Privacy Policy at Greatwin Casino
This Privacy Policy explains what personal information we collect when you play at great-wincasino.com, why we collect it, who sees it and how long we keep it. It applies to every account holder and visitor, and it works alongside our Terms and Conditions and our Cookies Policy. We operate under a Curaçao eGaming licence and handle the personal information of Australian players with care, in line with the Australian Privacy Principles and GDPR standards where they apply to you. Since our launch in 2022 we have processed player data under one rule: collect only what the service needs, and delete it when we no longer have a reason to hold it.
Information We Collect
We collect six broad categories of personal information. Some of it you give us directly when you register, and some of it our systems record automatically while you use the site.
- Identity data: your full name, date of birth, email address, phone number and residential address.
- Verification documents: copies of your ID, passport or driver licence, proof of address such as a utility bill, and proof of your payment method, collected under our KYC obligations before your first withdrawal.
- Transaction data: deposits and withdrawals, amounts, currencies, payment method details and blockchain wallet addresses for crypto transfers.
- Technical data: IP address, device type, operating system, browser version, language setting and time zone.
- Gameplay behaviour: games you open, bets you place, session times, bonus usage, tournament entries and win or loss history.
- Marketing preferences: which channels you agreed to hear from us on, and every consent or opt-out you have recorded with us.
How We Use Your Data
Every use of your information maps back to a specific purpose. We do not repurpose data collected for compliance into advertising, and we do not sell your information to anyone.
Gameplay and transaction records also feed our responsible gambling monitoring. If your deposit or loss patterns suggest harm, we use that data to offer you limits, a cooling-off period or a referral to Gambling Help Online on 1800 858 858.
- Creating and administering your player account, including login and authentication.
- Verifying your identity and age under KYC and AML rules before we release funds.
- Processing deposits and withdrawals across Visa, Mastercard, PayID, Skrill, MiFinity, Jeton and crypto options.
- Detecting fraud, bonus abuse, multi-accounting and money laundering.
- Monitoring play for responsible gambling indicators.
- Sending you promotions and bonuses, only where you have consented.
- Meeting legal, regulatory and tax obligations that bind us as a licensed operator.
Our Legal Bases Explained
Contract. When you open an account and accept our Terms and Conditions, we process your identity and transaction data to deliver the service you signed up for. Without it we cannot hold your balance, run your bets or pay your withdrawals.
Legal obligation. Gaming and anti-money laundering law forces us to verify your identity, keep transaction records for a minimum period and report suspicious activity to the authorities. We process this data whether or not you ask us to.
Legitimate interest. We rely on this basis for fraud prevention, security monitoring, dispute resolution and keeping our site functioning. We weigh that interest against your rights and keep the data involved to a minimum.
Consent. Marketing emails, SMS and personalised bonus offers run on your consent alone. You can withdraw it at any time through your account settings or the unsubscribe link, and withdrawal costs you nothing and affects nothing else.
How Long We Keep Data
We hold each category of information only as long as the purpose behind it survives. Regulatory rules require transaction and KYC records to stay on file for at least 5 years after your last activity, and we cannot shorten that period on request.
Marketing data lives until you tell us to stop. Once you opt out, we remove your contact details from campaign lists within 72 hours.
| Data category | Retention period |
|---|---|
| Identity data | Life of the account, then 5 years |
| KYC verification documents | 5 years after account closure |
| Transaction records | 5 years, as required by AML law |
| Gameplay history | 5 years after last session |
| Technical and device logs | Up to 12 months |
| Marketing preferences | Until consent is withdrawn |
| Closed account files | 5 years, then deleted or anonymised |
Who We Share Data With
We share your information only with parties who need it to deliver a function you benefit from, and every one of them is bound by contract to use it for that function alone. We never sell your personal information.
The list below covers the categories of recipient. Game and payment providers named in it are those we actually work with on great-wincasino.com.
- Payment processors: Visa, Mastercard, Skrill, MiFinity, Jeton, Neosurf and crypto network operators, receiving only the fields needed to move your funds.
- KYC and AML screening providers, receiving your ID documents and address proof for verification.
- Game providers such as Pragmatic Play, NetEnt, Evolution and Play'n GO, receiving your player ID and bet data so your wagers and balances sync with their platforms.
- The Curaçao eGaming authority and, where a legal request compels us, Australian law enforcement or financial regulators.
- Analytics and site performance services that receive pseudonymised usage data.
- Email and SMS delivery services, receiving your contact details only if you consented to marketing.
Your Rights at Greatwin Casino
You control your information, and exercising any right below costs nothing. Email [email protected] or use the account settings panel, and we will respond within 30 days.
If you believe we have mishandled your personal information, you can complain to us first, and we will investigate and reply. You also hold the right to complain to the Office of the Australian Information Commissioner, or to your local data protection authority if you reside in the EU or another jurisdiction with a supervisory body.
- Access: get a copy of the personal information we hold about you.
- Rectification: correct anything inaccurate or out of date.
- Erasure: ask us to delete data we hold without a legal reason to keep.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest, such as profiling.
- Withdraw consent: stop marketing at any time, effective immediately.
- Complain: escalate to the OAIC or your regional data protection authority.
Cookies and Tracking
We use session cookies to keep you logged in, preference cookies to remember your settings such as currency and language, and analytics cookies to measure how the site performs. Marketing cookies fire only after you accept them in the consent banner, and you can change your choice at any time from the cookie settings link in the footer.
The full inventory of cookies we set, their purposes and their lifespans is listed on our dedicated Cookies Policy page. Read it before contacting support with cookie questions, since it answers most of them.
How We Protect Your Data
All traffic between your device and our servers runs over TLS encryption, and stored verification documents sit encrypted at rest in access-controlled storage. Staff access to player records follows a need-to-know model, requires multi-factor authentication, and is written to an audit log we review regularly.
If a data breach ever affects your personal information, we will notify the relevant regulator without undue delay and tell affected players directly where the law requires it or where the risk to you is material. You can reach our data protection officer at [email protected] with any security concern, and we treat reports of vulnerabilities seriously and confidentially.
You hold part of this responsibility too. Use a strong, unique password, never share your account, and log out on shared devices.
Frequently Asked Questions
Can I play at Greatwin Casino without giving you my ID documents?
You can register and deposit, but our KYC rules require ID, proof of address and payment method verification before your first withdrawal. This is a legal obligation under our Curaçao eGaming licence, not a choice we make per player.
How do I stop marketing emails and SMS?
Open your account settings and untick the marketing channels, or click the unsubscribe link in any message we send. We remove you from campaign lists within 72 hours, and opting out never affects your account or bonuses.
Do you keep my data forever if I close my account?
No. After closure we keep transaction and KYC records for 5 years because anti-money laundering law requires it, then delete or anonymise them. Marketing preferences go as soon as you withdraw consent.
Who can I contact about a privacy concern?
Email [email protected] for general privacy questions or [email protected] for anything needing our data protection officer. You also hold the right to complain to the Office of the Australian Information Commissioner.