Casino Ninewin privacy policy
This page explains how personal information connected with Casino Ninewin is handled.
Information the operator collects
The operator may collect information when you register, use the casino services, make a payment or contact support. The categories described in its policy include:
- your name, date of birth, gender and contact details;
- identity photographs and evidence of your address;
- banking information, payment details and source-of-funds information;
- your username, password and other account records;
- activity within the casino products and your browsing behaviour;
- device information, including the model, operating system, browser, IP address and mobile identifier;
- calls with support, which may be monitored or recorded;
- information you provide voluntarily or make public, including on social media.
Responsible-gambling information may reveal health-related details. The operator treats this as sensitive personal data and says additional safeguards apply.
Why the information is used
Casino Ninewin's operator describes several reasons for processing personal information. These include performing its contract with a player, meeting legal duties, pursuing legitimate interests and using consent where the relevant activity requires it.
| Purpose | Examples given by the operator |
|---|---|
| Providing the service | Opening and administering an account, processing transactions and answering requests |
| Verification and safety | Age, identity, residence, affordability, fraud and anti-money-laundering checks |
| Service improvement | Research, system testing, statistical analysis and product development |
| Personalisation | Tailoring products, recommendations and the experience shown to you |
| Communication | Account notices, support replies, promotions, surveys and service information |
| Rule enforcement | Detecting conduct that may breach the casino terms |
Some registration information is compulsory for the operator to create and administer an account. If required information is not provided, the operator may be unable to offer its services.
Verification and automated decisions
The operator may ask for identification, proof of address, payment evidence, a document selfie or video verification. It may also call the telephone number attached to an account as part of KYC. Payment or withdrawal access can remain restricted until the operator completes its checks.
The privacy policy says automated processing may be used to group customers, tailor services, assess fraud or money-laundering risk, check whether account-opening conditions are met and assess risk linked to a bet. The policy also describes a qualified right not to be subject to a solely automated decision that has a legal or similarly significant effect. Exceptions may apply when the decision is needed for a contract, authorised by law or based on explicit consent.
When information may be shared
The operator says it does not generally disclose personal information outside its company group for third-party marketing. Its policy does allow sharing in defined circumstances, including with:
- regulators or other recipients where the law requires disclosure;
- verification, affordability and fraud-prevention providers;
- technology, data-storage, payment and advertising service providers;
- external auditors;
- parties involved in establishing or defending legal rights;
- a buyer, successor or other organisation involved in a proposed or completed business transfer;
- a relevant regulator in connection with self-exclusion.
Retention and security
The operator says it keeps information only for as long as the purpose requires. Some records may remain after a person stops using the service to meet contractual or legal duties, comply with anti-money-laundering or licensing requirements, deal with legal claims, follow regulatory guidance or support a legitimate interest.
Its security statements include staff confidentiality duties, access controls, security testing, fraud monitoring and SSL encryption for information in transit. The policy says card payments are handled through a payment provider's secure gateway and that the operator does not collect, keep or transfer card data itself.
Your choices and requests
Subject to the conditions and exceptions in applicable data-protection law, the operator's policy describes rights to:
- ask for access to personal information and correction of inaccurate details;
- request deletion in qualifying circumstances;
- ask for processing to be restricted;
- receive eligible information in a commonly used, machine-readable format;
- object to certain processing based on legitimate interests, research, statistics or direct marketing;
- withdraw consent where consent is the processing basis;
- challenge qualifying automated decision-making and profiling;
- complain to the relevant data-protection authority.
Deletion is not unconditional. The operator may have to retain information to meet legal duties or protect legal claims. A processing restriction can also permit storage while preventing further use.
To make a privacy request or raise a concern, use the support route described on our contacts page. Provide enough information for the request to be identified, but do not send passwords or unnecessary payment information by email.
Marketing and cookies
The operator's policy allows personalised marketing where the relevant conditions are met. You can unsubscribe from marketing messages or ask support to disable personalisation. Essential information about an account, balance or service may still be sent after marketing has been declined.
Browser storage and consent controls are covered separately on our cookies page.
Keeping your details accurate
The operator requires account information to be genuine, complete and kept current. False or incomplete details may lead the operator to reject registration or suspend or close an account under its terms.