# Winspirit privacy policy: what data is collected and how it is handled This independent review breaks down the privacy practices documented by Winspirit Casino for Australian players — what the registration form asks for, why the cashier demands identity documents before a payout, and which controls you actually have over your own file. Read it before you upload a single document. ## What information does Winspirit collect? Winspirit collects three broad categories of data: identity details you type in at registration, financial and betting records generated by your account activity, and technical signals captured automatically by the site. All of it is processed by the operator, Hollycorn N.V., under Curaçao licence 8048/JAZ2014-044 issued by Antillephone N.V. — not under Australian privacy legislation. ### Personal information collected during registration The sign-up form is short, but it establishes your permanent account identity. Expect to provide: – **Full name and date of birth** — used to confirm you are of legal gambling age – **Email address and mobile number** — the channels used for account recovery, withdrawal confirmations and, if you allow it, promotions – **Residential address and country of residence** — checked against the operator’s restricted-country list – **Account currency** — accounts for Australian players are opened in **AUD**, and this choice is locked at registration and cannot be changed afterwards – **Username and password credentials** — stored in hashed form, never in plain text Because the currency field can’t be edited later, treat registration data entry as a one-shot exercise. Full account rules sit here: [terms](/terms/). ### Verification documents (KYC) the operator requires KYC is mandatory before any withdrawal is released, although deposits can be made before verification is complete. That means the most sensitive files you ever hand over arrive at the document-upload stage, not at sign-up. The operator asks for: – **Proof of identity** — passport, driver’s licence or government-issued ID card showing full name, date of birth, photo and issue/expiry dates – **Proof of address** — utility bill, bank statement or insurance document issued within the last 90 days – **Proof of payment** — a document confirming the deposit method used, showing the amount, the account holder name and the date – **Bank card verification** — photos of both sides of the card with the CVV physically obscured, supplied as JPEG, PNG or PDF, under 10 MB, with all four corners visible Obscure the CVV with tape or paper before photographing, not with a digital overlay that can be stripped. Send nothing the checklist doesn’t ask for. ### Transaction and gaming data Every deposit, withdrawal request and wager creates a record the operator is obliged to keep. This covers the payment method used — **Visa**, **Mastercard**, **Neosurf**, **Flexepin**, **CashToCode**, **MiFinity**, **eZeeWallet**, **Inpay**, **bank transfer**, **Interac** online banking, or crypto rails including **Bitcoin (BTC)**, **Ethereum (ETH)**, **Litecoin (LTC)**, **Dogecoin (DOGE)**, **Solana (SOL)** and **Tether (USDT)** — plus amounts, timestamps and the balance after each movement. Gameplay logs record which titles you open and what you stake, whether that’s a **BGaming** slot, a **Playson** release or a table game from **Betsoft**. Bonus tracking is part of the same record: wagering progress on the welcome package of up to A$2,000 + 100 spins is calculated from these logs, with x40 wagering applied to both the cash bonus and free-spin winnings, a first deposit from A$30, a second from A$60, free spins credited as 20 per day over 5 days, a maximum win from free spins of A$300, and winnings from bonus funds capped at A$3,000 per bonus. Provider-level detail belongs elsewhere: [games & slots](/games-slots/). ### Technical and usage information Collected without you typing anything: – IP address and derived location, used to screen for restricted jurisdictions – Device type, operating system, browser version and screen resolution – Login timestamps, session length and pages viewed – Cookie and local-storage identifiers tied to your browser – Referral source, including whether you arrived from an affiliate link Location signals matter here. Australia appears on the operator’s restricted-country list in some documents while AUD-denominated accounts and AUD payment rails are offered, and that contradiction is resolved using the technical data attached to your sessions. ## How does Winspirit use your information? Data is used for four practical purposes: running and securing your account, moving money, sending promotions you have agreed to receive, and satisfying the anti-money-laundering and age-verification duties attached to the Curaçao licence. ### Account management and verification Your identity file is matched against the documents you upload to confirm the account belongs to a real, adult person and that the name on the payment method matches the name on the account. Mismatches trigger a verification