Privacy Policy
WinBay Casino · Last updated 2026
1. Introduction
WinBay Casino is committed to protecting the personal data of our players. This privacy policy explains what data we collect, why we collect it, how we use it, and what rights you have over your information. We comply with applicable Canadian privacy legislation including PIPEDA (Personal Information Protection and Electronic Documents Act).
2. Information We Collect
We collect: (a) Registration data — name, date of birth, email address, and contact information provided during account creation. (b) Identity verification documents — government-issued ID and proof of address submitted for KYC. (c) Payment information — transaction records, deposit and withdrawal history. (d) Gaming data — game history, bet sizes, session durations. (e) Technical data — IP address, browser type, device information, and cookies. (f) Communications — messages sent to our support team.
3. How We Use Your Data
Your data is used to: verify your identity and age, process deposits and withdrawals, comply with anti-money laundering and legal reporting requirements, provide customer support, personalise your gaming experience, detect fraud and suspicious activity, send you relevant promotions if you have opted in, and improve our platform and services.
4. Data Sharing
We share data with: (a) payment processors, strictly to facilitate transactions; (b) regulatory authorities, as required by law; (c) fraud prevention and identity verification services; (d) technology providers who host and operate our platform under data processing agreements. We do not sell personal data to third-party marketers.
5. Cookies
We use cookies to maintain your login session, remember your preferences, and analyse site usage. Essential cookies are necessary for the site to function. Analytics cookies help us improve the experience. Marketing cookies support promotional activity (opt-in only). You can manage cookie preferences through your browser settings.
6. Data Retention
We retain account data for 5 years after account closure to comply with anti-money laundering obligations. Payment records are held for 7 years. Gaming history is retained for 3 years. Identity documents are held for the duration of the account plus the legal retention period.
7. Your Rights
You have the right to: access the personal data we hold about you, request correction of inaccurate data, request deletion of data where no legal obligation to retain exists, object to processing for marketing purposes, and data portability. To exercise these rights, contact our support team via live chat or email.
8. Security
We protect your data using 256-bit SSL encryption, restricted access controls (only authorised staff access personal data), regular security audits, and encrypted storage for sensitive documents. No system is perfectly secure, but we apply industry-leading measures to protect your information.
9. Contact
For privacy-related queries or to exercise your data rights, contact us via live chat (24/7) or through the support email listed in your account settings. We respond to data subject requests within 30 days.
External Resources
For independent guidance on your privacy rights in Canada, visit the Office of the Privacy Commissioner of Canada. For gambling-related data queries, Gambling Therapy operates a confidential support line.