Privacy And Data Protection At Wolf Winner Casino
A privacy policy is only worth reading if you can do something with it afterwards. This one is written so you can: find out precisely what we hold, why we hold it, who else sees it, how long it stays, and what to say to get a copy of it or have it corrected. Where the honest answer is inconvenient, such as the parts of your record we cannot delete on request, it is stated rather than softened.
For Wolf Winner Casino Australia players, the framework is the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Everything below is written to sit inside that framework.
What We Collect, And When
Rather than a single undifferentiated list, here is what arrives at each point in the life of an account.
When you register. Your name, date of birth, email address, mobile number, the username you choose, your account currency and country of residence. Your password is stored only as a cryptographic hash, which is why our support staff can trigger a reset but can never tell you what your password is.
When we verify you. A government-issued photo identity document such as a passport, a driver licence or a national identity card; proof of your residential address dated within the last three months; and, where a payment method needs confirming, either a card image with most digits masked or a screenshot of the wallet. We collect these to meet age-verification and anti-money-laundering obligations, not out of curiosity.
When you use the cashier. Deposit and withdrawal amounts, timestamps, the methods attached to your account and the tokenised reference our payment provider returns. Full card numbers never reach our systems; they stay with the payment processor.
While you play. Which games you open, stake sizes, session start and end times, bonuses claimed and their wagering progress, the limits and exclusions you have set, and the pages you view on the site.
Automatically, from your device. Your IP address and the rough location it implies, plus device type, operating system, browser and version, screen size, language and the session identifiers that keep you signed in.
When you contact us. Live chat transcripts, support tickets and anything you attach to them.
Only one category on that list is optional, and it is marketing. Consenting to promotional email or messaging is a separate choice, made independently of everything else, and refusing it has no effect whatsoever on your ability to register, deposit, play or withdraw. Everything else is either necessary to run the account you asked for or required of us by law.
Why We Hold Each Category
| What we do with it | Data involved | Why we are allowed to |
|---|---|---|
| Create and operate your account | Registration details, technical data | Performing the agreement you entered into |
| Move money in and out | Cashier records, identity details | Performing the transaction you requested |
| Confirm age and identity | Verification documents | Legal obligation |
| Monitor for money laundering | Cashier records, gameplay, technical data | Legal obligation |
| Prevent fraud, account takeover and bonus abuse | Technical, gameplay, cashier data | Legitimate interest in protecting players and the platform |
| Act on responsible gambling signals | Gameplay data, limit and exclusion records | Player protection duty |
| Answer questions and resolve disputes | Support communications, account history | Handling your request |
| Improve stability and performance | Aggregated technical and usage data | Legitimate interest |
| Send offers and promotional messages | Contact details, gameplay data | Your consent, withdrawable at any time |
The final row is the only one that depends on permission. Withdrawing it is described further down and takes effect immediately.
Who Else Sees It
Wolf Winner does not sell personal information. We do not rent it either, and we do not supply it to data brokers or to advertisers for their own use. Disclosure happens where a specific function cannot be performed without it:
- Payment providers and acquiring banks, to process a deposit or payout and to investigate a disputed transaction.
- Identity and anti-fraud verification services, which check a document against official records and return a pass, a fail or a referral.
- Game studios, which are sent a session identifier and the gameplay data needed to run and settle a round. Your name, address and payment details are not part of that exchange.
- Hosting, security and analytics suppliers, under contract, providing the infrastructure the platform runs on.
- Professional advisers such as auditors and lawyers, where a particular matter requires it.
- Law enforcement, courts and public authorities, where a valid legal requirement applies and where refusing would itself breach the law.
Every recipient gets the minimum needed for its function and nothing beyond it. Our contracts with suppliers restrict them to the purpose for which the information was provided and require them to delete it at the end of the relationship.
When Your Information Leaves Australia
Several of the suppliers listed above are based outside Australia, which means information about Australian players can be stored or processed overseas, usually in European, United Kingdom or Asia-Pacific data centres.
Australian Privacy Principle 8 governs that situation, and we apply it as follows. Before any cross-border disclosure we take reasonable steps to satisfy ourselves that the recipient will handle the information consistently with the APPs. In practice that means contractual commitments covering security standards, purpose limitation, breach notification and deletion, and a preference for suppliers already operating under an equivalent data protection regime in their own jurisdiction.
