This Privacy Policy explains how Winzoria ("we", "us", "our") collects, uses, stores, shares and protects the personal data of visitors and registered players at winzorria.nl. Winzoria is operated under Curaçao eGaming licence OGL/2025/9421/9865. We are committed to handling your personal data responsibly and in accordance with applicable data-protection law. Please read this document carefully before registering an account or using any of our services.
1. Who We Are
Winzoria Casino operates winzorria.nl and is the data controller in respect of personal data collected through this website. If you have any questions about this Privacy Policy or wish to exercise any of your data-protection rights, you may contact us at any time:
We will acknowledge your enquiry promptly and aim to resolve all data-related requests within 30 days of receipt.
2. Scope of This Policy
This Privacy Policy applies to all personal data we collect when you:
visit or browse winzorria.nl, including via our Progressive Web App (PWA) on iOS or Android;
register a player account;
make a deposit or withdrawal using any of the supported payment methods;
claim a bonus, participate in a promotion, tournament or loyalty programme;
use the live casino, sportsbook or any other product on the platform;
contact our support team by live chat or email;
undergo Know Your Customer (KYC) verification; or
interact with us through any other channel connected to winzorria.nl.
3. Personal Data We Collect
3.1 Data You Provide to Us
When you create an account or use our services, we collect information that you supply directly, which may include:
Identity data: full legal name, date of birth, gender and nationality;
Contact data: email address, telephone number and residential address;
Account credentials: username and encrypted password;
Financial data: payment method details (card numbers are tokenised and not stored in full), e-wallet identifiers, cryptocurrency wallet addresses, bank account details submitted for wire transfers, and transaction history;
KYC documents: a copy of a government-issued photo ID (e.g. passport, national identity card or driving licence), proof of address dated within 90 days (e.g. utility bill or bank statement), and documentation confirming your payment method, as required prior to your first withdrawal;
Responsible-gaming data: self-exclusion requests, deposit limits, session limits, cooling-off preferences and any other responsible-gaming elections you make;
Promotional data: promo codes you enter (LUCKY1, LUCKY2, LUCKY3, RELDAY, 50HIGH, etc.) and any preferences or communications preferences you indicate;
Birthday data: date of birth used to administer the Birthday Bonus for verified accounts;
Communications: records of live-chat transcripts, emails and any other correspondence with our support team.
3.2 Data We Collect Automatically
When you access winzorria.nl, our systems automatically collect certain technical and behavioural data, including:
IP address and approximate geolocation derived from it;
device type, operating system and browser version;
PWA installation status on iOS or Android;
pages viewed, links clicked, games launched, session duration and navigation paths;
betting and wagering activity, including game titles, stake amounts, win and loss data, and bonus usage;
deposit and withdrawal transaction logs, including method, amount, currency and processing times;
referral source (e.g. the URL from which you arrived at our site); and
cookie identifiers and similar tracking technologies (see Section 10).
3.3 Data We Receive from Third Parties
We may receive personal data about you from:
Payment processors and financial institutions (including Visa, Mastercard, Skrill, Neteller, PayPal, AstroPay, Google Pay, Apple Pay, BLIK and blockchain networks for BTC, ETH, DOGE and USDT) to authenticate transactions and prevent fraud;
Identity-verification and KYC service providers used to validate the documents you submit;
Fraud-prevention and anti-money-laundering (AML) screening services;
Game providers and software studios (such as Evolution, LuckyStreak, Pragmatic Play, Nolimit City and others among our 70+ partners) to the extent that game-round data is returned to us; and
Responsible-gambling registers or self-exclusion schemes to which you have subscribed.
4. How We Use Your Personal Data
We process your personal data only for specified, lawful purposes. The table below sets out each purpose alongside the legal basis on which we rely.
