Privacy Policy

Last updated: January 2026

What This Policy Covers

This privacy policy explains how WinWinBet collects, uses, stores, and protects your personal information when you use our online casino and sports betting platform. We operate in Kenya and process data according to international standards and Kenyan regulations.

By creating an account with WinWinBet, you agree to this privacy policy. If you don't agree with how we handle data, don't sign up. You can request a copy of your data or ask us to correct it at any time.

Information We Collect

Registration Information

When you create an account, we collect your full name, date of birth, email address, phone number, and residential address. We need this information to create your account, verify you're over 18, and comply with anti-money laundering regulations.

During account verification, we collect copies of your national ID, passport, or other government-issued identification, plus proof of address like a utility bill or bank statement. These documents confirm your identity and prevent fraud. We only use them for verification purposes.

Payment Information

For deposits and withdrawals, we record transaction amounts, dates, payment methods (M-Pesa, Airtel Money, cards, e-wallets), and transaction IDs. We don't store your M-Pesa PIN, card CVV, or full card numbers. Payment processors handle that data under their own security protocols.

Your payment history helps us process withdrawals, investigate disputes, and detect suspicious activity. We keep financial records for the period required by law.

Usage Data

Our systems automatically collect your IP address, device type, operating system, browser, pages viewed, games played, bet amounts, session duration, and timestamps. This data helps us improve the platform, fix bugs, optimize performance, and identify potential security threats.

We use cookies and similar technologies to keep you logged in, remember your preferences, and analyze site traffic. More details in the Cookies section below.

Communications

When you contact support via chat or email, we keep records of those conversations. This helps us resolve issues faster if you contact us again about the same problem. Support transcripts also help train our team and improve service quality.

How We Use Your Information

Account Management

We use your personal information to create and maintain your account, process deposits and withdrawals, verify your identity before payouts, prevent fraud and money laundering, resolve disputes and investigate complaints, and enforce our terms and conditions.

Communication

We'll send you transactional emails about account activity: deposit confirmations, withdrawal notifications, password reset links, account verification updates, and security alerts. These messages are mandatory for account security and proper operation.

With your consent, we'll also send promotional emails about bonuses, new games, and special offers. You can opt out of marketing emails anytime by clicking the unsubscribe link at the bottom of any promotional message. You'll still receive important transactional emails.

Platform Improvement

We analyze usage data to understand which games are popular, how players navigate the site, where technical problems occur, and how to optimize performance for Kenyan networks. This analysis uses aggregated, anonymized data — we're looking at patterns, not individual behavior.

Legal Compliance

We're required by law to collect certain information, verify player identities, keep financial records for tax purposes, report suspicious transactions, and cooperate with legal investigations. If a court or regulatory authority orders us to provide information, we must comply.

Data Security

All communication between your device and our servers is encrypted with SSL/TLS technology. This prevents anyone from intercepting your login credentials, personal information, or payment details during transmission.

Your data is stored on secure servers with firewalls, intrusion detection systems, and restricted access controls. Only authorized personnel can access personal information, and they're bound by confidentiality agreements.

We never store sensitive payment data like M-Pesa PINs or card CVVs. Payment processors handle that information under their own PCI DSS compliant security standards. We only keep transaction references that let us track payments without exposing your payment credentials.

Who We Share Data With

Service Providers

We share limited information with third-party companies that help us operate: payment processors (for M-Pesa, Airtel Money, card transactions), game providers (usually just a player ID, not personal details), hosting services (server infrastructure), customer support tools, and fraud prevention services.

These companies sign contracts requiring them to protect your data and use it only for the services they provide to us. They can't sell your information or use it for their own purposes.

Legal Requirements

We may disclose information if required by law, court order, or government investigation; to prevent fraud or criminal activity; to protect our rights or property; or to enforce our terms of service. We'll only share what's legally required and will notify you if possible.

No Selling

We don't sell your personal data to advertisers, data brokers, or other third parties. Your information stays with us and the service providers we need to operate the platform.

Your Rights

Access

You can request a copy of all personal data we hold about you. Email [email protected] with "Data Access Request" in the subject line. We'll provide the information within a reasonable timeframe, usually within 30 days.

