W2j Privacy Policy — Your data is our responsibility

W2j collects different types of information in different circumstances. Our policy is to be fully transparent about all of it. Below, we break everything down into three main categories.

Information Provided at Registration:

• Full name and date of birth — for age verification and account identification.
• Email address — for important notifications and security alerts.
• Mobile number — for OTP verification and support.
• Address (optional) — may be required for the KYC process.

Transaction & Payment Data:

• Dates, amounts, and methods for deposits and withdrawals.
• Reference to your bKash or Nagad account number (your full account number is never stored).
• The last 4 digits of the account number for bank transfers.

Automatically collected data:

• IP address — for fraud detection and geographic location verification.
• Browser and device type — to improve your platform experience.
• Login timestamps and session data — for security monitoring purposes.
• Game history and betting patterns — for responsible gaming monitoring.

W2j only collects data for specific, legitimate purposes — and only the minimum amount of data required. The table below sets out the purpose behind each piece of data collected:

W2j never shares or sells your data to third parties for marketing or commercial purposes. Your information is used solely to operate w2j's services.

We understand this is the most important question — "Is anyone else accessing my data?" The straightforward answer is: w2j does not sell your data to any third party. However, limited data must be shared with certain partners to operate our services:

• Payment Processor: Necessary transaction data is shared with bKash, Nagad, and Rocket to process deposits and withdrawals.
• Game Providers: For game operation purposes, account IDs and bet data are shared with providers such as Evolution and Ezugi. These providers operate under their own privacy policies.
• Identity Verification Service: Identity documents may be shared with a licensed verification agency for KYC purposes — your data remains protected throughout.
• Legal Obligation: Disclosing data in response to a court order or a lawful request from a regulatory authority is a legal obligation. Where permitted by law, the member will be notified.

If your data is ever shared for any purpose beyond those stated above, your consent will be obtained in advance. Selling your data to advertising companies is strictly prohibited at w2j.

W2j uses cookies on its website. Cookies are small data files stored in your browser that help the platform function more effectively.

Cookies used by w2j:

• Essential cookies: To maintain login sessions and ensure platform security — the platform cannot function without these.
• Preference Cookies: To remember your language settings and theme preferences — these make your experience more convenient.
• Analytics Cookies: To understand which pages get the most traffic and where issues occur. Data is collected anonymously.

You can disable cookies from your browser settings. However, disabling essential cookies will prevent you from logging in or completing transactions. w2j does not use any third-party tracking cookies.

W2j does not retain your data for longer than necessary. Retention periods are listed below:

• Account Information: For the duration of active account use, and for 5 years after closure (as required by law).
• Transaction history: 7 years — mandatory under international financial regulations.
• Betting history: 3 years — for dispute resolution and responsible gaming monitoring.
• KYC documents: 5 years after account closure — as required by regulatory authorities.
• Support Conversations: 2 years — to improve service quality and for future reference.
• Marketing Consent: Until consent is withdrawn or the account is closed.

Once the retention period expires, data is automatically deleted or anonymized.

W2j follows the highest industry standards for data protection. The core components of our security framework are:

• TLS 1.3 encryption: The latest encryption protocols are used for all data transmission.
• AES-256 Storage: Stored data is protected with military-grade encryption.
• Two-Factor Authentication (2FA): Option to enable OTP-based two-factor authentication at login.
• Suspicious Access Detection: Automated alerts are sent when unusual login patterns are detected.
• Separate environment: Member data, payment data, and gaming data are each stored in separate, secure environments.
• Penetration Testing: Security vulnerabilities are regularly assessed by a dedicated expert team.

You have certain important rights regarding your personal data that w2j respects and is obligated to fulfill:

W2j is strictly an 18+ platform. We do not knowingly collect data from anyone under 18, and minors are not permitted to open an account.

Date of birth is verified at registration. If someone registers with a false age and is later found to be under 18, their account will be closed immediately and all data will be deleted.

If you believe a minor is using w2j, please notify us immediately at support@w2j.run. We take this matter very seriously.

W2j may update this Privacy Policy when necessary. For significant changes that affect the protection of your data:

• Registered members will be notified by email at least 14 days before any changes take effect.
• A notification will be displayed on the platform's main page.
• The date of each update and a brief description of the changes will be noted on this page.

Minor changes (such as language clarifications or spelling corrections) may be made without prior notice. The "Last Updated" date at the top of the page is always kept current.

For any privacy-related questions, requests, or complaints, please get in touch with us:

• Email: support@w2j.run — Privacy-related inquiries typically receive a detailed response within 2 business days.
• Live Chat: Live chat on the website is available 24/7 for general inquiries. Support is also available in Bengali.

If your complaint is not resolved within 30 days, you have the right to escalate it to the relevant regulatory authority. That said, contacting us directly first resolves most issues much faster.