How We Handle Your Information at Wintopia Casino
Effective Date: 28 September 2026 Last Updated: 28 September 2026
This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit Wintopia Casino, create an account, use the cashier, play games, claim bonuses, complete KYC, contact our support team, receive messages or use responsible-gambling tools.
Operator, controller and covered services
Wintopia Casino is operated by Altacore N.V., Dr. H. Fergusonweg 1, Gaito, Curaçao, under Curaçao Gaming Control Board licence OGL/2023/109/0075. We act as controller where we decide why and how personal data is processed.
This policy applies to our site, your account, cashier activity, casino gameplay, live casino access, promotional participation, support channels, verification checks, security monitoring and safer-play functions. Our services are intended for players aged 18+.
Personal data we collect
We collect data directly from you, automatically through our site and from service providers where needed to operate your account, process payments, verify identity, protect our services or meet legal duties.
| Category | Examples |
|---|---|
| Account and contact | Name, date of birth, address, email, phone, username, language, preferences |
| Identity and KYC | ID document, proof of address, age checks, verification status, source-of-funds details |
| Payments | Deposits, withdrawals, cashier actions, transaction references, method identifiers, status |
| Technical and cookies | IP address, device, browser, session logs, cookie IDs, analytics events |
| Play and bonuses | Game sessions, bet records, wins, bonus use, wagering progress, limit records |
| Support and marketing | Live chat, emails, attachments, complaints, opt-ins, opt-outs |
| Safer gambling | Deposit limits, cooling-off, self-exclusion, risk indicators, account reviews |
Payment data may relate to Visa, Mastercard, Skrill, Neteller, MiFinity, Paysafecard, bank transfer and crypto including BTC, ETH, LTC, USDT, BNB and DOGE. We do not need to store every full payment credential where a payment provider can process or tokenise it for us.
Gameplay, providers and account records
When you play, we process records needed to start, settle and audit game sessions. This may include titles such as Gates of Olympus 1000, Pirots 3, Rich Wilde and The Tome of Madness, Fire in the Hole 2, Blood Suckers, Dead or Alive, Book of Ra, Le Bandit, Reactoonz, Divine Fortune, Crazy Time, Monopoly Live, Crazy Pachinko Live, Mega Ball 100X and Aviator.
Our provider-related processing may involve Pragmatic Play, Play’n GO, Push Gaming, Relax Gaming, Yggdrasil, Evolution, Nolimit City, ELK Studios, NetEnt, Red Tiger, Quickspin and Playtech where required for gameplay, game integrity, troubleshooting, reporting, settlement or fraud prevention.
Purposes and legal bases
We process personal data only where we have a lawful reason. Depending on the activity and applicable privacy law, our basis may be contract performance, legal obligation, consent, legitimate interests or another recognised basis.
We use data to create and manage your account, confirm you are 18+, provide games, operate the cashier, process deposits and withdrawals, keep accurate records, answer support requests and handle complaints.
We also use data to maintain security, detect technical problems, improve performance, measure service quality, manage bonuses, send account communications, apply responsible-gambling tools, respond to lawful requests, defend legal claims and meet accounting, tax, court, regulator or law-enforcement requirements.
Bonus and withdrawal processing
Your account data helps us apply limits, wagering rules and promotional conditions correctly. Records may cover our four-deposit package: 100% up to 700 + 75 FS, 100% up to 500 + 75 FS, 50% up to 500 + 75 FS and 75% up to 300 + 75 FS. They may also cover the High Roller offer of 125% up to 2,500 + 125 FS.
We may process bonus minimums, including 20 for bonus eligibility, 60 to receive free spins and 400 for High Roller, plus 50x bonus wagering, 40x free spins wagering, 10-day validity and max bonus bet 5. We also keep withdrawal records for the framework of 2,000 daily, 5,000 weekly and 10,000 monthly, while method limits can vary.
Cookies and similar technologies
We use cookies, local storage, pixels, tags and similar tools to keep sessions secure, remember preferences, support login and cashier functions, measure performance, detect errors, understand site use and record permitted marketing or affiliate attribution.
Some cookies are essential for secure operation. Others support analytics, campaign reporting or performance measurement. You can manage cookies through your browser and, where offered, site controls. Blocking cookies may affect account, cashier or gameplay features.
