How Winners Casino Keeps Your Personal Data Safe

At Winners Casino, we take your privacy seriously. This Privacy Policy explains what personal data we collect when you register, deposit, or play, how we use it, and with whom we may share it. By creating an account or using our services, you agree to the practices described here.

We collect information you provide directly, including your name, email address, date of birth, and payment details such as Visa, Mastercard, or TRON wallet information. We also gather technical data automatically, including IP addresses, device type, browser, and session activity. This helps us keep your account secure and personalize your experience on our platform.

We hold a license issued by the Malta Gaming Authority (MGA/B2C/432/2019), which requires us to maintain strict data handling standards. We do not sell your personal information to third parties. Data may be shared with our gaming partners, including Evolution, Pragmatic Play, NetEnt, and Push Gaming, strictly to deliver the services you use. We retain your data for as long as your account remains active and as required by law.

You have the right to access, correct, or request deletion of your personal data at any time. To exercise any of these rights, contact our support team by email or phone. For questions about this policy, reach us through Email, Phone, or Facebook.

When you create an account at Winners Casino, we collect the information needed to verify your identity, process your deposits and withdrawals, and keep your account secure. This includes your name, date of birth, address, email, and payment details tied to methods like Visa, Mastercard, and TRON. We do not collect more than we need.

We use your data to run your account, fulfill regulatory obligations under our MGA license (MGA/B2C/432/2019), and detect fraudulent activity. Transaction records, game history, and session logs are retained for as long as required by applicable law or our licensing conditions with the Malta Gaming Authority.

We do not sell your personal data to third parties. We share it only with service providers who help us operate the platform, such as payment processors and identity verification partners, all of whom are bound by strict data protection agreements. You can request a copy of your data or ask us to delete your account by contacting our team via email or phone.

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected. Account information, transaction records, and gameplay history are stored for a minimum of five years following account closure, in line with our obligations under MGA license MGA/B2C/432/2019 and applicable anti-money laundering regulations.

Payment data tied to Visa, Mastercard, and TRON transactions is kept for the period required by financial compliance rules. We do not store full card numbers on our servers; payment processors handle sensitive details under their own certified security frameworks.

If you request account closure, we begin the deletion process for non-mandatory data within 30 days. Certain records, including dispute history and correspondence through Email, Phone, or Facebook support, may be retained longer where a legitimate legal or regulatory basis exists. Once retention periods expire, data is securely deleted or anonymized so it can no longer be linked to you.

You have the right to access any personal data we hold about you. Submit a request to our support team via email or phone and we will provide a full copy of your information within 30 days. There is no charge for a first request in any 12-month period.

You may ask us to correct inaccurate data, restrict how we process it, or delete it entirely where no legal obligation requires us to keep it. Account closure requests are handled the same way: contact us, and we will remove your profile and associated records in line with our retention schedule, typically within 90 days of account closure.

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with a supervisory authority. As an MGA-licensed operator (license MGA/B2C/432/2019), we fall under the jurisdiction of the Malta Gaming Authority and the applicable data protection regulator. We encourage you to reach out to us first at Winners Casino so we can resolve any concern directly before escalating to a formal body.

When you visit Winners Casino, our website places small text files called cookies on your device. These files help us remember your preferences, keep you signed in between sessions, and understand how players move through our site so we can make improvements where they matter most.

We use several categories of cookies. Strictly necessary cookies handle core functions like your login session and secure checkout when you make a deposit via Visa, Mastercard, or TRON. Without these, basic features simply would not work. Analytics cookies collect aggregated, anonymous data about page visits and game interactions, helping our team identify which sections of the casino, poker, and live products are working well and which need attention.

You can manage or withdraw your cookie consent at any time through the cookie settings panel available in the site footer. Blocking certain categories may affect functionality, including live chat and account preferences. For a full breakdown of the cookies we use, the data each one collects, and its retention period, see our detailed Cookie Declaration linked below.

The Malta Gaming Authority license we operate under (MGA/B2C/432/2019) means our data practices align with General Data Protection Regulation standards. GDPR sets out the legal framework for how personal information must be collected, stored, and used, and we apply these principles across our platform regardless of where our players are based.

We collect only the data we need to run your account, verify your identity, process payments via Visa, Mastercard, or TRON, and deliver customer support through Email, Phone, or Facebook. You have the right to access, correct, or request deletion of your personal data at any time by contacting us directly.

To exercise any GDPR right - a data subject access request, rectification, or erasure - reach our support team by email and we will respond within 30 days, as required by regulation. We do not sell or share personal data with third parties for marketing purposes without your explicit consent.