Grapwin's Privacy Policy — Your data, our responsibility

Grapwin (https://grapwin.org) is an online gaming and entertainment platform built for users in Bangladesh. We believe every user should have full control over their own personal data.

This privacy policy provides a full account of how your data is collected, used, and kept secure on the Grapwin platform. It applies to Grapwin's website, mobile app, and all related services.

By registering on Grapwin or using our services, you are considered to have accepted this privacy policy. Please read it carefully.

Grapwin's privacy policy is built in accordance with international data protection standards. Our goal is to provide every Grapwin member with a secure and transparent gaming environment. Your trust is our greatest asset.

Grapwin collects only the information necessary to operate the platform and provide you with better service. Full details are outlined below.

Information collected at registration

• Full name and date of birth
• Mobile number (linked to bKash/Nagad/Rocket)
• Email address (optional)
• Username and password (stored in encrypted form)

Information collected during KYC verification

• Copy of National ID Card or passport
• Selfie or photo (for identity verification)
• Proof of address (if required)

Automatically Collected Information

• IP address and device type
• Browser information and operating system
• Platform activity logs
• Game session times and outcomes

Grapwin uses your data solely for specific, legitimate purposes. Your information will never be used for unauthorized purposes.

Primary purpose of use

• Account management: For registration, login, and profile updates.
• Payment Processing: To process deposits and withdrawals securely.
• Customer Support: To resolve your complaints and inquiries.
• Security assurance: To prevent fraud and unauthorized access.
• Legal obligations: To comply with applicable laws and regulations.

Used for service improvement

By analyzing user behavior, Grapwin continuously improves the gaming experience, payment processes, and customer support on the platform. This analysis is conducted in a fully anonymized manner.

Promotional communications

If you give consent at registration or at a later time, Grapwin may send you SMS or notifications about bonus offers, promotions, and updates. You can opt out of these communications at any time.

Grapwin shares your information only in limited circumstances and exclusively with trusted parties. Your data is never sold for commercial purposes.

Data sharing circumstances

• Payment Operators: Necessary information is shared with bKash, Nagad, and Rocket for payment verification.
• Legal authorities: When required to comply with a court order or legal investigation.
• Fraud Prevention: To verify multiple accounts or investigate suspicious activity.
• Technology Partners: Technology providers that support platform operations, who are bound to uphold our privacy standards.

For international data transfers, Grapwin complies with international data protection regulations and ensures appropriate safeguards are in place.

Grapwin uses cookies on its website and app. Cookies are small text files stored on your device that help enhance your browsing experience.

Types of Cookies We Use

• Essential cookies: To maintain login sessions and ensure platform security. Without these, the platform will not function properly.
• Functional cookies: To remember your preferences, such as language and game settings.
• Analytics cookies: To understand which parts of the platform are used most. All data is anonymized.

Cookie controls

You can disable cookies from your browser settings. However, disabling essential cookies may cause some Grapwin services to function incorrectly. Refer to your browser's help section for more details.

Grapwin protects your data using industry-leading security measures. Our security infrastructure is continuously updated and tested.

• Encryption: All data transmissions are secured with SHA-256 encryption.
• Firewall: A multi-layer firewall system blocks unauthorized access.
• 2-Factor Authentication: An additional layer of security for account login.
• Regular Audits: Regular security audits conducted by third-party security experts.
• Data Backup: Regular encrypted backups stored on secure servers.

You also play a role in keeping your account secure. Use a strong password, never share it with anyone, and contact Grapwin support immediately if you notice any suspicious activity.

Grapwin retains your data only for as long as necessary or required by law.

Once the retention period expires, your information is securely deleted or anonymized. Some data may need to be retained longer due to legal obligations.

Every Grapwin member has fundamental rights regarding their personal data. We fully respect and uphold all of these rights.

Grapwin provides services exclusively to users aged 18 and above. Creating an account or using the platform is strictly prohibited for anyone under 18.

Age is verified at registration, and date of birth is re-confirmed during the KYC process. If an account holder is found to be a minor, their account will be immediately closed and all associated data will be deleted.

If you have any questions, concerns, or requests regarding this privacy policy or your personal data, please contact the Grapwin data protection team.

If this privacy policy is updated, the revision date will be noted on this page. For significant changes, you will be notified via SMS to your registered mobile number or through an in-app notification.