Privacy Policy
This policy sets out what personal information we hold about members, why we hold it, who it is shared with and how long it stays on our systems. It applies to everyone with an account and to anyone who simply visits the site.
Where a choice is open to you, such as marketing or non-essential cookies, the way to change it is described in the same section rather than somewhere else. Nothing here asks you to write in to change a setting.
The Scope of This WishWin Casino Notice
Stellar Ltd. operates WishWin Casino under the Anjouan iGaming Licence ALSI-202411077-FI2 and acts as the controller of the personal data described here. This policy applies to the website, to the mobile build reached through a home screen shortcut, to the cashier and to every message exchanged with our support desk.
It explains what we collect, why we hold it, how long it stays with us and which rights you can exercise over it. Where a section deals with something optional, such as marketing, the choice open to you is stated in the same place rather than buried elsewhere.
Separate terms govern the account itself and the conditions attached to promotions. Nothing in this policy reduces a right granted to you by data protection law.
What WishWin Casino Records About a Member
Some information reaches us because you type it in, some because a payment or a game round generates it, and some because a browser sends it automatically. The table groups every category together with its source and the reason it exists on our systems.
| Category | Examples | Source | Purpose |
|---|---|---|---|
| Identity data | Name, date of birth, nationality, address | Registration and verification | Opening and holding the account |
| Contact data | Email address, mobile number, postal address | Registration and profile edits | Service messages and support |
| Financial data | Payment route, partial card details, transaction history | Cashier activity | Processing money in and out |
| Verification data | Identity document, proof of address, card confirmation | Document uploads | Age and identity checks |
| Gameplay data | Rounds played, stakes, bonus progress, coupon history | Use of the site | Running the account and offers |
| Technical data | IP address, device type, browser, time zone | Automatic collection | Security and fraud prevention |
| Communication data | Chat transcripts, form messages, inbox replies | Contact with our desk | Support and complaint records |
| Safer play data | Limits set, time-outs, self-exclusion records | Account settings | Enforcing the controls you choose |
We do not ask for information unrelated to running a gambling account. Health details, political views, religious beliefs and similar categories are neither requested nor wanted, and anything of that kind volunteered in a chat message is removed from the record.
Full card numbers never reach our servers. Payment pages are handled by the provider, which returns a token and the last four digits so a route can be recognised at the next deposit.
The Uses WishWin Casino Puts Member Data To
The purposes are few and each of them is matched to a lawful basis in the section that follows. Day to day, the information is used to:
- Open, run and close an account, including the balance and the bonus tab.
- Confirm that a member is 18 or over and that the identity supplied is genuine.
- Process deposits, withdrawal requests and refunds through the chosen route.
- Apply the limits, time-outs and exclusions chosen in the safer play panel.
- Detect fraud, multiple accounts and bonus abuse.
- Answer support questions and keep a record of complaints.
- Send service messages about the account, which cannot be switched off while it is open.
- Send promotional messages where consent has been given, and stop sending them when it is withdrawn.
- Measure how pages perform so the lobby can be improved.
Information collected for one purpose is not quietly reused for another. A change of purpose triggers a fresh notice and, where the law requires it, a fresh consent.
The Legal Grounds Relied On by Casino WishWin
Data protection law requires a lawful basis for each processing activity, and the table below names the one we rely on in each case. Where two bases apply, both are listed.
| Activity | Lawful basis | Categories involved |
|---|---|---|
| Running the account | Performance of a contract | Identity, contact, financial, gameplay |
| Processing payments | Performance of a contract | Financial, verification |
| Age and identity checks | Legal obligation | Identity, verification, technical |
| Anti-money-laundering checks | Legal obligation | Identity, financial, technical |
| Fraud and security monitoring | Legitimate interests | Technical, gameplay, financial |
| Service messages | Performance of a contract | Contact |
| Marketing messages | Consent | Contact, gameplay |
| Safer play enforcement | Legal obligation and legitimate interests | Safer play, identity |
| Improving the site | Legitimate interests | Technical, gameplay |
Where the basis is legitimate interests, we weigh our interest against the effect on the individual before the processing begins and keep a record of that assessment. Where the basis is consent, withdrawal is available at any moment and costs nothing.
Legal obligations attached to a gambling licence cannot be set aside by a request. Verification records and transaction histories stay with us for their stated retention period even after an account closes.
Marketing Choices at WishWin Casino and How to Change Them
Promotional messages run on consent, which is asked for during registration and can be changed at any time in the communication settings of the account menu. Each channel, whether email, SMS or on-site message, is switched separately.
Withdrawing consent stops promotional contact within a short processing window, usually a day or two. Service messages continue, because they carry information about the balance, the cashier and the security of the account rather than an offer.
A member who has entered self-exclusion is removed from every promotional list automatically, without needing to change any setting, and remains off those lists for the duration of the exclusion. That removal cannot be undone while the exclusion runs.
Third Parties Receiving WishWin Casino Data
Information is shared only where it is needed to run the service or to meet an obligation. Nothing is sold, and no list is rented to a third party.
- Payment providers and banks, which handle deposits and withdrawals on their own systems.
- Game studios, which run the rounds and receive only the data needed to settle them.
- Identity verification services, which check documents against official sources.
- Fraud prevention services, which flag patterns across accounts.
- Hosting and infrastructure suppliers, which store data under contract.
