Our Privacy Policy
This policy explains what personal data Winners Casino collects when you use winnerscasino.co.uk, why we need it, who we share it with, and how you stay in control. It applies to every visitor and registered player.
Data We Collect From You
We collect only the data we need to run your account and meet our legal obligations. That covers the details you give us directly and the information generated automatically when you play.
- Identity data: full name, date of birth, email address, phone number, residential address.
- Verification documents: ID document, proof of address and payment method evidence you supply during KYC checks.
- Transaction data: deposits, withdrawals, bonus usage, wagering history and payment method details.
- Technical data: IP address, device type, browser, operating system and approximate location.
- Gameplay behaviour: games played, stakes, session times, wins, losses and responsible-gambling indicators.
- Marketing preferences: which channels you opted into and how you respond to our offers.
How We Use Your Data
Your data powers six core functions of the site. Every use is tied to a specific purpose; we never sell your information to advertisers.
Account creation and management come first: without identity data we cannot open or maintain your account. KYC verification follows, since we must confirm your age and identity before your first withdrawal. Payment processing depends on transaction data to move funds accurately between you and us. Fraud prevention uses gameplay and device signals to spot stolen accounts and bonus abuse. Responsible-gambling monitoring tracks your betting patterns so our team can step in with limits or support tools when signs of harm appear. Marketing runs only on your consent: if you never opt in, you receive no promotional emails or SMS.
Our Legal Bases
Contract. Processing your identity, transaction and gameplay data is necessary to set up and run the gambling contract between us. Without it, we cannot provide the service you signed up for.
Legal obligation. Anti-money-laundering and know-your-customer rules force us to verify your identity and retain transaction records. We process verification documents because the law requires it, not by choice.
Legitimate interest. Fraud detection, site security and service improvement rely on legitimate interest. We balance this against your rights and restrict it to what a reasonable player would expect.
Consent. Marketing messages, promotional offers and non-essential cookies operate only with your consent. You may withdraw that consent at any time without losing access to your account.
How Long We Keep It
Each data category has a defined clock. We delete your information as soon as the purpose ends and no law obliges us to hold it longer.
| Data category | Retention period |
|---|---|
| Transaction and account records | Minimum 5 years after account closure, per regulatory requirements |
| KYC verification documents | 5 years, or longer if an investigation is open |
| Identity and contact data | Duration of the account, then up to 5 years |
| Gameplay and behavioural data | Duration of the account plus 5 years for dispute resolution |
| Marketing preferences | Until you withdraw consent or 24 months after your last engagement |
| Technical and log data | Up to 12 months |
Who We Share Data With
We share your data only with partners who need it to deliver a specific service, and every one of them is bound by a written data-processing agreement.
Payment processors receive what they need to execute your deposits and withdrawals. KYC and anti-money-laundering providers verify the documents you upload. Gambling regulators may request records during audits or investigations. Analytics providers receive pseudonymised data that helps us understand how the site performs. In a sale or merger of the business, account data may transfer to the successor, who must honour this policy in full.
Your Rights Over Your Data
You control your personal data. Send any request to our support team at [email protected] and we respond within one month.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct anything inaccurate or incomplete.
- Erasure: ask us to delete data we are not legally required to keep.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing at any time, one click in your account settings.
- Complain: escalate to the relevant data protection authority if you believe we mishandled your data.
Cookies and Tracking
We use essential cookies to keep you logged in and secure the site, plus optional analytics and marketing cookies that load only after you accept them in the consent banner. Your cookie choices can be changed any time from the browser settings or the banner link. The full list of cookies, their purposes and their lifespans is on our dedicated cookies page.
How We Protect Your Data
All traffic between your device and our servers travels over TLS encryption. Stored data is encrypted at rest, and access is limited by role: only staff who need your information for verification, payments or support can see it, and every access is logged.
If a breach ever compromises your personal data, we notify the supervisory authority within the legal deadline and inform affected players directly where the risk to you is high. Our incident response team tests these procedures regularly.
Contact Our Data Team
Questions about this policy or about your data? Email our data protection officer at [email protected] or write to the address in your account's legal section. We answer privacy enquiries within 30 days, usually faster. You can also reach our 24/7 support team at [email protected] for anything urgent.
This policy was last reviewed in 2026. When we change it, we publish the update here and email registered players if the change affects their rights.
Frequently asked questions about Winners Casino
How do I request a copy of my data?
Email [email protected] with your request. We verify your identity and send the data within one month.
Can I delete my account and all my data?
Closing your account is immediate on request, but transaction and KYC records must be retained for 5 years under gambling regulations. Marketing data is deleted as soon as you withdraw consent.
Do you sell my data to advertisers?
No. We never sell personal data. Analytics partners receive pseudonymised information only, and marketing partners act on our instructions under strict agreements.
Why do you need my ID document?
Know-your-customer rules require age and identity verification before your first withdrawal. Without the ID check we cannot legally release funds to you.