wj802 Privacy Policy — Your Data, Protected

wj802 ("Platform", "we", "us", "our") operates the online gaming platform available at wj802.app and is committed to protecting the privacy and personal data of all players who register and use the platform. This Privacy Policy ("Policy") sets out in detail what personal data we collect, the purposes for which it is processed, the circumstances under which it may be shared with third parties, how long it is retained, and the rights available to you as a data subject.

By registering a wj802 account, logging in or making use of any feature of the platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not register an account or use the wj802 platform.

When you register and use the wj802 platform, we collect personal data from you in several ways. The categories of data we collect are as follows:

We do not collect sensitive personal data such as ethnic origin, religious beliefs, health data or political opinions. We do not collect data from third-party social media platforms unless you explicitly choose to connect such an account to your wj802 profile.

wj802 processes your personal data for the following purposes:

• Account creation and management — to register your account, authenticate your identity at login and maintain your account profile and preferences.
• Payment processing — to process deposits via bKash, Nagad, Rocket, Upay or supported bank accounts, and to fulfil withdrawal requests to your registered payment method.
• Regulatory compliance — to comply with anti-money-laundering (AML) obligations, age verification requirements, Know Your Customer (KYC) procedures and any other applicable legal or regulatory obligations.
• Platform security and fraud prevention — to detect, investigate and prevent fraudulent activity, multiple account abuse, bonus exploitation, money laundering and other prohibited conduct.
• Responsible gaming support — to monitor gaming patterns and identify players who may be displaying signs of problem gambling, and to apply account controls such as deposit limits and cooling-off periods where appropriate.
• Marketing and promotional communications — to send you information about promotions, bonuses and offers relevant to your use of the wj802 platform, where you have not opted out of receiving such communications.

wj802 does not use automated decision-making or profiling in any manner that produces legal or similarly significant effects on you without your knowledge. Where automated systems are used for fraud detection or responsible gaming monitoring, material decisions resulting from such systems are subject to human review upon request.

wj802 processes your personal data on the following legal grounds:

• Contract performance — processing that is necessary to register your account, process your payments and operate your account in accordance with the wj802 Terms & Conditions you have accepted.
• Legal obligation — processing that is required to comply with applicable law, including AML regulations, tax reporting obligations and KYC requirements.
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring and the improvement of our services, where those interests are not overridden by your privacy rights.
• Consent — processing for optional purposes such as marketing communications, where we have obtained your explicit consent and which you may withdraw at any time.

Your personal data may be shared with the following categories of recipients:

• Payment processors — bKash, Nagad, Rocket, Upay and partner banks receive only the minimum data necessary to process a specific transaction (e.g. your registered mobile number and the transaction amount). They do not receive your full account profile or gaming history.
• Game software providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi receive session tokens and pseudonymous player identifiers necessary to run game sessions. They do not receive your real name, NID data or payment credentials.
• Regulatory and law-enforcement authorities — where disclosure is required by applicable law, court order or lawful request from a competent government authority, wj802 will provide the minimum data required to satisfy that obligation.
• Technology and infrastructure service providers — hosting providers, content delivery networks and security service providers who process data on our behalf under strict contractual data-processing agreements that prohibit them from using the data for any other purpose.

All third-party service providers who receive your data are contractually required to implement appropriate security measures, to use your data solely for the specified purpose, and to comply with applicable data protection law. wj802 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

wj802 does not store your mobile wallet PIN, bKash account password, Nagad mPIN, Rocket PIN or any equivalent credential for any supported payment method. When you initiate a deposit or withdrawal, you are authenticated directly by the relevant payment provider through their own secure interface — wj802 receives only a transaction confirmation and the associated reference number, not your payment credentials.

Your mobile number registered with bKash or Nagad is stored by wj802 solely as a payment method identifier linked to your account. It is used to route withdrawal requests to the correct wallet and to verify that withdrawals are being sent to a payment method previously associated with your account. It is not used for any other purpose and is not shared with third parties other than the relevant payment provider.

wj802 uses cookies and similar tracking technologies to operate the platform, maintain your session, and analyse platform usage. The types of cookies used are:

• Essential cookies — required for the platform to function. These include session cookies that keep you logged in during a gaming session and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking platform functionality.
• Analytics cookies — used to collect aggregated, anonymised data about how players navigate the platform. This data helps us identify usability issues and improve the player experience. Analytics data does not identify you personally.
• Preference cookies — used to remember your language preference and other personalisation settings so you do not need to re-enter them on each visit.

You can manage cookie preferences through your mobile browser settings. Please note that disabling essential cookies will impair your ability to log in and use the platform. wj802 does not use cookies to serve third-party advertising or to track your browsing activity on other websites.

wj802 retains your personal data for as long as your account is active and for such additional periods as are required by applicable law and regulation. The following general retention periods apply: account and identity data is retained for the duration of the account plus a minimum of 5 years after closure to satisfy AML record-keeping obligations; financial transaction records are retained for a minimum of 7 years; support communication records are retained for 3 years from the date of the interaction.

Where you request deletion of your personal data, wj802 will delete or anonymise data that is not required to be retained under applicable law. Data subject to a legal retention obligation will be held securely and in an access-restricted state until the retention period expires, at which point it will be deleted.

wj802 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data stored at rest, access controls that restrict employee access to personal data on a strict need-to-know basis, regular security audits and penetration testing of the platform infrastructure, and multi-factor authentication for administrative access to backend systems.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, wj802 will notify affected players promptly and take all necessary steps to contain the breach and mitigate its impact.

As a user of the wj802 platform, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, contact wj802 customer support with your registered mobile number and a description of your request.

• Right of access — you may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to rectification — you may request correction of inaccurate or incomplete personal data held about you.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing — you may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to withdraw consent — where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

wj802 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

The wj802 platform is strictly for adults aged 21 and above. wj802 does not knowingly collect personal data from individuals under the age of 21. If we discover that personal data has been collected from a person under 21 without the appropriate age verification having been completed, we will delete that data immediately and close the associated account. If you believe a minor has registered a wj802 account, please contact our support team immediately so that we can investigate and take appropriate action.

wj802 may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices or the features of the platform. When material changes are made to this Policy, we will display a prominent notice on the platform and, where appropriate, notify registered players via the mobile number associated with their account.

The updated Privacy Policy will take effect from the date specified in the notice. Your continued use of the wj802 platform after the effective date of an updated Policy constitutes your acceptance of the revised terms. The most current version of this Policy will always be available on this page.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how wj802 has handled your personal data, please contact our customer support team. We are available 24 hours a day, 7 days a week, and will respond to all privacy-related enquiries promptly.

Email: [email protected]