Grapwin's Privacy Policy – Your Data is Secure

Protecting your personal data is Grapwin's top priority. This privacy policy explains what data we collect, why we collect it, and how we keep it secure.

Last Updated: January 2026 Translated into English SSL Encrypted
Your Data Is Safe

Grapwin never sells your personal data to third parties. We use data solely to improve our services and meet legal obligations.

Grapwin's Our Data Protection Commitment

Grapwin follows internationally recognized technologies and standards to keep every piece of your data secure.

🔒

256-bit SSL Encryption

All data transfers on the Grapwin platform are secured with bank-grade 256-bit SSL encryption. No third party can read or intercept your information.

🚫

No Sale of Personal Data

Your name, address, phone number, and payment details are never sold to advertisers or third parties. Grapwin strictly prohibits the commercialization of user data.

🛡️

GDPR-Compliant

Grapwin complies with the European GDPR standard, one of the world's strictest data protection laws. This means you have full control over your own data.

🗑️

Right to Erasure

You may request the deletion of your personal data at any time. Unless a legal obligation applies, Grapwin will action your request within 30 days.

🎯

Essential Data Only

Grapwin collects only the information strictly necessary to provide its services. We do not request excessive or irrelevant data — data minimization is a core principle.

📋

Transparent Data Practices

Grapwin is fully transparent about where and how your data is used. No data is used for hidden purposes — every practice is documented in this policy.

Your privacy is our responsibility. Please read this privacy policy carefully before creating an account on Grapwin. Using the platform constitutes acceptance of this policy.
1 What Data We Collect

Grapwin collects different types of data for different purposes. This data falls into two main categories — information you provide directly and information collected automatically. Full details are outlined below.

A) Information you provide directly:

  • Full name & date of birth (for age verification)
  • Email Address & Mobile Number
  • Residential Address & Country
  • National ID / Passport Number (for KYC verification)
  • Payment method details (bKash / Nagad / Rocket number or USDT wallet)
  • Messages sent to support or contact information submitted

B) Automatically collected information:

  • IP Address & Device Type
  • Browser Type & Operating System
  • Browsing history and game logs on the platform
  • Login timestamps, session duration & activity logs
  • Cookies & Local Storage Data
Grapwin never stores your password in plain text. Passwords are always encrypted using a hashed format.
2 Purpose & Use of Data Collection

Grapwin uses your data only for specific, legitimate purposes. Each purpose is clearly outlined below so you know exactly where your information goes.

Data Type Purpose of Use Legal Basis
Name, Email, Mobile Account Creation & Communication Contract Performance
National ID KYC Verification & Age Confirmation Legal Obligation
Payment Information Deposit & Withdrawal Process Contract Performance
IP & Device Information Fraud Prevention & Security Legitimate Interest
Game & Transaction Logs Dispute Resolution & Audit Legal Obligation
Browsing Data Service Improvement & Personalization Legitimate Interest
  • Responsible Gaming Monitoring & Support
  • Personalizing promotions and bonus offers
  • Identifying and resolving technical issues
  • Reporting to Regulatory Authorities
3 Cookie Policy

Grapwin uses cookies on its website. Cookies are small text files stored in your browser that help improve your experience. Grapwin uses three types of cookies.

  • Essential Cookies: These cookies are essential for maintaining login sessions, storing security tokens, and ensuring core platform functionality. They cannot be disabled.
  • Analytical Cookies: These cookies are used to understand how you navigate the site. The data helps Grapwin improve its services.
  • Preference Cookies: Used to remember your language, theme preferences, and other settings so you don't have to reconfigure them each visit.
You can disable non-essential cookies at any time through your browser settings. Note that doing so may limit some functionality.
4 Data Sharing & Disclosure Policy

Grapwin never sells or rents your personal data to third parties for commercial purposes. However, there are limited circumstances in which data may need to be shared.

  • Payment Provider: Only the minimum necessary information is shared with bKash, Nagad, Rocket, or USDT service providers to process deposits and withdrawals.
  • Game Software Provider: Session data may be shared with licensed game providers operating Live Casino and other games.
  • Legal Authorities: Data may be disclosed to relevant authorities in cases involving court orders, government investigations, or legal obligations.
  • Company Restructuring: If Grapwin is sold or merged, the new entity will be bound by the same privacy policy.
Outside of the cases listed above, no data will be shared with any third party without your explicit consent.
5 Data Retention Period

Grapwin does not retain data longer than necessary. A specific retention period is defined for each type of data.

