Winzo Privacy Policy — How Your Data Is Kept Safe

1 Introduction

Winzo Blog (winzo.blog) fully respects your privacy. This Privacy Policy explains how we collect, store, and use your personal information. It applies to all Winzo services, websites, and applications.

By using the Winzo platform, you are considered to have accepted the terms set out in this Privacy Policy. We recommend reading this policy carefully before using our services. If you have any questions, please reach out to our support team.

This Privacy Policy has been prepared in accordance with applicable data protection laws in Bangladesh and international standards. Winzo believes that transparency and trustworthiness are the foundation of a lasting relationship.

2 What Data We Collect

Winzo collects your information in several ways. Full details are provided below:

3 How Data Is Used

Winzo uses your data for specific, defined purposes only. We never use your information for additional purposes without your consent.

• Account Management: Your information is required for registration, login, and profile updates.
• Identity Verification: To complete the KYC process and prevent illicit activity.
• Payment Processing: To ensure secure transactions for deposits and withdrawals.
• Customer Support: To properly address your complaints or queries.
• Promotions & Offers: To send you relevant offers based on your preferences (with your consent).
• Security: To detect fraud and ensure platform security.
• Legal Obligations: To meet regulatory requirements.

You can opt out of promotional emails or notifications at any time. However, it may not always be possible to stop essential service-related communications.

4 Who Data Is Shared With

Winzo never sells your personal data. However, in certain circumstances, information may be shared with trusted third parties:

• Payment Provider: To process transactions via payment gateways such as bKash, Nagad, and Rocket.
• Identity Verification Service: Authorized entity for KYC and AML (Anti-Money Laundering) processes.
• Legal Authorities: In response to a court order or a lawful request from a government authority.
• Technology Service Provider: Hosting, cloud storage, and cybersecurity providers — all bound by strict confidentiality agreements.

5 Cookies Policy

Winzo uses cookies on its website. Cookies are small text files stored in your browser that help enhance your browsing experience.

• Essential Cookies: These are essential for login sessions and security and cannot be disabled.
• Performance Cookies: Used to measure site speed and usability.
• Functional Cookies: To remember your preferences (language, theme).
• Analytics Cookies: To analyze user behavior and improve our services.

You can disable non-essential cookies at any time through your browser settings. Note that disabling certain cookies may affect the functionality of some site features.

6 Data Security Measures

Winzo employs industry-leading security measures to protect your data. Our key security practices are outlined below:

• SSL/TLS Encryption: All data transmissions are secured with 256-bit SSL encryption.
• Firewall Protection: Unauthorized access is prevented through an advanced firewall system.
• Two-Factor Authentication (2FA): Two-factor authentication is available for additional account security.
• Regular Security Testing: Regular system audits are conducted by independent third-party experts.
• Restricted Access: Only authorized personnel can access your data.
• Data Masking: Sensitive information is masked when displayed.

7 How Long Data Is Retained

Winzo retains your data only for as long as necessary — never longer. Retention periods depend on the type of data and the purpose for which it was collected.

• Active account data: retained for as long as the account remains active.
• Financial transaction data: Generally retained for 5-7 years in accordance with legal obligations.
• KYC Documents: Retained in accordance with regulatory authority guidelines.
• Marketing data: retained until consent is withdrawn.
• Closed account data: retained for a maximum of 3 years from the date of closure, then permanently deleted.

To request deletion of your data, please contact our support team. Please note that certain data must be retained for a specified period due to legal obligations.

8 Your Rights

Under Winzo's Privacy Policy, you are entitled to the following rights:

To exercise any of these rights, contact our support team. We typically process requests within 30 days.

9 Privacy of Minors

Winzo's services are intended strictly for users aged 18 and above. We do not knowingly collect data from anyone under the age of 18.

10 International Data Transfers

Winzo's servers and service providers may be located in various countries. This means your data may sometimes be processed outside of Bangladesh.

The following guarantees apply in this regard:

• Data transfers are carried out using only trusted and secure infrastructure.
• All international partners are bound by strict confidentiality agreements.
• International data protection standards (ISO 27001 or equivalent) are followed.
• Transfer-level encryption is applied to all data transfers.

11 Changes to the Privacy Policy

Winzo may update this Privacy Policy from time to time. If any significant changes are made, we will notify you by email or through a platform notification.

12 Contact Us

For any questions, complaints, or requests regarding this Privacy Policy, please contact us:

• Email: [email protected]
• Support Hours: 7 days a week, 9:00 AM – 11:00 PM (BST)
• Response Time: Usually within 24–48 hours

Our dedicated privacy team is ready to address any of your concerns promptly and with care.