Introduction
Iplwin operates online betting and gaming services. This Privacy Policy explains what personal data we collect, why we collect it, how we process it, with whom we share it, how long we keep it, and the rights you have in relation to your data.
Data Controller and Contact
Iplwin acts as the data controller for your personal data in connection with the Services. If you have questions or requests regarding your data, contact our privacy team at [email protected].
Scope and Amendments
This Policy applies to all personal data processed by Iplwin in relation to the Services. We may update the Policy from time to time. We will notify you of material changes and you should review the Policy periodically. Continued use of the Services after changes constitutes acceptance of the updated Policy.
What Personal Data We Collect
- Identity and contact information: name, date of birth, address, email, phone number.
- Account and verification data: username, password, proof of identity, verification documents, payment method details.
- Financial data: funds, deposits, withdrawals, transaction history, source of funds information as required for AML/KYC.
- Usage data: login times, device type, IP address, browser, pages visited, features used, betting and gaming activity.
- Transactions and communications: messages with support, chat transcripts, and records of communications related to the Services.
- Marketing preferences: consent status and opt‑out settings for marketing communications.
- Risk and compliance data: information collected for AML/KYC checks, fraud prevention, self‑exclusion, and responsible gaming measures.
How We Collect Data
- Directly from you when you register, place bets, fund your account, or contact us.
- Automatically through your use of the Services (for example, device data, activity logs, and location where permitted by law).
- From payment processors and identity verification service providers as part of identity, fraud prevention and AML/KYC checks.
- From publicly available sources or third‑party partners where legally permissible and with your consent where required.
Purposes of Data Processing
- Providing and maintaining the Services, processing bets and transactions, and managing your account.
- Identity verification, security, fraud prevention, and risk assessment.
- Compliance with legal and regulatory obligations, including AML/KYC requirements and reporting obligations.
- Customer support, service improvements, and to respond to inquiries and requests.
- Marketing communications where you have consented or where permitted by applicable laws, and to tailor content to your interests.
- Data analytics, auditing, and financial reporting to ensure integrity of the Services.
Legal Bases for Data Processing
- Contractual necessity: processing required to provide the Services and fulfill contractual obligations.
- Legitimate interests: to improve Services, detect and prevent fraud, and ensure a safe operating environment, balanced against your rights.
- Legal obligations: AML/KYC, anti‑fraud, tax and reporting requirements under applicable law.
- Consent: for direct marketing and where required by law.
Cookies and Tracking Technologies
We use cookies and similar technologies to operate the Services, personalize experiences, analyze usage, and support marketing efforts. Certain cookies are strictly necessary for the site to function; others enhance performance or track preferences. You can manage cookies in your browser settings, but restricting cookies may limit feature availability.
Data Sharing and Transfers
- Service providers and payment processors: to enable payments, identity verification, and fraud prevention.
- Affiliates and business partners: for operational purposes and to improve the Services, where permitted by law.
- Regulators and law enforcement: when required by law or to protect our rights or the rights of others.
- Corporate transactions: in the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.
- Marketing communications: with your consent or as otherwise permitted by law.
International Data Transfers
Your personal data may be processed in jurisdictions outside your country of residence. We will ensure an adequate level of protection through lawful transfer mechanisms and consistent with applicable data protection laws.
Retention of Personal Data
We retain personal data for as long as necessary to provide the Services and fulfill the purposes described in this Policy, including for AML/KYC and regulatory compliance. In general, transactional data and other records are kept for at least the period required by applicable law, and in any event no longer than necessary. When the data is no longer required, it will be securely deleted or anonymized.
Security of Personal Data
We implement technical and organizational measures appropriate to the risk of processing, including access controls, encryption in transit and at rest where feasible, regular security assessments, and ongoing staff training. We regularly review and update security measures to protect data from unauthorized access, disclosure, alteration, and destruction.
Your Rights
- Access: request a copy of your personal data processed by Iplwin.
- Rectification and erasure: correct inaccurate data and request deletion where permissible by law.
- Restriction and objection: limit processing or object to specific processing activities, including marketing.
- Portability: receive your data in a structured, commonly used, machine‑readable format and transmit it to another controller where feasible.
- Withdraw consent: withdraw consent for processing where consent is the basis for processing; withdrawal will not affect prior processing.
- Automated decisions: request human review of decisions with legal or similarly significant effects where automated processing is used.
Marketing Communications
You may opt out of receiving marketing communications at any time by using the unsubscribe option in the message or by contacting [email protected]. It may take up to a reasonable period to implement opt‑out across all channels.
Data Minimization and Special Categories
We limit the collection and processing of data to what is necessary for the purposes described in this Policy. Special category data is only collected where required by law or to comply with AML/KYC obligations, and only when there is a lawful basis to do so.
Children and Minors
The Services are not directed to individuals under the applicable minimum age. We do not knowingly collect personal data from minors. If we learn that we have collected personal data from a minor, we will take steps to delete it in accordance with applicable law.
Automated Decision‑Making and Profiling
We may perform automated processing, including profiling, to assess risk, detect fraud, and verify identity. Human review remains integral to final decisions that significantly affect you, such as account restrictions or terminations.
Compliance, Logging and Monitoring
We monitor activities to ensure compliance with legal and regulatory requirements and to protect the integrity of the Services. We may also conduct audits and investigations where needed.
Changes to this Policy
We will post changes to this Privacy Policy and, where required by law, obtain your consent for material changes. We encourage you to review the Policy periodically.
Governing Law and Dispute Resolution
This Policy is governed by the data protection laws applicable to Iplwin’s licensed operations. Any disputes arising from this Policy will be resolved under the applicable jurisdiction’s legal framework.
Contact Information
For questions, requests, or complaints regarding your personal data, please contact [email protected]. If you wish to escalate your concern, you may reference the supervisory authority responsible for data protection in the jurisdiction where Iplwin operates.