prompt rather than a silent rejection. The operator states that verified accounts see an average processing time of 24 hours, which is why clearing KYC early is the single most useful thing you can do with your own data. ### Payment processing Card, voucher, e-wallet, bank and crypto transactions are routed to the relevant provider with the minimum data that provider needs to settle. Deposits start at A$10 generally, with a A$30 qualifying deposit for the welcome offer. Withdrawals run from A$50 up to A$2,000 per transaction, so a large balance is paid across several approved requests — each one re-checked against your verified details. The operator’s cashier page states that no universal withdrawal duration is published and that you should rely on the signed-in estimate, the verification prompt and your request status. The AU app page cites 1–3 business days for cash-outs overall, e-wallet payouts usually within 24 hours, bank transfers in 3–7 banking days and instant fee-free crypto cash-outs. ### Marketing communications Contact details are used for promotional email and SMS only where you have opted in. Marketing profiles are built from gameplay and deposit history — which is why a player who only spins **Booongo** and **Gamzix** titles receives different offers to someone playing live tables. Opting out does not stop service messages about withdrawals, verification or security. Current promotions are covered here: [bonuses](/bonuses/). ### Legal and regulatory compliance Under its Curaçao licence, the operator retains records to meet anti-money-laundering, age-verification and fraud-prevention obligations, and can disclose them to Antillephone N.V. or the Curaçao Gaming Control Board on request. Understand the consequence for Australian players: Winspirit holds **no Australian authorisation**, is **not registered with ACMA** and is **not integrated with BetStop**. Disputes — including privacy complaints — escalate to the Curaçao Gaming Control Board, not to an Australian regulator or the OAIC. Self-exclusion arranged at the operator level does not appear in the national register. Tools and exclusion options: [responsible gambling](/responsible-gambling/). ## How does Winspirit protect your data? Protection rests on encrypted transport, restricted internal access to verification files, defined retention periods tied to licence obligations, and contractual limits on the payment and game providers who touch your data. None of it removes your own responsibility for password hygiene. ### Security measures and encryption Documented and observable safeguards include: – **TLS encryption** across the site, including the cashier and the document-upload form – **Hashed password storage**, so credentials are not readable even internally – **Restricted staff access** to verification documents, limited to the compliance function – **Transaction monitoring** that flags unusual deposit or withdrawal patterns – **Email confirmation** of password changes, withdrawal requests and new-device logins Do your part: set a password you use nowhere else, and never email identity documents to anyone claiming to be support. Verification files go through the account upload form only. Support runs 24/7 via live chat and email if you’re unsure whether a message is genuine. ### Data storage and retention Account and transaction records are held for the period required by the Curaçao licensing framework, which means closing your account does not immediately erase your financial history. Identity documents are retained as evidence that verification was carried out. Marketing preferences and cookie choices are stored separately from your KYC file, so withdrawing marketing consent doesn’t touch compliance records. Practical implication: proof of address must be dated within the last 90 days, so a document accepted a year ago will not satisfy a fresh verification check. Expect to re-upload if your account is re-reviewed. ### Third-party service providers Your data reaches third parties in three narrow lanes: | Recipient type | Named examples | Data shared | |—|—|—| | Payment providers | Visa, Mastercard, Neosurf, Flexepin, CashToCode, MiFinity, eZeeWallet, Inpay, bank transfer, Interac | Name, transaction amount, account or card reference | | Game suppliers | BGaming, Booongo, Playson, Gamzix, Yggdrasil, Betsoft, Novomatic, TrueLab, Spadegaming | Session token, stake and result data | | Regulator and ADR | Antillephone N.V., Curaçao Gaming Control Board | Identity and transaction records on lawful request | Providers act on the operator’s instructions for these defined purposes. Player data is not sold for unrelated advertising. ## What privacy rights do you have? You can request a copy of the data held on you, ask for inaccurate details to be corrected, request deletion where no licence obligation requires retention, withdraw marketing consent at any time, and manage cookies in your browser. Requests go to the operator’s support team. ### How to access your personal data Send a written request from the email