Privacy Policy — How croewin Handles Your Personal Data
Your privacy matters to us. This Privacy Policy explains exactly what personal information croewin collects, why we collect it, how it is stored and used, and the rights you hold as a registered player in Bangladesh.
SSL Encryption
All data transmitted between your device and croewin's servers is protected by industry-standard SSL/TLS encryption. Your login credentials, payment details, and personal information are never sent in plaintext.
No Data Selling
croewin will never sell, rent, or auction your personal data to advertisers, data brokers, or any other third party. Your information exists on our platform solely to serve you as a player.
Purpose-Limited Use
Data collected by croewin is used only for the specific purposes described in this policy. We do not repurpose your data for unrelated activities without your explicit consent.
Your Rights Matter
You have the right to access, correct, and request deletion of your personal data held by croewin. Our support team handles all data rights requests promptly and professionally.
Information We Collect
croewin collects personal information through several channels. Below is a transparent breakdown of each category of data we may hold about you.
1.1 — Registration Information
When you create a croewin account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, residential address (including city, district, and postcode relevant to Bangladesh addresses), email address, and mobile phone number. Bangladesh players who use mobile wallet payment methods may also be asked to provide the mobile wallet number associated with their bKash, Nagad, or Rocket account at the time of linking a payment method.
1.2 — Identity Verification Documents
As part of our Know Your Customer (KYC) process — which is applied prior to processing withdrawals and at any point we are required to verify identity — croewin may collect copies of government-issued identity documents. These may include your National Identity Card (NID), passport, Bangladesh driving licence, or a utility bill for proof of address purposes. Uploaded documents are handled securely and are not shared with any party other than those described in Section 3 of this policy.
1.3 — Financial Transaction Data
When you make a deposit or withdrawal on croewin, we collect transactional data associated with that payment. This includes the payment method used, transaction reference numbers, amounts in BDT (৳), timestamps, and the outcome of the transaction. croewin does not store full card numbers. For bKash, Nagad, Rocket, and Upay transactions, the mobile wallet number associated with the transaction is recorded for reconciliation and anti-fraud purposes.
1.4 — Gaming Activity Data
croewin maintains a record of your gaming activity on the platform. This includes the games you have played, bet amounts placed, game outcomes, session durations, login and logout timestamps, and any bonus or promotion codes you have used. This data is used to manage your account accurately, to resolve disputes, to identify responsible gaming concerns, and to personalise promotional communications where you have opted in to receive them.
1.5 — Device and Technical Data
When you access croewin via a web browser or mobile device, we automatically collect certain technical information. This includes your IP address, browser type and version, operating system, device type (desktop, tablet, or mobile), screen resolution, time zone setting (we note Bangladesh Standard Time, BST, UTC+6), and referring URL. This technical data helps croewin detect fraud, prevent multi-accounting, manage platform security, and improve the user experience for Bangladesh-based players accessing the platform via mobile devices.
1.6 — Communications Data
If you contact croewin support via live chat or email at [email protected], we retain a record of that communication — including the content of messages exchanged and any attachments you provide. These records are kept for quality assurance, dispute resolution, and compliance purposes. You should not include sensitive authentication information (such as your full password) in any support communication.
1.7 — Voluntarily Submitted Information
From time to time, croewin may invite players to participate in surveys, feedback forms, or promotional campaigns. Any information you voluntarily submit through these channels — such as your gaming preferences, satisfaction ratings, or demographic details — is collected and used solely for the purposes described at the time of submission.
Data Categories Summary
Data Minimisation
croewin collects only the minimum data necessary for each specific purpose. We do not request information that is not directly relevant to operating your account, processing your transactions, or meeting our legal obligations.
