Privacy · Data Protection · Your Rights

Grapwin Privacy Policy — Your Data, Protected

At Grapwin, we take your privacy seriously. This policy explains exactly what personal data we collect from players in Bangladesh, why we collect it, how we use it, and what rights you have over your own information. No jargon, no hidden surprises.

Last Updated: January 2025
Our Privacy Commitments

Six Things Grapwin Promises About Your Data

Before you read the full policy, here is what Grapwin commits to every player in Bangladesh when it comes to handling personal information.

We Encrypt Everything

All data transmitted between your device and Grapwin is protected with industry-standard TLS encryption. Your personal details and payment information are never sent in plain text across the network.

We Never Sell Your Data

Grapwin does not sell, rent, or trade your personal information to third-party marketers or data brokers. Your data is used to operate your account and improve your experience — nothing else.

You Control Your Data

You have the right to access, correct, and request deletion of your personal data at any time. Grapwin makes it straightforward to exercise these rights by contacting our support team.

Minimal Data Collection

Grapwin only collects the data that is genuinely necessary to operate your account, process payments, and comply with legal requirements. We do not collect data for the sake of it.

Clear Retention Limits

Grapwin does not keep your data indefinitely. We have defined retention periods for each category of data, and we delete or anonymise data once it is no longer needed for its original purpose.

Breach Notification

In the unlikely event of a data breach that affects your personal information, Grapwin will notify affected players promptly and take immediate steps to contain and investigate the incident.

Contents
  1. Introduction
  2. Data We Collect
  3. How We Collect Data
  4. How We Use Your Data
  5. Who We Share Data With
  6. Payment Data
  7. Cookies and Tracking
  8. Data Retention
  9. Security Measures
  10. Your Rights
  11. Minors
  12. Policy Updates
  13. Contact Us

01 Introduction

This Privacy Policy describes how Grapwin ("we", "us", "our") collects, uses, stores, and protects the personal data of players who register and use the Grapwin platform at grapwin.top. Grapwin is Bangladesh's dedicated crash gaming platform, and we are committed to handling your personal information with care and transparency.

By registering an account on Grapwin, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described here. If you do not agree with this policy, please do not register or continue using Grapwin.

This policy applies to all personal data collected through the Grapwin website, mobile experience, and any communications between you and Grapwin's support team. It does not apply to third-party websites or services that may be linked from Grapwin.

Plain language: This policy tells you what data Grapwin holds about you, why we have it, and what you can do about it. We have written it to be as clear as possible for players in Bangladesh.

02 Data We Collect

Grapwin collects personal data in several categories. The table below summarises what we collect and why each category is necessary.

Data Category Examples Why We Collect It
Identity Data Full name, date of birth, national ID number Account registration, age verification, identity checks
Contact Data Phone number, email address Account communication, support, security alerts
Financial Data bKash/Nagad/Rocket account number, transaction history Processing deposits and withdrawals, fraud prevention
Technical Data IP address, device type, browser, operating system Platform security, fraud detection, performance optimisation
Usage Data Games played, bet amounts, session duration, cash-out times Responsible gaming monitoring, platform improvement
Communication Data Support chat logs, email correspondence Resolving disputes, improving support quality

Grapwin does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law and with your explicit consent.

03 How We Collect Your Data

Grapwin collects your personal data through the following means:

  • Direct registration: When you create a Grapwin account, you provide your name, contact details, and date of birth directly.
  • Deposits and withdrawals: When you make a payment via bKash, Nagad, or Rocket, transaction data is shared with Grapwin by the payment provider to confirm the transaction.
  • Gameplay activity: Grapwin's systems automatically record your gameplay activity, including bets placed, games played, and outcomes.
  • Device and browser data: When you access Grapwin, your device automatically sends technical information such as your IP address, browser type, and device model.
  • Support interactions: When you contact Grapwin's support team via email or chat, the content of those communications is recorded to help resolve your query and improve our service.
  • Cookies and tracking technologies: Grapwin uses cookies and similar technologies to collect data about how you interact with the platform. See the Cookies section below for full details.
Grapwin does not purchase personal data from third-party data brokers or obtain your data from social media platforms without your knowledge.

