Winkey Privacy Policy

We are Winkey, the operator of this crypto casino and the controller responsible for the personal data described on this page. When you create an account, make a deposit or simply browse, decisions about how and why your information is processed rest with us.

This policy explains what we collect and the reasons behind it. It applies to every player in Australia who is 18 or older. Questions? You can reach us through our contact page, and we'll respond within a reasonable period.

Security sits at the centre of how we operate. We use encryption, access controls and continuous monitoring to guard your information against unauthorised access or loss. No system is ever perfect, so we also limit who inside the business can see your data and review those permissions regularly. Spotted something odd on your account? Tell us straight away.

We only gather what we genuinely need to run a licensed gambling service. The categories differ depending on how far you go with us.

• Account details — your name, date of birth, email and chosen username, used to open and secure your account.
• Identity documents — government ID and proof of address, collected for verification (KYC) before your first withdrawal.
• Financial data — crypto wallet addresses and transaction records for deposits in BTC, ETH, USDT and BNB.
• Gameplay activity — bets placed, sessions, bonuses claimed and provider interactions.
• Technical data — IP address, device type and browser, logged for security and fraud prevention.

Why so much? Some of it is legal obligation; some keeps the platform honest and safe.

You hold real control over your information. You can ask us to:

• Access a copy of the data we hold about you.
• Correct anything inaccurate or out of date.
• Erase your data where no legal duty requires us to keep it.
• Port your data to another provider in a usable format.
• Object to or restrict certain processing, including marketing.

Send your request through our contact page and we may ask you to confirm your identity first. If you believe we've mishandled your data, you may complain to the relevant data-protection authority in our licence jurisdiction, or to the Office of the Australian Information Commissioner.

We hold personal data only for as long as there's a reason to. Account and transaction records are retained while your account is active and for a period afterwards to meet financial, tax and regulatory requirements. Verification documents are kept for the term the applicable anti-money-laundering rules demand. Once no legal or operational need remains, we delete or anonymise the information.

We never sell your data. We do share it, carefully, with parties who help us operate:

• KYC and identity providers who verify the documents you submit.
• Blockchain and payment processors handling your crypto deposits and payouts.
• Game studios such as Pragmatic Play, Evolution and NetEnt that power the titles you play.
• Analytics and security tools that detect fraud and measure performance.
• Regulators and authorities where the law requires disclosure.

For details on tracking technologies and how to manage them, see our responsible gambling resources and your browser settings; cookies are covered separately in our cookies notice.

Processing without a lawful basis isn't something we do. Each use of your data maps to a specific ground.

We rely on contract to provide the games and process withdrawals you ask for. We rely on legal obligation for identity checks, anti-money-laundering records and responsible-gambling duties. Where we analyse usage or send marketing, we act on consent or our legitimate interests in improving and protecting the service. You can withdraw consent for marketing whenever you like.