Winum Login: Access to Your Account
Signing in requires the email or phone number used at registration plus the password; the session persists on the device until manual logout. Account data — balance, bonuses, verification status — is stored centrally, so the same credentials work on the main domain, any official mirror and in the mobile app. This page covers the sign-in procedure, recovery of a lost password, and access routes when the primary address is unreachable.
Standard Sign-In
- Open the site or app and press Log In in the top right corner.
- Enter the email or phone number from registration.
- Enter the password. With two-factor authentication enabled, add the 6-digit code from the authenticator app.
- The session opens on the lobby; balance and active bonuses display in the header.
| Problem | Cause | Solution |
|---|---|---|
| Wrong password error | Typo or outdated password | Password recovery via email or SMS |
| Account not found | Different email / registered via phone | Try the alternate identifier; check for typos |
| Page does not load | Domain unreachable via provider | Use a mirror, the app, or another network |
| Account temporarily locked | Multiple failed attempts | Wait 30 minutes or contact support chat |
| 2FA code rejected | Device clock out of sync | Enable automatic time in phone settings |
Password Recovery
- On the login form, choose Forgot password.
- Enter the registration email or phone number.
- Receive the reset link (email) or code (SMS); both are valid for 30 minutes.
- Set a new password of at least 8 characters — the old one stops working immediately, and all other sessions are closed.
If the registration mailbox itself is lost, recovery goes through support with identity confirmation — the KYC documents on file are compared against what you provide. This path takes up to 24 hours and exists precisely so that a lost mailbox does not mean a lost balance.
Access When the Domain Is Unreachable
Indian providers periodically restrict individual gaming domains. The account is domain-independent, so three working routes exist:
- Official mirrors — alternative addresses with the same platform; current list published in the Telegram channel and by support chat. Avoid mirror links from search ads: phishing copies collect passwords through exactly that channel.
- The Android app — connects directly to the platform and keeps working regardless of web domain availability; see the app installation guide.
- Network change — restrictions are provider-specific; mobile data often opens what home broadband does not.
Securing the Account
- Enable two-factor authentication in profile settings — it blocks logins even with a stolen password.
- Use a unique password not reused from other services; credential-stuffing from leaked databases is the main hijack route.
- Check the active sessions list in the profile and close unknown devices.
- Never enter credentials on pages reached through ads or messenger links; type the address or use a saved bookmark.
Related pages: registration walkthrough, verification for payouts, support contacts.