NightWin Privacy Policy | Data Protection

When you register with us, we collect your email address, full name, date of birth and postal address. We also ask for your preferred currency and payment method details. During account verification, we request a valid ID document (passport, driving licence or national ID card) to confirm your identity and age. As you play, we record your wagers, deposits, withdrawals, game activity and IP address. We may also collect device information and browser type to improve your experience and detect fraud. Communications with our support team are logged for quality and dispute-resolution purposes.

We collect personal data to verify your identity and age (a legal requirement for gambling operators), process deposits and withdrawals, prevent fraud and money laundering, comply with our Curaçao eGaming Licence, and personalise your account experience. We also use your data to send you promotional offers, service updates and account statements, and to investigate complaints or disputes. Your IP address and device data help us detect unusual account activity and protect against unauthorised access. We analyse gameplay trends to improve game selection and platform performance.

We process your data on the basis of contract performance (to deliver gaming services and process payments), legal obligation (KYC and anti-money-laundering compliance under our Curaçao licence), and legitimate interest (fraud prevention, platform security and customer support). Marketing communications are sent only where you have opted in. You may withdraw consent to marketing at any time via your account settings or by contacting our support team. All processing is necessary to operate a safe, compliant online casino and to protect both you and our business from harm.

We share your information with payment processors (Visa, Mastercard, PayPal, Skrill, Neteller, Paysafecard and bank transfer partners) to process deposits and withdrawals. Game providers (NetEnt, Microgaming, Play'n GO, Pragmatic Play, Evolution Gaming, Red Tiger, Yggdrasil, Quickspin, Betsoft and Nolimit City) receive limited data to deliver games and track your play. We may disclose data to law enforcement, financial regulators and the Curaçao eGaming Authority if required by law or to prevent fraud. We do not sell your data to third parties for marketing purposes.

We retain your registration details, identity documents and transaction history for as long as your account is active, plus seven years after closure to comply with anti-money-laundering regulations and tax law. Support chat logs and email records are kept for two years. Gameplay data is retained for the duration of your account plus one year. If you request account deletion, we anonymise personal identifiers but retain transaction records as required by law. You may request a copy of your data at any time via our Data Protection Officer.

Under UK data protection law, you have the right to access, correct or delete your personal data, subject to legal and regulatory exceptions. You can request a portable copy of your information in machine-readable format. You may object to marketing communications and direct us to stop processing your data for non-essential purposes. You have the right to lodge a complaint with the relevant data protection authority if you believe we have mishandled your information. To exercise any of these rights, contact our Data Protection Officer via the support channels listed below.

We protect your data using SSL encryption, which scrambles information in transit between your device and our servers. All passwords are hashed and never stored in plain text. Our team conducts regular security audits and maintains strict access controls-only authorised staff can view sensitive data. We require KYC verification to prevent account takeover and use multi-layer fraud detection. However, no online system is entirely risk-free; we encourage you to use strong, unique passwords and enable two-factor authentication where available. Report any suspicious activity to our support team immediately.

We use cookies and similar technologies to remember your login details, personalise your experience and analyse how you use the platform. Essential cookies are necessary for account security and payment processing. Preference cookies store your language and currency choices. Analytics cookies help us understand player behaviour and improve our services. Marketing cookies may track your activity across websites to show relevant promotions. You can manage cookie preferences via your browser settings or our cookie consent banner. For full details, see our separate Cookie Policy.

We may update this privacy policy to reflect changes in law, our operations or best practice. We will notify you of material changes via email or a prominent notice on the platform at least 30 days before the new policy takes effect. Continued use of your account after the update date constitutes acceptance of the revised policy. We recommend reviewing this page periodically. The date of the last update is shown at the bottom of this policy. If you have concerns about any change, contact our support team before the new policy becomes effective.

If you have questions about this privacy policy or wish to exercise your rights, contact our Data Protection Officer via Live Chat or email [email protected]. Our support team is available 24/7. If you are unhappy with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. We are committed to resolving privacy concerns fairly and promptly. Please allow up to 30 days for a formal response to data-access or deletion requests. We appreciate your trust and take your privacy seriously.