Your Privacy at Winningz Casino
This Privacy Policy explains what personal information we collect when you play at winningz-pokies.com, why we collect it, how long we keep it, and the choices you can make about it. We wrote it in plain English so you can actually read it.
What Data We Collect
We collect only the information we need to run your account, verify your identity and meet our regulatory obligations under our Curaçao licence (OGL/2025/1567/0912). Here is the full picture of what lands in our systems.
- Identity data: your full name, date of birth, email address, phone number and residential address.
- Verification documents: a government-issued ID, proof of address and payment method verification, required before your first withdrawal.
- Transaction data: deposits and withdrawals made via PayID, Neosurf, Visa, Mastercard, Skrill, Bitcoin, Ethereum, Tether and our other supported methods, including amounts, timestamps and currency.
- Technical data: your IP address, device type, operating system, browser and approximate location derived from your IP.
- Gameplay behaviour: the games you open, bets you place, wins, losses, session duration and bonus usage.
- Marketing preferences: which promotions you opt into, your communication channel choices and whether you have opted out.
How We Use Your Data
Every use of your data maps to a specific purpose. We do not sell your information, and we do not use it for anything unrelated to operating the casino.
- Creating and maintaining your player account and processing your deposits and withdrawals.
- Verifying your identity under KYC checks, which take 1-3 business days, and meeting anti-money-laundering obligations.
- Preventing fraud, bonus abuse and multiple-account creation.
- Monitoring for signs of problem gambling so we can offer responsible-gambling tools such as deposit limits, loss limits and session reminders.
- Sending you marketing and bonus offers, only where you have consented, including weekly 20% cashback news and Friday reload promotions.
- Meeting legal, tax and regulatory record-keeping duties.
Our Legal Bases
Contract
We process your identity and transaction data to set up and run your account. Without this information we cannot honour the contract between us, so registration itself requires it.
Legal obligation
Our licence and anti-money-laundering law oblige us to verify who you are and to retain transaction records for a minimum period. This applies whether or not you ask us to.
Legitimate interest
Fraud prevention and platform security rest on our legitimate interest in protecting our players and our business. We analyse gameplay and device data to detect abuse, and we balance this against your rights at every step.
Consent
Marketing messages and optional cookies run on your consent alone. You can withdraw it at any time by clicking the unsubscribe link or changing your cookie settings, and we will stop.
How Long We Keep It
We do not keep your data forever. Each category has its own retention clock, set by regulatory minimums or by how long the data serves you.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then 5 years after closure |
| KYC verification documents | 5 years after your last transaction, as required by AML rules |
| Transaction records | Minimum 5 years, per our regulatory obligations |
| Gameplay and betting history | 5 years |
| Marketing preferences | Until you withdraw consent or ask us to delete them |
| Technical and analytics data | Up to 24 months, then aggregated or deleted |
Who We Share It With
We share your data only with parties who need it to deliver a service to you, and each one is bound by contractual confidentiality. We never sell personal information.
- Payment processors handling your deposits and withdrawals through Visa, Mastercard, Skrill, MiFinity, Jeton and crypto networks.
- KYC and AML verification providers who confirm your ID documents and screen transactions.
- Our regulator in Curaçao, when reporting is legally required.
- Analytics and hosting providers who support site performance, working only on our instructions.
- Game providers on our platform, who receive your gameplay activity under strict data-processing terms.
Your Rights Over Your Data
You control your information. We answer every request within 30 days, and you will never be charged for a standard access request.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct anything that is inaccurate or out of date.
- Erasure: ask us to delete data we no longer have a legal reason to keep, noting that regulatory records cannot be erased early.
- Portability: receive your account data in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: stop marketing or optional cookies at any time.
- Complaint: raise a concern with our data protection officer at [email protected], or with the relevant data protection authority in your jurisdiction.
Cookies and Tracking
We use essential cookies to keep you logged in and your session secure, plus optional analytics and marketing cookies you can switch off. On your first visit you choose which categories to allow, and you can change that choice any time in your browser settings or via our cookie banner. Full detail, including the list of cookies we set and their lifespans, lives on our dedicated Cookies Policy page.
How We Protect Your Data
Your data travels over TLS encryption and is stored encrypted at rest. Access inside our systems follows a strict need-to-know model: staff can only reach the categories their role requires, and every access is logged and audited.
If a data breach affects you, we will notify you and the relevant supervisory authority without undue delay, in line with our obligations under our licence and applicable privacy law. We also run regular security reviews and penetration testing on the winningz-pokies.com platform. Questions about any of this go to our support team at [email protected], available 24/7.
Frequently Asked Questions
Do you sell my personal data to advertisers?
No. We never sell your personal information. Data is shared only with the service providers listed in this policy, such as payment processors and KYC providers, under strict contractual terms.
Can I delete my account and all my data?
You can close your account at any time by contacting [email protected]. Identity and transaction records are retained for a minimum of 5 years because our Curaçao licence and anti-money-laundering law require it. Everything else is deleted once it is no longer needed.
Why do you need my ID documents?
Before your first withdrawal we must verify your identity with a government-issued ID, proof of address and payment method verification. This is a legal KYC requirement of our licence, not a marketing exercise, and the check takes 1-3 business days.
How do I stop marketing emails?
Use the unsubscribe link in any email, or contact our support team. Marketing runs entirely on your consent, so withdrawing it stops those messages immediately, and we keep a record of your opt-out so we do not contact you again.