Data Protection & Privacy
Your privacy is a fundamental priority at gitawin. This Privacy Policy explains what personal data we collect when you use our platform, how we use and protect that data, who we share it with, and what rights you have as a data subject. We are committed to handling your information with transparency and care.
Our Commitment
We believe you deserve to know exactly how your personal data is handled. These six principles guide every data processing decision gitawin makes.
gitawin does not collect data in the shadows. Every category of data we collect, every purpose we use it for, and every party we share it with is documented plainly in this Privacy Policy. We do not use your data for undisclosed purposes.
We collect only the personal information that is genuinely necessary to operate your gitawin account, process payments, verify your identity, and comply with our legal obligations. We do not collect data simply because it might be useful one day.
All data held by gitawin is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to personal data within our organisation is restricted on a strict need-to-know basis with role-based access controls enforced throughout.
You have the right to access, correct, export, and delete the personal data gitawin holds about you. We provide clear mechanisms to exercise these rights and commit to responding to verified data requests within 30 days of receipt.
gitawin does not retain your personal data indefinitely. We apply defined retention periods to each category of data based on operational necessity and legal requirements. When data is no longer needed, it is securely deleted or anonymised.
gitawin does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used solely to operate the gitawin platform and fulfil our legal and regulatory obligations.
This Privacy Policy applies to all personal data processed by gitawin ("we", "us", "our") in connection with the operation of the gitawin online casino and sports betting platform accessible at gitawin.com. gitawin acts as the data controller for all personal information collected directly from players and visitors to our platform.
This policy covers data collected through the gitawin website, any mobile-optimised version of the platform, and all direct communications between you and our support team, including email, live chat, and support ticket systems. It does not extend to third-party websites or services that may be linked from or integrated into the gitawin platform — those parties operate under their own privacy policies.
By registering an account on gitawin or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy. If you are under 18 years of age, you are not permitted to use the gitawin platform and you must not submit any personal data to us.
gitawin collects personal data through a number of channels. The categories of information we may collect about you are described below.
When you create a gitawin account, we collect the information you provide during the registration process, including:
To comply with our Know Your Customer obligations and to prevent underage gambling and financial crime, gitawin may collect the following verification documents:
We record all financial transactions associated with your account, including deposit amounts and timestamps, withdrawal requests and statuses, payment method identifiers (e.g., the last four digits of a card, or a partial mobile wallet number), bonus credits and their usage, and your running account balance history. We do not store full payment card numbers on our servers — card processing is handled by PCI-DSS compliant third-party payment processors.
gitawin records all gaming and betting activity associated with your account, including game sessions played, bet amounts and outcomes, sports betting market selections, tournament participation, and responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests). This data is used to operate your account, resolve disputes, and identify patterns consistent with problem gambling.
When you access the gitawin platform, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), session timestamps, pages visited, and referring URL. This data is collected to ensure platform security, detect fraud, and improve the technical performance of the platform.
Any communications you send to gitawin through our support channels — including the content of support tickets, live chat transcripts, and emails sent to [email protected] — are stored and associated with your account. This data is used to resolve your enquiry, train support staff, and maintain a record of dispute interactions.
gitawin uses your personal data only for the purposes described below. We do not use your data in ways that are incompatible with these stated purposes without first providing notice and, where required, obtaining your consent.
| Purpose | Categories of Data Used |
|---|---|
| Account creation and management | Registration data, identity data, contact data |
| Identity verification and fraud prevention | KYC documents, transaction data, technical data |
| Payment processing (deposits and withdrawals) | Financial data, identity data, contact data |
| Delivering gaming and betting services | Gameplay data, account data, technical data |
| Customer support and dispute resolution | Communications data, account data, transaction data |
| Responsible gaming monitoring | Gameplay data, transaction data, responsible gaming tool settings |
| Legal compliance and regulatory reporting | Identity data, transaction data, KYC documents |
| Platform security and fraud detection | Technical data, transaction data, login activity |
| Service improvement and analytics | Technical data, gameplay data (aggregated and anonymised) |
| Marketing communications (where consented) | Contact data, gameplay preferences |
Where gitawin uses your data for marketing communications — such as sending promotional emails about bonuses, seasonal offers tied to events like the BPL or Eid, or new game launches — we will only do so if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw this consent at any time by updating your notification preferences or by contacting [email protected].
gitawin processes your personal data on the following legal grounds depending on the specific processing activity involved:
gitawin does not sell or trade your personal data. We share your data only with the categories of third parties described below, and only to the extent necessary for the stated purpose.
