WinLion Casino Privacy Policy: How Your Data Travels

Think of your personal data as a journey: it goes in when you register, gets used while you play, is shared with a few partners and eventually leaves again. This page follows that journey step by step, in line with the privacy policy (last updated 22 April 2026). For the brand itself, see the Win Lion basics for Canada.

Step 1: You sign up

Behind the casino stands Keron Systems LTD, a company registered in Anjouan (registration number 15947, Hamchako, Mutsamudu, Union of Comoros), and it acts as the controller of your data. WinLion operates under licence No. ALSI-202504033-FI2. To open an account it asks for identity details, contact details, financial details and photo ID. The site is not intended for children.

Registering also means accepting the privacy policy as part of the Terms. If you disagree with it, the policy says you should not use the site or hand over personal data.

Step 2: What goes into your file

The data falls into groups:

  • identity: name, username, date of birth, gender, marital status, title;
  • photographs: passport or other photo ID;
  • contact: billing and home address, email, phone;
  • financial: bank account and card details;
  • transactions: deposits, withdrawals and games used;
  • technical: IP address, login data, browser, time zone, device and operating system;
  • profile and usage: preferences, feedback and how you use the service;
  • marketing: how you wish to be contacted.

Statistical data that cannot identify you is kept separately and can be used freely.

Step 3: The site keeps learning about you

While you browse and play, cookies and similar tools record technical data: IP address, login data, browser, operating system, time zone and location, plus how you use the service. The same applies when the site is added to a phone’s home screen, as the phone install guide describes. Transaction data covers your deposits, withdrawals and the games you open. The operator may also receive data from analytics providers, ad networks, payment providers, search information providers and data brokers.

Step 4: What the data is used for

The policy lists four main uses. Running your account and answering queries is done under the contract with you. Improving the casino and understanding customers rests on legitimate interest, as does marketing. Meeting regulatory duties, including identity, fraud and anti-money-laundering checks, rests on legal obligation. Refuse to hand over details that the law or your contract demands, and the service may simply be unavailable to you.

For example, the casino studies behaviour and demographics to learn what players need, and it uses the data to offer more customisation on the site.

Step 5: Messages

Accepting the policy and the Terms means agreeing to service and marketing messages via SMS, email, push, in-app notices and calls, as well as future channels. Partner offers may also reach you where the law permits. Marketing can be stopped through the site settings or by asking the casino, while account-related messages continue.

Step 6: Who else receives it

Group companies, IT providers, casino game suppliers, payment services, identity verification providers, marketing senders, advisers, tax authorities, regulators and a possible future owner of the business may see parts of your data. WinLion requires them to keep it secure and forbids them from using it for their own aims.

Some of this sharing is required by law. Reports to regulators, insurers or government agencies, including anti-money-laundering and KYC checks, rely on legal obligation.

Step 7: Protection and clean-up

Access is limited to people with a business need, and they work under a duty of confidentiality. There is a breach procedure with notification where the law demands it. Nothing is stored longer than its purpose and the law require, which includes tax and reporting rules, though a complaint or possible dispute can extend that. To set the period, the casino considers the amount and sensitivity of the data, the risk of misuse and whether the aim could be met another way. Anonymised information may be used with no time limit.

Your controls

You may ask for a copy of your data, a correction, deletion, restricted processing, a portable copy, or object to certain processing. Restriction can apply while accuracy is checked, when processing is unlawful but you want the data kept, when you need it for a legal claim, or while an objection is being assessed.

There is usually no fee, an identity check comes first, and the casino aims to reply within a month, longer for complex requests. Erasure may be refused where law or regulation requires the data to be kept. Write to [email protected]. You can also complain to a data protection regulator at any time, though the casino asks to hear from you first.

Your own part

Keep your details up to date, because wrong data slows verification and payouts. Do not share your password, and use the casino's own site when you send documents.

A quick checklist before you register

  • Read the privacy policy together with the Terms, because accepting one means accepting the other.
  • Decide what marketing you want, and know that you can switch it off in the site settings.
  • Prepare accurate details, since the casino asks players to keep them current.
  • Send documents only through your account on the casino's own site.
  • Note the privacy mailbox, [email protected], in case you need to ask a question later.

Cookies in short

Cookies and similar technologies record browsing actions and patterns, along with technical details about your device. They help the site work smoothly and let the operator understand how it is used. If you would rather not have this data collected, the policy says you should not use the site, so check your browser settings and the policy before you begin.

Links from the casino to other sites are outside its control, so check their privacy policies before sharing anything.