w2j Privacy Policy

When you create a w2j account, we collect the personal information you provide directly, including your full legal name, date of birth, country and city of residence (which may include locations such as Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and contact phone number. This information is required to establish and maintain your account and to verify that you meet the minimum age requirement of 21 years.

To comply with anti-money laundering (AML) obligations and age verification requirements, w2j may request copies of government-issued identity documents such as a National Identity Card (NID), passport, or driving licence. We may also request proof of address documents such as utility bills or bank statements. These documents are processed securely and retained only for as long as required under applicable legal obligations.

When you make deposits or withdrawals, we collect transaction data including the payment method used (for example bKash, Nagad, Rocket, Upay, Visa, or Mastercard), transaction amounts in Bangladeshi Taka (৳), and transaction timestamps. w2j does not store full payment card numbers or mobile banking PINs. Payment processing is handled through encrypted channels, and sensitive financial credentials are never held on w2j servers in unencrypted form.

When you access the w2j platform, our systems automatically record certain technical information. This includes your IP address, browser type and version, device type and operating system, referring URL, pages visited, time and duration of visits, and game activity logs. This data is used for platform security, fraud detection, service optimisation, and to personalise your gaming experience where you have consented to such personalisation.

If you contact w2j support by email or through any in-platform messaging feature, we retain records of that correspondence, including the content of your messages and our responses. This allows us to track the resolution of issues, maintain a support history, and improve the quality of our customer service. Support communications are stored securely and accessible only to authorised w2j staff.

w2j processes your personal data on the following legal bases: (a) performance of a contract — processing necessary to deliver the services you have requested; (b) legal obligation — processing required to comply with applicable laws; (c) legitimate interests — processing necessary for fraud prevention, security, and platform improvement, where those interests are not overridden by your rights; and (d) consent — processing based on your explicit opt-in, for example to receive marketing communications, which you may withdraw at any time.

Cookies are small text files stored on your device when you visit the w2j website. They allow the platform to remember your preferences, keep you logged in between sessions, and understand how you interact with the site. w2j uses both session cookies, which expire when you close your browser, and persistent cookies, which remain on your device for a set period.

• Essential cookies: Required for the platform to function correctly. They enable account authentication, session management, and security features. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to collect anonymised usage statistics that help us understand how players navigate the platform, which games are most popular, and where technical issues arise.
• Preference cookies: Store your settings and preferences, such as your language selection and notification preferences, so they persist across sessions.
• Marketing cookies: Used only where you have explicitly consented, to deliver relevant promotional content and to measure the effectiveness of marketing campaigns.

You may control or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the w2j platform, including your ability to stay logged in or access certain features. Detailed browser-specific instructions for managing cookies are available in your browser's help documentation.

w2j works with a limited number of trusted third-party service providers who process personal data on our behalf. These include payment processors (including the operators of bKash, Nagad, Rocket, Upay, Visa, and Mastercard integrations), identity verification providers, fraud prevention services, and hosting infrastructure providers. All such providers are contractually required to process personal data only in accordance with w2j's instructions and to maintain appropriate technical and organisational security measures.

w2j integrates games from third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, certain technical data — such as your session ID, game activity, and bet amounts — may be shared with the relevant studio for the purpose of delivering the game and resolving disputes. Game providers operate under their own data processing agreements and privacy policies.

w2j may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or lawful regulatory request. In such circumstances, w2j will disclose only the minimum data necessary to comply with the legal obligation and will, where legally permitted, notify the affected account holder of the disclosure.

In the event that w2j undergoes a merger, acquisition, or sale of all or a portion of its assets, personal data held by w2j may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address associated with your account, and the acquiring entity will be required to honour the privacy commitments set out in this policy or provide you with an opportunity to delete your account prior to the transfer taking effect.

w2j retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. As a general principle, account data is retained for the duration of the account relationship and for a period of five years following account closure. Transaction and financial records may be retained for longer periods where required by anti-money laundering legislation. Anonymised, aggregated analytics data that cannot be linked back to an individual may be retained indefinitely for platform improvement purposes.

Upon receiving a valid erasure request from an account holder, w2j will delete or anonymise the relevant personal data within 30 days, subject to any legal or regulatory retention obligations that require us to keep certain records for longer. Where deletion is not immediately possible due to backup retention cycles, the data will be isolated from active processing and deleted at the earliest practicable opportunity. You will receive written confirmation once deletion has been completed.

As a w2j account holder, you have the following rights in relation to the personal data we hold about you:

• Right of access: You may request a copy of the personal data w2j holds about you, including information about how it is processed and with whom it is shared.
• Right of rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected.
• Right of erasure: Subject to legal retention requirements, you may request that w2j delete your personal data.
• Right to restrict processing: You may request that w2j restrict the processing of your personal data in certain circumstances, for example while a rectification request is being investigated.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a machine-readable copy of the personal data you have provided to w2j.
• Right to withdraw consent: Where w2j processes your data on the basis of consent (for example for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing based on w2j's legitimate interests where you believe your rights and freedoms override those interests.

To exercise any of the rights listed above, please contact the w2j Data Privacy team directly at [email protected] with the subject line "Data Rights Request". Please include your full name and registered email address so we can locate your account. w2j will respond to all valid requests within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days and will notify you accordingly.

w2j employs a range of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, access controls that limit data access to authorised personnel only, regular security audits and vulnerability assessments, and intrusion detection systems that monitor for unusual access patterns.

While w2j takes its security obligations seriously, the security of your account also depends on steps you take. You must choose a strong, unique password for your w2j account and not reuse it on other platforms. You must keep your login credentials confidential and not share them with any third party. If you access w2j from a shared or public device, you must ensure you log out fully after each session. In the event you suspect unauthorised access to your account, you must notify w2j immediately at [email protected].

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, w2j will notify affected account holders without undue delay and in any case within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps w2j has taken or is taking to address the breach and mitigate its effects.

The w2j platform is strictly for adults aged 21 years and above. w2j does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If w2j becomes aware that an account has been registered by or on behalf of a person under 21, that account will be immediately closed, all associated data will be deleted except where retention is required by law, and any funds in the account will be voided. If you believe a minor has registered on the w2j platform, please notify us immediately at [email protected].

w2j reserves the right to update this Privacy Policy at any time. When we make material changes that affect how we collect or use your personal data, we will publish the updated policy on this page with a revised effective date and, where practically possible, notify you by email. We encourage you to review this page periodically to stay informed about how w2j protects your information. Your continued use of the platform after any update constitutes your acceptance of the revised policy.