This Privacy Policy explains how Winspirit Casino, operated by Complete Technologies N.V. (Heelsumstraat 51, E-Commerce Park, Curaçao), collects, uses, stores, shares and protects your personal information when you use our website and services at winspirit33.com. We are committed to safeguarding your privacy and handling your data responsibly. This policy has been prepared with particular regard to the rights of Australian players under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Information We Collect
We collect personal information that is necessary for us to provide our services, comply with legal obligations and improve your experience on our platform. The types of information we collect include:
Information you provide directly: full legal name, date of birth, residential address, email address, telephone number, username and password (stored in encrypted form), payment details (credit/debit card numbers, e-wallet account information, bank account details), copies of identification documents submitted for KYC verification (passport, driver's licence, proof of address, payment method verification).
Information collected automatically: IP address and approximate geolocation, device type, operating system and browser information, pages visited, time spent on pages and clickstream data, referral source (how you arrived at our website), session duration and frequency of visits.
Information from your gaming activity: deposit and withdrawal history, betting history including game types played, stakes and outcomes, bonus activation and wagering progress, responsible gambling tool settings (deposit limits, session limits, self-exclusion status), communications with our support team (chat transcripts, emails).
Information from third parties: identity verification results from our KYC providers, payment processing confirmations from BOVIVE LTD and affiliated payment processors, fraud prevention data from industry databases.
How We Use Your Information
We use the personal information we collect for the following purposes:
Service provision: to create and manage your account, process deposits and withdrawals, administer bonuses and promotions, provide customer support and maintain accurate records of your gaming activity.
Legal and regulatory compliance: to verify your identity and age in accordance with KYC and AML regulations, to comply with our licensing obligations under the Curaçao Gaming Control Board, to report suspicious transactions to relevant authorities and to respond to lawful requests from regulatory bodies and law enforcement agencies.
Responsible gambling: to enforce deposit limits, loss limits, session timers and self-exclusion periods you have set, to identify patterns that may indicate problem gambling behaviour and to provide appropriate interventions.
Security and fraud prevention: to detect and prevent fraudulent activity, money laundering, bonus abuse and unauthorised access to accounts, to maintain the integrity of our platform and to protect other players.
Platform improvement: to analyse usage patterns and optimise our website performance, to develop new features and improve existing services, to conduct internal reporting and business analytics (using aggregated, non-identifiable data).
Communications: to send transactional messages (account confirmations, withdrawal notifications, security alerts), to provide customer support responses, and to send promotional communications where you have opted in or where permitted by applicable law. You can opt out of marketing communications at any time.
Information Sharing and Third Parties
We do not sell your personal information to third parties. We share your data only in the following circumstances and with the following categories of recipients:
Payment processors: BOVIVE LTD (Cyprus, HE 388037) and affiliated payment service providers process your financial transactions on our behalf. They receive the information necessary to complete deposits and withdrawals, including card details, transaction amounts and account identifiers.
KYC and verification providers: third-party identity verification services receive copies of your identification documents and personal details for the purpose of verifying your identity, age and address.
Game providers: the software developers whose games appear on our platform may receive limited, anonymised data related to gameplay for the purposes of game performance monitoring and fair play verification.
Regulatory authorities: we may disclose your information to the Curaçao Gaming Control Board, the Australian Communications and Media Authority (ACMA) or other regulatory bodies where required by law or as part of a regulatory investigation.
Law enforcement: we may disclose information to law enforcement agencies where required by a court order, warrant or other lawful request, or where we believe disclosure is necessary to prevent fraud, money laundering or other criminal activity.
Professional advisors: our legal, accounting and compliance advisors may access personal information in the course of providing professional services to us.
Corporate transactions: in the event of a merger, acquisition, restructure or sale of assets, your personal information may be transferred to the successor entity, subject to the same privacy protections described in this policy.
Data Security Measures
We implement a range of technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, loss or destruction.
Encryption: all data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit encryption). Sensitive data at rest, including passwords and payment details, is encrypted using industry-standard algorithms.
Access controls: access to personal data within our organisation is restricted on a need-to-know basis. Staff members who handle personal information are bound by confidentiality obligations and receive regular data protection training.
Infrastructure security: our servers are hosted in secure data centres with physical access controls, redundant power supplies and continuous monitoring. We employ firewalls, intrusion detection systems and regular security audits to maintain the integrity of our infrastructure.
Incident response: we maintain a data breach response plan and will notify affected individuals and relevant authorities in accordance with applicable law if a breach occurs that is likely to result in serious harm. For Australian players, this includes compliance with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988.
While we take all reasonable steps to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but are committed to maintaining protections that meet or exceed industry standards.
Australian Privacy Act Compliance
Although Winspirit Casino is operated by Complete Technologies N.V., registered in Curaçao, we recognise and respect the privacy rights of our Australian players under the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs).
APP 1 — Open and transparent management: this Privacy Policy is publicly available and clearly explains our data handling practices. We review and update this policy regularly.
APP 5 — Notification of collection: we inform you at or before the time of collection about the types of information we collect, the purposes for collection and the entities to which we may disclose your information, as detailed in this policy.
