Privacy Policy at Goldwin Casino
This Privacy Policy explains what personal data we collect when you register, play or contact us at goldwin.me.uk, how we use it and the controls you hold over it. It applies to every player with an account at Goldwin Casino, a brand operated by Goldwin Gaming Ltd under licence MGA/B2C/482/2020, established in 2021.
Data We Collect at Goldwin
We collect only the personal data we need to run your account, meet our regulatory duties and keep the site safe. The categories below cover everything we process, from your first visit to closure of your account.
- Identity data: your full name, date of birth, email address, phone number and residential address, collected at registration.
- Verification documents: copies of your ID or passport, proof of address and payment method evidence, collected during KYC checks before your first withdrawal.
- Transaction data: deposits, withdrawals, payment method details and gaming history tied to your account.
- Technical data: IP address, device type, browser version, operating system and approximate location derived from your IP.
- Gameplay behaviour: games played, stakes, wins, losses, session times and betting patterns, used for fraud prevention and responsible-gambling monitoring.
- Marketing preferences: which promotions you opted into, the channels you chose and how you responded to our communications.
How We Use Your Data
Each purpose below maps to a specific category of data. We never sell your data and we never use it for a purpose you have not been told about.
Gameplay data works hardest: the same betting patterns that drive our responsible-gambling tools also feed our fraud-detection systems. When session data suggests harmful play, we may apply limits to your account and contact you.
- Creating and managing your account, including logins and account changes.
- Verifying your identity and age under KYC rules before processing withdrawals.
- Processing deposits and withdrawals through Visa Debit, Mastercard Debit, Trustly, Skrill, Neteller, PayPal and our other payment methods.
- Preventing fraud, money laundering, bonus abuse and multi-accounting.
- Monitoring play against deposit limits, loss limits and self-exclusion settings you set yourself.
- Sending marketing, only where you consented, covering promotions such as weekly 10% cashback and the VIP programme.
- Meeting legal obligations set by our regulator and applicable anti-money-laundering law.
Our Legal Bases for Processing
Contract: we process identity, account and transaction data because they are necessary to provide the service you signed up for. Without them we cannot open an account, settle bets or pay out winnings.
Legal obligation: KYC checks, AML record-keeping and regulatory reporting happen because gambling law requires them. You cannot opt out of processing that a legal obligation mandates.
Legitimate interest: fraud prevention, security monitoring and site analytics rely on our legitimate interest in running a safe casino. We balance this against your rights and keep the data involved to a minimum.
Consent: marketing emails and SMS messages go out only with your consent, which you can withdraw at any time by clicking the unsubscribe link or contacting [email protected].
How Long We Retain Data
Retention follows both gambling regulation and data protection law. We keep each category only as long as the purpose requires, then delete or anonymise it.
| Data category | Retention period |
|---|---|
| Identity and account data | Duration of your account, then 5 years after closure |
| Verification documents | 5 years after account closure, per AML rules |
| Transaction and wagering records | 5 years minimum, per regulatory requirements |
| Technical and log data | Up to 12 months for security and analytics |
| Marketing consent records | Until you withdraw consent, plus 2 years for proof |
| Support communications | 3 years after your last enquiry |
Who We Share Data With
We share data only with parties who need it to deliver the service. Every provider we work with is bound by a data processing agreement and may only use the data for the purpose we set.
Game providers such as Pragmatic Play, Evolution and the other studios in our roster receive limited data needed to run their games: an anonymous player identifier, not your name or payment details.
- Payment processors handling your deposits and withdrawals.
- KYC and AML verification providers checking your documents.
- The Malta Gaming Authority and other regulators, where reporting is required.
- Analytics and security providers measuring site performance and detecting abuse.
- Service providers hosting our platform and delivering email or SMS communications.
- Law enforcement or courts, where legally compelled.
Your Rights Over Your Data
You control your personal data. Exercise any right below by emailing [email protected] or [email protected], or via 24/7 live chat. We respond within one month, extendable by two months for complex requests.
To complain about our handling of your data, you may contact the Information Commissioner's Office, the UK data protection authority, or the supervisory authority in your country of residence.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is inaccurate or incomplete.
- Erasure: request deletion where no legal obligation requires us to keep it.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing at any time, effective immediately.
Cookies and Tracking Technologies
We use cookies to keep you logged in, remember your preferences and understand site traffic. Analytics cookies and marketing cookies load only after you accept them in the consent banner, and you can change your choices at any time from the cookie settings link in the footer.
Full details of every cookie we set, its purpose and its lifespan are listed on our dedicated Cookies Policy page, reachable from the footer of goldwin.me.uk.
Security at Goldwin Casino
All traffic between your device and our servers runs over TLS encryption, and payment details are tokenised so card numbers never sit in our systems in readable form. Access to player data is restricted by role: a support agent sees your account, not your documents, and verification staff see documents only while a check is open.
If a personal data breach occurs, we notify the relevant supervisory authority within 72 hours of becoming aware of it, and we tell you directly where the breach poses a high risk to your rights. Our internal security team tests these procedures on a fixed schedule each year.
Deposit limits, session reminders, time-out and GAMSTOP self-exclusion sit alongside these controls; you can set them from your account page at any time.
Frequently Asked Questions
How do I stop marketing emails from Goldwin Casino?
Click the unsubscribe link in any email, or contact [email protected] or live chat. Consent withdrawal takes effect immediately, though you may receive one final message confirming the change.
Can I delete my account data completely?
You can request erasure of your data, but gambling law requires us to keep transaction and verification records for at least 5 years after account closure. Everything else, including marketing preferences, is deleted on request.
Why do you need my ID before my first withdrawal?
KYC checks are a legal obligation under our MGA licence. We verify your identity, address and payment method once, before your first withdrawal, and then only re-check when something changes.
Who do I contact about a data protection question?
Email [email protected] for anything relating to this policy, your rights or how we process your data. We respond within one month of receiving your request.