Personal data at WinMega

Keeping information secure

Purpose-led handling

We use information for security, analytics and fraud prevention. Each purpose has a different role: security protects the account environment, analytics helps us understand how our services are used and fraud prevention supports a safer transaction and account process. We keep our handling connected to those purposes rather than treating data as a general resource.

Account context

An account can involve details connected with a player’s activity and support contact. We use the context of an inquiry to respond to it, and we use usage signals to keep the service functioning. A player who contacts us about a privacy matter can describe the request clearly through our support route.

Retention

We retain server logs for up to 12 months and contact submissions for up to 24 months. These periods reflect the different purposes of operational records and support conversations. A server log captures activity connected with a visit, while a contact submission gives our team a record of a question or request that may need follow-up.

Policy changes

We keep privacy information useful by reviewing it when our services and practices change. When we update this policy, we focus on three points:

• the category of information involved;
• the purpose for which we use it;
• the practical route a player can use for a privacy request.

We use this structure because a policy change should explain more than a new date. It should make the effect of the change understandable. Our support route remains available for a player who wants to ask how an update relates to account information or a prior contact submission.

Sharing information

We may share information with hosting, analytics and affiliate providers where those services support the purposes described here. Hosting helps our services operate, analytics supports understanding of use and affiliate providers can support the commercial relationships connected with promotion. We treat each category as part of a defined service role.

How we use data

Security and fraud prevention

We use relevant information to support account security and fraud prevention. This work helps us keep the service focused on genuine use and identify activity that needs closer attention. The purpose is protective: it supports a reliable environment for players and for the account process itself.

Information we collect

We may collect an IP address, browser type, device identifiers, pages viewed, referring URL and timestamps. We also collect contact submissions when a player reaches us with a question. These categories give our systems a record of how a service was accessed and a record of the information a person chooses to send in a support conversation.
We keep the purpose visible in the way we describe these categories. Technical visit information supports security and analytics; a contact submission supports a response to the matter raised. Our privacy practice is easier to follow when the kind of information and its reason for use stay connected.

Your rights

Rights available to you

Players have rights of access, rectification, erasure, restriction, portability and objection. Each right answers a different need: access concerns what is held, rectification addresses accuracy, erasure and restriction concern continued handling, portability concerns transfer and objection concerns a particular use.

Using a right

Use our support route to make a privacy request and describe which right you want to exercise. Giving the account or contact context relevant to the request helps us direct it properly. We keep the request focused so that our team can identify the information and the action being sought.
Last updated: 3 November 2026