This Privacy Policy explains how Winzoria Casino ("Winzoria", "we", "us", "our"), operated at winzorria.com, collects, uses, stores, shares and protects your personal data. Please read it carefully before registering an account or using any part of our platform. By using winzorria.com you confirm that you have read and understood this policy.

1. Who We Are

Winzoria Casino is operated under a Curaçao eGaming licence and is accessible at winzorria.com. For the purposes of applicable data-protection law, Winzoria is the data controller responsible for the personal information you provide to us or that we collect about you in connection with your use of our casino, live casino, sportsbook and any related services.

If you have any questions about this policy or about how we handle your personal data, please contact our support team via 24/7 live chat at winzorria.com or by emailing us at the address provided in the Contact Us section below.

2. The Data We Collect

We collect personal data in a number of ways: directly from you when you register, make a deposit or withdrawal, claim a bonus, contact support, or use our services; automatically through your device and browser as you navigate the site; and, where necessary, from trusted third parties as part of our regulatory and verification obligations.

2.1 Registration and Account Data

• Full name
• Date of birth
• Home address and country of residence
• Email address
• Phone number
• Username and encrypted password
• Preferred currency and language settings

2.2 Identity Verification (KYC) Data

To comply with our obligations under our Curaçao eGaming licence and to prevent fraud and money laundering, we carry out Know Your Customer (KYC) checks. As part of this process we may collect:

• Copies of government-issued photo identification (e.g. passport, national identity card, driving licence)
• Proof of address documentation (e.g. utility bill, bank statement dated within the last three months)
• Proof of payment method (e.g. photograph of a bank card showing the first six and last four digits, or a screenshot of an e-wallet or cryptocurrency wallet)
• Source-of-funds or source-of-wealth documentation where required by our risk-assessment procedures

Winzoria aims to complete KYC checks within 24 hours of receiving all required documents. Verification is a one-time process per account; once complete, you will not ordinarily be asked to repeat it unless our compliance obligations require a refresh.

2.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates and methods
• Payment method details (e.g. partial card numbers, e-wallet identifiers, cryptocurrency wallet addresses)
• Transaction history, including deposits, withdrawals, bonus credits and cashback payments
• Betting and gaming history across our casino, live casino and sportsbook

2.4 Technical and Usage Data

• IP address and approximate geolocation derived from it
• Device type, operating system and browser version
• Pages visited, time spent on each page and clickstream data
• Session duration and frequency of visits
• PWA installation and push-notification preferences
• Referral source (e.g. which link or campaign directed you to winzorria.com)

2.5 Communications Data

• Records of live chat conversations with our support team
• Email correspondence
• Feedback, complaints and dispute records
• Responsible-gaming communications, including self-exclusion requests and limit-setting instructions

2.6 Bonus and Promotional Data

• Bonuses claimed across our welcome package (up to €10,000 across ten deposits), reload offers, free-spins promotions, cashback awards and VIP rewards
• Loyalty-point balances and VIP tier status (Bronze, Silver, Gold, Platinum, Diamond)
• Wagering progress against bonus requirements

3. How We Collect Your Data

• Directly from you — when you create an account, submit KYC documents, make or request a payment, contact support, opt into marketing, or use self-service responsible-gaming tools.
• Automatically — via cookies, pixel tags, server logs and similar technologies as you browse winzorria.com or use our PWA.
• From third parties — including identity-verification and fraud-prevention agencies, payment processors (such as Visa, Mastercard, Skrill, Neteller and cryptocurrency networks), game-content providers (such as NetEnt, Play'n GO, Pragmatic Play, Evolution, Ezugi and others), and analytics partners.

