Onlywin Casino Privacy Policy

At Onlywin Casino, we treat the privacy of our players with the utmost seriousness. This page sets out the complete Onlywin Casino privacy policy, explaining what personal data we collect, how we use it, how we keep it safe, and what rights you have over your own information. Our approach to data protection is aligned with the Australian Privacy Act 1988 and the thirteen Australian Privacy Principles (APPs), and, where applicable, the requirements of the General Data Protection Regulation (GDPR). We encourage every player to read this document carefully so that you fully understand our data collection practices and how your personal information is processed on onlywincasino.app.

1. Identity of the Data Controller

Onlywin Casino is operated by a company registered in Curaçao and licensed by the Government of Curaçao. This entity acts as the data controller responsible for all user data collected through the platform located at onlywincasino.app. As the controller, we determine the purposes and means of data processing and are accountable under applicable privacy laws for ensuring that your personal information is handled lawfully and transparently.

If you have any questions about how Onlywin Casino handles your personal data, you may contact our Data Protection Officer (DPO) at any time:

• Email: [email protected]
• Support: [email protected]
• Live Chat: available 24/7 via the website

2. Personal Data We Collect

Onlywin Casino collects several categories of personal information in the course of providing its services. Below is a comprehensive breakdown of the types of user data we may hold:

2.1 Identification and Contact Data

• Full legal name
• Date of birth
• Residential address (including postcode and country)
• Email address and phone number
• Username and account password (stored in encrypted form)
• Government-issued identification documents (passport, driver's licence, or national ID — collected for KYC verification)

2.2 Financial Data

• Payment method details (e.g., card type, partial card number, wallet ID)
• Transaction history, including deposits and withdrawals
• Bank account information where bank transfer is selected
• Cryptocurrency wallet addresses when digital currency is used

Onlywin Casino accepts PayID, Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, Bitcoin, Ethereum, Litecoin, and bank transfer. Each method may require different levels of financial data collection.

2.3 Gaming Activity Data

• Game sessions, wagers, wins, losses, and bonus usage
• Free spin and promotional activity
• Responsible gambling tool usage (deposit limits, self-exclusion periods, cooling-off periods)
• VIP programme tier and cashback records

2.4 Technical Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and log data
• Mobile app usage data (Android APK or iOS PWA)

2.5 Communication Data

• Support chat transcripts
• Email correspondence
• Feedback and survey responses

2.6 Sensitive Data

In certain circumstances, we may collect sensitive information — such as information related to problem gambling or self-exclusion — where required by our responsible gambling obligations. We handle such data with heightened care and only use it for the specific purpose for which it was provided.

2.7 Data from Third Parties

We may receive personal information about you from third-party sources, including:

• Identity verification and fraud prevention agencies
• Payment processors and financial institutions
• Marketing affiliates (where you have consented to such sharing)
• Publicly available registers and watchlists used for AML compliance

3. How We Collect Your Data

Onlywin Casino data collection occurs through several channels:

1. Registration and account management: information you submit when creating or updating your account.
2. Deposits and withdrawals: payment details captured during financial transactions.
3. Gameplay: automated recording of gaming activity when you play any of the 4,000+ titles available on the platform.
4. Cookies and tracking technologies: data gathered automatically as you browse and interact with the site (see Section 6).
5. Customer support interactions: information shared during live chat or email contact.
6. Third-party integrations: data received from payment providers, KYC agencies, and marketing partners.

4. Purposes of Data Processing

The Onlywin Casino privacy policy identifies the following specific purposes for data processing:

5. Legal Basis for Processing

Under the Australian Privacy Act 1988 and, where applicable, the GDPR, Onlywin Casino processes your personal data on the following lawful bases:

• Contractual necessity: processing required to fulfil our obligations under the Terms and Conditions you accepted upon registration.
• Legal obligation: processing required to comply with KYC, AML, and gaming regulations.
• Legitimate interests: processing necessary for fraud prevention, platform security, and service improvement, provided these interests do not override your fundamental rights.
• Consent: processing for marketing communications and certain cookie policy categories, where you have given explicit consent that can be withdrawn at any time.

6. Cookie Policy

The Onlywin Casino cookie policy governs how cookies and similar tracking technologies are used on onlywincasino.app. Cookies are small text files stored on your device that help us improve your experience, analyse usage, and deliver relevant content.

