Privacy Policy

Scope and Coverage

This Privacy Policy applies to Imperial Wins and covers all personal data processed through our casino platforms and related services. The operator is the controller of the personal data described herein and is responsible for ensuring compliance with applicable data protection laws. We may update this policy from time to time to reflect changes in our practices or legal requirements.

The current version of this policy governs all processing activities unless explicitly stated otherwise. Users should review any updates to understand how their data is handled. By using our services, you consent to the terms outlined in this policy and any subsequent revisions.

This scope encompasses data collected directly from users, data received from third parties, and data generated through automated means. Our services include the casino platform, mobile applications, and associated promotional features. All interactions with our platform fall under this privacy framework unless specifically exempted by law.

We maintain records of all data processing activities to ensure transparency and accountability. Users can access their personal data and request corrections by contacting our data protection officer. Our commitment to data protection remains consistent across all jurisdictions where we operate.

Categories of personal data

We collect personal data from various sources to provide our services and comply with regulatory obligations. The categories include identity and contact details, financial information, gameplay records, and technical data from your device. Some information is provided directly by you, while other data is generated automatically as you interact with our platform. Understanding these distinctions helps clarify the legal basis for processing and the purposes for which data is used.

Data provided by the player

Identity and contact details are collected during account registration and include your name, date of birth, and address. Verification documents such as passports or utility bills are requested to confirm your identity and age. Financial data includes bank account details or payment method information used for deposits and withdrawals. Communication records encompass inquiries submitted through our support channels and feedback provided voluntarily.

Data generated by use

Device and connection data are collected automatically and include IP addresses, browser type, and operating system information. Gameplay records capture betting patterns, game preferences, and session duration to ensure fair play and responsible gambling. This data helps us detect fraud, maintain system security, and improve user experience. We balance the need for this information with your privacy rights by limiting collection to what is necessary for these purposes.

Legal grounds for processing

We process personal data based on specific legal grounds that justify the collection and use of your information. These grounds are defined by applicable laws and ensure that our data processing is transparent and compliant. Each category of data has a corresponding lawful basis that determines how it can be used and shared. Understanding these grounds helps clarify why certain information is required for specific services.

Processing purposes and bases

Performance of the contract covers activities necessary to provide gaming services, including account management and payment processing. Compliance with legal obligations includes anti-money-laundering checks and responsible gambling duties mandated by our regulator. Legitimate interests allow us to prevent fraud, ensure security, and improve our services while respecting your rights. Consent is required for marketing communications and can be withdrawn at any time without affecting core services.

Withdrawal of consent

You may withdraw consent for marketing communications at any time by updating your preferences in your account settings. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. However, it may limit the services we can provide if consent was necessary for core functions. We will confirm your withdrawal and cease processing data for the specified purposes unless another legal basis applies.

Data sharing practices

We share personal data with third parties only when necessary to provide our services or comply with legal obligations. Payment providers receive financial information required to process transactions and prevent fraud. Identity verification services access data needed to confirm your identity and age. These partners are contractually obligated to protect your data and use it only for specified purposes.

Game suppliers receive gameplay data necessary to operate games and ensure fair outcomes. Regulators and law enforcement agencies may access records when required by law or in connection with investigations. Processors acting on our instructions handle data for technical support and infrastructure maintenance. We do not sell personal data to third parties for any purpose, including marketing or advertising.

International transfers occur when third-party processors are located outside your jurisdiction. We apply appropriate safeguards such as standard contractual clauses or adequacy decisions to protect data during transfer. Recipients are required to maintain the same level of protection as required by applicable law. You may request details of specific transfers by contacting our data protection team through the contacts page.

We conduct regular audits of third-party processors to ensure compliance with our data protection standards. Data sharing agreements specify the purposes, duration, and security requirements for each recipient. You have the right to know who receives your data and for what purposes. Transparency about sharing practices is maintained to build trust and ensure accountability across our operations.

Data retention periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Retention periods are determined by legal requirements, regulatory obligations, and legitimate business needs. Different categories of data have specific retention periods based on their nature and purpose. We regularly review our retention schedules to ensure they remain compliant and appropriate.

Account data and transaction records are kept for seven years to comply with financial regulations and tax obligations. Verification documents are retained for the same period to support identity verification and anti-money-laundering compliance. Marketing consents are kept only for as long as consent remains valid or until withdrawal. After the retention period expires, data is securely deleted or anonymized to prevent identification.

Some data may be retained longer where legal proceedings are pending or where we have a legitimate interest in doing so. For example, data related to fraud investigations may be kept until the matter is resolved. We assess each case individually to determine the appropriate retention period and document our decisions. This approach ensures compliance with legal requirements while minimizing unnecessary data storage.

Retention schedules are reviewed annually to reflect changes in laws, regulations, or business practices. We maintain detailed records of all data processing activities and their associated retention periods. Data is securely destroyed using methods that prevent reconstruction or recovery. You may request information about our retention practices by contacting our data protection team through the contacts page.

Your data protection rights

You have several rights regarding your personal data that allow you to control how it is processed. These rights include access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Exercising these rights is straightforward and does not require a valid reason in most cases. We provide clear procedures for making requests and respond within the required timeframe.

Rights and procedures

To exercise your rights, submit a request through your account settings or by contacting our data protection team. We verify your identity before processing any request to ensure data security and prevent unauthorized access. Requests are typically processed within one month, though complex cases may take longer with notification. Some rights are limited where data must be retained for legal or regulatory reasons.

Limitations and exceptions

Certain rights may not apply in specific circumstances, such as when data is required for legal proceedings or regulatory compliance. We assess each request individually and inform you if any limitations apply to your situation. Limitations are based on legal requirements and are clearly explained in our responses. You have the right to complain to a supervisory authority if you believe your rights have been violated.

Security and complaints

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. These measures include encryption, access controls, and regular security assessments to identify and address vulnerabilities. Our security practices are reviewed and updated regularly to reflect emerging threats and best practices. We maintain a comprehensive incident response plan to handle any security breaches effectively.

In the event of a data breach, we notify affected individuals and relevant authorities where required by law. Our response includes immediate containment, investigation, and remediation to prevent further incidents. You will be informed of the nature of the breach and steps taken to protect your interests. Transparency about security incidents is maintained to build trust and ensure accountability.

If you have concerns about how your data is processed, contact our data protection team first through the contacts page. We respond to all inquiries within ten business days and work to resolve issues to your satisfaction. If you are not satisfied with our response, you may escalate the matter to the relevant supervisory authority. We cooperate fully with regulatory investigations and provide all requested information promptly.

We maintain detailed records of all complaints and their resolution to ensure accountability and continuous improvement. Complaints are reviewed by senior management to identify systemic issues and implement corrective actions. Our commitment to data protection extends to all aspects of our operations and customer relationships. You are encouraged to raise any concerns promptly to allow us to address them effectively.