4. Why We Use Your Data — Our Legal Bases

5. Cookies and Tracking Technologies

Winzoria uses cookies and similar technologies to make the site work correctly, to remember your preferences, to analyse traffic and to deliver relevant promotions. The main categories are:

• Strictly necessary cookies — essential for login sessions, the cashier, game loading and security functions. These cannot be disabled without breaking core functionality.
• Functional cookies — remember your language preference, currency selection and layout choices.
• Analytics cookies — help us understand how players navigate the site so we can improve the experience. Data collected is aggregated and not used to identify individuals directly.
• Marketing and attribution cookies — track which campaigns or referral sources led you to winzorria.com, allowing us to measure promotional effectiveness. These are only set where you have given consent.

You can manage cookie preferences through the consent banner displayed on your first visit to winzorria.com, and you may update your choices at any time via the cookie-settings link in the site footer. Please note that disabling certain cookies may affect the performance of features such as the PWA, push notifications and personalised bonus offers.

6. Who We Share Your Data With

We do not sell your personal data to third parties. We share it only where necessary, with the following categories of recipient:

• Payment processors and financial institutions — Visa, Mastercard, Skrill, Neteller, iDEAL, bank-transfer networks and cryptocurrency networks, solely to process your deposits and withdrawals in accordance with the limits and speeds set out in our cashier.
• Identity-verification and fraud-prevention agencies — to carry out KYC checks, screen against sanctions lists and detect fraudulent activity.
• Game content providers and platform suppliers — including Evolution, Pragmatic Play Live, Ezugi, NetEnt, Play'n GO, Pragmatic Play, Hacksaw Gaming, Nolimit City, Push Gaming and others, to deliver game content and record gaming history.
• Regulatory and licensing authorities — including our Curaçao eGaming licensor, where we are required to report or share data to maintain compliance with our licence conditions.
• Law-enforcement and government bodies — where we are legally compelled to disclose data by court order, subpoena or equivalent legal instrument.
• IT and infrastructure providers — hosting, content-delivery, cybersecurity and SSL-encryption partners who process data strictly on our behalf and under data-processing agreements.
• Analytics and marketing technology providers — to measure site performance and campaign attribution, using only anonymised or pseudonymised data where possible.
• Responsible-gaming and self-exclusion scheme operators — where you request enrolment in a third-party scheme or where we are required to share data to enforce self-exclusion.

All third-party processors who handle personal data on our behalf are required to do so under contractual obligations that ensure an equivalent level of protection to that described in this policy.

7. International Data Transfers

Winzoria is operated from Curaçao, and some of the third parties we work with are based in countries outside the European Economic Area (EEA) or the United Kingdom. When we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place — such as standard contractual clauses, adequacy decisions or equivalent mechanisms — so that your data receives a level of protection consistent with applicable law. If you would like further information about the safeguards we rely on for any specific transfer, please contact us using the details in Section 13.

8. Data Retention

We keep your personal data only for as long as is necessary for the purposes set out in this policy, or as required by law. The principal retention periods we apply are:

• Account and KYC records — retained for a minimum of five years from the date your account is closed, in line with standard anti-money-laundering requirements applicable to licensed gambling operators.
• Transaction and financial records — retained for a minimum of five years from the date of each transaction.
• Communications records (live chat, email) — retained for up to three years from the date of the communication, unless a longer period is required for a dispute or legal process.
• Marketing data — retained until you withdraw consent, after which it will be suppressed from marketing lists (though a record of your opt-out will be maintained).
• Technical and usage data (logs) — retained for up to 12 months in identifiable form, after which data is aggregated or deleted.
• Responsible-gaming records — retained for the duration of any active restriction plus five years thereafter.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

9. Your Data-Protection Rights

Depending on your country of residence and the legal framework that applies to you, you may have some or all of the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate or incomplete data.
• Right to erasure — to request deletion of your data where we no longer have a lawful basis to hold it. Please note that certain data must be retained by law (e.g. KYC and transaction records) and cannot be erased before the applicable retention period expires.
• Right to restrict processing — to ask us to pause processing of your data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability — to receive your data in a structured, machine-readable format and, where technically feasible, to have it transferred to another controller.
• Right to object — to object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent — where processing is based on your consent (e.g. marketing emails, certain cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right not to be subject to solely automated decisions — where we make decisions that significantly affect you using only automated means (e.g. automated fraud flagging), you have the right to request human review.

