This page explains in plain English how your personal information is collected, stored, and kept secure at Winmy. We believe you should have full control over your own data.
Core Security Principles
Winmy follows several core privacy principles — these are not just words on a page, but practices applied in reality.
Every page and transaction on Winmy is protected by 256-bit SSL/TLS encryption. Your password, payment details, and personal data are never transmitted to our servers in plain text.
Your data is stored in an encrypted database. Only authorized staff can access it, for specific purposes only. Every access is logged.
Winmy never sells your personal data to third parties. There are no agreements with advertisers or data brokers.
Winmy only collects information that is genuinely necessary — to provide services, verify identity, or meet legal obligations. We do not ask for data we don't need.
You can request to view, correct, or delete your personal data at any time. You can also unsubscribe from marketing emails whenever you choose.
Winmy's data security practices are regularly audited by independent cybersecurity experts. Any vulnerabilities identified are resolved immediately.
Your Data's Journey
A simple overview of how your data flows through Winmy.
Your information is never sold or shared with third parties for free.
By creating an account or using Winmy's services, you agree to this privacy policy. It explains what information we collect, why we collect it, and how we protect it. If you have any questions, contact us at support@winmy.cash.
Winmy may collect your data in several ways: information you provide directly during registration, data generated automatically while you use the platform, and information submitted for KYC verification — these are the three types of data we collect.
Information You Provide Directly:
Automatically Collected Information:
Winmy collects information only for specific and legitimate purposes. The key purposes are outlined below:
Winmy uses your information solely for the purposes listed below. Each use is limited to a specific objective — it goes no further than that.
Winmy never shares your data with advertisers, and we do not use your gaming history to serve you targeted ads.
Winmy does not sell your data to third parties. However, limited information may be shared in specific circumstances:
In every case, the organizations with whom data is shared are held to high security standards and are bound by confidentiality agreements with Winmy.
Winmy retains your data for specific periods. Once the purpose has been fulfilled or the retention period has ended, your data is permanently deleted or anonymized so that you can no longer be identified.
Winmy uses cookies and similar technologies on its website to improve our services and personalize your experience. The types of cookies used are described below:
| Cookie Types | Purpose | Mandatory |
|---|---|---|
| Login sessions and security tokens — the site cannot function without these. | Yes | |
| To understand which pages are most visited and where issues may be occurring. | Optional | |
| To remember your language preference, theme, and settings. | Optional | |
| Winmy does not use any external advertising tracking cookies. | None |
You can disable optional cookies at any time through your browser settings. However, disabling essential cookies may prevent the site from functioning properly.
Winmy believes you have every right to control your own data. You may exercise any of the following rights at any time:
| Rights | Description | How to Exercise Your Rights |
|---|---|---|
| Right to Access | You may request to know what information Winmy holds about you. | Submit a Request by Email |
| Right to Rectification | You have the right to have incorrect information corrected. | Contact Support |
| Right to Erasure | You may request that your personal data be deleted when your account is closed. | Submit a Request by Email |
| Right to Portability | You may request a personal copy of your data to keep for your own records. | Submit a Request by Email |
| Right to object | You can unsubscribe from marketing communications at any time. | Via email or in Settings |
To exercise any of the rights above, email us at support@winmy.cash. We typically respond within 30 business days.
Winmy's services are strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18.
A note for parents — please ensure your children do not have access to your Winmy account. If you suspect any issue, contact us right away.
Winmy uses industry-standard security measures to protect your data — covering both technical and administrative safeguards.
Please note that no system on the internet is 100% secure. Winmy takes every precaution possible, but in the event of an unexpected security breach, we will notify you promptly and take all necessary steps.
Winmy may update this Privacy Policy from time to time. For significant changes, you will be notified at least 7 days in advance via your registered email or an on-site notification. You can always check the "Last Updated" date at the top of the page to see whether the policy has changed.
Detailed Explanation
Creating an account on any online platform means sharing some personal information — and that can feel uncomfortable, especially when you're not sure where it ends up. Winmy believes in being transparent about this, which is why this page lays everything out clearly.
When paying with bKash or Nagad in Bangladesh, many users wonder — can Winmy see my mobile banking details? The answer is no. Winmy never has access to your PIN, password, or OTP. Once a payment is completed, all we receive is a confirmation message — nothing more. This design is intentional, as it is the safest way to handle your financial information.
Many users are also concerned about KYC verification. Being asked for national ID information can feel uncomfortable — we understand that. But it's actually there to protect you. If someone gets hold of your mobile number and tries to create a Winmy account, withdrawals are not possible without completing KYC verification. Your funds stay safe. Winmy retains KYC documents for a maximum of 3 years, after which they are deleted.
Many platforms sell user data to third-party advertisers — and that's a serious problem. Winmy doesn't do this, because our business model doesn't depend on it. We earn revenue from gaming services, not from selling data. That distinction matters.
A quick note on cookies. Winmy does not use marketing cookies — no external ad network is tracking you. Only essential and functionality cookies are in use, helping the site run properly — for example, remembering your login session and saving your language preference.
Two-factor verification (OTP) deserves special mention, as it is the most critical layer of security at Winmy. Even if someone obtains your password, they cannot log in without the OTP sent to your phone. This is why keeping your registered mobile number secure is absolutely essential. If you lose your phone or change your number, contact support immediately.
Many users ask how long their data is kept. Winmy retains financial transaction records for 5 years due to legal obligations — this is to comply with Bangladesh Bank guidelines. However, marketing data, session logs, and KYC documents are deleted much sooner. It is Winmy's policy to actively clear data after an account is closed.
Requesting a copy of your data or asking for it to be deleted — these are rights you can actually exercise. Simply email support@winmy.cash with the subject line "Privacy Request" and Winmy will respond within 30 business days. It's a straightforward process.
Overall, Winmy's Privacy Policy has been built with everyday users in Bangladesh in mind. Every rule is explained in plain language, avoiding complex legal jargon. Winmy is committed to earning your trust — and that starts with keeping your data safe.
For any questions or requests support@winmy.cash — or use the site's live chat. Support is available 24/7. When emailing a request to delete or copy your data, use the subject line "Privacy Request".
Frequently asked questions