Purpose
Legal Basis
Creating and managing your player account
Performance of a contract
Processing deposits and withdrawals across all supported payment methods (minimum deposit €10; minimum withdrawal €50)
Performance of a contract
Conducting KYC and identity verification before your first withdrawal
Applying the 3× deposit wagering requirement before withdrawal (AML practice)
Legal obligation; legitimate interests
Administering welcome bonuses (up to €5,000 + 300 Free Spins across three deposits), reload bonuses, cashback, rakeback, tournaments and all other promotions
Performance of a contract; legitimate interests
Managing the VIP and loyalty programme (Bronze, Silver, Gold, Platinum tiers; Wager Points and Deposit Points)
Performance of a contract; legitimate interests
Providing 24/7 customer support via live chat and email
Performance of a contract
Enforcing withdrawal limits (daily, weekly €3,000, monthly €10,000) and instalment payment rules for wins above €15,000
Performance of a contract; legal obligation
Administering responsible-gaming tools including deposit limits, self-exclusion and cooling-off periods
Fraud prevention, security monitoring and AML screening
Legal obligation; legitimate interests
Complying with our Curaçao eGaming licence (OGL/2025/9421/9865) and all applicable regulatory obligations
Legal obligation
Sending you marketing communications about promotions, new games and offers (where you have consented or where permitted by law)
Consent; legitimate interests
Personalising your experience, including tailored bonuses for Platinum-tier members and the Birthday Bonus for verified accounts
Legitimate interests; consent
Website analytics, performance monitoring and product improvement
Legitimate interests
Ensuring compliance with age-verification requirements (players must be of legal gambling age)
Legal obligation
5. Know Your Customer (KYC) and Identity Verification
In accordance with our licensing obligations and standard AML practice, we require all players to complete KYC verification before processing their first withdrawal. The documents we request are:
a valid government-issued photo ID (passport, national identity card or driving licence);
proof of address issued within the previous 90 days (e.g. a utility bill, bank statement or official correspondence); and
confirmation of your payment method (e.g. a bank statement, screenshot of your e-wallet, or a photograph of the card used to deposit).
KYC documents are typically reviewed and verified within 24 hours of submission. Until verification is complete, withdrawal requests may be held in a pending state. We use KYC data solely for identity verification, AML screening, fraud prevention and regulatory compliance. KYC documents are stored securely and retained for the period required by applicable law and our licence conditions.
We may also request additional documentation at any point if our fraud-prevention systems flag unusual activity, or if we are required to do so under our licensing obligations.
6. Anti-Money-Laundering (AML) and Responsible Financial Monitoring
As a licensed operator, we are required to monitor financial transactions on our platform. This includes:
applying a 3× deposit wagering requirement before any withdrawal is processed — this is a standard AML practice and is separate from any bonus wagering requirement;
screening deposits and withdrawals against sanctions lists and fraud databases;
monitoring transaction patterns for activity indicative of money laundering or financial crime; and
reporting suspicious activity to relevant authorities as required by our licence and applicable law.
Data processed for AML purposes may be retained for extended periods as required by applicable regulations.
7. Payment Data
We support a wide range of deposit and withdrawal methods at winzorria.nl. The personal and financial data associated with each transaction is handled as follows:
Card payments (Visa/Mastercard): card data is tokenised by our payment processor; we do not store full card numbers on our servers.
E-wallets (Skrill, Neteller, PayPal, AstroPay): we store your e-wallet identifier and transaction reference numbers.
Cryptocurrency (BTC, ETH, DOGE, USDT): we record your wallet address and transaction hash. Blockchain transactions are publicly verifiable by nature; we cannot control the public visibility of on-chain data.
Bank wire transfer: we collect and store your bank account details (IBAN/sort code and account number) as necessary to process payments.
Digital wallets (Google Pay, Apple Pay): tokenised payment credentials are handled by the respective platform providers under their own privacy policies.
BLIK: transaction data is handled in accordance with the BLIK system operator's standards; we retain the transaction reference.
