Privacy Policy | WinCraft

This Privacy Policy describes how WinCraft collects, uses, shares, and protects the personal data of visitors and users of wincraftcasinohu.com (hereinafter: Website). By using the Website, you agree to the terms set forth in this Policy.

1. Data Controller Information

The Data Controller is WinCraft. For transparency, we provide unified contact details below:

• Data Controller: WinCraft
  
• Website: wincraftcasinohu.com
  
• Contact: [email protected]
  
• Data Protection Officer: will be published if appointed

2. Legal Basis and Purpose of Data Processing

Personal data is always processed for specific, clear purposes, under one of the legal bases set out in Article 6 of the GDPR.

• Creating and operating user accounts – GDPR Art. 6(1)(b)
  
• Processing deposits and withdrawals – GDPR Art. 6(1)(c)
  
• Promotional communication, newsletters – GDPR Art. 6(1)(a)
  
• Player identification (KYC), legal compliance – GDPR Art. 6(1)(c)
  
• Fraud prevention, information security – GDPR Art. 6(1)(f)

3. Categories of Personal Data Processed

The scope of processed data is limited to what is necessary to provide the Service and fulfill legal obligations.

• Name, email address, date of birth
  
• Address, phone number, nationality
  
• IP address, device and browsing data
  
• Deposit, withdrawal, and gaming history
  
• Identity and address verification documents (KYC)

4. Cookies and Tracking Technologies

The Website uses cookies for functionality, analytics, and — with consent — marketing. Cookie settings can be modified anytime in the browser or cookie management panel.

• Session and functional cookies
  
• Performance/analytics cookies (e.g., Google Analytics)
  
• Targeted advertising cookies (e.g., Google Ads, Facebook Pixel)

5. Data Storage and Retention

Data is retained only for as long as necessary to fulfill the purpose or as required by law.

• Registration and account data: 5 years from account deletion
  
• Financial and billing data: 8 years
  
• Marketing consent: until withdrawn
  
• IP logs and security logs: up to 12 months

6. Data Sharing and Recipients

Data may only be transferred to third parties to the extent necessary to provide the Service or meet legal obligations, under contractual safeguards.

• Payment providers and banking partners
  
• Hosting, IT operators, and security providers
  
• Email and marketing service providers (with consent)
  
• Authorities and courts, where required by law

7. Data Subject Rights

Under GDPR, you have extensive rights. Your requests will be handled within 30 days after identification at [email protected].

• Right of access and copy
  
• Rectification
  
• Erasure (“right to be forgotten”)
  
• Restriction of processing
  
• Data portability
  
• Objection based on legitimate interests
  
• Withdrawal of consent

8. Complaints

If you believe our processing of your data infringes your rights, you may file a complaint with the supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

• Address: 1055 Budapest, Falk Miksa utca 9–11
  
• Website: naih.hu
  
• Email: [email protected]

9. Protection of Minors

Our Service is only available to individuals over 18. If a minor registers, the account will be deleted, and the data destroyed.

10. Automated Decision-Making and Profiling

Certain checks are automated to prevent abuse; human review can be requested.

• Monitoring of bonus usage patterns
  
• Detection of unusual logins and activity
  
• Risk-based fraud screening

11. International Data Transfers

Data may be transferred outside the EEA only with appropriate safeguards:

• European Commission adequacy decision
  
• EU Standard Contractual Clauses (SCC)
  
• Encrypted, verified data transfer channels

12. Data Security

Data protection is ensured through technical and organizational measures with strict access controls.

• SSL/TLS encryption and HTTPS communication
  
• Multi-level access and authorization management
  
• Regular logging and event monitoring
  
• Periodic backups and confidentiality obligations

13. Amendments to the Policy

This Policy may be updated from time to time; the new version takes effect on the date of publication on the Website.

14. Final Provisions

This Privacy Policy sets out the terms of data processing between WinCraft and the user; use of the Website constitutes acceptance of these terms.