Onlywin Casino Privacy Policy

At Onlywin Casino, protecting your personal data is a core responsibility we take seriously. This Onlywin Casino privacy policy explains in plain language how we collect, use, store, and safeguard your personal information when you register, play, or interact with our platform at onlywincasino-au.com. Our approach to data protection aligns with the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and, where applicable, the General Data Protection Regulation (GDPR). Whether you are wondering about cookies, data security, your privacy rights, or how long we retain your records, you will find the answers here. We encourage every Australian player to read this document carefully before creating an account.

1. Who Is the Data Controller?

Onlywin Casino is operated by a company incorporated and registered in Curaçao, operating under a licence granted by the Government of Curaçao. As the entity that determines the purposes and means of data processing, this company acts as the data controller for all user data collected through the onlywincasino-au.com website and its associated mobile applications. All enquiries relating to Onlywin Casino data protection or this privacy policy can be directed to our dedicated Data Protection Officer (DPO):

• Email: [email protected]
• Support: [email protected]
• Live Chat: available 24/7 from the website footer

2. Personal Data We Collect

Onlywin Casino collects various categories of personal data depending on your interaction with us. Understanding exactly what data collection takes place empowers you to make informed decisions about your account. Below is a full breakdown of the types of personal information we may hold.

2.1 Identification and Contact Data

• Full legal name, date of birth, and gender
• Residential address, postcode, and country of residence
• Email address and phone number
• Copies of government-issued identification (passport, driver's licence) for KYC verification
• Proof of address documents (utility bills, bank statements)

2.2 Financial Data

• Payment method details (card type, masked card number, e-wallet IDs, cryptocurrency wallet addresses)
• Transaction history — deposits, withdrawals, and bonus credits
• Source of funds documentation where required by anti-money laundering (AML) regulations

2.3 Gaming Activity Data

• Game sessions, bet history, wins, losses, and wagering activity
• Bonus usage, free spin activations, and VIP programme progression
• Responsible gambling settings (deposit limits, session limits, self-exclusion periods)

2.4 Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Login timestamps, session durations, and navigation paths
• Crash reports and performance diagnostics

2.5 Communication Data

• Records of live chat transcripts, email correspondence, and support tickets
• Responses to surveys, promotions, and feedback forms

2.6 Sensitive Information

We do not proactively seek sensitive information as defined under the Australian Privacy Act (such as health, racial, or political data). However, if you voluntarily disclose sensitive information — for example when setting responsible gambling restrictions related to a mental health concern — we will handle it with the highest degree of confidentiality and information security, and only for the purpose for which it was provided.

2.7 Data Received from Third Parties

• Identity verification results from KYC/AML service providers
• Fraud risk scores from payment processors
• Information from regulatory authorities or law enforcement agencies where legally required
• Publicly available data used to fulfil due-diligence obligations

3. How We Collect Your Data

The data collection methods used by Onlywin Casino include both direct and automated means:

• Registration forms — when you create your account you voluntarily provide identification, contact, and financial details.
• Account use — every deposit, game session, or support interaction generates user data automatically.
• Cookies and tracking technologies — our cookie policy governs how we place and read cookies, pixel tags, and similar technologies on your device (see Section 6).
• KYC verification partners — third-party identity services confirm your documents on our behalf.
• Payment providers — processors such as Visa, Mastercard, Skrill, Neteller, and cryptocurrency gateways share transaction outcomes with us.
• Responsible gambling tools — data entered when setting limits, cooling-off periods, or self-exclusion is recorded to enforce your preferences.

4. Purposes of Data Processing

Every instance of data processing at Onlywin Casino is linked to a specific, legitimate purpose. We do not process your personal data beyond what is necessary to fulfil those purposes.

5. Legal Basis for Processing

Under both the Australian Privacy Principles and the GDPR, Onlywin Casino relies on the following legal grounds for data processing:

1. Performance of a contract — most processing is necessary to deliver the casino services you signed up for.
2. Legal obligation — KYC, AML, and tax reporting requirements mandate certain processing regardless of consent.
3. Legitimate interests — fraud detection, data security, and improving our platform represent legitimate business interests that do not override your fundamental rights.
4. Consent — for marketing emails and non-essential cookies, we ask for and record your explicit consent, which you may withdraw at any time.

6. Cookie Policy

The Onlywin Casino cookie policy governs our use of cookies and similar tracking technologies. When you visit onlywincasino-au.com, certain cookies are placed on your device to ensure the site works correctly and to improve your experience. Below we explain each category.

6.1 Essential Cookies

These cookies are strictly necessary for the operation of our website. They enable you to log in, maintain your session while playing, and access secure areas of your account. Without them, core features would not function. Because they are essential, they do not require your consent under applicable law.

6.2 Analytical Cookies

Analytical cookies help us understand how players navigate onlywincasino-au.com — which pages are most popular, where sessions typically end, and how long players spend in particular sections. This data, which is anonymised where possible, informs our efforts to improve the platform. These cookies require your consent.

