winslots Privacy Policy
This page describes what we collect when you use winslots and how we keep that data protected. We collect personal information only to verify your identity, process your payments, and operate our live-dealer tables, sportsbook, and slot games. All data handling follows encryption standards and anti-money-laundering compliance.
Our servers store login credentials, KYC documents, payment history, and game activity. We do not sell your data to advertisers or data brokers. Your information is disclosed only to payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), fraud-detection partners, and regulatory authorities if legally required.
This policy applies to all winslots account holders regardless of geography. If you access our platform from Jakarta, Surabaya, Bandung, Medan, or Semarang, the same protections apply. Services are available only where local law permits.
Data Collection and Storage on winslots
We collect the following information during account registration and ongoing use of winslots:
- Registration data: Email address, password hash, phone number, preferred language.
- KYC documents: National ID number, full name, date of birth, address, ID photo.
- Payment information: Bank account details, e-wallet account numbers, transaction history.
- Game activity: Bet history, wins, losses, table participation, spin records, settlement timestamps.
- Device and connection: IP address, browser type, device model, login timestamps.
We store this data in encrypted databases located on servers in multiple jurisdictions. Our primary data centre operates outside Indonesia; backup facilities may be in other regions. We do not disclose exact server locations for security reasons. Encryption uses AES-256 for sensitive fields (passwords, payment details) and SHA-256 for hashing.
Third-Party Processors and Data Sharing
Our payment processing partners receive your payment details when you deposit or withdraw. These partners include:
- E-wallet processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet) — handle transaction authorization and settlement.
- Bank clearing networks (mobile banking, local payment, online payment, e-wallet) — facilitate direct bank transfers.
- Fraud-detection services — analyze transaction patterns to prevent money laundering.
- Compliance and audit firms — review our KYC procedures and settlement practices.
We do not provide your game activity, live-table participation, or sportsbook history to any third party except as required by law (e.g., if a tax authority or law-enforcement agency requests records). Payment processors see only transaction amounts and timestamps; they do not receive information about which games you played or which Liga 1 fixtures you wagered on.
- Payment Data
- Shared with payment processors and banks to authorize deposits and withdrawals. Encrypted before transmission.
- KYC Data
- Held internally and shared with fraud-detection partners only to verify identity. Never sold or rented.
- Game History
- Stored in our systems. Disclosed to legal authorities only under court order or statutory obligation.
Cookies and Browser Data
Our winslots platform uses session cookies to keep you logged in and to remember your language preference. These cookies expire when you close your browser or after 30 days of inactivity. We do not use tracking cookies or third-party analytics that profile your behaviour across the internet.
We also store local browser data (such as your last-played game or your preferred stake size) using your browser's built-in storage feature. This data remains on your device only and is never transmitted to our servers unless you explicitly submit it (e.g., by updating your account settings).
Your Data Rights and Account Deletion
You have the right to request a copy of all data we hold about you. Send a request to our support team with your account email, and we will provide a detailed download of your registration info, KYC documents, payment history, and game logs within 15 business days.
You may request deletion of your account and associated data. However, we will retain KYC records and transaction history as long as required by anti-money-laundering and tax law, typically 5–7 years. After that retention period, we will delete or anonymize your personal information upon request. Game history may be retained indefinitely in anonymized form for statistical and audit purposes.
Data Breach and Security Incidents
If our systems are compromised and your personal data is exposed, we will notify you by email and post a notice on the winslots website within 72 hours of discovery. We will describe what data was accessed, the nature of the breach, and steps we have taken to secure your account.
We employ a dedicated security team to monitor for unauthorized access. All staff with access to personal data are bound by confidentiality agreements. We conduct annual penetration testing and security audits by independent firms. However, no system is non-specific info secure; we cannot guarantee that a breach will never occur.
winslots Privacy Policy Commitments
We commit to the following principles:
-
Data minimization
We collect only information necessary to verify your identity and process transactions. We do not ask for unnecessary personal details.
-
Encryption and security
All sensitive data is encrypted at rest and in transit. Passwords are salted and hashed; payment details are tokenized.
-
Transparency
This policy describes exactly what we collect and how we use it. No hidden data sharing or surprise changes without notice.
-
User control
You can request a data copy, update your information, or request account deletion at any time.
Policy Updates and Contact
We may update this privacy policy if our practices change or if new regulations emerge. We will post changes on this page with an updated effective date. Continued use of winslots after a policy change constitutes acceptance of the new terms.
If you have questions about how we handle your data or if you wish to exercise your data rights, contact our support team. You can also write to us with concerns about privacy practices. We will respond to data requests and complaints within 15 business days.
This policy applies globally; however, users in supported jurisdictions where local law provides additional rights (such as GDPR-equivalent protections) retain those rights. We do not knowingly collect data from users under the age of local legal consent; such accounts are suspended immediately upon discovery.