Privacy Policy

1. Introduction

1.1 Greatwin Casino ("we", "us", "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, store, and disclose personal information when you use our platform at greatwin-casino-nz.com.

1.2 We operate under a Curaçao Gaming Authority licence (#8048/JAZ) and adhere to applicable data protection principles, including those aligned with the General Data Protection Regulation (GDPR) where applicable to our EU/EEA users.

1.3 By registering an account or using our services, you acknowledge that you have read and understood this Privacy Policy and consent to our data processing practices as described herein.

2. Data We Collect

We collect the following categories of personal data:

3. How We Collect Data

3.1 Directly from you: When you register an account, make deposits, contact support, or complete profile information.

3.2 Automatically: Technical data (IP address, device information, session logs) collected automatically when you visit the Site.

3.3 From third parties: KYC verification partners, payment processors, and fraud prevention services may provide additional data about you to fulfil our regulatory obligations.

3.4 From marketing affiliates: If you arrived at our Site via a marketing affiliate, we receive tracking information confirming the referral. This does not include your personal data held by the affiliate.

4. Purpose of Processing

We process your personal data for the following purposes:

• Account management: Creating and maintaining your account, processing deposits and withdrawals, providing customer support.
• Legal compliance: Anti-money laundering (AML) checks, Know Your Customer (KYC) verification, age verification, and compliance with gaming licence requirements.
• Fraud prevention: Detecting and preventing fraudulent activity, multi-accounting, and abuse of promotional offers.
• Service improvement: Analysing usage patterns to improve our platform, game selection, and user experience.
• Marketing: Sending promotional emails and offers to opted-in users. You may opt out at any time via the unsubscribe link or account settings.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviours and fulfil our responsible gaming obligations.

5. Legal Basis for Processing

We process your data under the following legal bases:

• Contract performance: Processing necessary to fulfil our obligations to you as an account holder (deposits, withdrawals, game access).
• Legal obligation: KYC/AML compliance, age verification, regulatory reporting.
• Legitimate interest: Fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring.
• Consent: Marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing

6.1 We do not sell your personal data to third parties. Full stop.

6.2 We share data with the following categories of recipients where necessary:

• Payment processors: To process deposits and withdrawals (Visa, Mastercard, Skrill, PayPal, crypto networks).
• KYC/identity verification providers: To verify your identity and age in compliance with our licence obligations.
• Gaming software providers: Game data is processed by the relevant game provider to deliver the game experience.
• Regulatory authorities: When required by our gaming licence or applicable law.
• Law enforcement: When required by a valid legal order or to prevent serious harm.

6.3 Any third-party service providers we use are contractually bound to process your data only for the specified purpose and to maintain appropriate security standards.

7. Data Retention

7.1 We retain personal data for as long as your account is active and for a period after account closure as required by our regulatory and legal obligations. Typically, this is 5 years post-closure for financial transaction records (AML compliance requirement).

7.2 Marketing data is retained until you withdraw consent.

7.3 Upon verified request, we will delete personal data not required for regulatory compliance. See Section 8 for how to make this request.

8. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right of access: Request a copy of all personal data we hold about you.
• Right to rectification: Correct inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your data where we have no legal basis for retention.
• Right to data portability: Receive your personal data in a structured, commonly used format.
• Right to object: Object to processing based on legitimate interest, including direct marketing.
• Right to restriction: Request that we restrict processing of your data while a dispute is resolved.
• Right to withdraw consent: Withdraw previously given consent for marketing at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Cookies

9.1 We use cookies and similar tracking technologies to enhance your experience and analyse platform usage.

9.2 You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the platform's core functions.

10. Security Measures

10.1 We implement industry-standard security measures including:

• 256-bit SSL/TLS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Role-based access controls limiting staff access to personal data
• Regular security audits and penetration testing
• Multi-factor authentication for administrative access

10.2 Despite our best efforts, no system is 100% secure. We recommend using a strong, unique password for your account and enabling two-factor authentication.

11. International Data Transfers

11.1 Our primary servers are located in jurisdictions with appropriate data protection standards. Where data is transferred outside these jurisdictions, we ensure appropriate safeguards are in place.

11.2 Transfers to payment processors and KYC providers may involve international data transfers. All such transfers are governed by standard contractual clauses or equivalent safeguards that provide equivalent protection to applicable data protection laws.

12. Contact & Complaints

12.1 For any privacy-related queries or to exercise your data rights, contact us at:

• Email: [email protected]
• Live Chat: 24/7 from your account dashboard

12.2 If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In New Zealand, this is the Office of the Privacy Commissioner (privacy.org.nz).

12.3 For EU/EEA residents, your supervisory authority is determined by your country of residence.