Privacy Policy at Winners Casino
This Privacy Policy explains what personal data we collect when you use winnerscasino.uk, why we collect it, how long we keep it and the rights you have over it. We operate under Curaçao eGaming licence 8048/JAZ2021-054 and apply GDPR standards to every player in our en-GB market.
What Data We Collect
Categories of personal data
We collect only the data we need to run your account, verify your identity and meet our legal obligations. The categories below cover everything we hold about you.
- Identity data: full name, date of birth, email address, phone number and residential address.
- Verification documents: ID document (passport or driving licence), proof of address and payment method verification required before your first withdrawal.
- Transaction data: deposits, withdrawals, bonuses, wagering and bet history.
- Technical data: device type, operating system, IP address, browser type and approximate location.
- Gameplay behaviour: games played, session times, stake sizes and win/loss records.
- Marketing preferences: which channels you consented to (email, SMS) and your opt-in or opt-out history.
How We Use Your Data
We use your data to create and manage your account, complete KYC checks, process deposits and withdrawals, and prevent fraud and money laundering. We also monitor gameplay to support responsible-gambling measures such as reality checks, deposit limits and self-exclusion.
Where you have given consent, we use your email address and phone number to send promotional messages about offers like our 10% weekly cashback and weekend reload bonus. You can withdraw that consent at any time and we will stop marketing to you immediately.
Our Legal Bases
Why the law lets us process your data
Contract: we process identity, transaction and gameplay data to set up your account, honour the welcome bonus terms and pay out winnings. Without this data we cannot provide the service you signed up for.
Legal obligation: KYC verification, AML monitoring and transaction record-keeping are required by our licence from Curaçao eGaming (Antillephone N.V.), so we must process verification documents and transaction data whether or not you object.
Legitimate interest: we use technical data and gameplay behaviour to detect fraud, secure our platform and improve game performance. We weigh our interest against your rights and keep this processing minimal.
Consent: marketing messages, optional cookies and any profiling for personalised offers run only with your explicit, revocable consent.
How Long We Keep It
Retention by data category
We keep each category of data only as long as we have a reason to. Regulatory rules require transaction and KYC records to be held for at least five years after account closure; everything else is deleted sooner.
- Identity and account data: while your account is active, then up to 5 years after closure for audit purposes.
- KYC documents: up to 5 years after account closure, as required by AML regulations.
- Transaction data: minimum 5 years after closure.
- Marketing preferences: until you withdraw consent or 24 months after your last engagement with our messages.
- Technical logs: up to 12 months for security and fraud analysis.
Who We Share Data With
We never sell your personal data. We share it only with providers who help us operate the casino, and only as much as each one needs.
Payment processors handle your deposits and withdrawals through Visa Debit, Mastercard Debit, Trustly, Skrill, Neteller and our other listed methods. KYC and AML providers carry out identity and sanction screening. Game providers such as NetEnt, Pragmatic Play and Evolution receive your player ID and session data to run the games you open. Regulators may receive reports under our licence conditions. Analytics providers receive aggregated or pseudonymised data about site usage.
Your Rights Over Your Data
Exercise any right by contacting us
Under the GDPR you control your data. Email [email protected] or contact our data protection officer and we will respond within one month.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct inaccurate details such as your address.
- Erasure: ask us to delete data we have no legal duty to keep.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: stop marketing at any time.
- Complaint: complain to your national data protection authority.
Cookies and Tracking
We use essential cookies to keep you logged in and secure your sessions, plus optional analytics and marketing cookies that load only with your consent. You can change your cookie choices at any time from the banner or your browser settings. Full details, including the list of cookies we set, are on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic to winnerscasino.uk is encrypted with TLS, and stored data is encrypted at rest. Access to player records is limited to trained staff who need it, with role-based permissions and audit logging. We run regular security reviews and penetration tests.
If a personal data breach ever occurs, we will notify the relevant supervisory authority within 72 hours and inform you directly where the breach poses a high risk to your rights.
Contact Our Data Protection Officer
Our Data Protection Officer answers all privacy questions and handles data subject requests. Write to [email protected] or use the address in the site footer. We respond within one month of receiving a valid request, extended by two further months only for complex cases, and we will tell you if we need that extension.
Frequently Asked Questions
Can I play at Winners Casino without giving my ID documents?
You can register and play with your deposit, but we must verify your identity with an ID document, proof of address and payment method verification before your first withdrawal. This is a licence requirement we cannot waive.
How do I stop marketing emails?
Use the unsubscribe link in any message or email [email protected]. We stop marketing immediately after you withdraw consent and keep a record only of your opt-out.
Do you delete my account data after I close my account?
Verification and transaction records are kept for at least five years after closure because AML regulations require it. Everything else is deleted according to the retention periods in this policy.
Do you share my data with game providers?
Yes, minimally. Providers such as NetEnt and Evolution receive your player ID and in-session data only when you open their games, so results can be recorded to your account.