WinLion Privacy Policy: What Data the Casino Collects and Why
This privacy policy explains what personal data WinLion collects, why it is used and what rights you have. It was last updated on 22 April 2026. Please read it before you share personal data, because registering an account means you accept it together with the Terms and Conditions.
Who is responsible for your data
Keron Systems LTD, registration number 15947, Hamchako, Mutsamudu, Autonomous Island of Anjouan, Union of Comoros, acts as the data controller. In plain terms, that means the company decides why your data is processed and how, and it takes responsibility for it. WinLion operates under licence No. ALSI-202504033-FI2 from the Government of Anjouan.
A data privacy manager oversees questions about this policy, and privacy questions or requests go to [email protected]. You may also complain to your local data protection regulator at any time, although the company asks for a chance to help first. The service is not meant for children, and WinLion does not knowingly collect their data.
What this policy covers
The policy applies when you visit the website, when you register an account, and when you give personal data by other routes such as a phone call. Everyday registration and sign-in steps are covered in the login help guide. It also covers data collected from third parties and public sources, for example social media platforms and data aggregators. If you receive a separate privacy statement for a specific occasion, read the two together.
What is collected
Some details you give directly, and some are gathered automatically or from third parties. The categories are:
- Identity: name, username, date of birth, gender, marital status and title.
- Photographs: passport or other photo ID, used for verification.
- Contact: home and billing address, email and phone numbers.
- Financial: bank account and payment card details.
- Transaction: deposits, withdrawals and the games you use.
- Technical: IP address, login data, browser, device, time zone and location.
- Profile and usage: your settings, interests, feedback and how you use the site.
- Marketing: your communication preferences.
The casino also uses anonymous aggregated data for statistics. A good example is counting what share of players open a particular feature. Such data is not personal data in law, but if it is combined with details that identify you, it is treated as personal data again.
How the data is collected
There are three routes. The first is direct: you fill in forms, write to support or speak to the team. The second is automatic: as you move around the site, cookies and similar tools record technical details about your device and browsing patterns. The third is outside sources. These include analytics providers, advertising networks, search information providers, payment solution providers that handle deposits and withdrawals, and data brokers or aggregators.
Why it is used
WinLion uses your data to create and manage your account, to talk to you about it and to handle complaints. It also uses it to improve services, to market offers and to meet legal duties such as anti-money-laundering, identity and fraud checks. The offers themselves are described in the general guide to the casino. The legal bases it names are performance of a contract, legitimate interest and compliance with legal obligations.
| When data is used | Why | Legal basis |
|---|---|---|
| Registering an account | Creating and managing the account | Contract |
| Talking to you about your account | Service and complaint handling | Contract and legitimate interest |
| Studying customer behaviour | Improving the site and services | Legitimate interest |
| Marketing | Offers that may suit you | Legitimate interest |
| Regulatory work | AML, KYC and fraud checks | Legal obligation |
If you do not provide data the law or the contract requires, the casino may be unable to give you the service. In that case it may have to cancel a product you are trying to use, and it says it will tell you at the time.
How you are contacted
By accepting the policy and the Terms you agree to receive messages by SMS, email, push, in-app message, phone and other channels, including channels that do not exist yet. Some messages are needed to run your account. Others are marketing, including offers from partners where the law allows.
You will receive marketing if you hold an account and have not opted out. You can opt out of marketing at any time by contacting the casino or changing the settings on the site, and that does not affect messages needed for the account.
Who sees your data
Data can be shared with group companies, IT and administration providers, game software suppliers, payment providers, identity verification firms, marketing delivery services, professional advisers, tax authorities and regulators. It may also pass to a buyer if the business is sold, and the new owner may use it as this policy describes. Suppliers must respect security and may use data only for the specified purposes, on the casino's instructions.
Security and retention
WinLion uses suitable security measures, limits access to people who need it, and has procedures for suspected breaches, including notifying you and regulators where required. Staff and contractors who handle data are bound by confidentiality.
Data is kept only as long as needed for the purposes collected and for legal, tax, accounting and reporting requirements. When deciding how long, the company weighs the amount, nature and sensitivity of the data, the risk of harm from misuse, and whether the purpose can be met another way. It can be kept longer if there is a complaint or likely litigation, and anonymised data can be used indefinitely.
Your rights
Depending on the law that applies to you, you can ask to:
- see the data held about you and get a copy;
- correct data that is incomplete or inaccurate;
- erase data where there is no good reason to keep processing it;
- object to processing based on your particular situation;
- restrict processing, for example while accuracy is checked or when you need the data for a legal claim;
- receive your data in a structured, machine-readable format, or have it passed to another provider.
Requests are free unless clearly unfounded or excessive. The casino may ask you to prove your identity first, which protects your data from being given to the wrong person. It tries to answer within one month, longer for complex requests, and will tell you if it needs more time. Some erasure requests cannot be met because of legal duties, such as record keeping rules.
Keeping your data accurate
You are asked to tell the casino when your details change, because wrong information can delay verification and withdrawals. The policy is reviewed regularly, and the date at the bottom of the official version shows the latest update.
Third-party links
The site can link to other websites, and their privacy practices are not its responsibility. Read the privacy policy of every site you visit after you leave.
Contact
Privacy questions: [email protected]. General support: [email protected], plus live chat on the site.