Privacy Policy

Introduction

We respect your privacy and are committed to protecting the personal information you share with us when using Winnix Casino services. This Privacy Policy explains what information we collect, how we use it, who we may share it with, and the choices and rights available to you.

Our legal status and controller

Winnix Casino operates under a remote gaming license issued by the Anjouan Gaming Authority (license number ALSI-202408015-FI1). We process personal data to provide our services and to meet legal and regulatory obligations related to gaming operations and player protection. When we refer to “we”, “us” or “our” in this policy, we mean Winnix Casino as the data controller for the personal data described below.

Information we collect

We collect information that is necessary to create and manage your account, to verify your identity, to provide our services, to comply with legal obligations, and to improve the user experience. This includes:

Account details: email address, password, username, chosen currency and country of residence.
Identity and verification data: full name, date of birth, government identification (for example passport or driving licence), and proof of address documents.
Contact details: postal address and telephone number.
Technical and usage data: IP address, device identifiers, browser type, operating system, pages visited, session times and crash reports.
Communications: messages you send to our support team and records of our responses.
Responsible‑gaming data: self‑exclusion requests, account limits you set, and other information you provide when using responsible‑gaming tools.

How we use your information

We use personal data for clear and specific purposes, including:

Registering and managing your account and providing customer support.
Verifying your identity as required by law and our licensing obligations.
Operating and improving our services, including security, fraud prevention, and abuse detection.
Communicating with you about your account, updates to our services, and important notices.
Complying with legal and regulatory requirements applicable to licensed gaming operators.
Providing and administering responsible‑gaming tools and interventions when necessary.
Aggregating anonymised usage data for analytics and service improvement.

Lawful bases for processing (GDPR‑style)

Where EU or other data protection law applies, we rely on one or more of the following lawful bases to process your personal data:

Performance of a contract: to provide services you request and to manage your account.
Legal obligation: to comply with licensing, anti‑money‑laundering, and other regulatory requirements.
Legitimate interests: for fraud prevention, network and information security, and service improvement, balanced against your privacy rights.
Consent: for direct marketing or other optional services where we ask for and rely on your consent. You may withdraw consent at any time.

KYC and identity verification

To meet regulatory obligations and to keep our platform secure, we will ask you to provide identity and proof‑of‑address documents. We process these documents solely to verify your identity and eligibility to use our services. Verification may be required before certain account actions, such as changing account settings or accessing specific features.

Cookies and similar technologies

We use cookies and similar technologies to operate the website, remember your preferences, analyse usage patterns, and detect fraudulent activity. You can manage cookie settings through your browser or our cookie controls where available. Blocking certain cookies may affect the functionality of the site.

Sharing your information

We may share personal data with third parties where necessary and appropriate, such as:

Regulatory and law enforcement authorities when required by law or for the purposes of investigation and compliance with our license obligations.
Service providers who perform services on our behalf, including identity verification, security and fraud prevention, customer support, analytics, and hosting.
Third‑party suppliers where sharing is necessary to provide specific features or to investigate abuse and security incidents.

We require third parties to protect personal data in accordance with applicable law and to use it only for the purposes for which we share it. We do not sell your personal data.

International transfers

Your data may be processed or stored in jurisdictions outside your country of residence. When we transfer personal data internationally, we take appropriate safeguards to protect it in line with applicable data protection laws. These safeguards may include contractual data‑protection terms with service providers and other measures required by law.

Data security

We implement technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or alteration. These measures include secure communications (TLS/SSL), access controls, and regular security monitoring. While we strive to protect your data, no system is 100% secure. If a security incident affects your personal data, we will notify you and the relevant authorities as required by law.

Data retention

We retain personal data only for as long as needed to fulfil the purposes described in this policy, to meet legal and regulatory obligations, and to resolve disputes. Retention periods vary depending on the nature of the data and legal requirements, and archived information may be kept to comply with regulatory record‑keeping obligations.

Your rights

If you are a resident of a jurisdiction with data‑protection rights (for example the European Economic Area), you may have the right to:

Request access to the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data where we do not have a legal basis to retain it.
Request restriction of processing in certain circumstances.
Receive a copy of your data in a portable, commonly used format (data portability) where applicable.
We will respond in accordance with applicable law. You also have the right to lodge a complaint with a supervisory authority in your country or region.

Children and age limits

Our services are intended for adults only. You must be of legal age to register and use our services. We do not knowingly collect personal data from individuals under the minimum legal age. If we become aware that we have collected data from a minor without appropriate verification or consent, we will take steps to delete that data.

Responsible‑gaming tools and data

We offer tools to help you manage your play, such as account limits, time‑outs, and self‑exclusion. When you use these tools, we process related information to enforce the measures you select and to comply with regulatory responsibilities. Records of self‑exclusion and similar requests are retained as required by applicable law.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes that affect how we use your personal data, we will provide notice via the website or other reasonable means. We encourage you to review this policy periodically.