Privacy Policy

This policy sets out what personal information Winshark Casino gathers, the purposes it serves, and the choices available to you regarding its use. It applies to our website, our mobile interface, and any correspondence you exchange with our support team.

Information we gather

When you register, we record identity details including your full name, date of birth, residential address, email address, and telephone number. Verification obligations under our Curaçao GCB licence also require documentary evidence such as a government-issued photo identification and a recent proof of address.

Transactional records cover deposits, withdrawals, wagers placed, bonus credits applied, and the payment instruments used. These records are generated automatically by the platform and are not editable by staff.

Technical information reaches us as a by-product of the connection itself: IP address, device type, browser build, operating system, referring page, and timestamps of each session. We also log unsuccessful sign-in attempts as part of account security monitoring.

How the information is used

The primary purpose is delivering the service you registered for — maintaining your balance, processing payment instructions, resolving support enquiries, and applying any limits you have configured. Without this processing, the account simply cannot function.

A second purpose is legal and regulatory compliance. Anti-money-laundering rules, sanctions screening, and age verification obligations all require us to check and retain specific categories of information, and we cannot waive these checks at a member's request.

A third purpose is service improvement and, where you have agreed to it, marketing. Aggregated behavioural statistics inform which games we license and how the lobby is arranged. Direct promotional messaging is opt-in and every message carries a working unsubscribe mechanism.

Disclosure to third parties

We share information with payment processors, identity verification providers, and licensed game studios strictly to the extent each needs it to perform its function. Contracts with these providers restrict onward use and require security standards at least equivalent to our own.

Disclosure to regulators, law enforcement, or financial intelligence units occurs where a valid legal instrument requires it. In such cases we are frequently prohibited from notifying the member concerned, and we comply with that restriction.

Winshark Casino does not sell personal information to advertising networks, data brokers, or affiliate partners. Affiliates receive only anonymised conversion signals that cannot be traced back to an individual account.

Retention, security, and cross-border transfer

Account and transaction records are retained for a minimum of five years following account closure, as gaming and anti-money-laundering rules oblige. Marketing preferences and non-essential analytics are purged far sooner, typically within twelve months of your last activity.

Data is transmitted over TLS encryption and stored on servers with restricted physical and logical access. Employee access follows a least-privilege model, is logged, and is reviewed periodically; passwords are stored as salted hashes and are never visible to staff.

Some of our processors operate outside Canada, including within the European Union and Curaçao. Transfers are made under contractual safeguards designed to keep protection consistent with the standards applicable where you reside.

Your choices and how to exercise them

You may request a copy of the personal information we hold, ask for corrections to inaccurate entries, withdraw consent to marketing, or ask for deletion of records that we are not legally obliged to retain. Requests are answered within thirty days.

Because these requests concern sensitive material, we verify identity before acting on them; an emailed request from an unverified address is not sufficient. Cookie preferences can be adjusted at any time through the banner control or your browser settings, though disabling strictly necessary cookies will prevent sign-in from working.