Your Privacy at Wino Casino
This Privacy Policy explains what personal data we collect when you play at winocasino-gb.uk, why we collect it, how long we keep it, and what you can ask us to do with it. We operate under licence 8048/JAZ2017-067 issued by the Curaçao Gaming Authority, and we handle your data in line with GDPR principles regardless of where you sit in Europe.
Data We Collect
Categories of personal data
We collect only the data we need to run your account, verify who you are, process your payments and meet our regulatory duties. Here is the full picture of what enters our systems.
- Identity data: your name, date of birth, email address, phone number and country of residence.
- Verification documents: a photo ID (passport, driving licence or national ID), proof of address dated within the last three months, and payment method verification, collected as part of KYC before your first withdrawal.
- Transaction data: deposits, withdrawals, bonus usage, wagering records and the payment instruments linked to your account.
- Technical data: IP address, device identifiers, browser type, operating system and approximate location derived from your IP.
- Gameplay behaviour: games you open, session length, bet sizes, win and loss history, and responsible-gambling indicators such as deposit and loss patterns.
- Marketing preferences: which channels you consented to (email, SMS), which offers you engaged with, and any opt-outs you record.
How We Use Your Data
Every use of your data maps to a specific purpose. We create and maintain your player account, verify your identity under our KYC obligations, and process deposits and withdrawals through payment providers such as Visa Debit, Mastercard Debit, Trustly, Skrill, Neteller and crypto networks for BTC, ETH and USDT transactions.
We also run fraud prevention checks across deposits and wagering patterns, and we monitor gameplay behaviour for responsible-gambling signals. Where your play shows signs of harm, that data triggers deposit limit suggestions, reality checks or a direct intervention from our team. Marketing messages go out only where you have consented, covering our weekly 20% cashback, weekend reload bonus of 50% up to £900 and daily free spins drops.
Finally, we hold and process certain records to satisfy legal obligations imposed by our licence and by anti-money-laundering law, including transaction reporting and dispute evidence.
Our Legal Bases
Why the law lets us process your data
Contract. Processing your identity, account and transaction data is necessary to perform the agreement you enter when you register and play with us. Without it we cannot open an account, settle bets or pay out winnings.
Legal obligation. AML and gaming regulations require us to verify your identity, keep transaction records for at least five years and report suspicious activity. These processing operations happen whether or not you consent, because the law compels them.
Legitimate interest. Fraud prevention, security monitoring, aggregated statistics on game performance and service improvement rest on our legitimate interest in running a safe, functional casino. This interest never overrides your rights, and we weigh it against any impact on you.
Consent. Marketing emails, SMS offers and any non-essential cookies run only on your consent. You give it at registration or in your account settings, and you can withdraw it at any time without affecting your ability to play.
How Long We Keep It
Retention follows the data category, not a single blanket rule. Regulatory minimums set the floor for financial records, while your choices set the ceiling for marketing data.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then 5 years after closure for regulatory audit |
| KYC verification documents | 5 years minimum after account closure, as required by AML rules |
| Transaction data (deposits, withdrawals, wagering) | 5 years minimum, reviewed after 8 years for full deletion |
| Technical and device data | Up to 12 months, then aggregated or deleted |
| Gameplay behaviour records | Up to 5 years, used for dispute resolution and pattern analysis |
| Marketing preferences and consent logs | Until you withdraw consent, plus a 3-year record of the consent itself |
Who We Share It With
Categories of recipients
We never sell your personal data. Sharing is limited to processors and authorities who need it to deliver a function you requested or a legal duty we owe.
Payment processors handle your card, e-wallet and crypto transactions under strict contractual data-processing terms. KYC and AML screening providers verify your documents and run sanctions checks on our behalf. Our licence authority and financial regulators receive statutory reports, including suspicious-activity filings. Analytics providers process pseudonymised usage data to help us fix faults and improve page performance. Game providers receive only your player ID and session tokens so their servers can return game results to your account.
Each recipient is bound by a data-processing agreement that limits access, forbids onward sharing and requires deletion when the service ends.
Your Rights Over Data
What you can ask us to do
GDPR gives you direct, enforceable rights over the data we hold, and we answer every request within one month. Send it from your registered email and we will verify it against your account before acting.
- Access: a copy of all personal data we hold on you, in a portable format.
- Rectification: correction of inaccurate identity or account details.
- Erasure: deletion of data we no longer have a lawful reason to keep, subject to the regulatory retention periods listed above.
- Portability: your account, transaction and consent history in a machine-readable file.
- Objection: an objection to processing based on legitimate interest, including profiling for fraud detection.
- Withdrawal of consent: unsubscribe from marketing at any time via the link in every email or in your account settings.
- Complaint: you can lodge a complaint with your national data protection authority if you believe we mishandled your data.
Cookies and Tracking
We use strictly necessary cookies for login sessions, security tokens and payment integrity, plus optional analytics and marketing cookies that load only after your consent. Our cookie banner lets you accept, reject or fine-tune each category, and you can change your choice later in your account settings at any time. The full inventory of cookies, their purposes and lifespans sits on our dedicated Cookies Policy page, which we keep separate so you can review it without wading through this document.
Our Security and Contact
How we protect your data
All traffic between your device and our servers runs over TLS 1.3 encryption, and stored verification documents sit encrypted at rest in access-controlled storage. Staff access follows least-privilege rules with role-based permissions, and every access to KYC documents is logged and auditable.
If a personal data breach affects your rights, we notify the competent supervisory authority within 72 hours of confirming it, and we inform you directly where the breach poses a high risk to you.
Our Data Protection Officer answers privacy questions, handles data-subject requests and reviews every retention decision on this page. Write to [email protected] and expect a substantive reply within one month. For anything else, our support team is available on live chat or at [email protected], 24 hours a day.
Frequently asked questions
How do I request a copy of my data?
Email [email protected] from your registered address. We verify your identity and deliver the full export in a portable format within one month.
Can I delete my account data completely?
We delete everything we lawfully can on request, but transaction and KYC records must be retained for a minimum of 5 years after account closure to satisfy AML and gaming regulations.
Do you sell my personal data to advertisers?
No. We share data only with payment processors, KYC and AML providers, regulators and analytics services under strict data-processing agreements, and marketing consent stays in your hands.
How do I stop marketing emails from Wino Casino?
Use the unsubscribe link in any marketing email or switch off marketing in your account settings. Withdrawal of consent takes effect immediately and never affects your account or bonuses.