Privacy Policy

This document outlines the privacy practices of WinSpirit Casino, operated by Complete Technologies N.V. (the "Controller" or "Provider"). By accessing our platform and utilizing our gaming services, you explicitly consent to the data handling procedures described herein. This policy is an inseparable component of our Terms and Conditions and is designed to ensure full compliance with the General Data Protection Regulation (GDPR) and the data protection frameworks mandated by the Curaçao Gaming Control Board.

1. Core Definitions

To ensure complete transparency, the following terminology is used throughout this document in accordance with international privacy standards:

  • Personal Data: Any information that can directly or indirectly identify a natural person.
  • Data Subject: The individual whose personal data is being processed (i.e., the player).
  • Controller: The entity (Complete Technologies N.V.) that determines the purposes and means of processing personal data.
  • Processing: Any operation performed on personal data, including collection, storage, modification, and deletion.
  • Cookies: Small text files stored on your device to facilitate website functionality and track user preferences.

2. Information We Collect

We gather only the minimum amount of data required to deliver a secure and seamless gaming experience. The categories of information we process include:

  • Account Details: Full name, date of birth, gender, residential address, email address, and phone number.
  • Technical Identifiers: IP address, device type, browser specifications, time zone, and preferred language.
  • Gaming & Financial Activity: Betting history, transaction logs, deposit/withdrawal records, and bonus usage.
  • Customer Support Logs: Transcripts of live chat sessions, email correspondence, and verification requests.

Crucial Privacy Safeguards:

  • We do not store full credit card numbers or CVV codes on our internal servers; all card data is tokenized by secure payment gateways.
  • The collection of sensitive data regarding racial origin, political views, religious beliefs, or biometric identifiers is strictly prohibited.
  • We do not employ automated profiling or algorithmic decision-making that produces legal or financial effects on our users.

3. Legal Basis and Purpose of Processing

Your data is processed lawfully and transparently to fulfill the following operational and legal objectives:

  • Regulatory Compliance: Conducting Know Your Customer (KYC) checks and adhering to Anti-Money Laundering (AML) directives.
  • Service Delivery: Managing your account, processing financial transactions, and facilitating gameplay.
  • Platform Security: Detecting fraudulent activities, preventing multi-accounting, and safeguarding user funds.
  • Marketing Communications: Delivering personalized promotions, VIP offers, and newsletters (subject to your opt-in preferences).
  • Legal Obligations: Responding to valid subpoenas, court orders, and regulatory audits.
  • Performance Analytics: Analyzing user behavior to optimize website performance and game selection.

4. Your Data Subject Rights

In alignment with global privacy regulations, you retain full control over your personal information. You are entitled to:

  • Right to Access: Request a comprehensive copy of the data we hold regarding your account.
  • Right to Rectification: Demand the correction of any outdated, inaccurate, or incomplete information.
  • Right to Erasure: Request the deletion of your data ("Right to be Forgotten"), acknowledging that certain records must be retained to comply with AML and licensing laws.
  • Right to Restrict Processing: Object to the use of your data for specific purposes, such as direct marketing.
  • Right to Data Portability: Obtain your personal data in a structured, machine-readable format for transfer to another service provider.
  • Right to Complain: Lodge a formal grievance with the Curaçao Gaming Control Board or a relevant data protection authority if you believe your rights have been infringed.

5. Cookie Usage and Tracking

To optimize your browsing experience and analyze platform traffic, we deploy various cookie technologies:

  • Strictly Necessary Cookies: Essential for core website functions, such as secure login sessions and shopping cart operations.
  • Functional Cookies: Remember your regional settings, language preferences, and UI customizations.
  • Marketing & Analytics Cookies: Track the efficacy of our advertising campaigns and measure affiliate-driven registrations.

You maintain full control over cookies via your web browser's privacy settings. Please note that disabling essential cookies may impair the functionality of the cashier and account verification modules.

6. Third-Party Data Disclosure

WinSpirit Casino operates a strict no-selling policy regarding user data. We only share your information with external entities under the following strict conditions:

  • Service Providers: Payment processors, game aggregators, and KYC verification firms bound by rigorous Non-Disclosure Agreements (NDAs).
  • Legal Authorities: Law enforcement or regulatory bodies in response to valid legal requests or fraud investigations.
  • Corporate Protection: To defend the legal rights, property, and physical safety of the Provider, our players, or the public.

Your data may be transferred to and processed by our international partners outside the European Economic Area (EEA). By utilizing our services, you consent to these cross-border transfers, which are protected by standardized contractual clauses and robust encryption protocols.

7. Security Infrastructure

We deploy enterprise-grade security measures to shield your personal and financial data from unauthorized access, manipulation, or destruction:

  • Encryption Standards: All data in transit is protected via Transport Layer Security (TLS 1.2), while data at rest is secured using AES 256-bit encryption.
  • Access Control: Internal data access is restricted to authorized personnel on a strict need-to-know basis.
  • Breach Notification: In the unlikely event of a data breach, we commit to notifying the relevant regulatory authorities and affected users within 72 hours of discovery.

Players are solely responsible for maintaining the confidentiality of their login credentials. We strongly recommend enabling Two-Factor Authentication (2FA) and never sharing your password with third parties.

8. Contact the Data Protection Team

If you wish to exercise your data rights, require clarification on this Privacy Policy, or have concerns regarding how your information is handled, please contact our dedicated support team:

When submitting a data request, please ensure your query is detailed and includes your registered account email to expedite the verification process.