Who Handles Your Data
Your personal data is controlled by Goodfly N.V., the Curaçao company that operates the casino under sublicense 8048/JAZ. The company decides which data is collected and how it is used, and it is responsible for keeping it secure. Some processing is done by trusted partners such as payment providers and verification services, and they are bound by contracts that limit what they can do with your information.
Online casino privacy matters more than most people think. A casino account holds a full name, an address, a date of birth, copies of identity documents and a history of payments. In the wrong hands, that combination is enough for identity theft, which is why the way a brand treats this data says a lot about how seriously it takes its players.
What Data Is Collected
The casino collects data in three ways. The first is what you give directly: your name, email, phone number, address and date of birth during registration, plus the documents you upload for verification. The second is data created while you play, such as deposits, withdrawals, bets, bonuses claimed and conversations with support. The third is technical data gathered automatically, including your IP address, device type, browser and the pages you visit.
Payment details are handled with extra care. Card numbers are processed by licensed payment providers and are not stored in full by the casino. For crypto, the casino records wallet addresses and transaction hashes needed to confirm deposits and payouts. Bank details for transfers are kept only as long as they are needed for the payment and the records the law requires.
Why the Casino Uses Your Data
Every piece of data has a purpose, and the policy ties each one to a reason. The main ones are running your account, processing payments, confirming your identity and age, meeting legal duties under the license and anti-money laundering rules, preventing fraud and providing customer support.
Some data is also used to improve the site, for example to see which pages load slowly or which game filters players use most. Marketing is a separate purpose. The casino sends promotional emails only to players who have agreed to receive them, and you can switch them off at any time in your account settings or through the unsubscribe link in each message.
The casino also uses play data to support responsible gambling. Patterns such as rapidly rising deposits or very long sessions can trigger a check by the team, and this use of data is part of the license conditions rather than a commercial choice.
Who Your Data Is Shared With
The casino does not sell personal data. It shares information only where it is needed to deliver the service or required by law. Payment providers receive the details needed to process transactions, verification services check identity documents, game studios receive anonymous identifiers so their games can run, and the licensing authority can request records during audits or investigations.
Data may also be shared with law enforcement when there is a legal obligation, for example in cases of suspected fraud or money laundering. Some partners work outside Canada, so your data can be transferred to other countries. When that happens, the casino uses contracts and security measures intended to keep the same level of protection.
How Your Data Is Protected
Player data safety rests on several layers. All connections to the site use 256-bit SSL encryption, so data travelling between your device and the casino cannot be read if intercepted. Data encryption online casino operators rely on also covers stored records, which means documents and account details are kept in encrypted form on secured servers.
Access inside the company is limited to staff who need the data for their role, and actions on sensitive records are logged. The site runs behind modern infrastructure with protection against attacks that try to overload or break into it. As a secure gambling platform, the casino also checks logins for unusual activity, such as sign-ins from a new country, and may ask for extra confirmation before allowing access.
Security works best when players play their part too. Use a unique password, log out on shared devices and never share your login details. Support staff will never ask for your password, and any message that does is not from the casino.
Cookie Policy Casino Players Should Know
Cookies are small files saved by your browser that help the site work. The casino uses essential cookies to keep you logged in, remember your currency and protect the session, and the site cannot run properly without them. Analytics cookies show how players use the site, and marketing cookies help measure which campaigns bring new players.
You can manage non-essential cookies through the banner shown on your first visit or later through your browser settings. Blocking all cookies may stop the login from working, so it is better to switch off only the optional categories. The full cookie policy casino documents publish lists each cookie, its purpose and how long it stays on your device.
Support Chats and Communications
Conversations with the support team are stored together with your account so that agents can see the history of an issue and you do not have to repeat yourself each time you get in touch. Chat transcripts and emails may include personal details you share, such as payment references or screenshots, and they are protected in the same way as the rest of your account data. Only staff working on your request can open them.
Calls and messages are also used for training and quality checks, which helps the team give clearer answers over time. If you send documents by email rather than through the verification page, they are moved to the secure document storage and the original attachment is removed from the support inbox. Public features such as tournament leaderboards show only a shortened username rather than your full name.
How Long Data Is Kept
Data is kept only as long as it is needed for the purpose it was collected for, or as long as the law requires. Anti-money laundering rules oblige casinos to keep identity and transaction records for several years after an account is closed, so these cannot be deleted immediately even on request. Marketing preferences and technical logs are usually kept for a shorter time. When data is no longer needed, it is deleted or anonymised so it can no longer be linked to you.
Your Privacy Rights
Players in Canada are protected by PIPEDA, the federal privacy law that covers how businesses handle personal information. The main privacy rights players have include the right to know what data is held about them, to receive a copy of it, to correct anything that is wrong and to withdraw consent for optional uses such as marketing. You can also ask for your data to be deleted, although records the casino must keep by law will stay until the required period ends.
To use any of these rights, contact support by live chat or email. The casino may ask you to confirm your identity first, which protects your data from requests made by someone pretending to be you. If you are not happy with the answer, you can raise a complaint with the Office of the Privacy Commissioner of Canada.
Casino GDPR Compliance and International Standards
Although the casino does not operate under EU law for Canadian players, the policy follows principles similar to casino GDPR compliance standards: collecting only the data that is needed, being clear about why, keeping it secure and respecting player choices. Players who connect from the European Economic Area are covered by GDPR rights directly, and the policy explains how those requests are handled.
For a brand that aims to be a GDPR compliance casino in spirit as well as in paperwork, the test is simple: you should be able to understand what happens to your data without hiring a lawyer. The Data Protection OnlyWin Casino policy is written with that goal in mind.
Minors and Data
The casino does not knowingly collect data from anyone under the legal gambling age, which is 19 in most of Canada and 18 in Alberta, Manitoba and Quebec. Age is confirmed during verification, and accounts found to belong to minors are closed and their data handled according to the law.
Why Privacy Builds Trust
A Safe Online Casino OnlyWin aims to be starts with fair and transparent casino policies, and privacy is a big part of that. Clear rules on data, strong encryption and a real way to exercise your rights help protect personal information and give players a reason to trust the brand with something more valuable than a deposit. If anything in the policy is unclear, support is available 24/7 to explain it.