Privacy Policy | WinCraft
wincraftcasino-hu.net (hereinafter: the Website or Service) is committed to protecting users’ personal data. This Privacy Policy explains what data we process, for what purpose and legal basis, with whom we may share it, how long we retain it, and what rights you have under the GDPR. By using the Website, you accept the provisions of this document.
1. Data Controller and Data Processors
Data Controller:
Casiworx N.V.
Registered office: Groot Kwartierweg 10, Livestrong Building, Curaçao
Company registration number: 163922
Data Protection Contact: [email protected]
Data Processor (payment processing):
Xenith Ltd., Cyprus
General customer support: [email protected]
You may submit data protection requests or general inquiries through the above contacts.
2. What Data Do We Process?
Registration and identification data:
- Full name, date of birth, country of residence, email address
- Username, password (encrypted)
KYC and compliance data:
- Copy of identity documents
- Proof of address (e.g., utility bill, bank statement)
Transaction and billing data:
- Deposits, withdrawals, account and cashier history
- Currency, amount, timestamp, status
Technical and usage data:
- IP address, device and browser data, operating system
- Log files, session identifiers, cookies
- Gaming activity (game type, frequency, bets, duration)
Communication:
- Customer support chat and email history, complaint records
The above categories are processed only to the extent necessary for providing services and ensuring legal compliance.
3. Purposes and Legal Bases of Data Processing
| Purpose | Legal Basis (GDPR) |
| Account creation, login, service provision | Art. 6(1)(b) – contract performance |
| Processing deposits and withdrawals | Art. 6(1)(b) – contract performance |
| Identity and age verification (KYC), AML compliance | Art. 6(1)(c) – legal obligation |
| Security, fraud prevention, abuse detection | Art. 6(1)(f) – legitimate interest |
| Promotions, newsletters, offers | Art. 6(1)(a) – consent |
| Product development, statistical analysis (anonymized) | Art. 6(1)(f) – legitimate interest |
Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of prior processing.
4. Cookies and Similar Technologies
The Website uses cookies to ensure functionality, security, and analytics.
Types of cookies:
- Necessary cookies: basic functions, login, session management
- Functional cookies: remembering settings (e.g., language)
- Analytical cookies: traffic and behavior analysis
- Marketing cookies: personalized offers (only with consent)
Cookie settings can be modified or deleted in your browser. Restricting cookies may affect the functionality of the service.
5. Data Transfers and Recipients
Personal data may be shared with:
- Payment providers and banking partners (transaction processing)
- KYC/verification providers (document checks)
- IT infrastructure and hosting providers
- Marketing partners (only with separate consent)
- Authorities and regulators (to fulfill legal obligations)
All partners operate under GDPR-compliant data processing agreements.
6. Data Retention Periods
| Data Category | Retention |
| Account data | 5 years from account closure |
| Transaction/billing data | Minimum 8 years (per accounting law) |
| KYC documentation | 5 years from verification |
| Customer support communications | 2 years |
| Cookies and analytics identifiers | Maximum 12 months |
After expiry, data is deleted or irreversibly anonymized.
7. Your Rights (GDPR)
You have the right to:
- Access processed data
- Rectify inaccurate data
- Erasure (“right to be forgotten”) where legally applicable
- Restrict processing in certain cases
- Data portability in a portable format
- Object to processing based on legitimate interest
- Withdraw consent for marketing-related processing
Requests can be sent to [email protected] or [email protected]. We respond within 30 days as a general rule.
8. Complaints and Supervisory Authority
If you believe your rights have been violated, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).
Address: 1055 Budapest, Falk Miksa utca 9–11 • Website: https://naih.hu/
Naturally, you may also contact us directly for faster resolution.
9. Data Security
We implement multi-layered technical and organizational measures:
- SSL/TLS encryption for all data transfers
- Firewalls, intrusion detection, logging, and access control
- Restricted, segmented databases
- Multi-factor administrator access
- Regular backups and audits
Our goal is to prevent unauthorized access, alteration, disclosure, or loss of data.
10. Protection of Minors
Our services are available only to persons over 18. Age declaration is required at registration, and KYC verification is mandatory before withdrawal. If we detect use by a minor, the account will be blocked and reviewed. Recommended parental tools: Qustodio, NetNanny, Norton Family.
11. Automated Decision-Making
Some processes are automated (e.g., fraud prevention, bonus eligibility checks). You have the right to request human intervention, express your opinion, or contest a decision by contacting [email protected]. Automated processes are designed not to cause disproportionate disadvantages.
12. International Data Transfers
Your data may be transferred outside the EEA (e.g., cloud services). In such cases, appropriate safeguards are applied:
- EU adequacy decision, or
- Standard Contractual Clauses (SCC), or
- Other GDPR-required protection measures.
13. Third-Party Websites
The Website may contain external links. We are not responsible for their data practices. Please review the privacy policies of those providers.
14. Contact
- Data protection: [email protected]
- Customer support: [email protected]
(Please mark subject line: “Privacy Inquiry”)
We will respond no later than 30 days.
15. Amendments
We reserve the right to amend this Policy. Changes take effect upon publication. We recommend reviewing this page periodically for updates.
16. Final Provisions
By using the Website, you confirm that you have read, understood, and accepted this Privacy Policy. If you disagree with any part, please refrain from using the Service and contact us to exercise your rights.