This Privacy Policy applies to all personal data processed by Winningz Casino when you access our website or use our mobile applications. We act as the data controller for all information collected during your registration, gameplay, and customer service interactions. This document sets out the full extent of our practices and obligations under applicable data protection laws.

We may update this policy from time to time to reflect changes in the law or our business practices. The current version governs your relationship with us and takes effect immediately upon publication on this website. You should review this document regularly to ensure you remain aware of how your data is handled.

Our services are intended for adults only and are subject to strict age verification requirements. By using our platform, you acknowledge that you have read and understood this policy. Failure to comply with the terms outlined here may result in the suspension or termination of your account.

This policy covers data collected directly from you as well as information gathered through automated means. We maintain a clear distinction between operational data and marketing communications. You retain control over certain aspects of your data through the privacy settings available in your account dashboard.

We share your personal data only with specific third parties who assist in our operations. These recipients include payment providers, identity verification services, and game suppliers. All such parties are contractually bound to protect your information and use it solely for the specified purpose.

Payment providers require your financial details to process deposits and withdrawals securely. Identity verification agencies confirm the authenticity of your documentation to prevent fraud. Game suppliers receive technical data necessary for game performance but not your financial history.

Regulators and law enforcement agencies may access your data when required by law. This occurs only when we receive a formal legal request or court order. We challenge requests that appear overly broad or unfounded to protect your privacy. No personal data is sold to third parties for marketing or commercial purposes.

International transfers occur when data processors are based outside the European Economic Area. We apply standard contractual clauses to ensure your data receives adequate protection. These legal mechanisms guarantee that overseas recipients meet EU data protection standards. We monitor compliance with these safeguards on an ongoing basis.

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy. Retention periods are dictated by regulatory requirements rather than business preference. You cannot request the deletion of data that must be kept by law.

Account and transaction records are retained for seven years following the closure of your account. This period aligns with statutory obligations regarding financial records and tax compliance. Verification documents are also kept for this duration to support regulatory audits.

Marketing consent data is deleted immediately upon withdrawal of your permission. However, operational data required for security and fraud prevention remains active. Device and connection logs are typically retained for ninety days before deletion. This balances security needs with data minimisation principles.

If you close your account, your identity and contact details are archived for compliance checks. Gameplay records may be kept longer in cases of ongoing disputes or investigations. We will notify you if data retention is extended beyond standard periods. All deletion occurs securely to prevent unauthorised recovery.

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access or loss. These include encryption protocols, strict access controls, and regular security assessments to identify vulnerabilities. Your information is stored on secure servers that are monitored continuously for suspicious activity. Despite these safeguards, technology alone cannot eliminate all risks in digital environments.

Despite these measures, no transmission over the internet is completely secure under any circumstances. You are responsible for maintaining the confidentiality of your login credentials and devices at all times. We recommend using strong passwords and enabling two-factor authentication where available to add an extra layer of protection. This shared responsibility ensures that both parties contribute to the security of your account.

If you have a concern regarding our data practices, please contact us first to explore a resolution. We aim to resolve issues informally before escalating them to a formal complaint procedure. The contacts page provides the necessary details to reach our dedicated data protection team directly. Most issues can be addressed quickly through this initial communication channel.

Should you remain dissatisfied with our response, you have the right to complain to the supervisory authority. This is the relevant regulatory body for data protection in your jurisdiction. We encourage you to exhaust our internal complaints procedure before approaching external regulators. This allows us the opportunity to resolve your concerns without involving third parties unnecessarily.