- Support platform providers, which carry chat and form messages.
- The licensing authority and law enforcement, where a legal request requires it.
- Professional advisers, where a dispute or an audit calls for them.
Every supplier works under a written contract that limits what it may do with the information and requires it to be returned or deleted when the contract ends. Suppliers are reviewed before appointment and at intervals afterwards.
Sending WishWin Casino Data Beyond the United Kingdom
Some of the suppliers named above operate outside the United Kingdom and the European Economic Area. Where that happens, the transfer is covered either by an adequacy decision or by standard contractual clauses approved for the purpose.
In addition to the contract itself, we check what technical protection is in place at the destination, including encryption in transit and at rest, and whether access is limited to named staff. A supplier that cannot meet those conditions is not used.
Ask the support desk and we will send the wording that protects any specific transfer. Requests of that kind are answered in writing.
How Long WishWin Casino Keeps Each Record
Nothing is kept indefinitely. Each category has a defined period, driven either by a legal requirement or by the time a dispute could realistically arise.
| Record | How long it is kept | Reason |
|---|---|---|
| Account record | Five years after the account closes | Anti-money-laundering rules |
| Verification documents | Five years from account closure | Regulatory record keeping |
| Transaction history | Five years after each payment | Financial reporting |
| Chat and form messages | Two years from the last message | Complaint handling |
| Gameplay history | Five years from the round | Dispute resolution |
| Marketing consent record | Three years from withdrawal | Evidence of consent |
| Self-exclusion record | Six years from the end of the period | Player protection |
| Technical logs | Twelve months | Security monitoring |
At the end of a period, records are deleted or anonymised so that an individual can no longer be identified from them. Anonymised figures may be kept for statistical purposes, since they no longer count as personal data.
Where a complaint, an investigation or a legal claim is open, the related records are held until the matter closes even if the ordinary period has passed. They are deleted once it does.
How Member Records Are Secured at WishWin Casino
Traffic between a browser and our servers runs over SSL encryption, and stored data sits on encrypted systems inside access-controlled facilities. Passwords are held as hashes, which is why no member of staff can read one back.
Access inside the business is granted by role rather than by seniority, so an agent handling chat sees what is needed to answer a question and nothing further. Access to verification documents is narrower still and is logged each time it is used.
Members can add a second sign-in step from the security panel, pairing the password with a one-time code. Where a breach is likely to affect individuals, we notify the relevant authority and the affected members within the timescales the law sets.
What a WishWin Casino Member May Ask For
Data protection law gives a set of rights over the information held about you, and each can be exercised through the support desk without charge. The list below covers all of them.
- Access, meaning a copy of the personal data we hold and an explanation of its use.
- Rectification, where something recorded about you is wrong or incomplete.
- Erasure, which applies where no legal obligation requires the record to stay.
- Restriction, pausing processing while a dispute about accuracy is settled.
- Portability, supplying the data you provided in a machine-readable file.
- Objection, including an absolute right to object to direct marketing.
- Withdrawal of consent, at any time and without affecting what came before.
Requests are answered within one month. Where a request is complex, that period can extend by two further months, and you will be told the reason inside the first month.
WishWin Casino Age Checks and Members Under 18
The service is for adults only and an account cannot be opened by anyone under 18. Date of birth is collected at registration and checked against the documents supplied before a first withdrawal.
Where an account is found to belong to a minor, it is closed immediately, any winnings are void and deposits are returned to their source. The records of that account are kept only for as long as the law requires and are not used for any other purpose.
Parents and guardians sharing a device can block gambling sites at the network level or through filtering software, and the organisations listed in the footer provide free tools for that. Those tools cover every account on a machine rather than one browser.
Device Storage Used Across WishWin Casino Pages
Cookies and similar storage are used to keep a session open, to remember preferences and to measure how pages perform. Strictly necessary cookies are set on arrival because the site cannot function without them.
Every other category waits for a choice made in the consent banner, and that choice can be changed at any point from the cookie settings link in the footer. A full list of what is set, what each one does and how long it lasts appears on the cookie policy page.
Blocking a strictly necessary cookie will break sign-in, because the session identifier has nowhere to live between page loads. Every other category can be refused without that effect.
WishWin Casino Automated Checks on an Account
Automated checks run on deposits, withdrawal requests and sign-in attempts to catch fraud, duplicate accounts and bonus abuse. A flag raised this way pauses the activity and sends the case to a member of staff rather than issuing a final decision on its own.
Gameplay patterns are also reviewed for signs of harm, such as rapidly rising deposits or sessions that stretch far beyond a member’s usual pattern. Where that review suggests a problem, the safer play team makes contact and points to the tools available.
You can ask for human involvement in any decision reached with the help of automated processing, express a view on it and contest the outcome through the complaints route. A request of that kind never counts as a reason to restrict an account.
Raising a Concern About This WishWin Casino Notice
A concern about how information is handled should go to the support desk first, where it is logged and passed to the team responsible for data protection. A written answer follows within one month of the request being received.
If that answer does not settle the matter, a complaint can be taken to the supervisory authority for data protection in the country where you live or work. Doing so costs nothing and does not affect the account in any way.
We revisit this notice whenever our handling changes or the law moves, and at least once a year. A material change is announced in the account inbox before it takes effect, and the stamp at the bottom of this page always marks the live version. The wider account terms sit on the main WishWin Casino page.