Winfast Privacy Policy — Your information is safest with us

Winfast only collects data that is truly necessary — nothing more. We gather three main types of information: what you provide directly, what is recorded automatically when you use the app, and data received from third-party verification services.

Information you provide directly:

• Name, mobile number, and date of birth (collected at registration)
• Copy of national ID or passport (for KYC verification)
• Payment method details (bKash/Nagad/Rocket number)
• Messages or complaint details submitted when contacting us

Automatically Recorded Data:

• IP address & device type
• How and when you use the app
• Betting history & transaction records
• Time spent on each page of the app

Winfast never collects data without a reason. Every piece of information we gather serves a specific purpose — and it's our responsibility to be transparent about what those purposes are.

• Identity Verification: To prevent fraud and ensure accounts are issued to adults only
• Payment Processing: To ensure funds reach the right account
• Service Improvement: To improve your app and website experience
• Personalized Experience: To easily display your preferred sports and markets
• Security monitoring: To detect unauthorized access to accounts
• Legal Obligations: To provide information when requested by government or regulatory authorities
• Customer Support: To resolve your issues quickly

Winfast never uses your data for advertising or commercial gain. Your data is used solely to ensure you receive the best possible service.

Winfast is extremely cautious about sharing your information with third parties. The table below outlines what data is shared, with whom, and under what circumstances:

Winfast servers are hosted in ISO-certified data centers. We follow the highest industry standards for data protection, and every user's data is stored in a separately encrypted partition.

Security measures in place:

• 256-bit AES encryption — the most robust encryption standard in the world
• Two-Factor Authentication (2FA) — available on all accounts
• Multi-layer firewall — blocks unauthorised access
• 24/7 security monitoring team — suspicious activity is detected instantly
• Regular penetration testing — security assessments conducted by external experts
• Daily backups — enabling immediate data recovery in the event of loss

Data retention period:

All data is retained while your account is active. After closure, transaction records are kept for 5 years to meet legal requirements. Personal ID information is deleted within 2 years.

Winfast uses cookies on its website and app. Cookies are small data files stored in your browser or on your device, and they help enhance your experience.

Types of cookies we use:

• Essential Cookies: To maintain login sessions and ensure security — disabling these will prevent the app from functioning
• Functional cookies: To remember your language preferences and settings
• Analytics cookies: To identify the most-used sections of the app — aggregated data only, with no personal identification

Winfast does not use third-party advertising tracking cookies. You can delete or block cookies at any time through your browser settings.

Winfast believes you should have full control over your own data. See a detailed breakdown of your rights below:

Winfast strictly prohibits account registration by anyone under the age of 18. We do not knowingly collect any personal data from minors.

If anyone registers with a false age and this is later verified, the account will be immediately suspended and all balances forfeited. If you suspect a minor is using Winfast, please report it to support@winfast.best.

Winfast's primary servers are located in the Asia-Pacific region. Some data may be stored in other regions for backup and security purposes, but all transfers comply with GDPR and international data protection standards.

No matter where your data travels, the same level of encryption and protection is maintained. All data transfers are governed by international data protection agreements, ensuring the highest standard of security for your information.

While Winfast maintains the highest security standards, in the event of a data breach we will take the following steps:

• Our regulatory authority will be notified within 72 hours of detecting an incident
• Users whose data has been affected will be notified directly via in-app notifications and email
• The type of breach, details of affected data, and steps taken will be clearly communicated
• Immediate security measures will be applied to any affected accounts
• System improvements will be made to prevent the same incident from happening again

For any questions, concerns, or complaints about our Privacy Policy, please reach out to Winfast's dedicated Privacy Team.

This Privacy Policy was last updated in January 2026. Any future changes will be reflected on this page, and significant updates will be communicated via app notification.