Garamwin Privacy Policy — How Your Data Is Kept Secure

This Privacy Policy applies to all services provided through garamwin.xyz (hereinafter referred to as "garamwin") and its mobile app. It takes effect from the moment you create an account, log in, play a game, or use any of our services.

Garamwin believes privacy is a fundamental right. We want you to use our platform with complete confidence — knowing that your data is secure and will never be used for any unethical purpose. This policy is inspired by international GDPR standards and has been prepared in accordance with applicable data protection regulations in Bangladesh.

Garamwin collects different types of information depending on the situation. See the table below for full details:

Garamwin never stores your full bank card number, password, or OTP — and no staff member has access to this information either. Any request for such details is fraudulent. If anyone asks for this information using garamwin's name, report it to support immediately.

Garamwin collects information only for specific, legitimate purposes. There is a clear reason behind every piece of data collected:

• Account Management: To verify your identity, keep your login secure, and provide full access to all account features.
• Payment processing: To ensure deposits are credited correctly and withdrawals are sent to the right account.
• Ensuring security: To detect and prevent fraudulent logins, money laundering, and other unlawful activity.
• Service improvement: To understand which games or features are most used and improve the platform accordingly.
• Legal obligations: To respond to lawful requests from licensing authorities and law enforcement agencies.
• Responsible Gaming: To identify problematic gaming patterns and provide timely support.
• Contact: To keep you informed about important updates, security alerts, and relevant offers.

Garamwin will not use your data for any purpose outside of those listed above. If your data ever needs to be used for a new purpose, your consent will be obtained first.

Garamwin follows the highest industry standards for data protection. Our security framework is outlined below:

• All data is stored in ISO 27001-certified data centres.
• Passwords stored in the database are encrypted using bcrypt hashing — no staff member can ever view anyone's password.
• All data transmissions are encrypted using TLS 1.3 protocol.
• Two-factor authentication (2FA) is mandatory for all database server access.
• Regular penetration testing and vulnerability assessments are conducted.
• Data backups are taken daily and stored at separate locations.
• Garamwin staff can only access the information they need to perform their specific role.

Regarding data retention: all information is kept for as long as your account remains active. Once an account is closed, financial transaction records may be retained for up to five years due to legal obligations. Personally identifying information will be deleted upon request, unless retention is required by law.

Garamwin does not sell your data — this is a fundamental principle with no exceptions. However, limited data may be shared in specific situations necessary for operating the service:

• Payment providers: Only the transaction details necessary to process deposits and withdrawals are shared with providers such as bKash, Nagad, and similar services.
• Game Providers: Game providers may access limited session data to operate their games — not your personal identity.
• KYC verification services: Trusted third-party services may be used for identity verification — they use your data solely for that purpose.
• Law Enforcement Agencies: Data may be disclosed in response to a valid legal order or request from a licensing authority.

Garamwin's website and app use cookies and similar technologies. Cookies are small text files stored in your browser that help retain session information for future visits.

You can manage cookies through your browser settings. Keep in mind that disabling essential cookies may prevent you from logging in or completing transactions on garamwin.

Garamwin believes you should have full control over your own data. Your rights are outlined below:

Garamwin strictly prohibits anyone under the age of 18 from using the platform. We never knowingly collect personal data from minors.

• Age verification is mandatory at registration — providing a false age is a violation of our Terms and Conditions.
• If there is any doubt, garamwin may request additional age verification documents.
• If garamwin discovers that an account is being used by someone under 18, the account will be suspended immediately and the associated data will be deleted.
• If parents suspect their child is using garamwin, they should contact support immediately.

Garamwin may update this Privacy Policy from time to time. Changes may be prompted by legal developments, the introduction of new services, or improvements to our security practices.

• For any material changes, registered users will be notified by email at least 7 days before the changes take effect.
• The date of any change will always be shown at the top of this page as "Last Updated".
• Continued use of the platform after any changes have taken effect will be considered acceptance of the updated policy.
• If you do not agree to the changes, you will have the option to close your account.

For any questions, complaints, or requests regarding this Privacy Policy, please contact garamwin's data protection team:

• Email: support@garamwin.xyz (Please include "Privacy" in the subject line)
• Live Chat: 24/7 live chat support is available on the garamwin website and app.
• Response Time: An initial response is typically provided within 24 hours; complex matters may take up to 30 days.

Garamwin takes any privacy concerns seriously. If a complaint is received, we will investigate and communicate the outcome.