APP 6 — Use and disclosure: we only use and disclose your personal information for the purposes described in this policy or for purposes you would reasonably expect, unless we have your consent or are required by law to do otherwise.
APP 8 — Cross-border disclosure: as an entity based in Curaçao with payment processing through Cyprus (BOVIVE LTD), your personal information is transferred and stored outside Australia. We take reasonable steps to ensure that overseas recipients handle your information in accordance with the APPs. By creating an account with us, you acknowledge and consent to the cross-border transfer of your personal information to Curaçao, Cyprus and any other jurisdictions where our service providers operate.
APP 11 — Security: we take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure, as described in the Data Security Measures section above.
APP 12 — Access: you have the right to request access to the personal information we hold about you. We will respond to access requests within 30 days.
APP 13 — Correction: you have the right to request correction of personal information that is inaccurate, out of date, incomplete, irrelevant or misleading. We will process correction requests within 30 days.
If you believe we have breached the APPs, you may lodge a complaint directly with us (see Contact Us below) or with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that allow us to recognise your browser, remember your preferences and understand how you interact with our website.
We use several categories of cookies: essential cookies required for the website to function (authentication, session management, security), analytics cookies that help us understand how visitors use our site (page views, traffic sources, user journeys), functional cookies that remember your preferences (language, display settings) and marketing cookies used to deliver relevant promotional content.
For comprehensive details about the specific cookies we use and how to manage your preferences, please refer to our dedicated Cookie Policy.
Your Rights
Depending on your jurisdiction, you have various rights regarding your personal information. For Australian players, these include:
Right of access: you may request a copy of the personal information we hold about you. We will provide this information in a readable format within 30 days of your verified request. There is no charge for making an access request, although we may charge a reasonable fee for providing additional copies or for requests that are manifestly unfounded or excessive.
Right of correction: you may request that we correct any personal information that is inaccurate, out of date, incomplete, irrelevant or misleading. You can update much of your personal information directly through your account settings, or by contacting our support team.
Right of deletion: you may request that we delete your personal information where it is no longer necessary for the purposes for which it was collected. Please note that we may be required to retain certain information for legal, regulatory and compliance purposes, even after account closure.
Right to withdraw consent: where we process your information based on consent (such as marketing communications), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting us.
Right to complain: if you are dissatisfied with how we handle your personal information, you may lodge a complaint with us at [email protected]. If you are not satisfied with our response, Australian players may escalate their complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.
Data Retention
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal obligations and to enforce our terms of service.
Active accounts: all personal and transactional data is retained for the duration of your account being active.
Closed accounts: after account closure, we retain your core personal data (name, date of birth, address, identification documents) and transaction records for a minimum of 5 years, as required by our AML obligations and licensing conditions. Communication records are retained for 3 years after account closure.
Self-excluded accounts: self-exclusion records are retained indefinitely for permanent exclusions and for the duration of the exclusion period plus 2 years for temporary exclusions. This ensures that we can enforce exclusion commitments effectively.
Marketing data: if you unsubscribe from marketing communications, we retain your email address on our suppression list to ensure we do not inadvertently send you future marketing material.
After the applicable retention period, personal information is securely deleted or irreversibly anonymised.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or operational procedures. Material changes will be communicated to registered players via email to the address associated with their account and through a prominent notice on our website.
We recommend reviewing this page periodically. The 'Last Updated' date at the top of this page indicates when the most recent revision was made. Your continued use of our services after any changes to this policy constitutes your acceptance of the updated terms.
This policy was last updated on 3 April 2026.
Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or our data handling practices, please contact us:
Email: [email protected]
Operator: Complete Technologies N.V.
Address: Heelsumstraat 51, E-Commerce Park, Curaçao
We aim to respond to all privacy-related enquiries within 14 business days. For access and correction requests, we will respond within 30 days in accordance with our obligations under the Australian Privacy Principles.
If you wish to lodge a complaint about our handling of your personal information and are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):
Phone: 1300 363 992
Website: oaic.gov.au
Post: GPO Box 5218, Sydney NSW 2001
Frequently Asked Questions
We collect information you provide during registration (name, date of birth, address, email, phone number), payment details, KYC verification documents, gaming activity data (bets, deposits, withdrawals) and technical data such as your IP address, device type and browser information.
No. We do not sell your personal information to third parties. We share data only with payment processors, KYC verification providers, regulatory authorities and professional advisors as described in our Privacy Policy.
Your data is stored on secure servers managed by Complete Technologies N.V. in Curaçao and processed by BOVIVE LTD in Cyprus. All data is encrypted in transit and at rest. By using our services, you consent to the cross-border transfer of your information.
You can update most of your personal details directly through your account settings. For formal access or correction requests, email [email protected]. We will respond within 30 days in accordance with the Australian Privacy Principles.
Core personal data and transaction records are retained for a minimum of 5 years after account closure, as required by anti-money laundering regulations. Communication records are kept for 3 years. After the retention period, data is securely deleted or anonymised.
Yes. If you are unsatisfied with how we handle a privacy complaint, Australian players can escalate the matter to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.
We respect the privacy rights of Australian players under the Privacy Act 1988 and the Australian Privacy Principles (APPs). Our policy addresses key principles including open management, notification of collection, cross-border disclosure, data security, access and correction rights.
