wibid Privacy Policy
— How We Protect
Your Personal Data

wibid collects personal data from players in Bangladesh through several channels: directly via the registration and verification process, automatically through your use of the platform, and occasionally from third-party sources such as payment processors and identity verification providers. Below is a clear breakdown of the categories of personal data we collect and the specific data points within each category.

Registration & Identity Data

When you create a wibid account, we collect the following information:

• Full legal name as it appears on your government-issued ID
• Date of birth — to verify that you meet the 18+ age requirement
• Residential address in Bangladesh, including district and division
• Email address — used for account communications and security alerts
• Mobile phone number — used for OTP verification and, if opted in, SMS notifications
• Government-issued identity document (National ID Card, passport, or driving licence) — collected as part of our KYC (Know Your Customer) process

Financial & Transaction Data

To process deposits and withdrawals in BDT, wibid collects:

• Mobile Financial Service (MFS) account identifiers for bKash, Nagad, Rocket, and Upay transactions
• Bank account details where bank transfer methods are used
• Transaction history, including deposit amounts, withdrawal requests, bet placements, and game outcomes
• Proof of payment method ownership documents where required by our compliance team

Technical & Usage Data

When you access the wibid platform, our systems automatically record:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation patterns
• Game session data including bet values, game titles, session duration, and outcomes
• Login timestamps and session activity logs

wibid processes personal data only where there is a lawful basis for doing so. The primary legal bases we rely on are: contractual necessity (to deliver the services you have signed up for), legal obligation (to comply with AML, KYC, and other applicable regulations), legitimate interests (to operate a safe, secure, and fair platform), and consent (for optional marketing communications).

Purpose	Data Used	Legal Basis
Account creation and management	Registration & identity data	Contractual necessity
Identity verification (KYC)	ID documents, date of birth, name	Legal obligation
Processing deposits and withdrawals	Financial & transaction data	Contractual necessity
Fraud detection and prevention	Technical data, transaction data	Legitimate interests
Anti-money laundering monitoring	Transaction history, identity data	Legal obligation
Customer support communications	Contact details, account data	Contractual necessity
Platform performance analytics	Technical & usage data (anonymised)	Legitimate interests
Marketing communications (opt-in only)	Email address, mobile number	Consent
Responsible gaming monitoring	Game session data, deposit patterns	Legal obligation & legitimate interests

wibid does not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on players without human review. Where automated systems flag an account for potential fraud or AML concerns, a qualified member of the wibid compliance team reviews the case before any account action is taken.

wibid uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform efficiently and securely. Cookies are small text files stored on your device that help us recognise your browser, maintain your logged-in session, and understand how the platform is being used in aggregate.

Categories of Cookies We Use

• Strictly Necessary Cookies: These are essential for the wibid platform to function. They maintain your login session, store your language and currency preferences, and prevent cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: We use anonymised analytics cookies to understand which pages are most visited, how long players spend on each section, and where technical errors occur. This data is aggregated and cannot be used to identify individual players. No third-party advertising analytics tools are deployed.
• Functional Cookies: These remember your in-platform preferences such as game display settings, notification preferences, and responsible gaming limits you have set in your account.
• Security Cookies: Short-lived cookies used to detect and prevent suspicious login activity, including brute-force attempts and credential stuffing. These are strictly necessary for platform security.

wibid does not deploy third-party advertising cookies, cross-site tracking pixels, social media retargeting scripts, or any other cookies that track your activity outside of the wibid platform. You may adjust your browser settings to block or delete cookies at any time; however, disabling strictly necessary cookies will impair or prevent your ability to use the wibid platform.

wibid shares personal data with third parties only where strictly necessary to operate the platform, fulfil legal obligations, or where you have provided explicit consent. We do not sell player data. Below are the categories of third parties with whom we may share your information and the reason for each disclosure.

Payment Processing Partners

To process your deposits and withdrawals in BDT, wibid shares relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and international card networks Visa and Mastercard. Each of these providers is bound by their own data protection obligations and receives only the minimum data necessary to process your transaction.

Identity Verification Providers

To meet our KYC obligations, wibid may use third-party identity verification services to cross-reference the documents you submit against official databases. These providers operate under strict contractual data processing agreements with wibid and are prohibited from using your data for any purpose other than identity verification on wibid's behalf.

