winaslotPrivacy Policy
This page describes what we collect when you use winaslot and how we keep that data protected. Our commitment is straightforward: we collect only what's necessary for account verification, deposit processing, withdrawal handling, and fraud prevention. We do not sell your information to third parties, and we do not share it without your consent except where required by law.
Every piece of data you provide—your name, email, phone, identity documents, or payment details—lives on encrypted servers and is accessed only by our team members who need it to serve your account. This privacy policy outlines the specifics: what we collect, how long we keep it, your rights, and how to contact us if you have questions.
Our winaslot platform operates in supported jurisdictions where local data protection regulations apply. If you access winaslot from Jakarta, Surabaya, Bandung, Medan, or elsewhere, this policy governs how we handle your information.
Data We Collect on winaslot
We collect account registration data (email, password hash, full name, phone number) when you create a winaslot account. We collect identity documents (photo of your ID card, selfie with ID) during Know Your Customer (KYC) verification—this is a compliance requirement, not optional. We collect payment details when you deposit or withdraw: your chosen method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), transaction amounts, and confirmation records.
We collect behavioral data—which games you play, which football matches (Liga 1, Piala AFF, Champions League) you view, how long you stay logged in, which browser or app version you use. This data helps us understand usage patterns and improve winaslot performance, but we do not use it for marketing without your explicit permission.
We collect technical data: your IP address, device type (Android, iOS, Windows, Mac), browser version, and connection type. This helps us detect fraudulent access, enforce account security, and troubleshoot technical issues on winaslot.
- Account data
- Email, phone, full name, password (hashed, never plaintext), date of birth, address.
- Identity documents
- Photos of ID card, utility bills, or other proof of identity (KYC compliance).
- Payment records
- Deposit/withdrawal amounts, payment method, transaction timestamps, and bank reference numbers.
- Behavioral & technical
- Games played, login history, IP address, device type, browser info, timestamps.
How We Use Your Data
We use your data to operate winaslot: verifying your identity (KYC), processing your deposits and withdrawals, confirming transactions with your payment provider (mobile banking or local payment confirms your transfer; we match their confirmation to your request), and ensuring account security. We use behavioral data to detect unusual activity—if someone logs in from an unfamiliar location or requests a large withdrawal suddenly, we flag it and may ask you to verify your identity again.
We use technical data to maintain winaslot performance, prevent fraud, and comply with anti-money-laundering (AML) regulations in supported jurisdictions. We never use your data for paid advertising unless you opt in. We do not use your data to build profiles or sell to marketers.
Our support team accesses your account data only to assist you—answering login questions, reviewing withdrawal holds, or investigating disputes. Each access is logged and audited quarterly.
Data Retention on winaslot
We keep your account data for as long as your winaslot account is active. If you close your account, we retain transaction records for seven years (legal requirement for financial records). We delete personal details (name, address, ID photos) after two years of inactivity unless you request earlier deletion.
Technical logs (IP addresses, login history) are retained for 90 days for security purposes, then automatically deleted. Behavioral data (games played, matches viewed) is aggregated and anonymized after 30 days—we keep the data but strip it of your identity so we cannot link it back to you.
Third-Party Data Processors
We use third-party vendors to process specific functions on winaslot. Payment processors (for online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) receive only transaction details needed to complete transfers—they do not receive your full account data. Email service providers send you account alerts and password-reset links—they receive your email address only. Cloud hosting providers (servers outside your jurisdiction) store encrypted data—they cannot decrypt or view its contents.
All third-party vendors sign data-processing agreements requiring them to protect your information and use it only as instructed. We audit these vendors annually. You can request a full list of our processors by contacting our support team via the in-app help channel.
Your Rights and Data Access
You have the right to access all data winaslot holds about you. Request a copy by emailing our support team or using the "Download my data" option in your Account settings. We'll provide a machine-readable file (JSON or CSV) within 10 business days.
You have the right to correct inaccurate data. If your address or phone number changed, update it in your Account > Profile immediately. You have the right to request deletion of personal details (name, address, ID photo) after account closure, subject to legal retention requirements.
You have the right to withdraw consent for specific uses (e.g., marketing emails, analytics). Visit Account > Privacy Preferences to opt out of optional data uses. Required uses (KYC, transaction logging) cannot be disabled while your account is active.
Cookies and Tracking
We use cookies to maintain your login session on winaslot. Without session cookies, you'd need to re-enter your password every time you navigate between pages. These cookies are essential and cannot be disabled. You can clear them manually via browser settings, but doing so logs you out.
We use optional analytics cookies to understand how users interact with winaslot—which game categories are most popular, where users abandon the checkout process. You can disable these in your privacy preferences without affecting core functionality. We do not use third-party tracking pixels or advertising cookies.
Our mobile app (Android APK, iOS browser) does not use cookies—it uses app-level tokens for session management, which work similarly but are not cookies.
Security Measures
Your winaslot data is encrypted using TLS 1.2 or higher during transmission (when traveling between your device and our servers). At rest, all personal data is encrypted using industry-standard algorithms. Your password is hashed (run through a one-way function) so even our team cannot see it—if you forget it, we can only send you a reset link, not recover it.
Multi-factor authentication (optional but recommended) adds a second security layer. Enable it in Account > Security to require a code (sent to your phone via email or SMS) in addition to your password when logging in from new devices.
We run quarterly security audits and penetration tests. We maintain incident-response procedures and notify users immediately if we detect unauthorized data access. We carry cyber-liability insurance covering potential breaches.
Changes to This Policy
We may update this privacy policy periodically to reflect changes in winaslot operations, new features, or evolving regulations. We will notify you of material changes via email or by posting a banner on winaslot when you next log in. Your continued use of winaslot after we post changes constitutes acceptance of the updated policy.
This policy was last updated in the current month. We maintain version history; you can request previous versions by contacting our support team.
Contact and Data Requests
If you have privacy questions, want to request your data, or wish to exercise your rights, contact our data protection team via the in-app help channel (fastest response), email (support address in your account menu), or use the "Privacy Request" form in Account > Settings. We respond to all data requests within 10 business days.
Our winaslot support team is trained in privacy practices and can direct complex requests to our legal team. If you believe we've violated your privacy rights, you may lodge a complaint with your local data protection authority.
Users in supported jurisdictions (where winaslot operates legally) have the rights outlined above. Users accessing winaslot from jurisdictions where our service is prohibited do not have an account on winaslot and thus are not covered by this policy.