Data Type Retention Period Reason
Account Information For the duration of the active account + 5 years Legal Obligation
KYC Documents 7 years after account closure Regulatory Requirements
Transaction History 7 Years Financial Regulations
Game Log 3 Years Dispute Resolution
Marketing Preferences Until Consent is Withdrawn Consent-Based
Cookie Data 30 Days – 1 Year By Cookie Type

Once the retention period expires or you submit a deletion request, Grapwin securely destroys your data in a way that is not recoverable.

6 Your Data Rights

As a Grapwin user, you have a number of important rights over your personal data. These rights are recognized under GDPR and international data protection laws.

👁️

Right of Access

You can find out what information Grapwin holds about you.

✏️

Right to Rectification

You may request corrections to any inaccurate or incomplete information.

🗑️

Right to Erasure

Under certain circumstances, you may request that your data be deleted.

⏸️

Right to Restrict Processing

In certain cases, you may request that the processing of your data be restricted.

📦

Data Portability

You have the right to receive your data in a machine-readable format.

🚫

Right to Object

You may object to the use of your data for marketing or profiling purposes.

To exercise any of these rights, please contact the Grapwin support team. We will respond to your request within 30 days. In some cases, legal reasons may prevent us from fully fulfilling a request.
7 Security Measures

Grapwin has implemented both technical and organizational security measures to keep your data safe. We consistently follow the steps below to ensure that protection.

  • 256-bit TLS/SSL encryption — all data transfers are secured
  • bcrypt hashing — passwords are never stored in plain text
  • Two-Factor Authentication (2FA) — Account Login Protection
  • Firewall & DDoS Protection — Defense Against Cyber Attacks
  • Regular Security Audits — Reviewed by Third-Party Experts
  • Restricted access policy — only authorized personnel can view your data
  • Server-side data encryption — data is protected at rest
  • Security Incident Response Plan — rapid action in the event of any breach
No online system is 100% secure. Keep your account password strong and never share it with anyone. If you notice any suspicious activity, contact support immediately.
8 Third-Party Services & Links

Grapwin works with a number of trusted third-party service providers to operate its platform. All partners are bound by data processing agreements with Grapwin and are required to uphold the same privacy standards.

  • Payment Gateway: Regulated payment processors are used to handle deposits and withdrawals securely. These processors are PCI DSS certified.
  • Game Software: Licensed game providers are used for Slots, casino, and fish games. They are independently audited.
  • KYC Verification Services: Regulated identity verification services are used to confirm your identity.
  • Cloud Infrastructure: Data is stored on encrypted servers that undergo regular security testing.
Grapwin is not responsible for the privacy policies of third-party websites. Always review a site's policy before following any external link.
9 Protection of Minors' Data

Grapwin is strictly for users aged 18 and above. We do not knowingly collect or process personal data from minors. Age is verified at registration, and KYC documents may be requested in cases of doubt.

  • Accounts belonging to users under 18 will be closed immediately.
  • Parents or guardians who have concerns are welcome to contact us.
  • Any data found to belong to a minor will be deleted immediately.
  • In line with our Responsible Gaming policy, we are committed to protecting minors.
If you believe a minor in your household is using Grapwin, please contact our support team immediately.
10 Changes to the Privacy Policy

Grapwin may update this privacy policy from time to time. For significant changes, advance notice will be sent to your registered email and the revision date on this page will be updated.

  • For significant changes, at least 15 days' notice will be given in advance.
  • If you do not agree to the updated policy, you may request to close your account.
  • Continued use of the platform after changes take effect constitutes acceptance of the updated policy.
  • Previous versions can be requested through support.
Last updated on this Privacy Policy: January 2026. Next scheduled review: July 2026.

About the Privacy Policy Frequently Asked Questions

No, Grapwin never sells your personal information to third parties. Your data is used solely for service delivery, KYC verification, and legal compliance.

Closing your account will result in most of your data being deleted. However, transaction history and KYC documents must be retained for a set period (5–7 years) to meet legal obligations.

Grapwin collects general location data via IP addresses, primarily for fraud prevention and restricted region detection. Precise GPS location tracking is not used.

General information can be updated directly from your account settings. To update KYC-related information, please contact the support team — new documents may be required.

Yes. If your data is at risk of being compromised, you will be notified at your registered email within 72 hours, along with details of the incident and the steps taken.

Absolutely. Every marketing email includes an unsubscribe link. You can also manage your notification preferences from your account settings. However, transactional and security-related emails cannot be disabled.
🔒 Secure Platform

Your data is protected — Join Grapwin Now

Satisfied with Grapwin's privacy policy? Register today and enjoy the best gaming experience in a safe environment.

For users 18+. Your data is always protected. Terms & Conditions

বাংলা