How We Use Your Data
croewin uses personal data for clearly defined purposes. This section explains the legal basis and practical reason behind each use of your information.
| Purpose | Description | Legal Basis |
|---|---|---|
| Account Management | Creating, maintaining, and operating your croewin account; processing deposits and withdrawals; issuing bonuses; providing customer support. | Performance of contract |
| Identity Verification (KYC) | Verifying your age (18+) and identity before processing withdrawals, as required by our responsible gaming and anti-fraud standards. | Legal obligation; legitimate interest |
| Fraud Prevention | Detecting multi-accounting, bonus abuse, money laundering, and other fraudulent activity. Monitoring login patterns and transaction anomalies. | Legitimate interest; legal obligation |
| Responsible Gaming | Monitoring gaming behaviour to identify potential problem gambling indicators. Applying self-exclusion and deposit limit tools where requested. | Legitimate interest; legal obligation |
| Marketing Communications | Sending promotional emails, bonus notifications, and seasonal offers (e.g., BPL, Eid, Pohela Boishakh promotions) — only where you have opted in. | Consent |
| Platform Improvement | Analysing aggregated, anonymised usage data to improve game selection, UI performance, mobile responsiveness, and support quality for Bangladesh players. | Legitimate interest |
| Legal Compliance | Responding to lawful requests from authorities, maintaining transaction records as required by applicable AML and data retention regulations. | Legal obligation |
2.1 — Marketing Opt-Out
If you have previously opted in to receive marketing communications from croewin and wish to withdraw that consent, you may do so at any time by updating your account notification preferences or by contacting support at [email protected]. Withdrawal of marketing consent does not affect service-related communications — croewin will continue to send you transactional messages (such as deposit confirmations, withdrawal notifications, and security alerts) regardless of your marketing preference, as these are necessary for the operation of your account.
2.2 — Automated Decision-Making
croewin uses automated systems to assist with fraud detection, bonus eligibility assessment, and responsible gaming monitoring. Where an automated decision has a material effect on your account — such as a temporary hold on a withdrawal pending further review — you have the right to request human review of that decision. Contact the support team via live chat or email to exercise this right.
Data Sharing & Third Parties
croewin does not sell your data. This section identifies the limited circumstances in which your personal information may be shared with third parties.
3.1 — Payment Processors
To process your deposits and withdrawals, croewin must share relevant transaction data with payment service providers. For Bangladesh players, this includes mobile wallet operators such as bKash, Nagad, Rocket, and Upay, as well as international card networks including Visa and Mastercard. The data shared is limited to the minimum required to complete and reconcile the transaction — typically your mobile wallet number or card reference, transaction amount in BDT, and a unique transaction identifier generated by croewin's platform.
3.2 — Identity Verification Providers
croewin may use third-party KYC verification services to assist with the review and authentication of identity documents submitted by players. These providers act as data processors under contract with croewin and are bound by strict data handling obligations. They are not permitted to use your identity documents for any purpose other than completing the verification task on croewin's behalf.
3.3 — Game Software Providers
The games available on croewin are supplied by third-party software providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. When you play a game supplied by one of these providers, certain technical and session data (such as your session token, bet amounts, and game result) is exchanged with the provider's systems to run the game correctly. These providers do not receive your full personal profile and are contractually prohibited from using game session data for their own marketing purposes.
3.4 — Legal and Regulatory Disclosure
croewin may be required to disclose personal information to law enforcement agencies, regulatory bodies, or judicial authorities where compelled to do so by a lawful request, court order, or applicable legal obligation. In such cases, croewin will disclose only the minimum information required to comply with the request and, where legally permissible, will notify the affected user of the disclosure.
3.5 — Business Transfers
In the event that croewin undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by croewin may be transferred to the acquiring entity as part of that transaction. In any such scenario, croewin will ensure that the recipient is bound to maintain the same or equivalent privacy protections as those described in this policy, and registered players will be notified of any material change to data controllership.
3.6 — No Third-Party Marketing
croewin does not share, sell, or license your personal information to any third-party advertiser, data broker, affiliate network, or marketing platform for the purpose of targeting you with advertising from third parties. Any promotional communications you receive will come directly from croewin and will be based only on your own activity on the croewin platform.
Approved Third Parties
Only the categories listed in this section may receive any portion of your personal data. Each third party operates under a contractual data processing agreement that limits their use of your information to the specific task for which it was shared.
Cross-Border Transfers
Some third-party service providers (particularly game software providers) operate infrastructure outside Bangladesh. Where personal data is transferred internationally, croewin ensures appropriate safeguards — such as contractual data protection clauses — are in place before the transfer occurs.
Cookies & Tracking Technologies
croewin uses cookies and related technologies to keep you logged in, remember your preferences, detect fraud, and improve platform performance.