6.1 Types of Cookies We Use

You can manage your cookie preferences through the consent banner displayed on your first visit, or at any time via the cookie settings panel in the website footer. Please note that disabling essential cookies may impair core site functionality. The Onlywin Casino cookie policy is reviewed and updated periodically to reflect changes in technology and regulation.

7. Sharing Your Data with Third Parties

Onlywin Casino does not sell your personal information to third parties. We may, however, share your user data with the following categories of recipients under strict confidentiality obligations:

7.1 Payment Providers

To process deposits and withdrawals, we share relevant financial personal data with payment service providers such as card processors, e-wallet platforms (Skrill, Neteller), and cryptocurrency networks. Each provider operates under its own privacy framework and is contractually bound to protect your data.

7.2 Regulatory and Law Enforcement Authorities

We are required by law to disclose certain personal information to competent authorities on request. This includes gaming regulators, tax authorities, and law enforcement agencies where applicable. Such disclosures are made only to the extent legally required.

7.3 Identity Verification and Fraud Prevention Partners

KYC verification and AML screening is performed with the assistance of specialist third-party agencies. These partners receive only the data necessary to complete identity checks and fraud risk assessments.

7.4 Game Providers

To deliver a catalogue of 4,000+ games from 50+ providers — including Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, and others — certain technical user data (such as session tokens and bet history) may be shared with those providers. This data is used solely for game delivery and does not include unnecessary personal information.

7.5 Marketing and Affiliate Partners

Where you have been referred to Onlywin Casino through an affiliate, we may share limited data (such as registration and first deposit confirmation) with that affiliate for commission purposes. This sharing is governed by a data processing agreement ensuring appropriate data security.

8. International Data Transfers

As a company registered in Curaçao, Onlywin Casino may process and store personal data outside of Australia. When we transfer user data internationally, we apply appropriate safeguards to ensure your information receives an equivalent level of protection to that afforded under the Australian Privacy Act 1988. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities
• Data processing agreements with all third-party recipients
• Transfer only to jurisdictions that maintain adequate data protection standards

If you have concerns about international transfers of your personal data, please contact our DPO at [email protected].

9. Data Security

Onlywin Casino data security is a top priority. We implement industry-leading technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption: all data transmitted between your device and our servers is protected by 256-bit SSL encryption — the same standard used by major financial institutions.
• Firewalls and intrusion detection: our infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems.
• Access controls: access to personal data within our organisation is restricted on a strict need-to-know basis and enforced through role-based access controls.
• Data encryption at rest: sensitive personal information, including financial records, is encrypted when stored on our servers.
• RNG certification: our games use Random Number Generators (RNGs) certified by independent testing laboratories, contributing to fair play and information security.
• Regular security audits: we conduct periodic penetration testing and security reviews to identify and address vulnerabilities.

Despite these measures, no system is entirely immune to risk. We encourage players to use strong, unique passwords and to enable any available account security features. If you suspect unauthorised access to your account, contact [email protected] immediately.

10. Data Storage and Retention

Onlywin Casino data storage practices are designed to retain personal information only for as long as necessary for the purposes outlined in this privacy policy, or as required by law. The following general retention periods apply:

Once retention periods expire, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes.

11. Your Privacy Rights

The Onlywin Casino privacy policy upholds your privacy rights as an Australian resident under the Australian Privacy Act 1988 and, where applicable, the GDPR. You have the following rights in relation to your personal data:

11.1 Right of Access

You have the right to request a copy of the personal information Onlywin Casino holds about you. We will respond to verified access requests within 30 days.

11.2 Right to Correction

If any of your personal data is inaccurate, outdated, or incomplete, you have the right to request that we correct it. You can update basic account details directly through your player account, or contact [email protected] for more complex corrections.

11.3 Right to Deletion

In certain circumstances, you may request the deletion of your personal information. We will honour such requests where there is no overriding legal obligation to retain the data (e.g., AML and KYC retention requirements).

11.4 Right to Restrict Processing

You may request that we restrict data processing of your personal information in specific circumstances — for example, while the accuracy of data is being contested.

11.5 Right to Data Portability

Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transferred to another data controller where technically feasible.

11.6 Right to Object

You have the right to object to data processing carried out on the basis of legitimate interests, including profiling. You also have an unconditional right to object to direct marketing at any time.