Game Content Providers

Games on the wibid platform are provided by independent studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive anonymised session data (game identifier, bet value, outcome) necessary to deliver game content and calculate outcomes. They do not receive your name, contact details, or payment information.

Legal & Regulatory Disclosure

wibid may disclose personal data to law enforcement bodies, regulatory authorities, or courts in Bangladesh or other relevant jurisdictions where required to do so by a legally binding order or where we determine in good faith that disclosure is necessary to prevent fraud, money laundering, or serious harm. Where permitted by law, we will notify you of such a disclosure request before complying with it.

wibid retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply as standard:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	AML legal obligation
KYC identity documents	Duration of account + 5 years after closure	Regulatory compliance
Transaction history	7 years from transaction date	Financial record-keeping
Game session logs	3 years from session date	Dispute resolution & fair play
Technical & usage data	13 months (anonymised analytics)	Platform improvement
Support correspondence	3 years from last contact	Dispute resolution
Marketing consent records	Until consent is withdrawn + 1 year	Evidence of consent basis

Security Measures

wibid applies the following technical and organisational security measures to protect your personal data:

• All data in transit is encrypted using TLS 1.2 or higher (256-bit SSL).
• Sensitive data at rest (including identity documents and financial records) is encrypted using AES-256 encryption.
• Access to personal data is restricted on a strict need-to-know basis. Employees and contractors can only access the data categories necessary for their specific role.
• All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• wibid conducts periodic security audits and penetration tests to identify and address vulnerabilities in the platform infrastructure.
• In the event of a data breach that is likely to result in a risk to your rights, wibid will notify affected players as promptly as possible and take immediate remediation steps.

As a wibid player, you hold meaningful rights over the personal data we hold about you. wibid is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the following rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and a description of your request. We will respond within 30 days of receipt.

• Right of Access: You may request a copy of all personal data that wibid holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain information directly from your wibid account settings.
• Right to Erasure: In certain circumstances — where data is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other lawful basis — you may request deletion of your personal data. Note that wibid may be required by law to retain certain data (such as KYC and transaction records) even after account closure, in which case deletion of that specific data will not be possible until the legally mandated retention period has elapsed.
• Right to Restrict Processing: You may request that wibid limits the processing of your personal data while a dispute or correction request is being resolved.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format (CSV or JSON) for transfer to another service provider where technically feasible.
• Right to Object: Where processing is based on legitimate interests, you may object to that processing. wibid will cease processing unless there are compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of marketing consent can be done via your account preferences or by emailing [email protected].

The wibid platform is strictly intended for adults aged 18 and above. wibid does not knowingly collect, store, or process personal data from any individual under the age of 18. Our registration process includes mandatory age declaration and, as part of KYC verification, date-of-birth confirmation against a valid government-issued identity document.

If wibid becomes aware — through its own verification processes or a report from a third party — that personal data belonging to an individual under 18 has been collected, we will:

• Immediately suspend the associated account to prevent further activity.
• Delete all personal data associated with the underage individual as promptly as technically possible, subject only to any legal obligations that require temporary retention for fraud investigation purposes.
• Refund any deposits made to the account to the original payment method after identity of the account holder is confirmed through our compliance process.
• Permanently bar re-registration from the same device, IP address, and payment methods associated with the account.

Parents and guardians who believe their child may have accessed or registered on the wibid platform should contact us immediately at [email protected]. We take all such reports seriously and will investigate and respond within 24 hours. We also strongly recommend the use of parental control and internet filtering software to prevent minors from accessing online gaming platforms. 18+ Only

wibid reviews this Privacy Policy on a regular basis — at minimum annually — and will update it as necessary to reflect changes in our data practices, the services we offer, or applicable legal requirements. The effective date at the top of this page will always reflect the date of the most recent revision.

Where changes to this Privacy Policy are material — meaning they significantly affect how we collect, use, or share your personal data — wibid will notify registered players via email to their registered address and display a prominent notice on the platform for at least 14 days prior to the changes taking effect. Continued use of the wibid platform after the stated effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data wibid holds about you, please contact our data protection team using the details below. We aim to acknowledge all privacy enquiries within 3 business days and to fully resolve them within 30 days.

If you are dissatisfied with how wibid has handled a privacy concern after raising it with our support team directly, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction.