Tipwin Privacy Policy for Accounts, Payments and Website Use

Effective Date: 28 July 2026 Last Updated: 28 July 2026 This Privacy Policy explains how Tipwin Limited collects, uses, shares, stores and protects personal data when you visit our sites, create an account, place a bet, play a game, contact support, use a payment method or activate a safer gambling tool. It also explains the choices and legal rights available to you.

Who We Are and How to Contact Us

Tipwin Limited is responsible for the processing described in this policy where it acts as controller.

Registered office: Unit 507, Level 5, Building SCM01, Smart City, Ricasoli, SCM 1001, Kalkara, Malta. Privacy email: [email protected] General support: [email protected]

Data We Collect

Account and Contact Data

We collect your name, date of birth, residential address, email address, telephone number, username, password credentials and communication preferences.

Identity and Verification Data

We may process identity documents, photographs, document numbers, nationality, proof of address, age-verification results, payment ownership evidence and source-of-funds or source-of-wealth information.

Payment and Transaction Data

We process deposit and withdrawal amounts, dates, payment methods, masked account or card information, transaction references, balance movements, chargebacks and payment status. Payment providers may hold full payment credentials under their own privacy terms.

Betting, Gaming and Safer Gambling Data

We maintain records of bets, odds, stakes, game rounds, wins, losses, bonus activity, limits, cooling-off, self-exclusion and account interventions. This data supports settlement, fraud detection, safer gambling and legal obligations.

Technical and Device Data

We collect IP address, device identifiers, browser, operating system, language, approximate location, login time, session activity, cookie identifiers, crash data and security events.

Communications

We retain emails, chat transcripts, complaint records, uploaded files and notes created while resolving a support or compliance case.

Why We Use Personal Data

We process data to:

create, authenticate and maintain your account;
verify age, identity, address and payment ownership;
accept deposits and process withdrawals;
settle bets and game rounds;
administer bonuses and loyalty activity;
prevent fraud, money laundering, collusion and account misuse;
monitor security and investigate incidents;
provide limits, self-exclusion and safer gambling support;
answer questions and resolve complaints;
meet legal, regulatory, tax and recordkeeping duties;
analyse service performance and improve navigation;
send service messages and permitted marketing;
establish, exercise or defend legal claims.

Legal Bases

Depending on the processing and country, we rely on performance of a contract, legal obligation, legitimate interests, consent and the establishment or defence of legal claims. Where special-category data is involved in safer gambling or legal work, we use the basis permitted by applicable law.

Cookies and Similar Technologies

We use essential cookies for login, security, balance and session continuity. Preference cookies remember language and display choices. Analytics cookies measure visits, navigation and technical performance. Marketing and attribution technologies can measure campaigns, subject to consent requirements.

You can manage non-essential cookies through the consent interface and browser settings. Blocking essential cookies can prevent account login, cashier operation or security checks.

Who Receives Data

We may share relevant data with:

hosting and infrastructure providers;
payment processors and banks;
identity, age and document-verification providers;
fraud, AML and security services;
customer-support and communication platforms;
game and betting technology suppliers;
analytics and consent-management providers;
professional advisers, auditors and insurers;
regulators, law-enforcement agencies, courts and tax authorities;
corporate buyers or successors during a lawful business transaction.

Recipients receive only the data needed for their function and are subject to contractual or legal duties.

International Transfers

Some suppliers may process data outside your country. Where required, we use adequacy decisions, standard contractual clauses, contractual controls and security assessments. Transfer safeguards can be requested through our privacy contact.

Retention

We retain data according to account status, transaction history, licensing rules, AML duties, tax requirements, dispute periods, self-exclusion obligations and security needs. Some records must remain after account closure. When data is no longer required, it is deleted, anonymised or isolated from normal use.

Security Measures

We use encryption in transit, controlled system access, logging, monitoring, secure hosting, payment separation, fraud screening, document review and staff access restrictions. No system can eliminate all risk, so you must also protect your password, device and email account.

Your Rights

Subject to applicable law, you may request:

access to your personal data;
correction of inaccurate data;
deletion where retention is not legally required;
restriction of processing;
objection to processing based on legitimate interests;
data portability;
withdrawal of consent;
marketing opt-out;
review of certain automated decisions;
complaint to a competent data-protection authority.

We may need to verify your identity before acting on a request. Legal retention or regulatory duties can limit deletion.

Children and Legal Gambling Age

Our services are not intended for minors. We verify age and can request documents. Parents and guardians should use device controls and content filters to reduce unauthorised access.

Third-Party Links

Our sites may link to payment providers, regulators, support organisations or other services. Their privacy policies govern their independent processing.

Policy Changes

We may update this policy when services, suppliers or legal duties change. The date at the top shows the current version. Material changes may also be communicated through the site, account or email.

Privacy Contact

Send privacy requests to [email protected]. Include your registered email, the right you wish to exercise and enough information to identify the relevant account. Do not send passwords or full payment credentials.