Privacy Policy

This Privacy Policy explains how WinShark, operated by GBL Solutions N.V. under a licence issued by the Curaçao Gaming Control Board, collects, uses, stores, and protects personal information belonging to players in Australia and other supported markets. It covers the categories of data gathered during registration and ongoing use of the account, the reasons that data is processed, the role of cookies, how information may be shared with third parties, retention practices, and the rights available to account holders. This document applies to all visitors and registered players of the domain winshark-casinoau.com, and it should be read alongside the site’s Terms and Conditions and Responsible Gaming information, which together set out the full relationship between WinShark and its players.

Scope and Acceptance

By visiting winshark-casinoau.com, creating an account, or otherwise using the services offered on the platform, a visitor agrees to the collection and processing of personal data as described in this policy. Players who do not agree with any part of this document should refrain from registering or should contact support to discuss closing an existing account. Because online gambling services are restricted to adults, this policy is written with the understanding that all account holders are at least 18 years of age, which is the minimum legal age for gambling in Australia and the age threshold enforced by WinShark globally regardless of local variation.

Information We Collect

WinShark collects several categories of information to operate the platform safely, verify identity, process payments, and comply with anti-money laundering obligations. Some data is provided directly by the player, while other data is generated automatically through use of the website or mobile interfaces.

Identity and verification documents are only requested as part of the standard know-your-customer process described in the Terms and Conditions, generally triggered before a first withdrawal is processed. This may include a colour scan of a passport or driver’s licence, a recent bank statement or e-wallet screenshot, and a utility bill no older than three months, with a selfie holding the document sometimes requested for larger payouts. These checks exist to confirm that the account holder is the rightful owner of the funds and that they meet the minimum age requirement.

How Personal Data Is Used

Personal information is processed for a defined set of operational and legal purposes rather than for open-ended use. These purposes include verifying that a player meets the minimum age and residency requirements, processing deposits and withdrawals through the payment channels available on the platform, detecting and preventing fraud or money laundering, maintaining the security of player accounts, communicating important account or security notices, and monitoring for signs of harmful gambling behaviour so that responsible gaming tools can be offered where appropriate. Where a player has opted in, contact data may also be used to send service updates; players who have not opted in will not receive such communications, and consent can be withdrawn at any time through account settings or by contacting support.

Financial and transaction data is additionally used to administer any bonus terms that apply to an account, since wagering activity, deposit amounts, and game participation determine whether bonus conditions such as wagering requirements have been met. For example, where a welcome package structured across multiple deposits is active on an account, transaction records are used to confirm that each deposit met the applicable minimum, that wagering was completed within the stated timeframe, and that maximum bet limits during an active bonus were respected. This processing is limited strictly to administering the account and does not extend to purposes unrelated to the gambling service.

Cookies and Similar Technologies

WinShark uses cookies and comparable tracking technologies to operate the website efficiently, remember player preferences, and support fraud prevention. Cookies are small text files stored on a device when a player visits the site, and they generally fall into a small number of categories.

Essential and security cookies cannot generally be disabled without affecting core functionality such as remaining logged in or completing transactions safely. Preference and analytics cookies can usually be controlled through browser settings, and most browsers allow visitors to view, delete, or block cookies, though doing so may limit certain features of the platform. WinShark does not use cookies to build advertising profiles that are sold to unrelated third parties, and any analytics data collected is used internally to understand how the service performs.

Sharing of Information with Third Parties

Personal data is shared only where necessary to deliver the service, meet legal obligations, or protect the platform and its players from fraud. Categories of recipients typically include payment processors and e-wallet providers who need transaction details to complete deposits and withdrawals, identity verification providers who assist with KYC checks, regulatory or law enforcement bodies where required by applicable law, and technology providers who support hosting, security, and game delivery. WinShark does not sell personal information to data brokers, and any third party that receives data on the platform’s behalf is expected to apply appropriate safeguards and to use the data only for the purpose for which it was shared. Because deposits and withdrawals must generally use the same method in a closed loop, payment providers involved in a transaction may retain records consistent with their own regulatory obligations, separate from WinShark’s own retention practices.

