Your Privacy at Winota Casino
This policy explains what personal data we collect at Winota Casino, why we collect it, who we share it with and the rights you can exercise at any time.
Data We Collect From You
We collect personal data only where we need it to run your account, meet our legal obligations under the Curaçao licence 8048/JAZ2021-195 and keep gambling safe. The categories below cover everything we hold.
- Identity data: your full name, date of birth, email address, phone number and residential address.
- Verification documents: photo ID, proof of address and proof of your payment method, collected before your first withdrawal as part of KYC.
- Transaction data: deposits, withdrawals, bet history and bonus activity, including amounts in AUD or crypto.
- Technical data: IP address, device and browser type, operating system and approximate location derived from your IP.
- Gameplay behaviour: games played, session times, wagering patterns and win or loss history.
- Marketing preferences: whether you opted in to promotions, and which channels (email or SMS) you chose.
We treat verification documents as sensitive and store them separately from your general account record. Access to that store is limited to compliance staff who handle KYC checks.
How We Use Your Data
We process your data for seven defined purposes and no others.
- Creating and running your account, including login and balance management.
- Completing KYC verification before your first withdrawal, usually within 24 to 72 hours.
- Processing deposits and withdrawals through the methods you choose, including BTC, ETH and LTC.
- Preventing fraud, bonus abuse and underage gambling.
- Monitoring play for responsible-gambling purposes and applying limits or cool-off periods where you request them.
- Sending marketing about our welcome bonus package, weekly cashback up to 15% and VIP offers, only where you consented.
- Meeting legal obligations, including AML reporting and tax or regulatory requests.
Why Law Permits Processing
Contract
We process identity, transaction and account data because they are necessary to perform our contract with you. Without them we cannot open an account, take a deposit or pay a withdrawal.
Legal obligation
K
Y
C
d
o
c
u
m
e
n
t
s
,
t
r
a
n
s
a
c
t
i
o
n
r
e
c
o
r
d
s
a
n
d
A
M
L
r
e
p
o
r
t
s
a
r
e
p
r
o
c
e
s
s
e
d
b
e
c
a
u
s
e
g
a
m
b
l
i
n
g
l
a
w
r
e
q
u
i
r
e
s
u
s
t
o
h
o
l
d
a
n
d
d
i
s
c
l
o
s
e
t
h
e
m
.
T
h
i
s
b
a
s
i
s
o
v
e
r
r
i
d
e
s
y
o
u
r
o
b
j
e
c
t
i
o
n
r
i
g
h
t
s
f
o
r
t
h
e
s
e
r
e
c
o
r
d
s
.
Legitimate interest
F
r
a
u
d
p
r
e
v
e
n
t
i
o
n
,
s
e
c
u
r
i
t
y
l
o
g
g
i
n
g
a
n
d
a
g
g
r
e
g
a
t
e
d
s
e
r
v
i
c
e
s
t
a
t
i
s
t
i
c
s
r
e
l
y
o
n
o
u
r
l
e
g
i
t
i
m
a
t
e
i
n
t
e
r
e
s
t
i
n
k
e
e
p
i
n
g
W
i
n
o
t
a
C
a
s
i
n
o
s
a
f
e
a
n
d
f
u
n
c
t
i
o
n
a
l
.
W
e
w
e
i
g
h
t
h
i
s
a
g
a
i
n
s
t
y
o
u
r
p
r
i
v
a
c
y
e
x
p
e
c
t
a
t
i
o
n
s
a
n
d
k
e
e
p
t
h
e
d
a
t
a
m
i
n
i
m
a
l
.
Consent
M
a
r
k
e
t
i
n
g
e
m
a
i
l
s
a
n
d
o
p
t
i
o
n
a
l
c
o
o
k
i
e
s
r
u
n
o
n
l
y
o
n
y
o
u
r
c
o
n
s
e
n
t
.
Y
o
u
c
a
n
w
i
t
h
d
r
a
w
i
t
a
t
a
n
y
t
i
m
e
w
i
t
h
o
u
t
a
f
f
e
c
t
i
n
g
y
o
u
r
a
c
c
o
u
n
t
.
How Long We Keep It
Retention depends on the category. We delete data as soon as its purpose ends, except where regulation extends the period.
- Transaction and KYC records: at least 5 years after account closure, as required for AML purposes.
- Identity and account data: for the life of your account, then up to 12 months for dispute handling.
- Verification documents: deleted after the retention period, or earlier once duplicate checks are complete.
- Marketing preferences: until you withdraw consent or delete your account.
- Security logs: 12 months.
- Technical session data: 30 days.
Frequently asked questions
Can I close my account and erase everything?
You can request closure at any time. We erase marketing data immediately, but transaction and KYC records must be kept at least 5 years for AML compliance.
Do you sell my data?
No. We share data only with processors and regulators listed in this policy and never sell it.
Who do I contact about a privacy concern?
Email [email protected] and our data protection officer will respond within 30 days.