Privacy Policy

Winbay Casino may handle personal information that is needed to provide and administer an online gambling account. The amount and type of information collected may depend on the services used, the transactions requested and the checks required before or during account use. Some information is provided directly by a player, while other information may be created automatically when the website or account is used.

Account and identity information

This may include a player’s name, date of birth, residential details, contact details, account login information and preferences. We may also keep information about account activity, responsible gambling settings, communications with support and other details needed to manage the player relationship. Players should provide information that is accurate, current and complete, and should update it if circumstances change.

Verification information

To confirm identity, age, eligibility or the source and movement of funds, we may request verification documents or related information. This can include identity documents, proof of address, payment verification material and information used for customer due diligence. Verification material is handled for account protection, fraud prevention, safer gambling processes and compliance with applicable requirements.

Payment and transaction information

We may record details about deposits, withdrawals, wagers, wins, bonuses where applicable, payment methods, transaction references and related account balances. Payment service providers may process payment details on behalf of the site. We generally use transaction records to operate the account, process requested payments, investigate unusual activity, answer questions and meet record-keeping obligations.

Device, usage and cookie information

When a player visits or uses the website, technical information may be collected, such as an IP address, browser type, operating system, device identifiers, language preferences, pages visited, approximate location based on technical data, access times and information about how the site is used. Cookies and similar technologies may help remember settings, maintain sessions, support security, understand website performance and improve the player experience.

Personal information is used only for purposes connected with operating the casino website, managing accounts, providing requested services and meeting applicable obligations. The purposes may include the following:

• Creating, maintaining and securing player accounts.
• Confirming identity, age and eligibility before allowing certain account activities.
• Processing deposits, withdrawals and other account transactions.
• Carrying out anti-fraud, anti-money-laundering, security and risk checks.
• Detecting, preventing and investigating suspicious, unlawful or unauthorised activity.
• Providing customer support, responding to enquiries and resolving complaints.
• Applying account controls, safer gambling measures and player protection processes.
• Maintaining accurate business, payment, gaming and compliance records.
• Improving website functionality, performance, security and accessibility.
• Sending service messages about accounts, transactions, security, changes or other essential matters.
• Sending marketing communications where permitted and where the player has given consent or another lawful basis applies.
• Protecting the rights, property and security of players, Winbay Casino and relevant service providers.

Information may be used in combination with information from account activity, verification checks, payment providers, fraud prevention services or other lawful sources. This helps identify unusual behaviour, protect accounts and make sure that services are provided responsibly. Automated tools may assist with security, verification or risk assessment. Where appropriate, additional review or information may be requested before an account action is completed.

Marketing preferences can be changed at any time. Choosing not to receive marketing does not prevent the sending of important service, security or transaction messages. A request to withdraw consent applies to future marketing use and does not affect processing that was already carried out lawfully before the withdrawal.

Personal information may be shared where this is reasonably necessary to provide services, protect players, complete transactions or meet legal and operational requirements. This may include sharing relevant information with payment providers, identity and verification providers, fraud prevention services, technology and hosting providers, customer support providers, professional advisers and other service providers that support website operations. Service providers are expected to handle information securely and only for appropriate purposes.

Information may also be disclosed where required or permitted by applicable requirements, in response to a lawful request, to protect the safety or rights of a person, to investigate suspected fraud or unlawful conduct, or in connection with a business change. Only information relevant to the particular purpose should be shared where practical. We do not intend to sell personal information as a standalone product.

Reasonable technical and organisational measures are used to help protect personal information from unauthorised access, loss, misuse, alteration or disclosure. These measures may include account controls, access restrictions, authentication processes, monitoring, secure data handling and staff or provider procedures. No website, internet transmission or electronic storage system can be guaranteed to be completely secure, so players should use strong, unique passwords and keep login details confidential.

Personal information is kept only for as long as it is reasonably needed for the purposes described in this policy, unless a longer period is required or permitted. Closing an account does not necessarily result in the immediate deletion of every record. Some account, identity, payment, transaction, security and compliance records must be retained for a period required by law or for legitimate business, dispute-resolution and fraud-prevention purposes. When information is no longer required, it should be securely deleted, anonymised or otherwise disposed of in an appropriate way.

Where information is handled by providers located in another country, the transfer and handling of that information may be subject to the provider’s systems and applicable privacy requirements. Appropriate contractual, technical or organisational safeguards may be used where relevant.

Cookies are small text files or similar technologies placed on a device when a website is visited. Some cookies are necessary for the website to function, keep a player signed in, remember selected settings, support security or help process account activity. Other cookies may help measure website performance, understand general usage patterns and improve content or services.

Cookies may be temporary and expire when a browser session ends, or they may remain on a device for longer. The information collected through cookies may be linked with account or device information where this is necessary for the relevant purpose. Cookies should not be used to bypass account security or to obtain information that a player has not chosen to provide.

Players can manage, block or delete cookies through their browser settings. Disabling certain cookies may affect website functionality, account access, security features or the availability of some services. Browser settings differ, so players should check the help information for their chosen browser or device. Continuing to use the website with cookies enabled may allow the technologies needed for normal operation to be used.

Players may have rights and choices concerning the personal information held about them, subject to applicable requirements and reasonable verification of identity. These rights help players understand how information is used and request changes where appropriate.

• Access: request information about the personal data held about you and, where appropriate, a copy of that information.
• Correction: ask for inaccurate, incomplete or out-of-date personal information to be corrected or updated.
• Deletion: request deletion of personal information where it is no longer needed or where another applicable ground supports the request.
• Marketing consent: withdraw consent to marketing communications and ask for marketing preferences to be updated.
• Information about use: ask general questions about the purposes for which personal information is handled and the types of providers that may receive it.

To exercise these rights or make a privacy or data-handling request, contact support@winbaycasino.best. Please explain the request clearly and provide enough information to help identify the relevant account. For security, additional information may be requested to verify identity before information is provided or an account change is made.

A request may be limited, refused or delayed where this is permitted or required by applicable requirements, including where responding could affect the rights of another person, compromise security or fraud controls, interfere with an investigation, or require records to be retained. A deletion request cannot remove records that must be kept for a period required by law. If a request cannot be completed in full, the reason and any available alternative should be explained where appropriate.

Players should contact privacy support if they believe personal information has been used incorrectly, if account information needs updating, or if they have questions about this policy. This policy may be reviewed and updated from time to time to reflect changes to the website, services, technology or applicable privacy requirements. The latest version published on the website will apply to information handled under the policy.