Winshark Casino Privacy Policy

Categories of information we handle

Identification details supplied during registration and KYC — including full name, date of birth, residential address, and government-issued document images — are collected to satisfy our Curaçao Gaming Control Board obligations under licence OGL/2024/589/0556.

Transactional records covering deposits, withdrawals, wagering activity, and bonus eligibility are stored for ledger accuracy and audit reconstruction.

Device telemetry such as IP address, browser fingerprint, language preference, and approximate geolocation is logged for fraud screening and responsible-gaming enforcement.

Lawful bases for processing

Processing tied to account operation rests on the contract between you and Winshark Casino, while anti-money-laundering and licence-condition checks rely on legal obligation as the lawful basis.

Behavioural risk modelling and platform-security analytics are conducted under our legitimate interest in keeping the service free from collusion, bonus abuse, and unauthorised access. Marketing communications are sent only after explicit opt-in consent.

Sharing with third parties

Payment processors, identity-verification vendors, and cloud infrastructure suppliers receive the minimum data required to perform their service, governed by written data-processing agreements.

Regulators, financial-intelligence units, and law-enforcement bodies may request disclosure under court order or statutory power; Winshark Casino reviews each demand for legality before responding.

Retention windows

Active-player records remain on file for the duration of the relationship plus the minimum statutory period mandated by the Curaçao licensing framework, currently set at ten years post-closure.

Marketing preferences and chat transcripts are purged on a shorter cycle, typically twenty-four months after the last meaningful interaction, unless a dispute or investigation requires extended preservation.

Your rights and how to use them

Subject to local law, players may request a copy of their data, correction of inaccuracies, deletion outside statutory retention, restriction of certain processing, or portability of structured records.

Requests are routed through the address listed below; we verify identity before responding and acknowledge each submission within five business days.