WinOly Casino Privacy Policy
This page explains what we collect when you open an account, deposit with Visa, Skrill or Bitcoin, or chat with support, and how long we keep it. We wrote it in plain language, so you can see exactly where your details go and how to ask us to change or delete them.
Privacy Policy
What we collect, why we keep it and how you stay in control of your personal information.
We are WinOly Casino, and this policy explains how we handle the details you share with us when you open an account, make a deposit in AUD or contact our support team. When you register we ask for your name, date of birth, email address, phone number and residential address. We need these to confirm you are over 18, to stop duplicate accounts and to send you account messages. When you play, we also record your session times, the games you open, such as Gates of Olympus or Book of Dead, and your bet history. Our records of your activity on titles from Evolution, Pragmatic Play, NetEnt and Push Gaming are kept so we can settle disputes and check that bonus terms were met.
Payment data is processed separately. Card deposits through Visa and Mastercard go through certified payment processors, and we never store your full card number on our servers. E-wallet transactions with Skrill and Neteller and Paysafecard vouchers are handled by those providers under their own privacy terms. For crypto payments in Bitcoin, Ethereum, Tether, Litecoin, Dogecoin or TRON, we keep the wallet addresses and transaction hashes linked to your account, because the blockchain record alone does not tell us who made the payment.
We share personal data only where we have to: with payment partners to move your money, with identity verification services during KYC checks, and with authorities when the law requires it. We do not sell your information to marketing lists. Promotional emails about offers like the 100% welcome bonus and 370 free spins go only to players who opt in, and you can switch them off in your account settings at any time.
You can ask for a copy of the data we hold, ask us to correct mistakes or request that your account be closed. Some records, such as transaction logs, must be kept for a set period under anti-money laundering rules even after closure. To make a request, reach us by live chat, email or phone, and we will reply within 30 days.
What Data We Collect and Why
The personal and technical information we hold, and the purpose behind each type.
We are WinOly Casino, and we collect only the data needed to run your account, process payments and meet our legal duties. When you register, we ask for your full name, date of birth, email address, phone number and residential address. Your date of birth lets us confirm you are 18 or older before you can deposit or play anything, from Gates of Olympus to a live Evolution table.
Payment data depends on the method you pick. For Visa and Mastercard we keep the cardholder name and a masked card number, never the full number or CVV, which stay with our payment processor. Skrill, Neteller and Paysafecard transactions give us a reference ID and the amount in AUD. If you deposit with Bitcoin, Ethereum, Tether, Litecoin, Dogecoin or TRON, we record your wallet address and the transaction hash so we can match funds to your balance and trace any disputed transfer.
Some information is collected automatically each time you visit. This covers your IP address, device type, browser version, login times and the pages you open. We also log gameplay activity such as bets placed, wins, bonus use and free spin redemptions, including the 370 free spins from the welcome offer. These records help us settle disputes, spot unusual patterns that may point to fraud or problem gambling, and keep the games working as intended.
Before your first withdrawal we will usually ask for identity documents: a photo ID, a recent utility bill or bank statement, and sometimes a photo of the card you used. These checks are required under our Curaçao licence conditions and anti-money laundering rules. Messages you send through live chat, email or phone are stored too, so any agent who picks up your case can see what has already been discussed.
How Long We Keep Your Data
Retention periods for account, payment and verification records, and what happens after they end.
We keep personal information only for as long as there is a clear reason to hold it. At WinOly Casino, that reason is usually one of three things: running your account, meeting our anti-money laundering and licensing obligations, or settling a dispute. When none of these applies anymore, the data is deleted or anonymised so it can no longer be linked to you.
Your core account details, such as name, date of birth, email, phone number and AUD balance history, stay on file while your account is open. If you close the account, we hold these records for five years from the closure date. Transaction logs for card payments (Visa, Mastercard), e-wallets (Skrill, Neteller), Paysafecard vouchers and crypto transfers in Bitcoin, Ethereum, Tether, TRON, Litecoin and Dogecoin follow the same five-year rule, because operators licensed in Curaçao must be able to show where funds came from and where they went. For crypto deposits we keep the wallet address and transaction hash, never your private keys.