4.1 — What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on return visits, remember settings you have configured, and maintain your session while you are actively using the platform. croewin uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period or until manually cleared).
| Cookie Category | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Maintains your login session, remembers your account state, enables the cashier and game loading functions. Essential for the platform to operate. | Session | No — required |
| Functional | Remembers your language preference (English), display settings, and responsible gaming notification preferences across sessions. | Up to 12 months | Optional |
| Analytics | Collects anonymised data on how users navigate the platform — pages visited, time on page, error events — to help croewin improve the user experience for Bangladesh players. | Up to 24 months | Optional |
| Security & Fraud | Identifies devices associated with fraudulent activity, multi-accounting, or automated bot traffic. Works alongside IP monitoring to protect the platform. | Up to 6 months | No — required |
4.2 — Managing Your Cookie Preferences
You can control and manage cookies through your browser settings. Most modern browsers — including Chrome, Firefox, Safari, and mobile browsers commonly used in Bangladesh — allow you to view, delete, and block cookies on a site-by-site basis. Please be aware that disabling strictly necessary or security cookies will impair your ability to use croewin effectively: you may not be able to log in, load games, or process transactions while those cookies are blocked.
4.3 — No Cross-Site Tracking
croewin does not use third-party advertising tracking cookies or pixel tags that follow your activity across external websites. Our analytics tools operate exclusively within the croewin domain and do not report your browsing behaviour on other websites back to croewin or to any advertising network.
Data Retention
How long croewin keeps your personal data and the criteria used to determine retention periods.
5.1 — Active Account Data
While your croewin account is active, we retain all personal data associated with it for as long as necessary to provide you with the platform's services. This includes your registration details, KYC documents, transaction history, and gaming activity logs. You may update or correct your personal information at any time by contacting support.
5.2 — Closed Account Data
After your croewin account is closed — whether voluntarily or by croewin — we retain your personal data for a minimum period as required by applicable financial regulations and anti-money-laundering obligations. Transaction records, KYC documents, and account activity logs are typically retained for a period of five years following account closure. After this period, data is securely deleted or anonymised so that it can no longer be linked to you as an individual.
5.3 — Support Communication Records
Records of live chat and email communications with the croewin support team are retained for a period of two years from the date of the communication. After this period, chat transcripts are deleted from active systems. Where a communication is directly relevant to an ongoing legal, compliance, or dispute matter, it may be retained for longer.
5.4 — Marketing Data
If you opted in to receive marketing communications from croewin, the record of that consent and associated preference data is retained for as long as your account is active or until you withdraw consent. Once you opt out, your marketing preference record is updated to reflect the opt-out and your contact details are removed from active marketing lists within a reasonable processing period — typically no more than 10 business days.
Retention Periods at a Glance
Security Measures
The technical and organisational safeguards croewin uses to protect your personal information from unauthorised access, loss, or misuse.
SSL/TLS Encryption
All data in transit between your browser or mobile device and croewin's servers is encrypted using SSL/TLS. This prevents interception of login credentials, payment details, and personal information during transmission.
Encrypted Storage
Sensitive personal data — including identity documents and payment method references — is stored in encrypted form at rest. Access to stored data is restricted to authorised croewin personnel with a documented operational need.
Intrusion Detection
croewin operates continuous monitoring systems to detect unusual access patterns, failed login attempts, and suspicious transactions. Automated alerts escalate potential security incidents to the relevant team immediately.
Access Controls
Internal access to player data is granted on a strict need-to-know basis. All staff with access to personal data undergo security training. Access permissions are reviewed regularly and revoked when no longer required.
Password Security
croewin stores account passwords in hashed form using industry-standard one-way hashing algorithms. Plain-text passwords are never stored and cannot be retrieved — only reset through a verified account recovery process.
Breach Response
In the event of a confirmed data security breach affecting player personal data, croewin will notify affected users as promptly as practicable, describing the nature of the incident and the steps taken to contain it.
Your Privacy Rights
As a croewin player, you hold a set of rights in relation to the personal data we hold about you. Here is what those rights mean in practice.
Right of Access
You may request a copy of the personal data croewin holds about you at any time. We will provide this within a reasonable timeframe upon receipt of a verified request sent to [email protected].
Right to Rectification
If any personal data croewin holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact support with the specific detail you wish to update and we will action the correction promptly.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where there is no overriding legal basis for continued retention. Note that certain data must be retained to meet legal obligations even after an erasure request.
