Wintopia Privacy Policy for Account and Website Data
Last Updated: August 7, 2026 Effective Date: August 7, 2026 This notice identifies the information connected to your Wintopia account and the choices available to you.
Scope and Data Controller
Your use of Wintopia creates several distinct data relationships. This Policy covers site visits, account registration, support, promotions, deposits, withdrawals, identity checks and safer-gambling controls, including processing performed by companies supporting our website, payments, security and customer care.
Personal Data We Collect
We may collect your name, date of birth, address, email, telephone number, username, account currency and login records. Transaction data can include payment method, amounts, wallet addresses, payment identifiers, balance movements and withdrawal status. Verification data may include identity documents, proof of address, payment ownership, source-of-funds records and fraud-screening results.
Technical data includes IP address, browser, device, operating system, language, session identifiers, cookies, local storage, referral information and activity logs. We also retain support messages, marketing preferences, responsible-gambling requests and account-control history.
Why We Use Personal Data
We process data to create and secure accounts, deliver games and betting services, handle transactions, verify identity and age, prevent fraud and money laundering, investigate disputes, apply safer-gambling controls, communicate service information, measure performance and comply with legal duties. Processing may rely on contract, legal obligation, legitimate interests or consent, depending on purpose and location.
| Processing purpose | Typical data involved | Main reason for processing |
|---|---|---|
| Account administration | Identity, contact and login data | Contract and account security |
| Deposits and withdrawals | Transaction, wallet and payment data | Contract, fraud prevention and legal duties |
| KYC and enhanced review | ID, address and source-of-funds records | Age, AML and regulatory checks |
| Safer gambling | Limits, session data and support history | Player protection and legal obligations |
| Service communications | Email, telephone and preferences | Account operation and consent where required |
| Analytics and performance | Device, browser, referral and usage data | Legitimate interests and consent where required |
Automated screening may flag inconsistent identity details, repeated payment failures, unusual wallet activity, device changes or account behaviour requiring human review. A flag does not make a final decision by itself where applicable law requires meaningful human involvement. Support or compliance staff may ask for context and documents before an account or transaction decision is completed.
Cookies, Analytics and Affiliate Tracking
Essential cookies keep sessions secure and remember account functions. Performance and analytics tools help us understand errors and navigation. Advertising or affiliate identifiers may record that a player arrived through a partner link. Where consent is required, optional technologies remain subject to your cookie choice.
Sharing and International Transfers
We may share limited data with hosting providers, payment processors, identity-verification services, fraud-prevention vendors, support tools, game suppliers, professional advisers, regulators and legal authorities. Transfers outside your country use contractual, technical or legal safeguards appropriate to the destination and data involved.
Retention and Security
Retention depends on account activity, payment and anti-money-laundering duties, disputes, self-exclusion records, fraud risk and applicable law. We use encryption, access controls, monitoring, secure hosting, authentication controls and internal procedures. No internet service can eliminate every risk, so you must also protect your password and devices.
Account and transaction records can be retained after closure when payment, tax, AML, fraud, complaint or regulatory duties require them. Self-exclusion information may be retained to ensure the restriction remains effective. Marketing consent records are kept long enough to prove and honour the choice. Records that no longer serve a legal, security or operational purpose are deleted, anonymised or placed beyond normal use.
Access is limited by role. Sensitive documents are handled through controlled systems, payment data is restricted to the information needed for processing, and security events are logged for investigation. If a personal-data incident creates a legally reportable risk, we assess it, contain it and notify the relevant authority or affected player within the required framework.
Your Rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability; withdraw consent; opt out of marketing; or complain to a privacy authority. Some records must be retained for legal, fraud-prevention or responsible-gambling reasons even after account closure.
To submit a request, use the registered email and state the right you want to exercise. We may verify identity before disclosing or changing account data. A response can include a copy of relevant personal data, an explanation of processing, correction of inaccurate fields or confirmation that a marketing preference has been changed. If we cannot complete a request because another legal duty applies, we explain the reason and the available complaint route.
Consent can be withdrawn for optional marketing or analytics without affecting processing completed before withdrawal. Objections to legitimate-interest processing are assessed against the security, fraud-prevention and operational reasons for continuing. Portability applies only to data and legal bases covered by the relevant law.
Age, External Links and Policy Changes
Our services are for persons meeting the legal gambling age. We do not knowingly create accounts for children. Third-party websites have their own privacy practices. Material updates appear through a revised date and, where appropriate, an account or email notice.
Privacy Contact
Send privacy requests to [email protected]. Include your registered email and enough information to identify the request; never send a password or full card number by email.
For written correspondence, use the company contact details published in the About page: Altacore N.V., Henri Fergusonweg 1, Gaito, Curaçao. Mark the message for the Privacy Team. Account support, withdrawal tracing and bonus questions should continue through live chat so privacy requests remain separate from ordinary service tickets.