Your Privacy at Winota Casino
This Privacy Policy explains what personal data we collect when you play at Winota Casino, why we collect it, how long we keep it and the controls you have over it. It applies to our website, our mobile site and every service we operate under our Curaçao licence 8048/JAZ2021-195.
What Data We Collect
We only collect data we can tie to a specific purpose: running your account, verifying your identity, processing your payments and meeting our regulatory duties. Where you do not provide a category listed below, we cannot open or maintain your account.
- Identity data: full name, date of birth, residential address, email address and phone number.
- Verification documents: passport or driver's licence, proof of address such as a utility bill, and proof of payment method.
- Transaction data: deposits, withdrawals, bonuses claimed, wagering and game outcomes.
- Device and connection data: IP address, device type, operating system, browser and approximate location derived from your IP.
- Gameplay behaviour: games played, session times, bet sizes and betting patterns, which we also use for responsible-gambling monitoring.
- Marketing preferences: whether you opted in to receive offers, and which channels you chose.
How We Use Your Data
Every use we make of your data maps back to one of the purposes below. We do not build profiles of you for sale, and we do not sell your data to anyone.
- Creating and administering your player account, including the 7-level VIP club.
- Verifying your identity under our KYC obligations before your first withdrawal.
- Processing deposits and withdrawals through the methods you select.
- Preventing fraud, bonus abuse, multi-accounting and underage gambling.
- Monitoring play for signs of problematic gambling behaviour so we can offer limits or support.
- Sending you marketing messages, but only with your consent and only the categories you agreed to.
- Meeting legal and regulatory obligations, including anti-money-laundering reporting.
Our Legal Bases
Contract: we process identity and account data to enter into and perform our agreement with you. Without it we cannot provide the service you asked for.
Legal obligation: Curaçao licence conditions require us to verify your identity, keep transaction records for at least five years and report suspicious activity. We process your data for these purposes because the law obliges us to.
Legitimate interest: we use device data, gameplay records and fraud-detection tools to keep the platform secure and fair. We weighed this interest against your rights and set the monitoring to the minimum needed to detect abuse.
Consent: marketing emails, SMS and personalised offers run on your consent alone. You can withdraw it at any time, and withdrawal never affects the lawfulness of messages sent before it.
How Long We Keep It
Retention depends on the category of data, not on your account status. We delete or anonymise data as soon as the period in the table expires, unless a regulator has told us to preserve it as part of an investigation.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then 5 years after closure |
| KYC verification documents | 5 years after account closure |
| Transaction and wagering records | Minimum 5 years, as required by regulation |
| Device and log data | Up to 12 months |
| Gameplay behaviour records | 5 years after account closure |
| Marketing preferences | Until you withdraw consent or ask us to delete them |
Who We Share It With
We share data only with processors and authorities that need it for a defined job, and every processor is bound by a written contract covering security and deletion. We never share your data for third-party advertising.
- Payment processors handling your deposits and withdrawals.
- KYC and AML verification providers that check your documents and screen transactions.
- The Curaçao regulator and law-enforcement bodies where a legal request requires disclosure.
- Analytics and hosting providers operating under our instructions.
- Affiliate networks, receiving only a confirmation that your registration came from their link.
Your Rights Over Your Data
You can exercise any right below by emailing [email protected] or our data protection officer at [email protected]. We respond within 30 days and will ask for identity confirmation before acting on requests involving your account.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is inaccurate or out of date.
- Erasure: request deletion where no legal retention duty applies.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: stop marketing at any time via the unsubscribe link or your account settings.
- Complaint: lodge a complaint with the relevant data protection authority, including the Office of the Australian Information Commissioner if you are in Australia.
Cookies and Tracking
We use session cookies to keep you logged in, preference cookies to remember settings, and analytics cookies to count visits. Marketing cookies load only after you accept them in the consent banner, and you can change your choice any time from the cookie settings link in the footer. Our dedicated Cookies Policy on this site lists every cookie, its purpose and its lifetime.
How We Protect Your Data
All traffic between your device and our servers runs over TLS encryption, and stored verification documents sit in encrypted storage separate from the general database. Access to personal data is role-based: support agents see account details, payment staff see transaction records, and only senior compliance staff can open KYC documents. Every access is logged and reviewed.
If a breach affects your personal data, we will notify the relevant supervisory authority without undue delay and inform affected players directly where the risk to you is high, together with what we have done to contain it.
Frequently Asked Questions
Does Winota Casino sell my personal data?
No. We share data only with processors such as payment providers and KYC vendors, regulators when legally required, and analytics providers acting on our instructions.
Can I close my account and have my data deleted?
You can request closure at any time. We erase identity and marketing data we no longer need, but transaction and wagering records must be kept for a minimum of 5 years under our licence conditions.
How do I stop marketing emails from Winota Casino?
Use the unsubscribe link in any message or switch off marketing in your account settings. Withdrawal of consent takes effect immediately.
Who do I contact about a privacy question?
Email our support team at [email protected] or our data protection officer at [email protected]. We respond to privacy requests within 30 days.