04 How We Use Your Data

Grapwin uses your personal data only for legitimate purposes directly related to operating the platform and serving you as a player. The specific purposes are:

  • Account management: To create, maintain, and secure your Grapwin account, including verifying your identity and age.
  • Payment processing: To process your deposits and withdrawals via bKash, Nagad, and Rocket, and to maintain accurate transaction records.
  • Game delivery: To provide access to Grapwin's crash games — Dragon Master, Shaolin Soccer, Monkey King, Swimming, Crash Goal, Basketball, and Monster Crash — and to record game outcomes for verification purposes.
  • Customer support: To respond to your queries, resolve disputes, and improve the quality of our support service.
  • Security and fraud prevention: To detect and prevent fraudulent activity, money laundering, and unauthorised account access.
  • Responsible gaming: To monitor gameplay patterns and identify players who may need support, in line with our responsible gaming commitments.
  • Legal compliance: To meet our obligations under applicable laws and regulations, including responding to lawful requests from authorities.
  • Platform improvement: To analyse usage patterns and improve the performance, design, and features of the Grapwin platform.
  • Communications: To send you important account notifications, security alerts, and — where you have opted in — promotional messages about Grapwin offers.

Grapwin does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review.

Marketing communications: If you do not wish to receive promotional messages from Grapwin, you can opt out at any time by contacting [email protected] or using the unsubscribe option in any marketing email.

05 Who We Share Your Data With

Grapwin does not sell your personal data. We share your data only with trusted third parties who help us operate the platform, and only to the extent necessary for those purposes. The categories of recipients are:

  • Payment processors: bKash, Nagad, and Rocket receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and security standards.
  • Identity verification providers: Where required, Grapwin uses third-party identity verification services to confirm player identity and age. These providers process only the data necessary for verification.
  • IT and hosting providers: Grapwin's platform is hosted on secure servers. Our hosting and infrastructure providers may have access to data as part of their service delivery, under strict confidentiality obligations.
  • Legal and regulatory authorities: Grapwin may disclose personal data to law enforcement, regulatory bodies, or courts where required by law or in response to a lawful request.
  • Fraud prevention services: Grapwin may share data with fraud detection services to identify and prevent fraudulent activity on the platform.

All third parties with whom Grapwin shares data are required to handle that data securely and in accordance with applicable privacy standards. Grapwin does not permit third parties to use your data for their own marketing purposes.

No data selling, ever. Grapwin has never sold player data and will never do so. Your information is used only to operate your account and keep the platform safe.

06 Payment Data and Financial Information

Grapwin takes the security of your financial information very seriously. When you make a deposit or withdrawal via bKash, Nagad, or Rocket, the transaction is processed directly through that provider's secure system. Grapwin does not store your mobile banking PIN, password, or full account credentials on our servers.

Grapwin does retain records of transaction amounts, dates, and the last few digits of the account used, for the purposes of:

  • Confirming that deposits have been credited correctly to your Grapwin balance.
  • Processing withdrawal requests to the correct account.
  • Maintaining financial records as required by applicable law.
  • Investigating disputed transactions or potential fraud.

Transaction records are retained for a minimum of five years in line with standard financial record-keeping requirements. After this period, records are securely deleted or anonymised.

Grapwin will never ask for your bKash, Nagad, or Rocket PIN via email, chat, or phone. If you receive such a request claiming to be from Grapwin, do not respond and contact [email protected] immediately.

07 Cookies and Tracking Technologies

Grapwin uses cookies and similar tracking technologies to improve your experience on the platform, keep you logged in securely, and understand how players use the site. Here is a breakdown of the types of cookies Grapwin uses:

  • Essential cookies: These are required for the platform to function. They keep you logged in, maintain your session, and enable core features like deposits and gameplay. You cannot opt out of essential cookies while using Grapwin.
  • Analytics cookies: These help Grapwin understand how players navigate the platform — which pages are visited most, where players drop off, and how long sessions last. This data is used in aggregate and does not identify individual players.
  • Security cookies: These help Grapwin detect suspicious activity, such as login attempts from unusual locations or devices, and protect your account from unauthorised access.
  • Preference cookies: These remember your settings and preferences, such as your preferred language or display options, so you do not have to set them every time you visit.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Grapwin platform. Grapwin does not use third-party advertising cookies or tracking pixels for ad targeting purposes.

