Privacy Policy

Privacy policy

Goawin is the operator of the Goawin online gambling platform. This Privacy Policy explains how we collect, use, store and disclose your personal data in connection with our services, including gaming activities, deposits and withdrawals, and customer support interactions.

Who controls your information

Goawin is the data controller for your personal data. If you have questions about how we handle your information, you may contact us at [email protected]. We may appoint a data protection officer; you may request contact details through the same address.

What information we collect

  • Account and profile data: username, first name, date of birth, residential address, email address, phone number and similar contact details.
  • Identity and age verification: government-issued identification documents and proof of address used to comply with KYC and AML obligations.
  • Financial and transactional data: payment methods, bank details, deposits, withdrawals, winnings, transaction history and related financial data.
  • Gaming data: wager history, game preferences, session data and gameplay analytics used to ensure fairness and improve service.
  • Technical data: IP address, device type, browser, language, geolocation within regulatory allowances and security purposes.
  • Communications data: records of correspondence with our support team and other internal communications related to your account.

How and why we use your information

  • To provide and administer our platform, verify identity, process deposits and withdrawals, and administer accounts.
  • To comply with legal and regulatory obligations, including AML, KYC, responsible gambling and gambling laws.
  • To protect the security and integrity of our services, detect and prevent fraud, and investigate suspicious activity.
  • To monitor, maintain and improve the performance and reliability of our platform.
  • To communicate with you about your account, service updates, and promotions with your consent.

Legal bases for processing

  • Contractual necessity: processing is required for the performance of our contracts and to provide the services you request.
  • Legal obligation: processing is necessary to comply with applicable laws and regulatory requirements.
  • Legitimate interests: processing is necessary for security, fraud prevention, service improvement and legitimate business purposes, provided it does not override your privacy rights.
  • Consent: for activities such as marketing communications where you have given consent.

Sharing and disclosure of your information

  • With service providers performing activities on our behalf, such as payment processing, IT services, and customer support, under written agreements.
  • With regulatory authorities, gaming regulators and law enforcement as required by law or regulation.
  • For fraud prevention, anti-money laundering screening and risk assessment, including sharing with relevant financial institutions when needed.
  • In connection with corporate transactions, restructurings or asset sales; your data may be part of the assets transferred, subject to confidentiality and applicable law.
  • With your consent or at your direction.
  • For anonymized or aggregated research and analytics where identification is not possible.

International transfers and data security

Your information may be stored or processed in countries outside your home jurisdiction. We implement safeguards to protect data transferred internationally, including contractually appropriate data protection measures and access controls.

We employ technical and organizational security measures, including encryption in transit (TLS 1.2 or higher) and encryption at rest where practicable, access controls, monitoring and incident response. Our systems are designed to prevent unauthorized access and data loss.

Data retention

We retain personal data only for as long as necessary to provide our services, meet legal and regulatory obligations, and support legitimate business purposes. Financial and transactional data are retained for a minimum period consistent with AML and regulatory retention requirements, typically no less than five years from the end of the customer relationship, unless a longer period is required by law.

Cookies and tracking technologies

We use cookies and similar technologies to operate our platform, remember login preferences, analyze usage, and improve security. You may manage cookie preferences in your browser or through settings we provide. Disabling cookies may limit certain features or restrict access to parts of the platform.

Your rights

You have rights regarding your personal data, including:

  • Right to be informed and right of access to your data.
  • Right to rectification of incorrect or incomplete data.
  • Right to erasure where there is no compelling reason to continue processing.
  • Right to data portability in a structured, commonly used format.
  • Right to object to processing based on legitimate interests or marketing.
  • Right to restrict processing and to withdraw consent where processing is based on consent.
  • Right to lodge a complaint with the applicable data protection regulator.

To exercise these rights, contact [email protected]. We will respond within one month; where requests are unusually complex, we may extend by up to two months and may charge a reasonable administration fee where permitted by law.

Minors

Our services are restricted to individuals aged 18 years or older. If we become aware that we hold personal data of a minor, we will delete it promptly and cease processing unless required by law to retain it.

Security and data breaches

We implement appropriate security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. In the event of a data breach, we will notify affected individuals and relevant authorities as required by applicable law and regulator obligations and take steps to mitigate harm.

Changes to this policy

We may update this Privacy Policy from time to time. If the changes are material, we will publish the updated policy on the platform and, where required by law, provide notice. Continued use of our services after the revised policy takes effect constitutes acceptance of the changes.

How to contact us

For questions about this Privacy Policy or to exercise your rights, please contact [email protected]. You may also reach us via our support channels provided on the Goawin platform.