Identity documents you upload for verification are stored in an encrypted section of our system with restricted staff access. Game history from providers like Evolution, Pragmatic Play, NetEnt and Push Gaming, including bets placed on titles such as Gates of Olympus or Book of Dead, is kept for the same period so we can review any query about a round result or bonus wagering.
Some records have shorter lives. Live chat transcripts and support emails are kept for 24 months, phone call recordings for 12 months, and marketing preferences only until you unsubscribe or close your account. Analytics cookies expire within 13 months. If you want your data removed before these periods end, contact our support team by live chat or email. We will erase whatever the law allows and tell you in writing which records must stay, and for how long.
Your Rights Over Your Personal Data
What you can ask us to do with the information we hold about you, and how to ask.
We are WinOly Casino, and we treat the personal data you give us as yours, not ours. You can ask to see it, fix it, move it or have it removed, within the limits set by gambling and anti-money laundering rules. All of these requests are free. You can make them through live chat, by email or by phone, and the same support team handles them on all three channels.
You can request a copy of everything linked to your account: identity details, login history, deposit and withdrawal records, bonus activity and the notes support has added to your file. We send the export as a readable file within 30 days. Most requests are done in about a week. If something is wrong, like an old address or a misspelled surname, tell us and we will correct it. Some changes, especially to your name or date of birth, will need a new ID document before we can update the record.
Deletion works differently. You can close your account at any time and ask us to erase your data. We remove marketing profiles, game preferences and optional contact details straight away. Transaction logs for card payments through Visa or Mastercard, e-wallet transfers through Skrill or Neteller, and crypto movements in Bitcoin, Ethereum, Tether and other coins have to be kept for a minimum period under anti-money laundering law. We lock those records, limit who can access them, and delete them once the retention period ends.
You can withdraw marketing consent whenever you like, from your account settings or by replying to any promotional email, and bonus offers stop within 48 hours. You can also object to automated profiling used for promotions. Responsible gambling checks that protect your account are a different matter and stay on. If you think we have handled your request badly, you can escalate it to our data protection contact, and after that to the privacy authority where you live.
GDPR and Your Personal Data
How we apply EU data protection standards to every account at WinOly Casino.
WinOly Casino follows the General Data Protection Regulation (GDPR) as the baseline for how we collect, store and process player information. The law applies directly to residents of the European Union. We use the same rules for every account, so a player depositing in AUD gets the same protections as someone playing from Berlin or Lisbon. We collect only the data we need to run your account: your name, date of birth, contact details, payment records and the identity documents requested during verification. We use it to process deposits and withdrawals, meet anti-money laundering checks, prevent fraud and provide support over live chat, email and phone.
Under GDPR you have several rights you can use at any time. You can ask for a copy of everything we hold about you, and we will send it in a common, machine-readable format within 30 days. You can correct details that are wrong or out of date, limit how we process certain records, or object to marketing. You can also ask us to delete your data. Some records, such as transaction history and KYC documents, have to be kept for a fixed period under anti-money laundering law, so we will tell you exactly which items we must keep and for how long.
Payment data is handled with care. Card details for Visa and Mastercard are processed by PCI DSS certified partners and never stored in full on our servers. E-wallet payments through Skrill, Neteller and Paysafecard are handled by those providers under their own data agreements. Crypto deposits in Bitcoin, Ethereum, Tether, Litecoin, TRON and Dogecoin are linked to your account only by wallet address and transaction hash. Game providers such as Evolution, Pragmatic Play, NetEnt and Push Gaming receive a pseudonymised player ID, not your name.
To make a request, email our support team with the subject line "Data Request" from the address registered to your account. We confirm your identity first, then reply within one month. If you are not happy with the result, you can contact the data protection authority in your country.

