Privacy Policy

Last updated: 2026-05-12

Wanted Win Casino values the confidentiality of every visitor and account holder, and this document outlines what information we gather, how it travels through our systems, and which rights you can exercise. The policy reflects our obligations under the Tobique Gaming Commission licence held through Novatrix SRL.

Categories of information collected

Registration data such as full name, residential address, birth date, nationality, and a copy of an identification document are required to comply with anti-money-laundering rules.

Transactional records covering deposits, withdrawals, gameplay logs, bonus claims, and balance movements are stored to maintain accurate account histories.

Technical signals including IP address, device fingerprint, browser type, operating system, and session timestamps are captured automatically for security and analytics.

Purposes behind processing

Personal details enable account creation, age verification, payout authorisation, and ongoing compliance with the regulator's reporting standards.

Behavioural insights help our team detect suspicious activity, prevent fraudulent registrations, and intervene where responsible gaming indicators appear.

Communications such as service updates, security alerts, and optional marketing campaigns rely on contact details you have provided. Marketing channels can be paused at any time through preference settings.

Third parties and data transfers

Payment processors, identity verification vendors, game studios, and customer-care platforms may receive limited information strictly necessary for their function.

Where data travels outside the European Economic Area or Australia, contractual safeguards equivalent to GDPR standard clauses are applied.

We never sell personal information to advertising brokers, data aggregators, or unrelated commercial entities.

Storage duration and security measures

Account information is held for the lifetime of the account and for a minimum of five years following closure, in line with licensing record-keeping rules.

Encryption-in-transit via TLS 1.3, encryption-at-rest for sensitive databases, segmented access permissions, and continuous penetration testing protect stored records.

Personnel handling personal data sign confidentiality undertakings and receive recurrent training on information-security protocols.

User rights and how to exercise them

You may request a copy of the personal data we hold, ask for inaccurate entries to be corrected, or seek erasure subject to regulatory retention requirements.

Objection to specific processing activities, portability of records, and withdrawal of marketing consent are equally available through written request.

Requests are answered within thirty calendar days, and identity confirmation is required before any disclosure to prevent unauthorised access.

This document offers a plain-language overview of our handling practices. Specific legal obligations may vary based on residency, applicable consumer-protection statutes, and directives issued by the Tobique Gaming Commission.