Data Retention

Personal and transactional data is retained for as long as necessary to fulfil the purposes described in this policy, including the period required to meet anti-money laundering and financial record-keeping obligations that commonly apply to licensed gambling operators. Identity verification documents collected during the KYC process are retained for the period required by applicable regulation and are not kept longer than necessary once an account is closed and any relevant legal retention period has passed. Where a player requests account closure, WinShark will retain only the data required to meet legal, tax, audit, or dispute-resolution obligations, and will otherwise take steps to remove or anonymise personal information that is no longer needed.

Player Rights

Players have a number of rights concerning their personal data, consistent with general data protection principles. These typically include the right to request access to the personal data held about them, the right to request correction of inaccurate information, the right to request deletion of data where retention is not otherwise required by law, the right to object to certain types of processing such as direct marketing, and the right to withdraw consent previously given for optional communications. Requests relating to these rights can be submitted through the account’s support channel, and WinShark will respond within a reasonable timeframe once the identity of the requester has been confirmed, which helps prevent unauthorised access to another person’s data. Where a request cannot be fulfilled in full, for example because financial records must be retained for compliance reasons, the reason for any limitation will be explained to the player.

Data Security

WinShark applies technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, or alteration. These measures include encryption of sensitive data in transit, restricted internal access to identity and financial records, and monitoring systems designed to detect unusual account activity. While reasonable safeguards are applied, no online service can guarantee absolute security, and players are encouraged to use strong, unique passwords, avoid sharing login credentials, and report any suspected unauthorised access to their account promptly through the support channel described below.

Responsible Gaming and Data

Behavioural data such as deposit frequency, session duration, and gameplay patterns may be used to support responsible gaming tools, including deposit limits, session reminders, and self-exclusion requests. This use of data is intended to help identify patterns that may indicate a player is at risk of harm and to make protective tools more effective, rather than to encourage continued play. Players in Australia must be at least 18 years old to hold an account, and age verification data collected during registration and KYC checks is a core part of ensuring this minimum age requirement is respected throughout the life of the account.

International Data Transfers

Because WinShark operates as an international platform with players across multiple jurisdictions, personal data may be processed or stored in countries other than the player’s country of residence, including where service providers or infrastructure are located outside Australia. Where such transfers occur, WinShark expects that appropriate safeguards are applied by the receiving party, consistent with the operator’s obligations under its Curaçao Gaming Control Board licence. Players who have specific questions about where their data is processed can raise this through the support channel for a general explanation.

Children and Minors

WinShark’s services are not intended for individuals under 18 years of age, and no personal data is knowingly collected from minors. Age verification checks conducted during registration and before withdrawals help enforce this restriction. If WinShark becomes aware that an account has been created by a person under the applicable minimum age, the account will be suspended and any associated data handled in line with applicable regulatory requirements, which may include restricting further access while the matter is reviewed.

Changes to This Policy

WinShark may update this Privacy Policy from time to time to reflect changes in the service, applicable law, or industry practice. Material changes affecting how personal data is used will generally be communicated to registered players through the account or via the contact details on file, and continued use of the platform after such changes take effect will be treated as acceptance of the revised policy. Players are encouraged to review this page periodically to stay informed about how their information is handled.

Contact and Complaints

Questions about this Privacy Policy, or requests relating to personal data, can be directed to WinShark’s support team, which is available through live chat and localised email support for players in Australia. Players who are not satisfied with how a data-related request has been handled may escalate the matter through the same support channel for further review, and where applicable, complaints may also be raised through the relevant regulatory body associated with the operator’s licence. WinShark aims to handle all privacy-related enquiries in a timely and transparent manner, consistent with its broader commitment to responsible operation of the platform detailed on WinShark and in the site’s other legal and player protection information.