Ninewin logo

Privacy Policy

This privacy policy outlines how Ninewin collects, uses, stores, and protects your personal information when you access and use our online gaming platform. We are committed to safeguarding your privacy and ensuring transparency in all data processing activities. This document explains your rights regarding your personal data and how we comply with applicable data protection regulations in the United Kingdom.

Information We Collect

When you register and use the Ninewin platform, we collect various types of information necessary to provide our services and maintain regulatory compliance. Personal data collected includes your full name, date of birth, residential address, email address, and telephone number during account registration. We also gather payment information such as card details, bank account numbers, and transaction history to process deposits and withdrawals securely.

Our systems automatically collect technical data including IP addresses, device information, browser type, operating system, and cookies to enhance user experience and platform security. Gaming activity data such as game preferences, betting patterns, session duration, and win/loss records are recorded for responsible gambling monitoring and service improvement purposes. Identity verification documents including passport copies, utility bills, and photographic identification are collected to comply with Know Your Customer (KYC) and anti-money laundering requirements.

Data CategoryInformation TypesPurpose
Personal DetailsName, address, date of birth, contact detailsAccount creation and verification
Financial InformationPayment methods, transaction historyProcessing deposits and withdrawals
Technical DataIP address, device ID, cookiesPlatform functionality and security
Gaming RecordsBet history, game preferences, session dataService provision and responsible gambling
Verification DocumentsID copies, proof of addressRegulatory compliance and fraud prevention

How We Use Your Information

Ninewin processes your personal data for specific lawful purposes related to operating our gaming platform and meeting legal obligations. We use your information to create and manage your gaming account, verify your identity and age to prevent underage gambling, and process financial transactions including deposits, withdrawals, and bonus payments. Your data enables us to provide customer support services, respond to enquiries, and resolve technical issues or disputes.

We analyse gaming behaviour to implement responsible gambling measures, identify problem gambling indicators, and enforce deposit limits or self-exclusion requests. Marketing communications, including promotional offers and newsletters, are sent to users who have provided consent, with opt-out options always available. Security measures utilise your data to detect fraudulent activity, prevent money laundering, and protect against unauthorised access to accounts.

Regulatory compliance requires us to maintain records for tax purposes, report suspicious activities to relevant authorities, and respond to lawful requests from gambling commissions or law enforcement agencies. We also conduct internal analytics to improve platform performance, develop new features, and enhance user experience based on aggregated usage patterns.

Data Sharing and Third Parties

Ninewin shares your personal information with selected third parties only when necessary to deliver our services or fulfil legal requirements. Payment processors receive financial data to facilitate secure transactions, whilst identity verification services access your documents to conduct KYC checks. Our technology partners, including hosting providers and software developers, process technical data to maintain platform infrastructure and functionality.

Regulatory bodies such as the UK Gambling Commission receive information when required by licensing conditions or legal obligations. We may share data with law enforcement agencies when presented with valid legal requests or court orders. Marketing partners receive limited anonymised data for advertising purposes only with your explicit consent, and you retain the right to withdraw this consent at any time.

All third-party service providers are contractually bound to protect your data and use it solely for specified purposes. We conduct due diligence on partners to ensure they maintain adequate security standards and comply with data protection regulations. No personal information is sold to third parties for their independent marketing purposes.

Third Party CategoryData SharedPurpose
Payment ProcessorsFinancial details, transaction dataProcessing payments securely
Verification ServicesIdentity documents, personal detailsAge and identity verification
Technical ProvidersUsage data, technical informationPlatform maintenance and hosting
Regulatory AuthoritiesAll relevant data upon requestLicence compliance and legal obligations
Marketing PartnersAnonymised aggregated dataAdvertising campaigns (with consent)

Data Security and Retention

We implement comprehensive security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. Ninewin employs industry-standard encryption protocols for data transmission and storage, including SSL/TLS encryption for all communications between your device and our servers. Access to personal data is restricted to authorised personnel who require the information to perform their duties, and all staff undergo regular data protection training.

Our systems incorporate firewalls, intrusion detection mechanisms, and regular security audits to identify and address vulnerabilities. Multi-factor authentication protects account access, whilst automated monitoring systems detect suspicious login attempts or unusual account activity. Payment information is tokenised and processed through PCI DSS compliant payment gateways to ensure financial data security.

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy or to comply with legal requirements. Active account data is maintained throughout your relationship with Ninewin and for a period following account closure as required by gambling regulations. Specific retention periods vary by data type: financial records are kept for seven years to meet tax and anti-money laundering obligations, whilst marketing consent records are retained until withdrawn.

Data TypeRetention PeriodReason
Account InformationDuration of account plus 7 yearsRegulatory requirements
Financial Records7 years from final transactionTax and AML compliance
Gaming HistoryDuration of account plus 7 yearsDispute resolution and compliance
Marketing ConsentUntil consent withdrawnGDPR requirements
Technical Logs12 monthsSecurity and troubleshooting

Your Privacy Rights

Under UK data protection legislation, you possess specific rights regarding your personal information held by Ninewin. You have the right to access your personal data and obtain confirmation of what information we process, the purposes of processing, and details of any third-party recipients. The right to rectification allows you to request correction of inaccurate or incomplete personal data in our records.

You may exercise your right to erasure, commonly known as the right to be forgotten, by requesting deletion of your personal data when it is no longer necessary for the purposes collected or when you withdraw consent. However, this right is subject to limitations where we must retain data for legal compliance or legitimate business purposes. The right to restrict processing enables you to limit how we use your data in specific circumstances, such as whilst contesting accuracy or during investigations.

Data portability rights allow you to receive your personal information in a structured, commonly used format and transmit it to another service provider. You can object to processing based on legitimate interests, including profiling and direct marketing activities. Withdrawal of consent is available for any processing activities that rely on your explicit consent, though this does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, contact our data protection officer using the details provided on our website. We respond to all requests within one month, though complex requests may require an additional two months with prior notification. If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority for data protection matters.

Frequently Asked Questions