We do not sell, rent or share your payment data with third parties for their own commercial purposes. Payment data is shared only with the processors and financial institutions required to complete your transaction, and with regulatory authorities where legally required.
8. Responsible Gambling and Player-Protection Data
Winzoria is committed to promoting responsible gambling. We process personal data in connection with responsible-gambling measures, including:
recording deposit limits, loss limits, session-time limits and wager limits that you set on your account;
processing self-exclusion requests and cooling-off elections, and communicating these to relevant responsible-gambling registers where applicable;
monitoring play patterns for signs of problem gambling behaviour and using this data to intervene where appropriate;
administering any player-protection measures we apply proactively; and
verifying age and identity to ensure that all players meet the minimum legal gambling age.
Responsible-gambling data is treated with particular sensitivity. It is used only for player-protection purposes and is not used for marketing. Where you have voluntarily self-excluded, we will take reasonable steps to ensure you do not receive marketing communications for the duration of your self-exclusion.
9. Sharing Your Personal Data
We do not sell your personal data. We share it only in the following circumstances and only to the extent necessary:
Payment service providers: to process deposits and withdrawals through the supported payment methods.
KYC and identity-verification providers: to verify the documents you submit during account verification.
Fraud-prevention and AML screening services: to protect against financial crime.
Game providers and software studios: 70+ studios including Pragmatic Play, Evolution, LuckyStreak, Nolimit City, Hacksaw Gaming, Yggdrasil, Big Time Gaming, Quickspin, NetEnt and others may receive game-round data to facilitate gameplay and resolve disputes.
IT infrastructure and hosting providers: who store data on our behalf under contractual confidentiality and security obligations.
Customer-support platforms: used to deliver our 24/7 live-chat and email service.
Analytics providers: who help us understand how the website and games are used; data is shared in aggregated or pseudonymised form where possible.
Regulatory and licensing authorities: including those responsible for oversight under our Curaçao eGaming licence OGL/2025/9421/9865, where disclosure is required by law or licence condition.
Law-enforcement agencies and courts: where we are required by law, court order or regulatory direction to disclose personal data.
Business transferees: in the event of a merger, acquisition or sale of all or part of our business, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.
All third parties with whom we share personal data are required to maintain appropriate technical and organisational security measures and to use the data only for the specified purpose.
10. Cookies and Tracking Technologies
winzorria.nl uses cookies and similar technologies (such as pixel tags, web beacons and local storage) to operate the site, remember your preferences and improve your experience. The categories of cookies we use are:
Strictly necessary cookies: essential for the website and account functionality to operate. These cannot be disabled.
Functional cookies: remember your preferences, language settings, PWA installation state and session details.
Analytics cookies: help us understand site usage, game popularity and player journeys so that we can improve our services.
Marketing and tracking cookies: used to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns. These are set only with your consent.
When you first visit winzorria.nl, you will be presented with a cookie-consent notice. You may manage your cookie preferences at any time through the cookie settings panel. Please note that disabling certain cookies may affect the functionality of the site. For full details, please refer to our Cookie Policy.
11. International Data Transfers
Winzoria operates under a Curaçao eGaming licence, and some of the service providers and game studios we work with are located outside the European Economic Area (EEA). Where personal data is transferred to a country that does not offer an equivalent level of data protection, we ensure that appropriate safeguards are in place, such as:
standard contractual clauses approved by the relevant supervisory authority;
the recipient's participation in a recognised data-protection framework; or
other lawful transfer mechanisms as applicable.
If you would like more information about the safeguards we apply to international transfers, please contact us at [email protected].
12. Data Retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, and to comply with our legal, regulatory and licensing obligations. Our general retention principles are as follows:
Active account data: retained for the duration of your account and for a period of at least five years after account closure, to satisfy AML and regulatory record-keeping requirements.
KYC and identity documents: retained for the period required by our Curaçao licence and applicable AML regulations, typically five years from the end of the business relationship.
