Privacy Policy

The data controller is WIN CRYPTO LIMITED (company number 17437625), registered office at 167 - 169 Great Portland Street, 5th Floor, London, England, W1W 5PF. For data protection enquiries, contact our Data Protection Officer at dpo@wincrypto.com.

Account information: email address, first name, last name, date of birth, country of residence, and language preference.

Competition data: ticket purchases, reservation history, skill question responses (with timestamps), order history, and draw results.

Technical data: IP address, browser type, device information, and usage analytics collected via privacy-respecting tools (no third-party tracking cookies).

We use your data to: operate the Platform and process Competition entries; verify your age and eligibility; process payments and deliver prizes; send transactional emails (order confirmations, draw results, reservation reminders); send marketing communications (only with your explicit opt-in consent); comply with legal and regulatory obligations; prevent fraud and maintain platform security.

We process your data under the following legal bases: Contract performance (account management, ticket purchases, prize delivery); Legitimate interest (fraud prevention, platform security, analytics); Legal obligation (age verification, audit trail, tax compliance); Consent (marketing communications — you may withdraw consent at any time).

All card payments are processed by Stripe, a PCI-DSS Level 1 certified payment processor. WINCRYPTO never receives, stores, or has access to your full card number or payment credentials. Only Stripe's secure checkout handles your payment details.

We share data only with: Stripe (payment processing); our email service provider (transactional and marketing emails); analytics tools (privacy-respecting, no third-party cookies); law enforcement or regulatory authorities when legally required.

We never sell your personal data to third parties.

Your data may be processed in countries outside the EEA. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

We implement industry-standard security measures including HTTPS encryption, secure server infrastructure, access controls, and regular security audits. Database backups are performed daily and tested regularly.

Under the GDPR, you have the right to: access your personal data; rectify inaccurate data; request erasure of your data ("right to be forgotten"); restrict or object to processing; data portability (receive your data in a structured format); withdraw consent for marketing at any time; lodge a complaint with your local Data Protection Authority.

To exercise any of these rights, contact us at dpo@wincrypto.com. We will respond within 30 days.

We use only essential cookies required for the Platform to function (session management, age verification, language preference). We do not use third-party tracking cookies. We use privacy-respecting analytics that do not require cookie consent.

Account data is retained for as long as your account is active. Competition records (orders, tickets, skill question responses) are retained for 7 years for audit and compliance purposes. You may request account deletion at any time — we will retain only the minimum data required by law.

The Platform is strictly for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we discover that a minor has created an account, we will delete it and all associated data immediately.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We will notify registered users of significant changes by email.

For any privacy-related questions or to exercise your rights, contact our Data Protection Officer at dpo@wincrypto.com.