to our support address with the subject line containing your account ID and the word privacy. We respond to data requests within a few working days. Include the specific information you want accessed or changed.

Account Settings

Log into your account and head to the profile section. You can update your phone number, email and marketing preferences directly. For deletion requests or full data exports, use live chat or email instead.

Common Questions About Your Data and Privacy

These are the questions we get asked most often about how personal information, payment data and account details are handled on our platform. If your question is not answered here, reach out through live chat or email.

We collect your name, phone number, email address and the payment method identifiers you use — such as your bKash, Nagad or Rocket account number. We also record device type and IP address for security purposes. Nothing beyond what is needed to run your account.

No. We do not sell, rent or pass your personal information to advertisers or data brokers. The only third parties who receive any of your data are payment processors handling your bKash, Nagad or Rocket transactions, and legal authorities where law requires disclosure.

Payment data travels through encrypted channels between your device and our servers. Your bKash, Nagad or Rocket account details are stored separately from your profile information in segmented databases. Access to payment records is restricted to authorised systems only.

Yes. Contact our support team via live chat or email with your account ID and request a data export. We compile everything linked to your account — profile details, transaction history, login records — and send it to your registered email within a few working days.

Reach out to support through live chat or email and request account closure and data deletion. Once processed, personal identifiers are anonymised. Some transaction records may be retained if local regulations in your jurisdiction require it, but they will no longer link to your identity.

We use session cookies to keep you logged in and device-recognition cookies for faster returning access. You can clear or block cookies through your browser settings at any time. Clearing them means you will need to log in again and complete OTP verification on that device.

Transaction records tied to bKash, Nagad or Rocket payments are retained as long as applicable regulation in your region requires. While your account is active, all records remain accessible to you in your transaction history section. After closure, they are anonymised.

Access to personal data is restricted by role. Support agents see only what is needed to resolve your query. Payment processing systems access transaction data in isolation from profile details. No single employee has unrestricted access to your full data set.

Yes. The policy covers all data collected regardless of which device you use — mobile browser, desktop, or app. Your account data, payment details and browsing behaviour are handled under the same rules whether you switch between devices or stick to one.

Our services and data handling depend on local law and eligible regions. The core protections — encryption, segmented storage, no third-party marketing sharing — apply universally. Retention periods and disclosure obligations may vary based on the regulations applicable in your jurisdiction.