Processors and permitted disclosure
We may share personal data with trusted providers and professional partners where needed for the purposes in this policy. These may include payment providers, banks, crypto payment processors, identity verification services, fraud-prevention vendors, game studios, platform providers, hosting suppliers, analytics tools, customer support systems, email and messaging services, legal advisers, auditors and regulators.
Where a processor acts for us, we require confidentiality, security controls, processing on instructions and compliance with applicable privacy law. We do not authorise processors to use your account data for unrelated purposes.
We may disclose data when required by law, licence obligations, court order, regulator request, payment investigation, fraud review, security incident handling, corporate administration or to protect our rights, players and services.
International transfers
Your data may be processed outside your country of residence when infrastructure, payment services, verification systems, support tools, suppliers or operational teams are located in different jurisdictions.
Where applicable privacy law requires safeguards, we use appropriate measures such as contractual protections, access controls, due diligence, technical restrictions, transfer assessments or other lawful mechanisms. The safeguard may depend on the provider, data type and processing purpose.
Retention of personal data
We keep personal data only for as long as reasonably needed for the purposes described here. Retention periods depend on the record type, account status, legal duties, licence obligations, payment rules, fraud risk, responsible-gambling restrictions, complaint handling, dispute needs and accounting requirements.
When identifiable data is no longer needed, we may delete it, anonymise it, aggregate it or restrict access. Some deletion requests may be limited where we must keep records for legal, regulatory, payment, fraud-prevention, responsible-gambling, dispute or accounting reasons.
Security of your account data
We use technical, administrative and organisational safeguards designed to protect personal data against unauthorised access, misuse, alteration, loss or disclosure. These safeguards include SSL encryption, access controls, internal restrictions, monitoring, supplier checks and security procedures for account and cashier activity.
Where enabled in your account, two-factor authentication can add protection. Keep your password private, use secure devices and contact our support team immediately if you notice suspicious account activity, unknown transactions or unexpected verification requests.
Your privacy rights and choices
Depending on applicable privacy law, you may request access, correction, deletion, restriction, objection to certain processing, portability, withdrawal of consent and opt-out from marketing.
To protect your account, we may ask you to verify your identity before responding. Some rights may be limited where we need data for legal obligations, payment records, fraud prevention, security, responsible-gambling duties, disputes, regulatory requests or account integrity.
Marketing communications
We send marketing only where we have consent or another permitted basis. Marketing may relate to casino offers, weekly cashback, VIP levels, tournaments, free spins or account promotions. You may opt out at any time through the message option provided or by contacting our support team.
Opting out of marketing does not stop essential service messages. We may still send account, security, legal, cashier, verification, responsible-gambling, limit, withdrawal, bonus-status or policy notices.
Minors and age verification
Our services are intended only for people legally allowed to gamble and aged 18+. We do not knowingly collect personal data from minors. If we identify an underage account, we may suspend or close it, block access, cancel promotional participation, retain necessary records and comply with legal or licence duties.
Age checks and identity verification help us protect players, prevent unlawful access and maintain the integrity of our site.
Responsible-gambling data
We process responsible-gambling data such as deposit limits, cooling-off, self-exclusion, account restrictions, support notes, risk indicators and account-safety communications. We use this information to apply your chosen tools, monitor account safety, manage restrictions and support safer-play obligations.
These records may be retained after closure where needed to respect restrictions, answer regulatory questions, prevent re-registration during exclusion, resolve disputes or meet legal and licence duties. Our site offers deposit limits, cooling-off and self-exclusion tools.
Third-party links and external services
Our site may include links, payment pages, game interfaces or external services operated by third parties. Their privacy practices may differ from ours. When you leave our site or use a third-party service, the provider may process your data under its own notice and terms.
We are not responsible for the privacy practices of external websites or services that we do not control, but we work with operational partners that are needed for casino, cashier, verification and support functions.
Updates to this policy
We may update this Privacy Policy to reflect changes in law, licence requirements, technology, payments, security measures, game operations, support tools or our processing activities. The visible Effective Date and Last Updated date show when this policy applies.
If a change materially affects how we process your personal data, we may provide notice through our site, your account, email or another appropriate channel.
Privacy contact
For privacy questions, rights requests or account data concerns, contact our support team at [email protected]. For identity verification matters, contact [email protected]. You may also write to Altacore N.V., Dr. H. Fergusonweg 1, Gaito, Curaçao.
Please include enough detail for us to identify your account and request. Do not send unnecessary payment credentials, passwords or sensitive documents unless our support team or KYC team specifically asks for them through the appropriate secure process.