Your Rights, And The Exact Way To Use Them
Each right below is real and free to exercise. The route is the same for all of them: open live chat inside your account and ask the agent to log the matter as a formal privacy request, saying which right you are exercising. That phrasing is what routes it to the privacy team rather than into a general support queue. Expect to confirm your identity first, since releasing account data to whoever asks for it would be the bigger privacy failure by far.
Access. Request a copy of everything we hold about you. We answer within a reasonable period, and ordinarily inside 30 days.
Correction. Ask us to fix anything inaccurate, incomplete or out of date. Contact details are updated on request; changing a detail already confirmed during verification requires a supporting document.
Deletion. Ask us to erase your information. What that achieves in practice is set out in the next section but one, and we would rather explain the limits than imply something we cannot do.
Withdrawing marketing consent. Turn promotional messages off yourself in account settings, or have support do it for you. The change is immediate, no reason is required, and nothing else about the account moves.
Objecting to a particular use. Ask us to stop a specific processing activity. Where that activity rests on legitimate interest rather than a legal obligation, we stop unless there is a compelling reason we cannot, and we tell you which of the two applies.
Complaining. The escalation route, including the independent body you can go to, is at the end of this page.
Making any of these requests has no effect on your account standing, and we do not charge for them.
How Long We Keep Things
- Verification documents and transaction records: at least seven years from the end of the account relationship. That period comes from anti-money-laundering record-keeping rules, and no request can shorten it.
- Account and gameplay history: for the life of the account and then the same seven-year period, because it forms part of the transaction record.
- Support transcripts: for as long as needed to deal with any follow-up or dispute, then deleted.
- Marketing data: deleted when you withdraw consent, apart from a minimal suppression record proving you asked not to be contacted.
- Responsible gambling records: retained while a limit or exclusion runs and after it ends, because an exclusion erased from our records could be sidestepped with a fresh registration.
- Technical logs: a short cycle measured in months, unless a security investigation calls for longer.
What "Deletion" Really Means
It would be simpler to promise that everything disappears the day you ask. It would also be false while a legal retention obligation is running.
Here is what actually happens. Anything we are obliged to keep is closed off rather than erased: pulled out of active systems, locked to the handful of staff with a compliance reason to see it, kept out of every marketing list and every piece of analysis, and destroyed once the retention period expires. Anything that no retention obligation covers, which takes in marketing preferences, optional profile fields and analytics identifiers, is deleted on request.
Knowing the difference before you ask is better than discovering it afterwards.
Keeping It Secure
Traffic between your device and our platform is encrypted in transit, on desktop, on the mobile site and in the Wolf Winner app alike. Passwords are stored as hashes rather than as readable text. Verification documents sit in restricted storage where access is limited by role and logged. Card details are handled by our payment provider rather than stored by us. Two-step verification, where available in your account settings, is worth switching on and takes under a minute.
Your side of this matters just as much. Give this account a password you use nowhere else, stay off shared and public computers when signing in, sign out properly rather than closing the tab, and be sceptical of any message that wants you to confirm account details through a link until you have read the domain in the address bar for yourself. We will never ask for your password, and no legitimate message from us will ever need it.
Players Under 18
Accounts at Wolf Winner Casino are for adults aged 18 and over, and we do not knowingly collect personal information from anyone younger. Where an account turns out to belong to a minor, we close it at once, void any winnings, send deposits back through the original payment route, and delete what was collected, keeping only the minimum needed to stop that account being opened again.
If you suspect a minor has registered on your device or with your details, raise it in live chat and we will act on it the same day.
Complaints, Escalation And Contact
Bring a privacy concern to us first, through live chat inside your account, and ask for it to be filed as a privacy complaint so that it reaches the team responsible for data protection. Expect a prompt acknowledgement and a substantive answer inside 30 days.
If our answer does not resolve it, an Australian player can put the matter to the Office of the Australian Information Commissioner, whose complaint process is described at oaic.gov.au. The OAIC is an independent statutory body with no connection to us, it charges nothing to handle a privacy complaint, and it will normally expect you to have raised the issue with us directly first.
Every privacy question, access request and correction takes the same live chat route, staffed at any hour. Saying explicitly that you are making a privacy request is what guarantees it is treated as one rather than as a general enquiry.
This policy is revised whenever our practices, suppliers or obligations change. The version published here is always the current one, and a change that materially affects what we collect or who receives it is notified inside your account so that you see it at your next sign-in rather than discovering it later. Your rights and obligations as an account holder are set out separately in our terms and conditions.