TrueWin Privacy Policy: How Player Information Is Handled
A privacy policy is rarely the first page anyone opens. It probably should be. Before a deposit lands, the operator behind TrueWin Casino has already asked for a name, a document, a phone number… and it keeps asking as the account matures. This page sets out what the operator’s Privacy Notice and Cookie Policy say about that information: what is gathered, on what grounds, who else may see it, and how much control the account holder keeps. “Personal data” here means any information from which a person’s identity can practicably be worked out, and the Notice applies to visitors and registered players alike, on the website and in the mobile application. Where the official documents are silent, this text says so rather than guessing. One matter comes first: online betting and casino play are not permitted everywhere, and the operator requires every player to be physically located where such activity is allowed. Please confirm the position in your own jurisdiction before registering, depositing or playing – that check is the user’s responsibility, not the platform’s.
Sources of Information
Three streams feed the record that TrueWin holds on a player, and the examples below are the ones the Notice itself names.
| Source | Examples | When it arises |
| Supplied by the player | Name, date of birth, nationality, address; ID number and expiry; photograph or facial scan; email, phone, bank and card numbers | Registration, verification, deposits |
| Captured automatically | Payments, games played, support chats; geolocation, IP address, device ID, browser, time zone | Every session |
| Received from third parties | Transaction data, vendor gameplay records, geolocation, KYC and screening results | Verification and compliance |
Because all customers must be over 21, the operator states that it neither seeks nor wants the personal data of minors. If a field on the sign-up form seems excessive, the contact channels at the end of this page are the right place to ask why it is required.
Purposes and Legal Basis
Each processing activity is paired with a justification: the contract with the player, a legal or regulatory obligation, consent, or the operator’s legitimate interests. Read in sequence, the purposes trace the life of an account:
- Registration – creating the player profile so that deposits and withdrawals become possible;
- Eligibility – checking access location, personal details and documents against the rules;
- Verification – document copies to confirm identity or a claim to winnings, under anti-money-laundering law;
- Service delivery – running the games, managing the account and contacting the player about winnings;
- Communication – notifying changes to the terms, answering queries, complaints and disputes;
- Marketing and analytics – content about games, service optimisation and profiling, with direct marketing only by consent;
- Compliance and responsible gaming – disclosures to regulators, fraud detection and identifying players who may be at risk.
One consequence is spelled out plainly: withhold the requested information, or withdraw consent that a service depends on, and the operator will be unable to provide that service. Reviewing the marketing consent setting now and then keeps that choice with the True Win account holder.
Retention, Safeguards and Data Leaving
How long is a record kept? Two tests run together: the purpose the data serves, and any minimum period imposed by law or regulation. Past that point, the operator undertakes not to hold data in identifiable form. Security is framed as a commitment to all reasonable and practicable technical and organizational measures; at account level, that means a password of 8 to 20 characters mixing upper and lower case letters, numbers and at least one symbol, plus monitoring of account activity. The operator also describes itself as a global business using service providers abroad, so data may leave the country, with protection promised in line with applicable legal requirements. A strong password remains the simplest step any True Win player can take. Choose one that appears nowhere else.
Cookies and Browser Settings
Cookies are small text files stored on the device so that a session stays open, preferences are remembered and performance can be measured. Some are set by the operator and readable only by it; others come from third parties such as YouTube, Google Analytics, Meta and Google Ads. The Cookie Policy of TrueWin online sorts them into four groups:
| Category | Function | Named examples | Adjustable |
| Strictly necessary | Navigation, login session, security | session id, cookie_consent | No |
| Performance | Anonymised visit statistics and error logs | Not listed | Yes |
| Functionality | Language, region and user settings | Not listed | Yes |
| Targeting | Relevant advertising across websites | _fbp, _gcl, _au, IDE | Yes |
Everything beyond the strictly necessary group can be managed or removed through browser settings; the policy links to the relevant pages for Chrome, Firefox, Safari and Edge. The trade-off is stated openly: block certain categories and videos may stop playing, or the login may not persist. Reviewing those settings once, deliberately, is time well spent.
Recipients of Player Data
The Notice names categories of recipient rather than leaving the list open, and holds third parties acting for the operator to equally stringent confidentiality undertakings. Data may go to:
- regulatory authorities and other entities with standing, where the law requires disclosure;
- trusted providers engaged for something the player has requested, such as a payment provider handling a deposit;
- suppliers working on the operator’s behalf, from professional advisers to IT consultants;
- group and affiliated companies, for internal operations and, with consent, for marketing;
- anyone to whom disclosure is required by law, an investigation, enforcement of the terms, fraud protection or an emergency.
Nothing in the document describes selling personal data. Questions about a particular recipient go to the privacy address at the foot of this page.
Automated Decisions and Profiling
Some decisions about an account are taken by systems rather than people, and the operator says so. Whether an account may be opened. Whether a player remains eligible. How activity looks from a responsible-gaming standpoint. Fraud detection, and profiling. These are described as necessary for regulatory compliance, with appropriate safeguards… though the Notice does not publish the criteria. Anyone who believes an automated outcome on TrueWin is mistaken is directed to the privacy email address, ideally quoting the username and the date of the decision.
Rights of the Account Holder
The operator lists the rights a player may have over data it holds, all free of charge. In summary, the right:
- to be informed and to access – to know that data is processed and to obtain details of it;
- to rectification – correction of inaccurate or incomplete data;
- to erasure – deletion where no compelling reason to keep the data remains, subject to exceptions;
- to restrict processing – objecting to use, including direct marketing, honoured through a blocked list where refusal is not lawful;
- to data portability – the data in a structured, commonly used, machine-readable format;
- to complain to a data protection regulator where one applies, and to withdraw consent at any time.
A request should state which right is invoked and give enough account detail to confirm the sender’s identity. Where an exception applies to part of it, the operator indicates which part and why. A written request creates a dated record – a sensible habit.
Minors, Responsible Gaming and the Jurisdiction Check
Protecting the privacy and safety of children is described as very important to the operator: every customer must be over 21, age is proven with identification documents before an account opens, and an account found to enable underage play faces corrective action, potentially including a report of the illegal use. Personal data also serves responsible gaming on TrueWin. The operator may use it to identify players who appear at risk and to contact them, by email or text reminder where notifications are enabled. Daily, weekly and monthly deposit limits and self-exclusion periods are set from the account, and a “Talk to us” link leads straight to the team. Gaming is entertainment with financial risk, never a source of income. Set limits before the first deposit, not after. And once more: confirm that online betting or casino play is lawful where you are before registering, depositing or playing.
Changes to the Notice and How to Get in Touch
A revised Notice takes effect as soon as it is uploaded. The operator commits to reasonable efforts to flag material changes by phone, email or social media, and advises checking the current version on each visit; continued use after a change is treated as acceptance. Privacy matters have a dedicated address, [email protected], covering how data is gathered, stored, shared or used, requests under the rights above and queries about automated decisions. General support – complaints, suspected account compromise, everyday questions – runs through [email protected], live chat, the Help Center and social media, with complaints accepted around the clock. Quoting the registered phone number or email that serves as the username lets the TrueWin Casino team find the record without a follow-up… and a clear question tends to receive a clear answer.