Winorio brand logo wordmark
REGISTRATION WINORIO

Personal Data Processing Policy

General Provisions

This Personal Data Processing Policy (the “Policy”) is issued by the Operator and applies to all personal data processed by the Operator via the website or related services in accordance with the laws and regulatory requirements of Great Britain, including the Data Protection Act 2018 and the UK General Data Protection Regulation (“UK GDPR”).

The purpose of this Policy is to inform data subjects about the collection, use, processing, storage, and protection of their personal data.

Legal Basis for Processing of Personal Data

Personal data is processed in accordance with the following legal bases set out by the UK GDPR and the Data Protection Act 2018:

  • The performance of a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract.
  • Compliance with a legal obligation to which the Operator is subject.
  • The legitimate interests pursued by the Operator or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
  • The data subject has given consent to the processing of their personal data for one or more specific purposes.

Categories of Personal Data Collected

The Operator may collect and process the following categories of personal data:

  • Identification data (such as full name, date of birth, and identification documents)
  • Contact data (such as postal address, email address, phone number)
  • Account data (including login credentials and transaction information)
  • Technical data (such as IP address, device information, cookies, and log files)
  • Financial data (such as payment method details, transaction records)
  • Other information required for compliance with the applicable legal and regulatory requirements

Purposes of Personal Data Processing

Personal data is processed strictly for the following purposes:

  • Provision of services and operation of user accounts
  • Verification of identity and age as required by applicable law
  • Fulfilment of legal and regulatory obligations, including anti-money laundering and gambling regulations
  • Prevention of fraudulent activity and security monitoring
  • Communication with users regarding their account and service management
  • Processing of payments and financial transactions
  • Resolution of disputes and enforcement of contractual rights
  • Compliance with requests from competent authorities or courts

Data Sharing and Disclosure

Personal data may be transferred to:

  • Government authorities, regulatory bodies, or law enforcement agencies in compliance with statutory obligations
  • Payment service providers, banks, or other financial institutions in the context of transaction processing
  • Professional advisors, auditors, or contractors engaged by the Operator
  • Parties in connection with corporate transactions, in accordance with applicable legal requirements

All data sharing is performed in line with the requirements of the Data Protection Act 2018 and the UK GDPR.

Data Storage and Retention

Personal data will be stored for no longer than is necessary for the purposes for which it is processed, unless a longer retention period is required or permitted by law. The Operator implements technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or disclosure.

Rights of Data Subjects

Pursuant to the UK GDPR, data subjects have the following rights in respect of their personal data:

  • The right to access their personal data
  • The right to rectification of incorrect or incomplete personal data
  • The right to erasure (“the right to be forgotten”) under certain circumstances
  • The right to restrict processing under certain conditions
  • The right to data portability
  • The right to object to processing
  • The right to withdraw consent at any time, where processing is based on consent
  • The right to lodge a complaint with the Information Commissioner’s Office (ICO)

Procedures for Exercising Data Subject Rights

To exercise the rights stated above, data subjects may submit a request by contacting the Operator by email at [email protected] or by post at Data Protection Officer, 123 Regent Street, London, W1B 4DS, United Kingdom.

The Operator will process all requests in accordance with applicable UK data protection legislation. The Operator may require verification of identity before processing any such request.

Changes to the Policy

This Policy may be updated from time to time to reflect changes in legal, regulatory, or operational requirements. The updated version will be published on the website and will take effect immediately upon publication. Continued use of the website and services constitutes acceptance of the updated Policy.

Contact Information

For all questions, comments, or requests regarding this Policy or the processing of personal data, please contact the Operator at:

Data Protection Officer

123 Regent Street

London, W1B 4DS

United Kingdom

Email: [email protected]

Telephone: +44 20 7946 0321

Date of last revision: 10 June 2024

Winorio brand logo wordmark
Winorio W brand icon
Get 150% up to $1,000 on your next transfer
Bonus