Privacy, Data Management, and Cookie Policy

1. Data Controller

Personal data of visitors and users of the Website is administered by Carrer N.V. (the “Company”), registered at Dr. Henri Fergusonweg 1, Gaito, Willemstad, Curaçao. The Company and the user are jointly referred to as the “Parties”.

2. Data Protection Principles

We follow the requirements of the General Data Protection Regulation (EU) 2016/679 (“GDPR”). We process personal data in a lawful and transparent manner, only for defined purposes. We take reasonable steps to keep data accurate, relevant, and protected by appropriate technical and organisational safeguards to reduce the risk of unauthorised access, loss, or misuse.

3. Data Collection

We may collect and store the following categories of personal data:

  • Identification details (e.g., name and other account registration data);
  • Contact details (e.g., phone number, email address);
  • Payment and transaction-related information (e.g., payment details).

You are responsible for ensuring the information you provide is accurate, current, and valid.

4. Data Usage

We use personal data for purposes that include:

  • Identity and account verification;
  • Payment processing and transaction administration;
  • Account maintenance and service delivery;
  • Customer communication and support;
  • Service monitoring, troubleshooting, and quality assurance;
  • Improving Website functionality and user experience;
  • Conducting promotions, offering marketing communications, and running surveys (where permitted);
  • Preventing fraud, handling complaints, and resolving disputes.

5. Data Sharing

We may disclose your data to affiliated entities and business partners where necessary to provide services or comply with applicable legal and regulatory obligations. Where third parties process data on our behalf, we require them to apply safeguards consistent with GDPR-level standards and to use the data only for the agreed purposes.

6. User Rights and Obligations

6.1 User Rights

Subject to applicable law, you may have the right to:

  • Request access to your personal data;
  • Request correction of inaccurate or incomplete data;
  • Request deletion of your personal data;
  • Request restriction of processing;
  • Receive your data in a portable format and/or request transfer to another controller;
  • Object to certain processing activities;
  • Lodge a complaint with a competent supervisory authority.

6.2 User Obligations

  • You must provide correct personal information and update it when it changes.
  • You are responsible for keeping your account access details secure and for any access by third parties using your credentials.
  • If you suspect unauthorised access to your account or personal data, you must inform the Company without delay.

6.3 Company Rights

The Company may update this Policy at its discretion. If you do not agree with the processing of your personal data, the Company may be unable to continue the relationship and may close or restrict your account in accordance with its terms.

6.4 Company Obligations

Where required, we will inform you about corrections, deletions, or restrictions applied to your personal data and, upon request, provide information about relevant recipients of your data. We also follow applicable data-breach notification requirements.

7. Data Retention

We retain your personal data for the duration of our relationship and for up to 3 years after account closure. Where record-keeping obligations apply, certain data may be stored for up to 5 years as required by law.

8. Security

We use 128-bit SSL encryption to help protect personal data and transactions transmitted via the Website. We also apply additional security measures designed to reduce the risk of unauthorised access.

9. Marketing Communications

We may use your personal data to send marketing communications unless you opt out where such an option is available. Please note that opting out of marketing may impact eligibility for certain bonuses or promotional offers.

10. Cookie Policy

The Website uses cookies and similar technologies to enable core functionality and support personalised services. You can manage cookies through your browser settings (including blocking or deleting cookies). If you disable cookies, some Website features may not function as intended and your experience may be affected.

11. Data Deletion

After your account is closed, we will delete or anonymise your personal data in line with our Data Deletion Policy, except where retention is necessary to meet legal or regulatory obligations. In such cases, retained data may be kept in anonymised form where appropriate.

12. NetEnt Privacy Policy

If you access and play NetEnt slot games, NetEnt’s privacy policy may also apply to the processing of relevant data connected to those games.

13. Data Access Requests

To request access to, correction of, deletion of your personal data, or to receive information on how your data is used, contact our Data Protection Officer at dpo@support.win. For security and identity verification purposes, please attach a copy of your passport. We may charge a fee for requests that are excessive, repetitive, or duplicative, where permitted by law.