Privacy Policy at Wonaco Casino

What data we collect

When you register an account with us at wonaco-pokies.com, we collect the details you enter directly and the information generated automatically while you play. We keep each category to the minimum needed to run your account and meet our licence obligations.

Verification documents are a separate category. Before your first withdrawal we ask for photo ID, proof of address and payment method verification, and we store those files under stricter access controls than ordinary account data.

• Identity data: full name, date of birth, email address, phone number, residential address.
• Verification documents: passport or driver's licence, utility bill, card or wallet screenshot for payment checks.
• Transaction data: deposits and withdrawals, amounts, currencies, payment method identifiers, timestamps.
• Technical data: IP address, device type, operating system, browser, language settings.
• Gameplay data: games played, bets placed, wins and losses, session times, bonus and wagering progress.
• Marketing preferences: which channels you opted into, which offers you opened, and when you withdrew consent.

How we use your data

We use your data for seven defined purposes, and nothing beyond them. If a new purpose arises, we contact you first unless a new legal basis already covers it.

Gameplay data also feeds our responsible gambling monitoring. Deposit limits, loss limits, session reminders, cool-off periods and self-exclusion on your account all rely on us processing your activity record, and we treat that monitoring as a protective measure rather than a commercial one.

• Creating and maintaining your account, including login and security checks.
• Verifying your identity under KYC rules before withdrawals.
• Processing deposits and withdrawals across cards, e-wallets, PayID and crypto.
• Preventing fraud, bonus abuse, money laundering and underage gambling.
• Monitoring play for responsible gambling signals and enforcing limits you set.
• Sending marketing messages where you have given consent.
• Meeting legal and regulatory obligations owed to the Curaçao Gaming Control Board.

Our legal bases

Contract. Your account with us is a contract, and we process identity and transaction data to deliver it. Without your name, payment details and gameplay record, we cannot hold funds, settle bets or pay withdrawals.

Legal obligation

As a licensed operator we must verify your identity, keep transaction records for at least five years, report suspicious activity and cooperate with regulators. These duties override your other preferences where the law requires processing.

Legitimate interest

Fraud prevention, security monitoring and aggregated service analytics rest on our legitimate interest in running a safe casino. This basis never covers advertising, and we balance it against your rights through minimisation and strict access rules.

Consent

Marketing emails, SMS and optional cookies that are not strictly necessary require your freely given consent. You can withdraw it at any time through your account settings or by contacting support, and withdrawal takes effect immediately for future messages.

How long we keep data

Retention depends on the category. Gambling regulations require transaction and KYC records to survive account closure for a minimum of five years, so a full deletion request cannot shorten those periods.

Once a period ends, we delete or irreversibly anonymise the data. Backups roll off on a fixed cycle, and crypto transaction records are kept only in the form required for audit, never with private keys.

Who we share data with

We never sell your personal data. Sharing happens only with processors who need it to deliver a specific service, each bound by a written data processing agreement that limits their use of your information.

Regulators and law enforcement receive data when we are legally compelled to provide it. In a business restructure, data may transfer as part of the sale, and we would notify you before that happens.

• Payment processors handling cards, e-wallets, vouchers and crypto conversions.
• KYC and AML verification providers checking your documents against sanctioned and watch lists.
• Game providers receiving your account ID so wins register to your balance.
• Analytics and hosting services operating under processing agreements.
• The Curaçao Gaming Control Board and other authorities with lawful requests.
• Email and SMS delivery services, only if you consented to those channels.

Your rights over your data

You control your personal data, and we answer every request within 30 days. Identity checks apply before we release or change anything, because account takeover through a fake request is a real fraud vector.

If you believe we mishandled your data, you can complain to our data protection officer or lodge a complaint with a data protection authority. Using these rights never affects your account standing or your withdrawals.

• Access: get a copy of the personal data we hold about you.
• Rectification: correct inaccurate details, including your name or address.
• Erasure: request deletion, subject to the regulatory retention periods above.
• Portability: receive your data in a structured, machine readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: stop marketing at any time, effective immediately.
• Complain: escalate to a data protection authority or our DPO.

Cookies and our safeguards

Cookies

We use strictly necessary cookies for login, session security and your chosen currency, plus optional analytics and marketing cookies that load only after you consent in the cookie banner. Full details, including how to change your choices, sit on our dedicated Cookies Policy page.

Security measures

All traffic to and from wonaco-pokies.com runs over TLS encryption, and KYC documents sit in encrypted storage with access limited to trained verification staff. Administrative access uses role based permissions and two factor authentication, and we log every access to sensitive records.

If a personal data breach occurs, we assess the risk within 72 hours, notify the relevant supervisory authority where required, and inform affected players directly without undue delay through email and on-site notices.

Contact our data protection team

Questions about this policy, your data or a rights request go to our Data Protection Officer at [email protected] or through the Contact page. We reply to every enquiry within 30 days, and our general support team is available on live chat 24/7 if you need a faster pointer.

This Privacy Policy was last reviewed in 2026. When we change it, we announce material updates on site and by email to registered players at least 14 days before they take effect.

Frequently asked questions

Can I delete my Wonaco Casino account and all my data?

Yes. Send a deletion request to [email protected] and we close your account and erase marketing data immediately. Transaction, KYC and wagering records must be retained for a minimum of 5 years under gambling regulations, after which they are deleted or anonymised.

Do you share my data with advertisers?

No. We never sell personal data. Marketing partners only receive the minimum needed to deliver messages you consented to, and you can withdraw that consent at any time from your account settings.

Why do you need my ID before a withdrawal?

Identity verification is a legal obligation under our Curaçao licence. We check a passport or driver's licence, proof of address and your payment method to prevent fraud, money laundering and underage gambling.

How do I stop marketing emails and SMS?

Open your account settings, switch off each channel, or click the unsubscribe link in any message. Withdrawal of consent applies to future communications immediately.