Your Privacy at Winningz Casino
This Privacy Policy sets out how we, Winningz Casino (winningz.com), operated by Winningz Entertainment N.V. under Curaçao licence OGL/2025/1567/0912, collect, use and protect your personal data when you play with us. If you are located in the EU, we also process your data with the GDPR in mind.
Data We Collect From You
Categories of personal data
We collect only what we need to run your account, meet our licence obligations and keep the site safe. Here is the full list of categories.
- Identity data: your full name, date of birth, email address, phone number, residential address and country of residence.
- Verification documents: copies of your ID document, proof of address and proof of payment method, collected during KYC checks before your first withdrawal.
- Transaction data: deposits, withdrawals, bonus history, wagering records and payment method details (card digits, e-wallet or crypto address identifiers).
- Technical data: IP address, device type, operating system, browser type, session times and approximate location derived from your IP.
- Gameplay behaviour: games you open, bets you place, wins and losses, session duration and responsible-gambling indicators such as deposit and loss patterns.
- Marketing preferences: whether you opted in to promotional emails or SMS, which offers you received and how you responded.
You give us most of this data directly when you register, deposit or claim a bonus such as the 200% welcome package with promo code WIN200. Technical and gameplay data is collected automatically as you use the site, because our licence requires us to keep an auditable record of your activity.
How We Use Your Data
Purposes of processing
We use each category of data for a defined purpose, and we do not repurpose it without telling you first.
Our Legal Bases Explained
Contract: we process identity and transaction data to set up your account and pay out your winnings, because you and we have agreed to the terms of service. Without this data we cannot perform the contract you signed up for.
Legal obligation: our Curaçao licence obliges us to verify your identity, monitor transactions for AML purposes and keep records for the statutory period. We cannot offer you play without meeting these duties, so this processing is not optional for either of us.
Legitimate interest: we process technical and gameplay data to detect fraud, secure the platform and improve game performance. This interest is balanced against your rights, and it never covers advertising to you.
Consent: marketing messages, optional cookies and any use of your data beyond the purposes above rest on your freely given consent, which you can withdraw at any time.
How Long We Keep Records
Retention by data category
Gambling regulation sets minimum retention periods, so we cannot delete everything on request immediately. The table shows what applies once your account closes.
| Data category | Retention period |
|---|---|
| Transaction and wagering records | Minimum 5 years after account closure, per regulatory AML requirements |
| KYC verification documents | 5 years after account closure, then securely destroyed |
| Account and identity data | 5 years after closure for audit purposes |
| Technical and device data | Up to 12 months for security analytics |
| Marketing preferences and consent logs | Until you withdraw consent, plus a short record of the withdrawal for compliance |
| Self-exclusion records | Kept for the duration of the exclusion plus the statutory follow-up period |
Who We Share Data With
Categories of recipients
We do not sell your data. We share it only with processors and authorities who need it to deliver a service or enforce the law.
Your Rights Over Your Data
You control your data, subject to the retention rules above. Email [email protected] or contact our live chat, available 24/7, and we respond within 30 days.
Cookies and Tracking Notice
Our site uses cookies to keep you logged in, remember your game settings and measure site performance. Marketing cookies are set only after you accept them in the consent banner. Full details, including how to disable cookies in your browser, are on our dedicated Cookies Policy page.
How We Protect Your Information
Security measures in place
All traffic between your device and our servers runs over TLS encryption. Stored verification documents sit in an access-controlled vault, and only staff with a documented need, such as the KYC team, can open them.
Breach notification
Frequently asked questions
Can I play at Winningz Casino without giving my ID?
You can register and deposit with basic identity data, but our Curaçao licence requires full KYC verification, including an ID document and proof of address, before we release your first withdrawal.
How do I stop marketing emails from you?
Use the unsubscribe link in any promotional email or withdraw consent through [email protected]. We stop sending immediately, and we keep only a short record of your withdrawal for compliance.
Why can't you delete all my data when I ask?
Gambling regulations require us to keep transaction, wagering and KYC records for at least 5 years after your account closes. Everything outside those retention duties is deleted on request.
Who can I contact about a privacy concern?
Email our data protection officer at [email protected] or use the 24/7 live chat. If you are in the EU, you also have the right to complain to your local data protection authority.