Privacy at Winbay Casino

Which privacy rights can you use?

You can ask to see the personal data that Winbay Casino keeps on you, together with an explanation of how it is used. If details are wrong or incomplete, you can have them corrected. You may also ask for deletion when neither the law nor a pressing business need requires us to continue, or to restrict its use in certain circumstances.

You can ask us to pass your data to another party in a common format that a computer can read. You may object when processing is based on legitimate interests or used for direct marketing. If processing depends on your consent, you can withdraw that consent at any time without changing the lawfulness of processing already carried out.

If you are unhappy with how we handle your data, you may complain to a data protection authority where you live or work, or where the problem arose. To make a request or ask a privacy question, email [email protected]. We may need to identify you before acting on a request.

What do you give us when you register?

When you open an account, we ask for details such as your full name, username, email, phone, date of birth, gender, country, postal code and social security number. We also receive your internet protocol address and location data when you register.

The details collected depend on how you interact with Winbay Casino. Information you submit directly may include messages to support, requests and other account communications.

What is needed for identity and payment checks?

For age, identity, due-diligence and payment checks, we may ask for an identity card or passport number, a social security number, proof of address, evidence of where your money or wealth comes from, a bank ID and financial statements or details. Payment information may include bank ID, national identification numbers, an international bank account number and payment-system details.

These records help us process deposits and withdrawals and meet identity, customer due-diligence and anti-money-laundering duties. The information requested can vary with the check being carried out.

What arrives automatically from your device?

When you use our services, we receive technical details such as your internet protocol address, operating-system version and device identifiers. Server logs can record the date and time of a session, pages viewed, time spent, links used, content viewed, searches, advertising clicks and sharing through social media.

Your approximate location may be collected or worked out. Cookies and similar technologies supply some of this information. Your interests and favourite games can also be inferred from what you browse and play.

What can come from other sources?

We may obtain personal data from public and government databases, the internet, social media, online or printed media and other publicly available sources. Information may also come from commercial databases, banks and credit bodies, fraud-prevention agencies and public authorities used to verify details or investigate suspicious activity.

Data you have made public can also reach us through social networks, linked accounts and other publicly accessible digital services. We use information from these sources to personalize services or meet legal obligations.

Why do we process personal data?

We use personal data to provide and support our services, answer questions, investigate problems and improve products. It also helps us maintain technical availability, protect systems and intellectual property, detect fraud or other harmful and illegal activity, manage risk, resolve disputes and meet legal or regulatory duties.

Marketing uses include newsletters, direct messages and offers tailored to your interests. We may analyse data for research, service development, customer segmentation and recommendations.

Which legal bases do we rely on?

A contract is the basis when processing is needed to create and support your account, communicate about the terms or provide the services you request.

Legal obligations can require age and identity verification, location checks, responsible-gambling risk management, network security, reporting and responses to court orders or other legal processes. They also cover crime prevention, including fraud, money laundering and terrorist financing, and handling requests to exercise data-protection rights.

Legitimate interests may support legal claims, technology and system security, business-relationship management, service improvement, analytics, research and marketing. We may use this basis for customer segmentation, identifying harmful behaviour, recommending games and features, or detecting cheating, fraud, abnormal patterns and unauthorized tools. We apply it only where your rights, freedoms and interests do not outweigh the relevant interest.

With your consent, we may send direct marketing by email, text message, phone, notification or account message. Consent may also support targeted advertising, customized promotions, marketing measurement and participation in competitions, tournaments, rewards, loyalty programs and promotional events.

Who may receive your data?

Access may be given internally to authorized employees and to contractors, agents, joint controllers, affiliates, subsidiaries and brands within the same operator or business group. Payment providers and financial institutions may receive account and contact details, along with identity-verification documents needed for their legal and anti-money-laundering duties.

We may share data with customer-support, communication, technology and cloud-hosting providers where needed to deliver, manage or improve services. Other recipients can include marketing partners, fraud-prevention agencies, game providers, analytics providers and data aggregators, as well as law-enforcement and regulatory authorities.

Data may also be disclosed in connection with a merger, financing, acquisition, bankruptcy, dissolution, transfer or sale of all or part of the business or its assets. A new owner may use it under this privacy notice unless you consent to a different use.

If you submit a complaint, review or query about us to an external forum, review service or dispute body, we may respond there. We disclose only data proportionate and necessary to identify the account and address what you or someone acting for you has raised. This is based on our legitimate interest in resolving external disputes and protecting our business reputation.

How long do we keep personal data?

We keep personal data while you maintain an account and for the purposes described here. A longer period may apply where legal obligations, including anti-money-laundering requirements, require retention.

After the account is closed and no legal or business need remains, the data is deleted or anonymized so it can no longer be linked to you.