08 Data Retention

Grapwin retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The general retention periods Grapwin applies are:

  • Account data: Retained for the duration of your account and for up to 5 years after account closure, to comply with legal and regulatory obligations.
  • Transaction records: Retained for a minimum of 5 years from the date of the transaction, in line with financial record-keeping requirements.
  • Gameplay records: Retained for up to 2 years for responsible gaming monitoring and dispute resolution purposes.
  • Support communications: Retained for up to 2 years after the query is resolved, to assist with any follow-up issues.
  • Technical and usage data: Retained for up to 12 months, after which it is aggregated or anonymised.

When data is no longer required, Grapwin securely deletes or anonymises it so that it can no longer be linked to you as an individual. If you request account closure, Grapwin will begin the deletion process for data that is not subject to a legal retention requirement.

09 Security Measures

Grapwin implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, or misuse. These include:

  • TLS encryption: All data transmitted between your device and Grapwin's servers is encrypted using Transport Layer Security (TLS).
  • Secure data storage: Personal data is stored on servers with restricted access, protected by firewalls and intrusion detection systems.
  • Access controls: Only authorised Grapwin staff with a legitimate need can access player personal data, and all access is logged and monitored.
  • Regular security reviews: Grapwin conducts regular reviews of its security practices and infrastructure to identify and address potential vulnerabilities.
  • Two-factor authentication: Grapwin offers two-factor authentication for player accounts to add an extra layer of protection against unauthorised login.
While Grapwin takes every reasonable precaution to protect your data, no system is completely immune to security risks. You also play a role in keeping your account secure — use a strong, unique password and never share your login credentials with anyone.

10 Your Rights Over Your Data

As a Grapwin player, you have the following rights regarding your personal data. To exercise any of these rights, contact Grapwin at [email protected] with your request and account details.

  • Right of access: You can request a copy of the personal data Grapwin holds about you. We will provide this within a reasonable timeframe.
  • Right to correction: If any of your personal data held by Grapwin is inaccurate or incomplete, you have the right to request that it be corrected.
  • Right to deletion: You can request that Grapwin delete your personal data. Note that some data may need to be retained for legal or regulatory reasons even after a deletion request.
  • Right to restrict processing: In certain circumstances, you can ask Grapwin to restrict how your data is used while a query or complaint is being resolved.
  • Right to data portability: You can request that Grapwin provide your personal data in a structured, commonly used format so you can transfer it to another service if you wish.
  • Right to withdraw consent: Where Grapwin processes your data based on your consent (such as for marketing communications), you can withdraw that consent at any time.

Grapwin will respond to all data rights requests within 30 days. If a request is complex or involves a large volume of data, we may extend this period and will notify you accordingly.

Your rights over your data are real and Grapwin takes them seriously. If you ever feel your request has not been handled properly, you have the right to escalate the matter to the relevant data protection authority.

11 Minors and Age Restrictions

Grapwin is strictly for players aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If Grapwin becomes aware that a player is under 18, their account will be closed immediately, all data will be deleted (subject to any legal retention requirements), and any deposits will be returned where possible.

If you believe that a minor has registered on Grapwin, please contact us immediately at [email protected] so we can investigate and take appropriate action.

Parents and guardians: If you are concerned about a young person accessing Grapwin, we encourage you to use parental control tools available on most devices and internet service providers to restrict access to gambling websites.

12 Updates to This Privacy Policy

Grapwin may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify players via their registered contact method or a notice on the platform.

We encourage you to review this Privacy Policy periodically. The most current version will always be available at grapwin.top/privacy-policy. Your continued use of Grapwin after any changes to this policy constitutes your acceptance of the updated version.

13 Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how Grapwin handles your personal information, please get in touch with our team:

  • Email: [email protected]
  • Subject line: Privacy Request — [your registered phone number]
  • Response time: We aim to respond to all privacy-related queries within 5 business days
  • Support hours: 24 hours a day, 7 days a week

For general account support, visit our FAQ page. For information about responsible gaming tools and support, visit our Responsible Gaming page.

Grapwin's support team handles all privacy requests with care and confidentiality. We will never share the details of your privacy request with anyone other than the staff directly involved in resolving it.
Play with Confidence on Grapwin

Your Privacy is Protected. Ready to Play?

Register your free Grapwin account today and enjoy Bangladesh's best crash games — Dragon Master, Monkey King, Crash Goal, and more — with full confidence that your data is safe.

Create Free Account Login to Grapwin