6.3 Functional Cookies

Functional cookies remember your preferences — such as your preferred language, currency display (Australian dollars), and notification settings. They personalise your experience without tracking you for advertising purposes. These also require consent.

6.4 Marketing Cookies

Marketing cookies allow us and our advertising partners to deliver relevant promotions based on your browsing behaviour, both on our site and on third-party platforms. You can opt out of marketing cookies at any time via our cookie policy management panel, accessible in the website footer. Withdrawing consent will not affect the legality of any processing already carried out.

6.5 Managing Your Cookie Preferences

You may adjust your cookie preferences at any point through your browser settings or our on-site consent manager. Note that disabling essential cookies may impair site functionality. For a full list of the specific cookies we use, their purpose, and their expiry periods, please refer to the cookie policy table available in the site footer.

7. Sharing Personal Data with Third Parties

Onlywin Casino does not sell your personal data to third parties. However, we share personal information with carefully selected partners and authorities where necessary:

7.1 Payment Providers

To process your deposits and withdrawals, we share relevant financial and identification data with payment service providers including Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, PayID, and cryptocurrency gateways for Bitcoin, Ethereum, and Litecoin. These providers operate under their own privacy frameworks and are bound by contractual data-processing agreements with us.

7.2 Regulatory and Law Enforcement Authorities

We may disclose personal data to the Curaçao Gaming Authority, the Australian Transaction Reports and Analysis Centre (AUSTRAC), or other competent authorities when required by law, court order, or our licensing obligations. Such disclosures are made strictly on a need-to-know basis.

7.3 KYC and AML Partners

Third-party identity verification and fraud-screening services process your documents and return a compliance result. These partners are contractually prohibited from using your data for any purpose beyond the verification service.

7.4 Game Providers and Software Partners

Our 50+ game providers — including Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, Yggdrasil, Hacksaw Gaming, Push Gaming, Spribe, Red Tiger, Nolimit City, and Relax Gaming — may receive anonymised or pseudonymised gameplay data to power their RNG engines and reporting tools. They do not receive your identifiable personal information unless required by their own regulatory obligations.

7.5 Analytics and Marketing Partners

With your consent, we may share behavioural data with analytics and marketing platforms to measure campaign effectiveness and personalise promotions. You may opt out via the cookie policy manager at any time.

8. International Data Transfers

Because Onlywin Casino is operated from Curaçao and uses service providers in various jurisdictions, your personal data may be transferred to and processed in countries outside Australia. Where such transfers occur, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved under GDPR where applicable
• Binding Corporate Rules with group entities
• Transfers only to jurisdictions deemed adequate by the relevant regulatory authority

If you have concerns about international data transfers, please contact our DPO at [email protected].

9. Data Security Measures

Robust data security is not optional at Onlywin Casino — it is a foundational commitment. We implement multiple layers of technical and organisational controls to protect your personal information against unauthorised access, loss, or disclosure.

9.1 Technical Safeguards

• 256-bit SSL/TLS encryption — all data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS technology, the same used by major financial institutions.
• Firewalls and intrusion detection — our infrastructure is protected by multi-layer firewalls and real-time intrusion detection systems.
• Data encryption at rest — sensitive records, including financial data and identity documents, are encrypted in our databases.
• RNG certification — our random number generators are independently certified by accredited laboratories, ensuring game integrity and preventing tampering with gameplay data.

9.2 Organisational Safeguards

• Access to personal data is restricted to employees and contractors who require it to perform their duties.
• All staff with access to user data undergo mandatory data protection training and sign confidentiality agreements.
• We conduct periodic information security audits and penetration tests.
• A documented incident-response procedure ensures prompt action in the event of a data breach.

Despite these measures, no online system can guarantee absolute security. If you suspect your account has been compromised, please contact [email protected] immediately.

10. Data Retention Periods

Onlywin Casino retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The table below summarises our standard data storage periods:

After the applicable retention period expires, personal data is securely deleted or permanently anonymised so that it can no longer be linked to you. Data storage practices are reviewed annually to ensure ongoing compliance.

11. Your Privacy Rights

Australian players benefit from a comprehensive set of privacy rights under the Australian Privacy Act 1988 and, where applicable, additional entitlements under the GDPR. Onlywin Casino respects and facilitates all of the following privacy rights:

11.1 Right of Access

You have the right to request a copy of the personal data Onlywin Casino holds about you. We will respond to verified access requests within 30 days. In most cases this service is free of charge.

11.2 Right to Correction

If any personal information we hold is inaccurate, incomplete, or out of date, you may request that we correct it. You can update basic account details directly in your profile, or contact us for assistance with more complex amendments.

11.3 Right to Deletion (Right to Be Forgotten)

You may request the deletion of your personal data where it is no longer needed for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and there is no overriding legitimate ground. Note that we may be legally required to retain certain records even after an account is closed — for example, transaction data for AML compliance purposes.