Correction

If your personal information is incorrect or outdated, you can update most details directly in your account settings. For information you can't change yourself, contact support and we'll make the corrections.

Deletion

You can request deletion of your account and personal data by contacting support. We'll delete what we can, but we're legally required to keep certain records for tax, fraud prevention, and regulatory purposes. These records are stored securely and not used for any other purpose.

Accounts with pending withdrawals, active bonuses, or unresolved disputes can't be deleted until those matters are settled.

Marketing Opt-Out

You can stop receiving promotional emails by clicking the unsubscribe link in any marketing message or contacting support. You'll still get essential account emails like withdrawal confirmations and security alerts.

Restrict Processing

In some cases, you can ask us to limit how we use your data — for example, if you're disputing its accuracy or questioning whether we need it. Contact support to discuss specific restrictions.

Cookies and Tracking

What Cookies Do

Cookies are small text files stored on your device. We use them to keep you logged in between sessions, remember your language and currency preferences, track your session for security, analyze traffic and popular features, and prevent fraud by detecting unusual patterns.

Types of Cookies

Essential cookies keep the site working — login sessions, security features, basic functionality. Without these, you can't use the platform. Analytical cookies help us understand how people use the site so we can make improvements. These don't identify you personally.

Marketing cookies track whether you came from an ad or affiliate link. They help us understand which marketing channels work. You can block these without affecting site functionality.

Managing Cookies

Your browser settings let you block or delete cookies. Be aware that blocking essential cookies will break the site — you won't be able to log in or place bets. Blocking analytical and marketing cookies is fine and won't affect your experience.

Data Retention

We keep your personal information as long as your account is active. After you close your account, we retain data for the period required by law — typically five years for financial records, ID verification documents, and transaction history. This retention is legally mandated for tax, anti-money laundering, and dispute resolution purposes.

After the legal retention period expires, we permanently delete or anonymize your data. Anonymized data can't be traced back to you and may be kept indefinitely for statistical analysis.

International Data Transfers

WinWinBet operates internationally, so your data may be processed or stored in countries outside Kenya. We ensure that any country or service provider we use maintains adequate data protection standards. International transfers only happen when necessary for providing our services.

Children's Privacy

WinWinBet is only for adults aged 18 and over. We don't knowingly collect information from anyone under 18. If we discover that someone underage created an account, we'll close it immediately and delete their data.

If you're a parent or guardian and believe your child created an account with us, contact support immediately. We'll verify and take action.

Changes to This Policy

We may update this privacy policy when our practices change, new laws require it, or we add new features. Significant changes will be announced via email or a banner on the site. The "Last updated" date at the top shows when the current version took effect.

Continuing to use WinWinBet after a policy update means you accept the changes. If you don't agree with a new version, close your account and request data deletion.

Data Breaches

Despite our security measures, no system is completely immune to attacks. If we experience a data breach that compromises your personal information, we'll notify you as soon as we become aware of it and explain what data was affected, what we're doing to fix the problem, and what steps you should take to protect yourself.

We'll also notify relevant authorities as required by law. Transparent communication about security incidents is part of maintaining trust.

Third-Party Links

Our site may contain links to game providers, payment processors, or other external websites. Once you leave WinWinBet, this privacy policy no longer applies. Those sites have their own privacy policies. We're not responsible for how third-party sites handle your data.

Contact Us About Privacy

Questions about how we handle your data? Want to exercise your rights? Need clarification on any part of this policy? Email [email protected] with "Privacy" in the subject line. We'll respond promptly and work with you to address any concerns.

For formal complaints about data protection, you can also contact Kenya's data protection authority. We prefer to resolve issues directly, but you have the right to escalate if you're not satisfied with our response.

Summary

We collect the information needed to run an online casino securely and legally. We protect your data with industry-standard security. We don't sell your information. We give you control over your data through access, correction, and deletion rights. We're transparent about what we do and why.

This policy is written in plain language because we believe privacy shouldn't require a law degree to understand. If anything is unclear, ask us.