Privacy Policy — fancywon

fancywon collects personal data from players in the course of operating a safe, compliant, and high-quality online casino and sports betting platform. We collect only the information that is genuinely necessary for one or more of the purposes described in this Policy. Below is a full account of the categories of personal data we may collect.

Registration and identity data:

• Full legal name (first name and surname)
• Date of birth (required for mandatory age verification — 18+ only)
• Residential address, including district, division, and postal code within Bangladesh
• Email address
• Mobile phone number (used for account security and payment verification)
• National Identity Card (NID) number, passport number, or driving licence number — collected only when identity verification is required
• Scanned or photographed copies of identity documents, where submitted for KYC purposes

Financial and payment data:

• bKash, Nagad, Rocket, or Upay mobile wallet numbers used for deposits and withdrawals
• Bank account details where bank transfer is selected as a payment method (e.g., Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank)
• Transaction history, including deposit amounts, withdrawal amounts, dates, and reference numbers
• Card numbers (last four digits only — full card numbers are never stored by fancywon and are handled exclusively by our PCI-DSS compliant payment processors)

Usage and technical data:

• IP address and approximate geographic location at the time of login and transactions
• Device type, operating system, browser type and version
• Session duration, pages visited, games played, bet amounts, and gameplay history
• Login timestamps and activity logs
• Referral source (how you arrived at fancywon)

Communications data:

• Content of messages sent to our support team via email (support@fancywon)
• Records of any complaints, disputes, or requests submitted to fancywon
• Preferences expressed regarding marketing communications

fancywon uses the personal data we collect for specific, legitimate purposes only. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The following table summarises the primary purposes for which we process personal data and the legal basis for each:

Where we rely on your consent as the legal basis for processing (for example, sending promotional emails about new games, seasonal bonuses related to events like Eid or BPL cricket season, or special deposit offers), you retain the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal. To withdraw consent for marketing communications, contact us at support@fancywon or update your notification preferences within your account settings.

fancywon does not sell, rent, or otherwise commercially transfer your personal data to any third party. However, in order to operate a fully functional online casino and sports betting platform, we work with a number of carefully selected third-party service providers. We may share limited personal data with these providers strictly to the extent necessary for them to deliver their contracted services.

Categories of third parties with whom we may share data:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and age verification service providers who assist in verifying player identity and age in compliance with responsible gaming obligations. These providers process identity document data under strict confidentiality agreements.
• Game providers and software studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited technical data (such as player session tokens) necessary to deliver their games. These studios do not receive your full personal profile or payment data.
• Fraud and security providers: Specialist cybersecurity and fraud detection services that monitor platform activity for suspicious behaviour, unauthorised access attempts, and AML red flags. These providers process technical and transactional data only.
• Cloud infrastructure providers: fancywon uses reputable cloud hosting and data storage providers. All data processed by these providers remains subject to contractual data processing agreements that mandate compliance with applicable data protection standards.
• Legal and regulatory authorities: We may be required by law to disclose personal data to Bangladesh government authorities, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction. Such disclosures will be made only to the extent strictly required by applicable law.

All third-party service providers engaged by fancywon are subject to written data processing agreements that prohibit them from using your personal data for any purpose other than providing the contracted service. We regularly review our third-party providers to ensure their data handling practices meet our standards.

fancywon uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device that help us recognise you across sessions, remember your preferences, maintain your login state, and gather analytics data about how the platform is used. The following describes the categories of cookies we use.

fancywon does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cross-site behavioural profiling technologies. Our cookie usage is limited to what is necessary to run the platform securely and to improve the player experience.

You can manage or disable non-essential cookies through your browser settings. Most modern browsers — including Chrome, Firefox, Edge, and mobile browsers on Android — allow you to view, block, or delete cookies on a per-site basis. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the fancywon platform.

fancywon implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of personal and payment data at rest using AES-256 or equivalent standard
• Role-based access controls ensuring that only authorised fancywon personnel can access personal data, and only to the extent required for their job function
• Regular internal security audits and vulnerability assessments of platform infrastructure
• Multi-factor authentication requirements for all staff accessing systems that contain player data
• Secure, geographically redundant data centres with physical access controls
• Incident response procedures to detect, investigate, and respond to any potential data security breach in a timely manner

Data retention periods:

fancywon retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active player accounts: Personal data is retained for the duration of the account relationship plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction records: Financial transaction data is retained for a minimum of 5 years from the date of the transaction.
• Identity verification documents: KYC documents are retained for 5 years from the date of verification or account closure, whichever is later.
• Support communications: Customer support correspondence is retained for 3 years from the date of the interaction.
• Analytics data: Anonymised analytics data may be retained indefinitely. Personally identifiable usage logs are deleted or anonymised after 12 months.
• Marketing consent records: Records of consent to receive marketing communications are retained for the duration of the account relationship and for 2 years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures. If you request deletion of your personal data and no legal obligation requires us to retain it, we will action your request within 30 days.

As a player on fancywon, you hold a number of rights in relation to the personal data we hold about you. fancywon is committed to honouring these rights promptly and without undue obstruction. To exercise any of the rights listed below, please contact our support team at support@fancywon with the subject line "Data Rights Request" and a description of your request.

• Right of access: You have the right to request a copy of all personal data that fancywon holds about you. We will provide this information in a commonly used electronic format within 30 days of receiving a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly within your player account settings.
• Right to erasure: You may request that fancywon delete your personal data. We will comply with such requests to the extent that retention is not required by applicable legal obligations (for example, AML record-keeping requirements). Where a legal obligation requires retention, we will inform you clearly.
• Right to restrict processing: In certain circumstances, you may request that fancywon restrict the processing of your personal data — for example, while a complaint or dispute is under investigation.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and, where technically feasible, to have that data transferred directly to another service provider.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interest, including direct marketing communications. Where you object to marketing, we will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

All data rights requests will be acknowledged within 5 business days and fully responded to within 30 days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. fancywon does not charge any fee for processing data rights requests.

fancywon is a real-money online gambling platform exclusively for adults aged 18 and above. We do not knowingly collect, store, or process personal data belonging to any person under the age of 18.

As part of our registration and ongoing monitoring processes, fancywon applies mandatory age verification checks. Any account where there are reasonable grounds to suspect the account holder may be under 18 will be suspended immediately, pending full age verification. If age verification cannot be completed satisfactorily, the account will be permanently closed and any balance — including winnings — will be forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child has accessed fancywon or submitted personal data without your knowledge, please contact us immediately at support@fancywon. We will investigate and take prompt action to delete any data associated with an underage individual and close the account.

We strongly encourage parents and guardians to use parental control software to restrict access to online gambling platforms for minors. fancywon supports and endorses the responsible use of such tools within Bangladeshi households.

fancywon reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this Policy, we will notify active players by sending an email to their registered address and by displaying a prominent notice on the fancywon platform for a minimum of 14 days following the update.

The most current version of this Privacy Policy is always available at /privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent revision was made. It is your responsibility to review this Policy periodically to stay informed of any changes.

Your continued use of the fancywon platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should cease using fancywon and may request account closure by contacting our support team at support@fancywon.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data fancywon holds about you, please contact our dedicated data support team:

• Email: support@fancywon (subject line: "Privacy Enquiry")
• Response time: Within 5 business days of receipt
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6)