11.4 Right to Restriction of Processing

You may ask us to temporarily restrict our use of your personal data — for instance, while you contest its accuracy or while we assess an objection you have raised.

11.5 Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of your personal data that you can transfer to another service provider.

11.6 Right to Object

You have the right to object to processing based on our legitimate interests, including profiling for direct marketing. Once you object to marketing, we will stop processing your data for that purpose immediately.

11.7 Right to Withdraw Consent

Where processing is based on your consent — such as receiving promotional emails or accepting non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw consent for marketing, use the unsubscribe link in any email or contact [email protected].

11.8 How to Exercise Your Rights

To exercise any of your privacy rights, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: available 24/7

We may need to verify your identity before processing a request. We aim to respond within 30 calendar days; complex requests may take up to 60 days, in which case we will notify you of the extension.

12. Supervisory Authority — OAIC

If you believe Onlywin Casino has not handled your personal data in accordance with the Australian Privacy Act 1988 or your privacy rights, you have the right to lodge a complaint with the supervisory authority:

• Office of the Australian Information Commissioner (OAIC)
• Website: www.oaic.gov.au
• Phone: 1300 363 992

We encourage you to contact us first at [email protected] so that we have the opportunity to resolve any concern directly and promptly. However, you always retain the right to approach the OAIC without contacting us first.

13. Responsible Gambling and Data

Onlywin Casino is committed to responsible gambling, and our data processing activities actively support player protection. When you set a deposit limit, a loss limit, a session time limit, or request a cooling-off period (available for 24 hours, 48 hours, 7 days, or 30 days) or a self-exclusion (6 months, 1 year, 5 years, or permanent), that information is stored securely and used exclusively to enforce your chosen restrictions. It is never shared with third parties for marketing purposes. Your responsible gambling data is treated with the utmost confidentiality.

14. Children's Privacy

Onlywin Casino is strictly an adults-only service. Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we discover that a minor has created an account, we will immediately close the account and delete all associated personal information. If you believe a child has registered, please notify us at [email protected] without delay.

15. Changes to This Privacy Policy

We may update this Onlywin Casino privacy policy from time to time to reflect changes in law, our business practices, or the services we offer. When we make material changes, we will notify registered players via email or a prominent notice on the website, and we will update the "Last Updated" date at the top of this document. Continued use of Onlywin Casino after any change constitutes your acceptance of the revised privacy policy. We recommend revisiting this page periodically to stay informed about our data protection practices.

16. Contact and Data Protection Officer

All questions, requests, or concerns related to the Onlywin Casino privacy policy, personal data, or your privacy rights should be directed to:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Live Chat: 24/7 via the onlywincasino-au.com website

Our customer support team responds to emails within 12 hours, and live chat agents are available around the clock to assist with any privacy or account-related enquiries.

Frequently Asked Questions — Onlywin Casino Privacy Policy

What personal data does Onlywin Casino collect?

Onlywin Casino collects personal data including your name, date of birth, address, email, financial details, gaming activity, and technical data such as your IP address. Full details are set out in Section 2 of this privacy policy.

How does Onlywin Casino use cookies?

Our cookie policy distinguishes four types of cookies: essential, analytical, functional, and marketing. Essential cookies do not require consent; the others do. You can manage your cookie preferences at any time via the consent manager in our site footer. The Onlywin Casino cookie policy is designed to give you full transparency and control.

Is my financial information secure at Onlywin Casino?

Yes. Onlywin Casino data security includes 256-bit SSL encryption for all data in transit, encrypted data storage, firewalls, and regular information security audits. Financial data is only shared with regulated payment processors and is never sold to third parties.

How long does Onlywin Casino keep my data?

Retention periods vary by data type — account data is typically kept for 5 years after closure, and financial records for 7 years, in line with AML regulations. See the data storage table in Section 10 for full details on every category of personal information.

Can I request deletion of my personal data?

Yes. Under your privacy rights, you may request deletion of your personal data where there is no overriding legal obligation to retain it. Submit your request to [email protected]. Note that legally mandated records — such as transaction history for AML compliance — must be retained for the periods specified by law, even if your account is closed.

Who can I contact if I have a privacy complaint?

Contact our Data Protection Officer at [email protected] in the first instance. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. Onlywin Casino is fully committed to resolving any data protection concern promptly and transparently.

Does Onlywin Casino share my data with game providers?

Game providers such as Pragmatic Play, Evolution Gaming, and NetEnt may receive anonymised gameplay data to power their systems. They do not receive your identifiable personal information unless required by their own regulatory obligations. Onlywin Casino maintains strict confidentiality agreements with all third-party partners.

How do I withdraw consent for marketing communications?

You can withdraw your consent for marketing emails at any time by clicking the unsubscribe link in any promotional email, updating your notification preferences in your account settings, or emailing [email protected]. Withdrawal of consent does not affect the legality of marketing processed before you opted out. Onlywin Casino privacy practices ensure your preferences are respected immediately.