Right to Restrict Processing
You may request that croewin restrict the processing of your personal data in specific circumstances — for example, while you contest the accuracy of the data or while an objection is being considered. During a restriction, croewin may store the data but will not process it for active purposes.
Right to Data Portability
Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format so that it may be transferred to another service if you wish.
Right to Object
You have the right to object to the processing of your personal data where croewin relies on legitimate interests as its legal basis. You also have an unconditional right to object to the use of your data for direct marketing purposes, which takes effect immediately upon receipt of your objection.
7.1 — How to Exercise Your Rights
To exercise any of the rights described above, please contact the croewin support team via live chat or by sending a written request to [email protected] with the subject line "Data Rights Request". To protect your privacy, croewin will verify your identity before processing any data rights request. We aim to acknowledge all rights requests within 5 business days and to provide a substantive response within 30 calendar days. For complex or high-volume requests, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.
7.2 — Withdrawing Consent
Where croewin processes your data on the basis of your consent — for example, for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal. Withdrawal of consent for marketing communications does not affect the processing of data necessary for account operation, transaction processing, or legal compliance.
Policy Updates & Contact
How croewin communicates changes to this Privacy Policy and how to reach us with any privacy-related concern.
8.1 — Policy Review and Updates
croewin reviews this Privacy Policy periodically to ensure it remains accurate, complete, and reflective of current data processing practices. We may update this policy when we introduce new features or services, when we change a third-party service provider, or when applicable law requires us to do so. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.
8.2 — Notification of Material Changes
Where a change to this Privacy Policy is material — meaning it significantly affects the way we collect, use, or share your personal data — croewin will notify registered users by email (to the address on file) or by displaying a prominent notice on the platform prior to the change taking effect. Continued use of the croewin platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms.
8.3 — Children and Age Restrictions
croewin is strictly an 18+ platform. We do not knowingly collect personal information from individuals under the age of 18. If you believe that a person under 18 has registered an account on croewin, please notify us immediately at [email protected]. Upon confirmation, we will close the account, delete the associated personal data, and reverse any transactions to the extent possible. Parental controls and third-party tools for restricting access to gambling websites are available and encouraged for households with minors.
8.4 — Contacting croewin About Privacy
If you have any question, concern, or complaint regarding this Privacy Policy or the way croewin handles your personal data, please contact the support team directly. croewin is committed to resolving all privacy-related inquiries fairly and promptly. You may reach us by live chat (available 24/7 with an average response time of under 5 minutes) or by email at [email protected]. Please include "Privacy Inquiry" in the subject line of any email correspondence so that it is directed to the appropriate team.
Privacy Contact
Why croewin Earns Player Trust
Privacy is one dimension of a broader commitment to operating a safe, fair, and transparent platform for all Bangladesh players.
Secure BDT Transactions
Deposits and withdrawals via bKash, Nagad, Rocket, and Upay are processed over encrypted connections. Financial data is never stored in accessible plaintext on croewin's systems.
Fair Play Certified Games
Every game on croewin — from Pragmatic Play slots to Evolution Gaming live dealer tables — uses certified random number generators. Game outcomes are statistically fair and independently verifiable.
Transparent Policies
croewin publishes its Terms & Conditions, Privacy Policy, and Responsible Gaming guidelines in plain English. There are no hidden data clauses or obscured consent mechanisms buried in footnotes.
Responsible Gaming Integration
Responsible gaming tools — deposit limits, session alerts, self-exclusion — are built into the platform and do not require any additional data sharing. Your welfare settings are stored securely within your account.
24/7 Dedicated Support
Whether you have a privacy question, a data rights request, or a security concern, croewin's support team is available around the clock via live chat with a response time under 5 minutes.
Built for Bangladesh
croewin is designed specifically for Bangladesh players — BDT payouts, local payment methods, BPL cricket betting, and English-language support are all core features, not afterthoughts.
Questions About Your Privacy? We Are Here to Help
If any part of this Privacy Policy is unclear, our support team is available 24/7. You can also explore our FAQ, browse the casino, or head to the croewin Login page to access your account.
18+ only. Gambling can be addictive. Please play responsibly. Full terms apply.