Privacy policy

Why We Process Your Player Data

We collect and process personal data to identify you and deliver our services effectively. During registration you provide basic details such as:

• Name
• Date of birth
• Email address
• Gender
• Address
• Preferred currency

When making deposits or withdrawals, we collect financial information (e.g. debit/credit card details). To verify identity, we may request additional documents including:

• Copy of ID, passport, or driving licence
• Proof of address
• Credit card images (if required)
• Source of funds confirmation (for larger transactions)

By logging in, you consent to the collection of location data to ensure you are not accessing the site from a restricted jurisdiction where gambling is prohibited or requires a local licence.

We only process Player Data when there is a lawful basis:

• Consent — Obtained during registration (via checkboxes) or implicitly through actions like depositing.
• Contract fulfilment — Processing account and payment details to provide real-money gaming services.
• Legal obligations — Complying with anti-money laundering laws, identity verification, suspicious transaction reporting, and responsible gambling requirements.
• Legitimate interests — Preventing fraud (including stolen cards and chargebacks), protecting users, improving services, conducting statistical research, maintaining customer relations, and sending promotional offers (unless you opt out).

Refusing to provide required data may prevent us from offering the full service or specific features.

How We Collect Player Data

Most information is provided directly by you during account creation and transactions. Financial data is transmitted via secure SSL-encrypted servers. Verification documents can be uploaded securely through your player account.

To detect and prevent fraud or criminal activity, we may also obtain financial information from:

• Other online gaming operators
• Banks and credit card companies
• Fraud prevention agencies

We also retain records of all correspondence (via website, email, phone, or other channels).

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or longer when required or permitted by law. This includes periods needed to:

• Resolve disputes
• Enforce our Terms and Conditions
• Meet licensing, technical, security, and regulatory obligations

In general, data is kept for the duration of our relationship plus any additional time mandated by the licensing authority.

Data Sharing

We share Player Data only when necessary and under controlled conditions:

Service Providers and Business Partners

We engage trusted third-party providers to support our operations, including:

• Hosting and server services
• Data analytics and marketing tools
• Payment processing
• Fraud detection and cybersecurity
• Email distribution and session recording
• Legal, financial, and privacy advisors

These providers may access data only to perform their designated functions. We remain responsible for their processing activities.

Legal Disclosures

We may disclose data to law enforcement, regulators, or government authorities in response to valid legal requests (subpoenas, court orders, etc.) or to comply with applicable laws, including for national security, fraud prevention, or investigating illegal conduct.

Protecting Rights and Safety

Data may be shared (with or without notice) if we believe in good faith that it is necessary to protect the rights, property, or safety of WinCraft, our users, or the public.

Group Companies and Business Transfers

We may share data internally within affiliated companies for the purposes outlined here. In the event of a merger, acquisition, or sale of assets, data may be transferred to the relevant parties (with notice if the change materially affects your data).

Additional sharing may occur with your explicit consent, when legally required, or after data has been fully anonymised.

Marketing and Advertising

We may share information with advertising and marketing partners to deliver personalised promotions, tailored content, and relevant offers related to our services or those of group companies and business partners. This may involve direct marketing via email, SMS, post, or telephone.

Marketing communications are sent only with your consent. You can withdraw consent or opt out at any time by:

• Using the unsubscribe link in any marketing message
• Contacting customer support

Service-related notifications and updates will continue even after opting out of marketing.

Security Measures

We implement robust technical and organisational measures to protect your data against unauthorised access, loss, or alteration. Key protections include:

• SSL encryption for data transmission
• No storage of full credit/debit card details on our systems
• Payment processing handled exclusively by certified third-party providers
• Encrypted storage of passwords
• Unique username + password access to accounts

For further information, please contact our customer support team.

Linked Websites and Game Providers

This Privacy Policy applies only while you remain on our website. Links to external sites are governed by those sites’ own privacy policies. When playing specific casino or betting games, the privacy policy of the respective game provider also applies.

Your Rights

Right to Object

You may object at any time to:

• Processing of your data for direct marketing purposes
• Processing based on legitimate interests (by explaining your particular situation)
• Processing for gaming purposes (which will result in account closure; data retained as required by regulators)

Submit objections via customer support.

Other Rights

You have the right to:

• Withdraw consent at any time
• Access your personal data and receive a copy
• Request correction of inaccurate, outdated, or unnecessary data
• Request erasure of data (subject to legal retention obligations)
• Restrict processing (e.g. while we review an access or erasure request)
• Receive your data in a structured, machine-readable format and transmit it to another controller (you can print your data directly from your profile page)

For questions about your rights or to lodge a complaint about our data protection practices, contact customer support or your local data protection authority.

We may update this policy from time to time. Please review it regularly.