To exercise any of these rights, please contact us via live chat at winzorria.com or by email as set out in Section 13. We will respond within one calendar month, or inform you if we require additional time. We may need to verify your identity before processing your request. There is no charge for exercising your rights, though we reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data-protection supervisory authority in your country of residence.

10. Security

Winzoria takes the security of your personal data seriously. All traffic between your device and winzorria.com is protected by SSL (Secure Socket Layer) encryption. Our infrastructure is built to handle significant traffic volumes securely, and we apply technical and organisational measures including, but not limited to:

• End-to-end encryption of data in transit using TLS protocols
• Encryption of sensitive data at rest
• Access controls ensuring that only authorised staff can access personal data, on a need-to-know basis
• Regular security assessments and penetration testing
• Monitoring and logging of access to systems holding personal data
• Staff training on data-protection obligations

No method of electronic storage or internet transmission is entirely secure. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and any relevant regulatory authorities as required by applicable law.

You also have a role in keeping your account secure. Please use a strong, unique password, do not share your account credentials with anyone, and contact our support team immediately via live chat if you suspect unauthorised access to your account.

11. Responsible Gaming and Data

Winzoria is committed to promoting safer gambling. In support of this commitment, we use personal and gaming-history data to:

• Monitor patterns of play that may indicate problem gambling behaviour
• Administer self-imposed limits set by you, including deposit limits, loss limits, session-time limits and cooling-off periods
• Process self-exclusion requests and enforce exclusion periods across our platform
• Share data with third-party responsible-gambling schemes where you enrol in one or where we are required to do so
• Contact you with safer-gambling information where our monitoring indicates this may be appropriate

Responsible-gaming processing is carried out on the basis of our legitimate interests in preventing gambling-related harm, our legal obligations under our Curaçao eGaming licence, and — where a risk to your health or safety is identified — the vital-interests legal basis. Records relating to responsible-gaming interventions are retained as described in Section 8.

12. Marketing Communications

If you opt in to marketing at registration or at any later point, we may send you information about bonuses, promotions, new games, sportsbook events and other offers by email, push notification (if you install our PWA and enable notifications) and, where you have provided it and consented, by SMS. The types of promotion we communicate include, but are not limited to, our welcome package, Monday Reload, Midweek Free Spins, Weekend Cashback, Loyalty Booster, Slot of the Month promotions and VIP programme updates.

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Adjusting notification preferences in your PWA or device settings
• Contacting our support team via live chat or email and requesting removal from marketing lists

Opting out of marketing will not affect our ability to send you service-related communications (e.g. KYC requests, withdrawal confirmations, responsible-gaming messages or security alerts), which we may send regardless of your marketing preferences where they are necessary for the performance of your account or required by law.

13. Children

Winzoria's services are strictly for adults aged 18 or over. We do not knowingly collect personal data from anyone under the age of 18. Age verification is part of our KYC process, and we reserve the right to request proof of age at any stage. If we become aware that we have inadvertently collected personal data from a minor, we will delete it promptly and close the associated account. If you believe a minor has created an account on winzorria.com, please contact us immediately using the details below.

14. Third-Party Links

winzorria.com may contain links to third-party websites — for example, payment-provider portals or responsible-gambling information resources. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policy of any third-party site you visit via a link from winzorria.com.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, applicable law or best practice. When we make material changes, we will notify you by posting a prominent notice on winzorria.com and, where appropriate, by email to the address registered on your account. The date of the most recent revision will always appear at the top of this page. Your continued use of winzorria.com after a notified change constitutes your acknowledgement of the updated policy. We encourage you to review this page periodically.

16. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data we hold about you, please get in touch:

• Live Chat: Available 24 hours a day, 7 days a week via winzorria.com
• Email: Available through the support section of winzorria.com

We aim to acknowledge all privacy-related enquiries within 72 hours and to provide a full response within one calendar month.