address registered to your account, state what you want and allow the operator to confirm your identity first. Most transaction and bonus history is already visible inside the account area, so check there before lodging a formal request. ### Data correction and deletion Corrections are straightforward for contact details and addresses. Two limits are worth knowing up front: – **Account currency cannot be changed** after registration — AUD is fixed at sign-up, so a correction request will not alter it – **Deletion is partial, not absolute** — financial and verification records tied to anti-money-laundering duties are retained for the licence-mandated period even after closure Ask for closure and deletion in the same message, and ask the operator to confirm in writing which categories were erased and which were retained. ### How to opt out of marketing Three routes, all effective: 1. Switch off promotional email and SMS in your account communication settings 2. Use the unsubscribe link at the foot of any marketing email 3. Message live chat or email support and ask for all marketing consent to be withdrawn Service and security emails continue regardless — that’s by design, since withdrawal and verification notices protect your balance. ### Cookie preferences Essential cookies keep you logged in and hold your session together; analytics and marketing cookies can be blocked or cleared in your browser settings. Blocking essential cookies breaks login and the cashier, so target the optional categories instead. Clearing cookies also resets the bonus-tracking display in your browser, though server-side wagering progress is unaffected. ## How do you contact Winspirit about privacy and track policy updates? Privacy queries go through the operator’s own channels — 24/7 live chat and email — because this is an independent review site with no access to your account or your documents. Policy changes are published by the operator on its own pages. ### How to contact the operator about privacy Use live chat for quick questions about what a verification prompt is asking for, and email for anything that needs a record: access requests, correction requests, deletion requests and complaints. Always write from your registered email address and include your account username. If a privacy complaint isn’t resolved, the escalation path is the Curaçao Gaming Control Board — the ADR body attached to licence 8048/JAZ2014-044 — and not an Australian authority. ### Policy updates and notifications Terms and privacy wording can change without an individual notice to each player, so check the operator’s policy pages before a large deposit or a first withdrawal. Material changes to data handling are typically flagged on login or by email to registered addresses. This review is updated independently of the operator and is not a substitute for the current policy text on the casino’s own site. Brand overview: [home](/home/). ## Frequently asked questions about Winspirit ### What personal information does Winspirit collect? Registration captures your full name, date of birth, email, mobile number, residential address and account currency, which is set to AUD and cannot be changed later. The operator also records deposits, withdrawals and gameplay activity, plus technical data such as your IP address, device details and login timestamps. ### How does Winspirit protect my data? The site uses TLS encryption across the cashier and document-upload form, stores passwords in hashed form, restricts access to verification files to compliance staff, and emails confirmations for password changes and withdrawal requests. Transaction monitoring flags unusual patterns. Use a unique password and upload documents only through the account form. ### Can I request deletion of my personal data? Yes, but deletion is partial. Contact and marketing data can be removed on request, while financial and verification records tied to anti-money-laundering obligations under Curaçao licence 8048/JAZ2014-044 are retained for the mandated period. Ask the operator to confirm in writing which categories were erased and which were kept. ### Does Winspirit share my information with third parties? Data goes to payment providers such as Visa, Mastercard, Neosurf, Flexepin, MiFinity and Inpay to settle transactions, to game suppliers including BGaming, Playson and Yggdrasil for session data, and to Antillephone N.V. or the Curaçao Gaming Control Board on lawful request. It is not sold for unrelated advertising. ### How can I opt out of marketing emails? Switch promotional email and SMS off in your account communication settings, click the unsubscribe link in any marketing message, or ask 24/7 live chat or email support to withdraw all marketing consent. Service emails about withdrawals, verification and security keep arriving — those protect your account balance. Know what the operator holds on you, clear KYC before you request a payout, and then decide whether the terms suit you. [Check the current Winspirit offer](https://winspirit-best.com/go/?s=privacy)