skwin Privacy Policy

skwin collects personal data from players at various stages of the account lifecycle, including registration, KYC verification, deposits and withdrawals, gameplay, and customer support interactions. The following table sets out the categories of personal data we collect and the primary source of each:

skwin does not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has submitted personal data to the platform, we will delete that data promptly and close the associated account. We do not collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data, except where a government-issued identity document voluntarily submitted during KYC happens to contain such information.

skwin processes your personal data only for lawful, specified, and legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following sets out the primary purposes for which we use each category of personal data and the lawful basis for that processing:

• Account Creation and Management: We use your Identity Data and Contact Data to open and maintain your skwin account, authenticate your login sessions, and communicate essential account information such as transaction confirmations and security alerts. The lawful basis is contractual necessity.
• Identity and Age Verification (KYC): We use your Verification Data and Identity Data to confirm that you are aged 18 or above and that the account holder is the same individual submitting withdrawal requests. The lawful basis is legal obligation and contractual necessity.
• Payment Processing: We use your Financial Data to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported bank transfers. The lawful basis is contractual necessity.
• Fraud Prevention and Security: We use Technical Data and Usage Data to detect unusual account activity, identify potential fraud, and enforce our one-account-per-player policy. The lawful basis is legitimate interest in protecting the integrity of the platform and the financial safety of all players.
• Responsible Gaming Compliance: We use Usage Data to monitor player behaviour for indicators of problem gambling, such as significantly increased bet sizes, extended session durations, or repeated self-exclusion requests. The lawful basis is legal obligation and legitimate interest.
• Platform Improvement and Analytics: We use Usage Data and Technical Data in aggregated, anonymised form to analyse platform performance, identify popular games, optimise user experience, and plan new features. The lawful basis is legitimate interest.
• Marketing Communications: Where you have provided explicit consent, we may use your Contact Data and Usage Data to send you personalised promotional offers, bonus notifications, and seasonal promotions relevant to the Bangladesh market. You may withdraw consent at any time. The lawful basis is consent.
• Legal and Regulatory Compliance: We may use any category of personal data as necessary to comply with applicable law, respond to lawful requests from regulatory or law-enforcement authorities, and fulfil our anti-money-laundering record-keeping obligations. The lawful basis is legal obligation.

skwin does not sell, rent, or otherwise make your personal data available to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose:

• Payment Service Providers: We share Financial Data with payment processors including bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard) solely for the purpose of completing your deposit or withdrawal transactions. These providers are contractually bound to process your data only on our instructions.
• Identity Verification Partners: We may engage third-party KYC and identity verification providers to assist in validating National Identity Card details and cross-referencing against publicly available databases. All such providers operate under strict data processing agreements.
• Game Software Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited technical data (such as session tokens and anonymised player identifiers) to enable game functionality and calculate outcomes. These providers do not receive your name, contact details, or financial data.
• Analytics and Platform Technology Providers: We use third-party software tools for platform analytics, performance monitoring, and customer support functionality. These providers receive only the minimum data necessary and are prohibited from using it for any purpose beyond providing their services to skwin.
• Legal and Regulatory Authorities: skwin may disclose personal data to law-enforcement agencies, financial regulators, or courts where required to do so by applicable law, a valid court order, or a lawful regulatory request. We will notify affected players of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the skwin business, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and their rights in relation to it prior to the transfer taking effect.

skwin uses cookies and similar tracking technologies (including web beacons and local storage) to operate the platform, remember your preferences, maintain your login session, and analyse how players use the site. The following describes the types of cookies used and their purpose:

Most web browsers allow you to control cookies through their settings. You may block or delete cookies at any time; however, disabling strictly necessary cookies will prevent you from accessing your skwin account and using the platform. Instructions for managing cookies are available in the help documentation of your browser. skwin does not use cookies to track your activity across third-party websites unrelated to the platform.

skwin retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Identity Data, Contact Data, and Financial Data associated with an active account are retained for the lifetime of the account and for a minimum of five (5) years following permanent account closure, in compliance with anti-money-laundering record-keeping requirements.
• Transaction Records: Individual deposit and withdrawal transaction records, including timestamps, amounts, and payment method references, are retained for a minimum of five (5) years from the date of each transaction.
• KYC Verification Documents: Identity documents submitted during KYC verification are retained for five (5) years following account closure or the date of the last transaction, whichever is later.
• Customer Support Communications: Live chat transcripts and email support correspondence are retained for two (2) years from the date of the interaction, to enable continuity of support and assist in dispute resolution.
• Marketing Consent Records: Records of marketing consent (including the date and method of consent, and any subsequent withdrawals of consent) are retained for five (5) years to demonstrate compliance with applicable data protection rules.
• Anonymised Analytics Data: Aggregated, anonymised usage data that cannot be linked to any individual player may be retained indefinitely for platform improvement and business analysis purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised. Players may request early deletion of their personal data (subject to any overriding legal obligations) by contacting our support team at support@skwin.ws. We will process all deletion requests within 30 calendar days and confirm the outcome in writing.

All registered players have the following rights with respect to their personal data held by skwin. To exercise any of these rights, submit a written request to support@skwin.ws. We will acknowledge your request within five (5) business days and provide a full response within 30 calendar days.

skwin implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the skwin platform is encrypted using TLS 1.2 or higher with 256-bit AES encryption. Our SSL certificate is kept current and is verifiable via your browser's security indicator.
• At-Rest Encryption: Sensitive personal data — including KYC documents, financial records, and hashed account credentials — is encrypted at rest using industry-standard algorithms. Plain-text passwords are never stored.
• Access Controls: Internal access to player personal data is granted only to authorised personnel who require it for legitimate operational purposes. Access is managed through role-based permission systems and all access events are logged.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their skwin accounts to add an additional layer of protection against unauthorised login attempts.
• Penetration Testing and Vulnerability Scanning: skwin conducts regular security assessments, including third-party penetration testing, to identify and remediate potential vulnerabilities in the platform infrastructure.
• Incident Response: In the event of a data breach that poses a risk to players' rights and freedoms, skwin will notify affected players without undue delay, providing details of the nature of the breach, the data affected, and the steps taken to mitigate harm.

Despite our best efforts, no online system is entirely immune to security risks. Players are advised to use a strong, unique password for their skwin account, to never share account credentials with third parties, and to log out of their session when using shared devices. If you suspect unauthorised access to your account, contact our support team immediately at support@skwin.ws.

skwin reviews this Privacy Policy periodically to ensure it remains accurate, current, and consistent with applicable data protection standards and any changes to our data processing practices. We will notify registered players of material changes to this Privacy Policy via email or an in-platform notification at least seven (7) days before the changes take effect.

The current effective version of this Privacy Policy is always accessible at https://skwin.ws/privacy-policy. The effective date displayed at the top of this document reflects when the current version came into force. Continued use of the skwin platform after a revised Privacy Policy has taken effect constitutes acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way skwin processes your personal data, please contact our Data Protection team at:

• Email: support@skwin.ws (plain text — not a clickable link)
• Response Time: We aim to acknowledge all privacy-related enquiries within five (5) business days and provide a full substantive response within 30 calendar days.
• Language: Correspondence may be conducted in English. All formal written responses from skwin will be in English.

This Privacy Policy was last reviewed and updated on 1 January 2026. Players who have specific concerns about the handling of their personal data are encouraged to contact us before submitting a formal complaint, as many concerns can be resolved quickly and informally through our support team.