winbat Privacy Policy

This Privacy Policy ("Policy") describes how winbat ("winbat", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "the Player", "the User") who access or use the winbat platform at winbat.pro, including all associated services such as the casino, sportsbook, live dealer tables, crash games, jackpot games, and promotional programmes.

winbat is committed to safeguarding the privacy and security of all player data. We process personal data only where a legitimate legal basis exists for doing so, and we implement technical and organisational measures proportionate to the sensitivity of the data we hold. By registering an account on the winbat platform or by continuing to use our services after this Policy has been published, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside the winbat Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement between you and winbat. If you do not agree with any part of this Policy, you must discontinue use of the winbat platform and contact us at [email protected] to request account closure.

winbat retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active account data — retained for the full duration of your winbat account, plus a minimum of five (5) years from the date of account closure, to satisfy financial record-keeping and AML compliance requirements.
• Transaction and betting records — retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial compliance standards.
• Identity verification documents — retained for the period of your account plus five (5) years post-closure, or longer if required by applicable law.
• Customer support correspondence — retained for three (3) years from the date of the most recent interaction, unless the correspondence relates to an unresolved dispute, in which case it is retained until the dispute is formally closed.
• Marketing consent records — retained for the duration of your account, and for three (3) years following opt-out or account closure, as evidence of consent management.
• Technical and usage logs — typically retained for up to twelve (12) months, after which they are aggregated or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. You may request early deletion of specific categories of personal data by contacting [email protected], subject to winbat's right to retain data required by law or for legitimate dispute resolution purposes.

winbat applies comprehensive technical and organisational security measures to protect all personal data held on the platform against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the winbat platform.
• At-rest encryption for sensitive data categories including identity documents, payment references, and account credentials stored in winbat's databases.
• Role-based access controls ensuring that only authorised winbat staff with a documented business need can access personal data.
• Two-factor authentication (2FA) available to all players and mandatory for all winbat administrative accounts.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.
• Incident response procedures — in the event of a data breach affecting your personal data, winbat will notify affected players and relevant authorities within the timeframes required by applicable law.

Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your winbat login credentials and for notifying [email protected] immediately if you suspect any unauthorised access to your account.

winbat reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, business practices, or platform functionality. The revised Policy will be published on this page at winbat.pro/privacy-policy with an updated effective date. For material changes — those that significantly affect how your personal data is used — winbat will provide at least 14 days' prior notice via the email address registered to your account before the changes take effect.

Your continued use of the winbat platform after the effective date of any revised Policy constitutes acceptance of the updated terms. If you do not agree with a material change, you must stop using the platform and contact [email protected] to request account closure before the change takes effect.

For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints regarding winbat's handling of your personal data, please contact the winbat Data Protection team:

Email: [email protected]

Subject line: Include "Privacy Request" or "Data Subject Access Request" in your subject line to ensure your message is routed to the correct team.

Response time: winbat acknowledges privacy requests within 48 hours and provides a substantive response within 30 calendar days. Complex requests may take longer; in such cases winbat will notify you within the initial 30-day period and provide an estimated completion date.

winbat is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with winbat's response to your privacy complaint, you may escalate the matter to any competent supervisory authority or data protection regulator in your jurisdiction.