11.7 Right to Withdraw Consent

Where data processing is based on your consent — such as for marketing emails or non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these privacy rights, please submit a request to [email protected]. We may need to verify your identity before processing the request. We aim to respond within 30 days; if the request is complex or numerous, we may extend this by a further 30 days with notice to you.

12. Supervisory Authority — OAIC

If you are an Australian resident and believe that Onlywin Casino has not handled your personal information in accordance with the Australian Privacy Act 1988, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Mail: GPO Box 5218, Sydney NSW 2001

We encourage you to contact us first at [email protected] so we have the opportunity to resolve your concern before you escalate it to the OAIC.

13. Data Protection Officer

Onlywin Casino has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this privacy policy and applicable data protection legislation. The DPO can be reached at:

• Email: [email protected]
• Response time: within 5 business days for most enquiries

14. Children's Privacy

Onlywin Casino does not knowingly collect personal information from individuals under the age of 18. Our platform is strictly intended for adult players. If we become aware that a minor has registered an account or provided us with personal data without appropriate consent, we will immediately delete that information and close the account. If you believe a minor has accessed our platform, please notify us at [email protected].

15. Changes to This Privacy Policy

The Onlywin Casino privacy policy may be updated from time to time to reflect changes in our services, applicable law, or best practice. When we make material changes, we will notify registered players via email to the address associated with your account, or by posting a prominent notice on the website. The date of the most recent revision will always be displayed at the top of this page. We encourage you to review this privacy policy periodically to remain informed about how we protect your personal information. Continued use of onlywincasino.app after changes have been posted constitutes your acceptance of the revised policy.

16. Responsible Gambling and Data Privacy

Responsible gambling tools at Onlywin Casino — including deposit limits, bet limits, loss limits, session limits, cooling-off periods (24h, 48h, 7 days, or 30 days), and self-exclusion options (6 months, 1 year, 5 years, or permanent) — necessarily involve the collection and use of personal data. This data processing is carried out to fulfil our duty of care under our gaming licence and to protect vulnerable players. Records relating to self-exclusion and responsible gambling interventions are retained for a minimum of 5 years after the measure expires to ensure confidentiality and compliance.

Frequently Asked Questions (FAQ)

What personal data does Onlywin Casino collect?

Onlywin Casino collects identification data (name, DOB, address), contact details (email, phone), financial data (payment method details, transaction history), gaming activity, technical data (IP address, device info), and communication records. Full details are in Section 2 of this privacy policy.

How does Onlywin Casino protect my personal information?

Onlywin Casino data security relies on 256-bit SSL encryption, firewalls, intrusion detection, encrypted data storage, and strict internal access controls. All personal data is handled in accordance with our information security policies.

Does Onlywin Casino share my data with third parties?

We share user data only where necessary — with payment providers, KYC/AML agencies, game providers, and regulators. We never sell your personal information. All third-party recipients are bound by data protection agreements and confidentiality obligations.

What is the Onlywin Casino cookie policy?

The Onlywin Casino cookie policy governs the use of essential, analytical, functional, and marketing cookies. Essential cookies are always active; others require your consent. You can manage cookie preferences at any time through the cookie settings panel on the site.

How can I exercise my privacy rights?

To exercise your privacy rights — including access, correction, deletion, or portability of your personal data — contact our DPO at [email protected]. We will verify your identity and respond within 30 days.

How long does Onlywin Casino retain my data?

Onlywin Casino data storage periods vary by data type. Account and identification data is retained for 5 years after closure; transaction records for 7 years; gaming activity logs for 3 years. Full details are in the retention table in Section 10 of this privacy policy.

What cookies does Onlywin Casino use?

We use four categories of cookies: essential (required for site operation), analytical (to measure performance), functional (to remember your preferences), and marketing (to personalise promotions). See Section 6 for the full cookie policy breakdown.

Who is the supervisory authority for Australian privacy complaints?

Australian residents can contact the Office of the Australian Information Commissioner (OAIC) if they believe their privacy rights under the Privacy Act 1988 have been breached. We ask that you contact [email protected] first so we can attempt to resolve your concern directly.

This Onlywin Casino privacy policy reflects our commitment to data protection, confidentiality, and information security. We are dedicated to handling your personal data responsibly, transparently, and in full compliance with the Australian Privacy Act 1988. If you ever have questions or concerns about how Onlywin Casino manages your personal information, do not hesitate to reach out to our Data Protection Officer at [email protected] — we are here to help.