Privacy Policy

About this Privacy Policy

Winbay Casino respects the privacy of players and aims to handle personal information responsibly. This policy applies to information collected through the website, account services, customer support channels and related casino activities. It is intended to provide clear, general information about the types of data that may be handled and the reasons for doing so.

Page contents

Personal information means information that identifies a player or could reasonably be connected with that player. The information handled will depend on how the website is used, which services are accessed, the information required for account checks and the choices made about communications. Some information may be necessary to provide casino services, while other information may be optional.

By using the website, players acknowledge that information may be collected and used for the purposes described in this policy. Where consent is required, players may be asked to provide it separately. A player can withdraw consent for certain activities, such as marketing, although withdrawing consent does not affect processing that is necessary for account operation, security, legal obligations or other legitimate purposes.

This policy should be read together with the website’s terms and any notices shown when information is collected. Privacy practices may be updated when services, technology or legal requirements change. The current version published on the website will apply from the date it is made available.

Information we may handle and why

A casino website typically needs to handle different categories of information to provide an account, process activity and protect players and the platform. The information collected will be limited to what is reasonably needed for the relevant purpose, where possible.

Account and identity details

This may include a player’s name, date of birth, contact details, account login information, preferences and records of communications with support. These details may be used to create and maintain an account, provide requested services, respond to questions, manage account settings and communicate important service information.

Verification information

Players may be asked to provide identity or age verification documents and information needed to confirm account ownership. This may include details shown on identification documents, verification results and information about the source or purpose of transactions where checks are required. Verification information is used to help meet account requirements, prevent unauthorised use, detect suspicious activity and support anti-fraud and responsible gaming processes.

Payment and transaction records

The website may handle payment method details, transaction references, deposits, withdrawals, wagers, account balances and related records. Payment information is used to process transactions, resolve payment questions, identify unusual activity, keep accurate account records and meet financial, security and legal requirements. Payment providers may handle some information under their own privacy policies.

Device, technical and usage data

When a player visits or uses the website, technical information may be collected. This can include an IP address, browser type, device type, operating system, general location information, language settings, pages viewed, login times, referral information and records of interactions with the website. This information helps keep the website secure, troubleshoot faults, understand general usage, improve performance and detect activity that may be unauthorised or fraudulent.

Support and communication records

If a player contacts support, records of the enquiry and related communications may be kept. These records help investigate issues, provide consistent assistance, confirm account details, handle complaints and improve the support experience. Players should avoid sending unnecessary sensitive information through a support channel.

Main purposes for using information

Opening, operating and maintaining player accounts.
Providing casino features and responding to service requests.
Confirming identity, age and account ownership.
Carrying out anti-fraud, security and risk checks.
Processing deposits, withdrawals and other transactions.
Meeting applicable legal, regulatory and record-keeping obligations.
Communicating service updates, security notices and support information.
Sending marketing communications where permitted and where the player has not opted out.
Monitoring website performance, improving services and resolving technical problems.

Sharing, security and retention

Information may be shared when this is reasonably necessary to provide services, process transactions, verify accounts, maintain security or meet legal obligations. For example, relevant information may be made available to payment providers, technology providers, verification services, fraud prevention providers, customer support tools or professional advisers. These parties should only receive information that is relevant to the service or purpose involved and may be required to protect it.

Information may also be disclosed where required or permitted by law, to respond to a lawful request, protect the rights and safety of players or others, investigate suspected fraud or misuse, or support the security and integrity of the website. Information may be processed or stored in another country where service providers operate. Where this occurs, appropriate steps should be taken to handle information securely and consistently with applicable privacy requirements.

Reasonable administrative, technical and organisational measures are used to help protect personal information from loss, misuse, unauthorised access, alteration or disclosure. Security measures may include access controls, authentication procedures, monitoring, encryption or other safeguards appropriate to the type of information and the risks involved. No online service can guarantee absolute security, so players should use a strong password, keep login details private and notify support if they suspect that an account has been compromised.

Personal information is kept only for as long as it is reasonably needed for the purpose for which it was collected, unless a longer period is required or permitted. Some account, identity, transaction, security and support records must be kept for a period required by law even after an account is closed. Once information is no longer required, it may be securely deleted, anonymised or otherwise disposed of in accordance with applicable requirements.

Closing an account does not automatically remove every record connected with it. Information may need to be retained to complete outstanding matters, prevent misuse, resolve disputes, demonstrate compliance, meet record-keeping duties or protect the website and its users. Retained information will continue to be handled for the relevant purpose and will not be kept longer than required.

Cookies, choices and privacy requests

Cookies and similar technologies

The website may use cookies and similar technologies to remember settings, maintain sessions, support account functions, improve security, understand website usage and assess performance. Some cookies are necessary for the website to work correctly, while others help provide a more convenient experience or support analytics and marketing activities.

Players can manage or restrict cookies through their browser settings. Blocking or deleting cookies may affect account functions, website performance or the availability of certain features. Browser settings may also provide information about cookies stored on a device and allow a player to remove them.

Marketing choices

Marketing communications may be sent where permitted and where a player has provided the necessary consent or has not opted out. Players can withdraw consent or unsubscribe from promotional messages by using an available unsubscribe option or by contacting support. Service messages about account security, transactions, policy changes or important website operations may still be sent because they are not marketing communications.

How to exercise privacy rights

Players may contact support@winbay-casino.best to make a privacy or data request. A player may ask to access their personal information, request correction of inaccurate or incomplete information, ask for deletion of information that is no longer needed, or withdraw consent to marketing communications. A request should clearly explain what is being asked for and include enough information to identify the relevant account.

Access: ask for information about the personal data held and, where appropriate, a copy of that information.
Correction: ask for inaccurate, outdated or incomplete account information to be corrected.
Deletion: ask for personal information to be removed where there is no continuing reason to keep it.
Marketing consent: withdraw consent or opt out of promotional communications at any time.

For security, reasonable steps may be taken to confirm the identity and authority of the person making a request. A request may not be fulfilled in full where information must be retained, disclosure would affect another person’s privacy, responding would create a security risk, or another legal exception applies. If a request cannot be completed as asked, the reasons and any available alternatives will be explained where appropriate.

Privacy questions, concerns or requests should be directed to support@winbay-casino.best. Providing clear details about the account and the nature of the request can help the matter be reviewed efficiently. Winbay Casino aims to handle privacy enquiries fairly, carefully and within a reasonable timeframe.

Most Played Games

Money Cart 3

Bus Stop Bonanza

Circus Brilliant

Marching Legions

Age Of Pirates 15 Lines

Rails & Riches