To process your deposits and withdrawals, gitawin shares necessary financial and identity data with our payment processing partners. These include mobile wallet operators (bKash, Nagad, Rocket, Upay), card payment processors (for Visa and Mastercard transactions), and partner banks (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank). These processors are contractually required to handle your data only for payment processing purposes and may not use it for their own marketing or analytics.
gitawin uses third-party identity verification and KYC service providers to assist in verifying your identity documents and confirming your age and address. These providers process your identity data on our behalf under strict data processing agreements and may not retain or use your data beyond the scope of the verification service.
Our platform integrates games from studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game from one of these studios, technical session data (including your player session ID) is shared with the relevant studio to facilitate gameplay. These studios operate under their own privacy standards, which typically meet industry certification requirements. No directly identifiable personal data (such as your full name or national ID) is shared with game studios.
gitawin may be required to disclose personal data to law enforcement authorities, regulatory bodies, or courts of competent jurisdiction where we receive a lawful request or are legally compelled to do so. In such cases, gitawin will disclose the minimum data necessary to comply with the lawful request and will, where permitted, notify the affected account holder.
In the event that gitawin undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.
gitawin uses cookies and similar tracking technologies on its platform to ensure the site functions correctly, to maintain your session, and to improve the user experience. The following categories of cookies are used:
gitawin does not use third-party advertising cookies or cookies that track your behaviour across other websites for retargeting purposes. Our cookies are limited to the operational and analytics purposes described above.
Most web browsers allow you to manage cookie preferences through the browser settings menu. Note that disabling strictly necessary cookies may prevent you from accessing your gitawin account or using certain platform features.
gitawin retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data we hold:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & registration data | Duration of account + 5 years after closure | Legal and regulatory obligation |
| KYC / identity documents | 5 years from date of verification | Anti-money laundering compliance |
| Transaction records | 7 years from transaction date | Financial record-keeping requirement |
| Gameplay & betting history | 3 years from last activity | Dispute resolution and responsible gaming |
| Support communications | 3 years from ticket closure | Dispute resolution reference |
| Technical / device logs | 13 months from collection | Security monitoring and fraud detection |
| Marketing preferences | Until consent is withdrawn | Consent-based processing |
Once the applicable retention period expires, gitawin will securely delete or irreversibly anonymise the relevant personal data. Anonymised, aggregated data that cannot be used to identify any individual player may be retained indefinitely for statistical and platform improvement purposes.
As a gitawin player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 days.
You may request a copy of all personal data gitawin holds about you, along with information about how it is being used and with whom it has been shared.
If any personal data gitawin holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly through your account settings.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Certain data must be retained by law and cannot be erased on request.
You may request that we restrict processing of your personal data in certain circumstances — for example, while a dispute regarding data accuracy is being resolved or while you are considering whether to exercise your right to object.
Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
You have the right to object to processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interests where your individual circumstances warrant it.
gitawin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
While gitawin takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for notifying us promptly if you believe your account has been compromised.
The gitawin platform is strictly restricted to individuals aged 18 years and above. We do not knowingly collect, store, or process personal data from persons under the age of 18. If you are a parent or guardian and believe that a minor in your care has submitted personal information to gitawin, please contact us immediately at [email protected].
Upon receiving such a notification, gitawin will promptly investigate the matter, suspend the account in question, and delete all personal data associated with that account in accordance with our data retention policy. We take the protection of minors' privacy with the utmost seriousness.
gitawin recommends that parents and guardians install parental control software on shared devices to prevent minors from accessing online gambling platforms. A number of free and commercial parental control solutions are available that can block access to gambling-related websites.
gitawin may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform services. When we make changes to this policy, the revised version will be published on this page with an updated effective date at the top of the document.
For material changes — those that significantly affect how we collect, use, or share your personal data — gitawin will provide advance notification to registered account holders via email at least 14 days before the changes take effect. This notice will summarise the key changes in plain language and provide a link to the full revised policy.
Your continued use of the gitawin platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised policy, you should discontinue use of the platform and request account closure before the revised policy takes effect.
We recommend bookmarking this page and reviewing it periodically. The effective date displayed in the hero section and at the top of this document indicates when the current version was last updated.
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have concerns about how gitawin handles your personal data, please contact us using the details below. All privacy-related communications should be directed to our support team, clearly marked as a privacy enquiry or data rights request.
To protect your privacy and prevent unauthorised access to your data, gitawin will verify your identity before actioning any data rights request. You will be asked to confirm your registered account details and may be required to provide a copy of your identity document if your account has not previously been fully verified.
This Privacy Policy was last reviewed and updated with an effective date of 1 January 2026. All previous versions of the gitawin Privacy Policy are superseded by this document.
Our support team is here to help with any privacy-related questions or data requests. You can also explore our full legal documentation, visit our FAQ for quick answers, or head straight to the gitawin casino floor.