What this policy covers
This Privacy Policy sets out the principles, legal bases, and technical safeguards under which WinWinter collects, processes, and protects the personal data of individuals who visit, register, or interact with our platform. The provisions herein apply to all processing activities conducted in connection with your user account and explain the operational necessity of every category of information held across our systems.
| Data we hold | Why we hold it | How long |
|---|---|---|
| Account details | Administration of player profiles, identity confirmation, age validation, and platform communications | As set out in our retention schedule |
| Verification documents | Identity authentication, age verification (18+), fraud mitigation, and anti-money-laundering compliance | As set out in our retention schedule |
| Payment records | Processing deposits and payouts, transactional auditing, and financial accounting | As set out in our retention schedule |
| Gameplay records | Platform integrity, dispute resolution, bonus tracking, and responsible gambling monitoring | As set out in our retention schedule |
| Marketing preferences | Management of player communication consents and direct promotional messaging | Until consent is withdrawn or as set out in our retention schedule |
Last updated: 30 October 2026
All personal data enquiries, including formal subject access requests, should be directed to our designated data administration desk at [email protected].
The data we collect and why
- Registration Data and Biographical Details
1.1 Upon registering an account with WinWinter, you are required to furnish fundamental personal details, including your full legal name, date of birth, primary residential address, personal email address, and contact telephone number. These fields are compulsory for any individual seeking to establish a wagering profile.
1.2 We process this baseline biographical information to perform our core contract with you. The provision of accurate details allows us to establish your individual account, confirm that you are at least 18 years of age, and ensure that our services are delivered specifically to an identifiable individual rather than an automated profile or an unauthorised third party.
1.3 In addition, holding verified contact coordinates ensures that our operational teams can dispatch critical service notices, transaction receipts, security warnings, and necessary platform updates without delay. Maintaining an accurate record of your primary residence further assists us in verifying contractual eligibility and preventing the creation of prohibited duplicate accounts from the same household.
- Verification Documentation and Identity Assurance
2.1 In accordance with standard operational integrity measures and statutory obligations, WinWinter mandates that every player completes identity verification prior to processing financial payouts. This verification framework requires the digital submission of an official government-issued photographic identification document—specifically an unexpired passport or a full national driving licence—alongside documented proof of address, such as an official bank statement, local authority tax bill, or utility invoice dated within the preceding three months.
2.2 The primary rationale for gathering and assessing these records is our strict adherence to domestic and international anti-money-laundering legislation, counter-terrorist financing standards, and anti-fraud protocols. Authenticating identity documents enables our risk administration unit to verify that funds circulating through our platform derive from legitimate, non-illicit sources and that the individual requesting a payout is the verified beneficial owner of the account.
2.3 Verification data also serves vital public protection functions. It validates that the account holder is of legal age to gamble, acts as an insurmountable hurdle against identity theft, and ensures that self-excluded individuals or vulnerable players are systematically prevented from accessing real-money gambling services.
- Financial Records and Transactional Telemetry
3.1 Throughout the lifecycle of your account, our cashier systems compile extensive transactional logs encompassing all financial movements. These records comprise deposit timestamps, withdrawal requests, transaction amounts denominated in GBP, chosen payment mechanisms (including debit cards, approved e-wallets, bank transfer references, and digital asset transaction identifiers), as well as internal deposit turnover metrics.
3.2 The processing of these financial data points is necessary for the execution of monetary transfers, the reconciliation of merchant payment streams, and the maintenance of rigorous commercial accounting ledgers. It also underpins our internal anti-fraud rule requiring that withdrawals must return to the precise payment instrument utilised for the initial deposit, thereby eliminating unverified third-party capital transfers.
3.3 Transaction histories are continuously scrutinised by automated risk systems to detect suspicious payment behaviour, chargeback activity, card misappropriation, or structured transactions designed to circumvent platform controls. Where irregular transactional velocities occur, these records provide the empirical foundation for our internal compliance reviews under applicable anti-money-laundering frameworks.
- Technical Identifiers, Session Logs, and Device Data
4.1 Each time you connect to our services via desktop or mobile interface, our host servers automatically log diagnostic technical telemetry. This data encompasses your Internet Protocol (IP) address, operating system, browser variant and language, hardware device model, referral URLs, precise session timestamps, and network routing configurations.
4.2 We process this technical information under our legitimate interest in maintaining network resilience, safeguarding infrastructure against malicious cyber incursions, and preventing unauthorised automated access, such as bot execution or scraping tools. Real-time telemetry monitoring assists in early detection of account takeovers, credential stuffing attacks, and concurrent unauthorized logins.
4.3 Furthermore, technical identifiers are processed to determine geographic access parameters, ensuring that sessions do not originate from restricted territories or through deceptive proxy configurations designed to obscure a player’s actual physical location.
- Gameplay History and Wagering Analytics
5.1 Our servers record every individual transaction occurring within the gaming catalogue, including game title selections, spin outcomes generated by independent test laboratories’ certified random number generators, wager sizes, win disbursements, bonus balance allocations, and session start and end times.
5.2 Maintaining an unalterable, chronological log of all gameplay events is mandatory for contractual balance settlement, technical auditing of game software, and the equitable resolution of any player disputes concerning transaction integrity or software malfunction.
5.3 Crucially, historical gameplay data serves as an essential foundation for our responsible gambling monitoring systems. Our monitoring algorithms analyse session duration, escalation in wager velocity, and deposit frequency to identify emerging behavioural indicators of gambling-related harm. This data enables our customer welfare team to introduce proactive interventions, such as reaching out to offer deposit ceilings, cooling-off periods, or full self-exclusion controls.