Transaction records: retained for a minimum of five years from the date of the transaction.
Responsible-gambling records: retained for the duration required to administer self-exclusion or other protective measures, and for regulatory purposes thereafter.
Marketing preferences: retained until you withdraw your consent or request erasure, subject to any overriding legal obligation.
Support communications: retained for up to three years from the date of the interaction, or longer if the matter relates to a complaint or dispute.
When data is no longer required, it is securely deleted or anonymised in accordance with our data-disposal procedures.
13. Your Data-Protection Rights
Depending on your jurisdiction, you may have the following rights in relation to your personal data:
Right of access: to obtain a copy of the personal data we hold about you.
Right to rectification: to have inaccurate or incomplete personal data corrected.
Right to erasure ("right to be forgotten"): to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligations to retain certain records.
Right to restriction of processing: to ask us to limit how we use your data in certain circumstances.
Right to data portability: to receive your personal data in a structured, commonly used, machine-readable format and to transfer it to another controller.
Right to object: to object to processing based on legitimate interests or for direct-marketing purposes.
Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Right not to be subject to automated decision-making: to not be subject to decisions based solely on automated processing, including profiling, that produce significant effects, unless we have your consent, it is necessary for a contract, or it is authorised by law.
To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond within 30 days; if your request is complex, we may extend this by a further 60 days and will notify you accordingly. Where we are unable to fulfil a request — for example, because we are required by law to retain the data — we will explain our reasons.
14. Marketing Communications
We may send you promotional communications about bonuses, new games, tournaments (such as SpinOLeague 2026 and Rookie Rumble), prize-pool events (such as Drops & Wins), reload offers, VIP programme updates and other Winzoria news. We will only do so where you have consented to receive such communications or where we have a legitimate interest to do so in accordance with applicable law.
You may opt out of marketing communications at any time by:
clicking the unsubscribe link in any marketing email you receive from us;
updating your communication preferences in your account settings; or
Please note that even if you opt out of marketing communications, we will continue to send you essential transactional and account-related messages (e.g. deposit confirmations, withdrawal notifications, KYC requests and security alerts).
15. Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction or alteration. Our security measures include:
SSL/TLS encryption for all data transmitted between your browser or PWA and our servers;
tokenisation of payment card data so that full card numbers are never stored on our systems;
secure, access-controlled storage of KYC documents;
password hashing and multi-factor authentication options for player accounts;
regular security assessments and vulnerability monitoring; and
staff training on data protection and information security.
Whilst we take every reasonable precaution, no method of data transmission or storage is completely secure. If you suspect that your account has been compromised, please contact our 24/7 support team immediately via live chat or at [email protected].
16. Children and Minors
Winzoria's services are strictly for adults who meet the minimum legal gambling age in their jurisdiction. We do not knowingly collect personal data from minors. Age verification is carried out as part of the KYC process, and we reserve the right to request proof of age at any time. If we discover that a minor has registered an account, we will close it immediately, void any transactions and delete or securely anonymise all associated personal data.
17. Third-Party Websites and Links
winzorria.nl may contain links to third-party websites or services (for example, links to game providers or payment processors). This Privacy Policy applies only to winzorria.nl. We are not responsible for the privacy practices of any third-party sites and encourage you to review their privacy policies before providing any personal data to them.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or business practices. When we make material changes, we will notify you by posting a prominent notice on winzorria.nl and, where appropriate, by email to the address registered on your account. The revised policy will include the date it was last updated. Continued use of winzorria.nl following the effective date of any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.
19. Complaints
If you have a complaint about how we handle your personal data and are not satisfied with our response, you have the right to lodge a complaint with the relevant data-protection supervisory authority in your jurisdiction. We would, however, always appreciate the opportunity to address your concerns directly before you escalate to a regulatory authority. Please contact us first at [email protected].
20. Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data we hold about you, please get in touch with us:
