Only Win
Play Now

Our Approach to Your Data and Security

At Only Win, we understand that the security of your personal information is paramount. We are committed to handling your data with the utmost confidentiality and employing robust security measures to protect it. This commitment is a fundamental aspect of our operation, licensed by the Curaçao Gaming Authority and operated by Goodfly N.V.

Legal Basis for Data Processing

We process your personal data for specific, legitimate purposes. The primary legal basis for this processing is our contractual obligation to provide you with the services you request, such as managing your account, processing your transactions, and facilitating your gameplay. This includes verifying your identity as part of our Know Your Customer (KYC) procedures, which is a regulatory requirement.

Additionally, we may process your data to comply with our legal and regulatory obligations, including those related to anti-money laundering and responsible gaming. Where appropriate, we may also rely on our legitimate interests, such as improving our services or for fraud prevention. When necessary, we will seek your explicit consent for specific data processing activities.

Confidentiality and Security Measures

We employ industry-standard security protocols to safeguard your data. This includes using SSL encryption for all data transmitted between your device and our platform, ensuring that your personal and financial details remain private and secure. Our games are also independently certified by eCOGRA for Random Number Generation (RNG), which guarantees fair and unbiased outcomes.

  • SSL encryption protects all data transmissions.
  • eCOGRA RNG certification ensures fair game outcomes.
  • Mandatory KYC verification before withdrawals.
  • Optional two-factor authentication for enhanced account security.
  • Continuous monitoring for anti-fraud and suspicious activity.

Your Data and Site Usage

The full details of how we collect, use, store, and protect your personal data are outlined in our comprehensive Privacy Policy. This policy governs your use of both the Only Win website and our dedicated mobile applications. We encourage you to review it to understand your rights and our responsibilities concerning your information.

Understanding Our Data Practices at Only Win

We collect certain information to ensure Only Win operates smoothly, securely, and in compliance with regulations. This approach allows us to manage your account effectively, uphold our legal obligations, and enhance your experience on our platform. We believe in transparency regarding what data we handle and why.

Categories of Data We Collect

To provide our services, we gather distinct types of data. These can be broadly categorised as follows:

  • **Account Details:** This includes information you provide during registration, such as your name, date of birth, email address, and country of residence. It also encompasses your username and password for logging in.
  • **Technical Data:** When you interact with our platform, we collect technical information. This includes your IP address, device type, operating system, browser type, and information related to your session on our site, such as pages visited and time spent.
  • **Payment Information:** To facilitate deposits and withdrawals, we process payment-related data. This may include details of your chosen payment method, transaction amounts, and transaction history. We do not store your full credit card details directly.
  • **Gameplay History:** We record details of your gaming activities, such as the games you play, your betting patterns, win/loss records, and any bonus usage. This information helps us in providing support and understanding player activity.

Purposes for Data Collection

The data we collect serves several essential functions that contribute to a secure and reliable gaming environment:

  • **Account Management:** Your account details are fundamental for creating and maintaining your Only Win account, allowing you to access all features and services.
  • **Anti-Money Laundering (AML) and Know Your Customer (KYC):** Regulatory requirements, particularly under our Curaçao Gaming Authority license, mandate that we verify player identities. This process helps prevent fraudulent activities and ensures compliance with international AML standards.
  • **Fraud Prevention and Security:** Technical and gameplay data assists us in monitoring for suspicious activity, protecting your account from unauthorised access, and ensuring the overall integrity of our platform.
  • **Personalised Offers and Service Improvement:** By analysing gameplay history and technical data, we can better understand player preferences, which may inform the development of new features or the tailoring of promotions. We also use this data to identify and resolve any technical issues you might encounter.

Data Sharing with Third Parties

We engage with trusted partners and are subject to regulatory oversight, which involves sharing certain data. This is done with care and in accordance with data protection principles.

  • **Payment Providers:** To process your deposits and withdrawals, we share necessary transaction details with our payment service providers. These entities are bound by strict confidentiality and security agreements.
  • **Regulators and Authorities:** As a licensed operator, we are required to share information with regulatory bodies, such as the Curaçao Gaming Authority, for compliance and auditing purposes. In specific circumstances, we may also be required to share data with law enforcement agencies.
  • **Trusted Third Parties:** We may utilise third-party services for specific functions, such as payment processing, fraud detection, or customer support. These partners are carefully vetted and are contractually obligated to protect your data and use it only for the specified purposes.

Our commitment is to handle your data responsibly and transparently. We aim to provide a secure and trustworthy gaming experience, and our data practices are designed to support this goal.

Understanding Your Privacy Rights at Only Win

We understand that your personal information is important, and we are committed to handling it responsibly. As a player at Only Win, you have specific rights concerning your data, as outlined by applicable data protection regulations. These rights are designed to give you control over how your information is used.

Your Data Rights Explained

We respect your right to manage your personal data. This includes:

  • The right to access: You can request to see the personal data we hold about you. This allows you to understand what information we have and why we have it.
  • The right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to ask us to correct it. We strive to maintain accurate records.
  • The right to deletion: In certain circumstances, you can request that we delete your personal data. This is often referred to as the 'right to be forgotten'.
  • The right to restrict processing: You can request that we limit the way we use your personal data. This means we would store it but not process it further without your consent.
  • The right to object: You have the right to object to certain types of data processing, particularly for direct marketing purposes. We respect your choices in this regard.
  • The right to data portability: This allows you to obtain and reuse your personal data for your own purposes across different services. We can provide this data in a structured, commonly used, and machine-readable format.

Exercising Your Rights

To exercise any of these rights, you can contact our support team directly. We have established procedures to ensure your requests are handled efficiently and in accordance with legal requirements. Please direct your inquiries to support@only.win. When you contact us, we may ask you to verify your identity to ensure we are releasing information to the correct individual. We aim to respond to all valid requests within one month of receiving them.

Data Retention and Security

We retain your personal data for as long as necessary to provide our services, comply with our legal obligations, resolve disputes, and enforce our agreements. Our data retention periods are guided by regulatory requirements, particularly those related to gaming and financial transactions. For example, we are required to keep transaction records for a specific period after your account is closed. All data is protected using robust security measures, including SSL encryption, to prevent unauthorised access or disclosure.

Raising Concerns and Complaints

If you believe that Only Win has not handled your personal data in accordance with your rights or applicable laws, you have the right to lodge a complaint. Initially, we encourage you to discuss your concerns with our support team. Should you remain unsatisfied, you have the option to escalate your complaint to the relevant supervisory authority. For players in New Zealand, while we operate under a Curaçao licence, information on data protection rights and complaint procedures can be found through local consumer protection agencies. If your complaint relates to our gaming licence, you may also contact the Curaçao Gaming Authority.