Privacy Policy

This Privacy Policy explains how Wolf Winner, operating the online casino service available at wolfwinnerbet-au.com and related domains connected with the Wolf Winner project (including wolfwinner.fun), collects, uses, discloses and protects your personal information. It applies to players, registered account holders, and visitors who access our websites, contact us, or otherwise interact with our services.

We provide this notice to help you understand our data-handling practices, your privacy rights, and the choices you can make, in line with internationally recognised standards such as the Australian Privacy Principles, the EU General Data Protection Regulation (GDPR) and Mexican privacy rules, where applicable. Nothing in this Privacy Policy affects the status of Wolf Winner as an offshore gambling service that is considered an illegal offshore operation for Australian residents under local gambling law.

By using Wolf Winner services via wolfwinnerbet-au.com, you acknowledge that you have read and understood this Privacy Policy.

Effective date: 1 February 2026

Who We Are

For the purposes of this Privacy Policy, references to "Wolf Winner", "we", "us" or "our" refer to the offshore online casino platform operating the website wolfwinnerbet-au.com associated with the Wolf Winner project.

As at February 2026, the platform's Terms and Conditions and footer information do not clearly disclose a verified legal company name, registered office address, or company registration number. Historically, the operator has claimed to hold a sub-licence under Curaçao eGaming (Master Licence 1668/JAZ), but this claim cannot be verified in the official Curaçao registry and there is no active licence validator link on the site. The service is effectively self-regulated and has no listed external alternative dispute resolution (ADR) body.

Despite this lack of corporate transparency, Wolf Winner designates the following contact channel for privacy and data protection matters:

Data protection contact (DPO function): [email protected] (please include "Privacy" in the subject line)

All communications regarding this Privacy Policy, your personal data, or the exercise of your privacy rights should be sent to this email address. We will route them internally to personnel responsible for data protection compliance.

What Personal Data We Collect

We collect and process different categories of personal information when you visit or use Wolf Winner services via wolfwinnerbet-au.com and related domains. The main categories are:

Identification and contact data: full name, username, password (stored in hashed form), email address, phone number, country of residence, date of birth, and verification documents (such as ID card, passport, driving licence, proof of address) that may be requested for KYC/AML checks, especially once cumulative withdrawals exceed the equivalent of €2,000, as set out in our Terms and Conditions.
Account and gameplay data: account ID, registration date, login history, session information, language and currency preferences, bonuses claimed, wagering activity, game selections, bet amounts, wins and losses, transaction history and any limits or self-exclusion settings you apply.
Payment and financial data: partial payment card details (card type, masked card number), bank account or e-wallet identifiers, payment tokens provided by payment processors, deposit and withdrawal records, chargeback information and related correspondence. We do not store full card numbers or CVV codes; these are processed by third-party payment providers.
Technical and usage data: IP address, approximate geolocation derived from your IP, device identifiers, device type, operating system, browser type and version, referral URLs, clickstream data, pages visited, time and date of access, actions taken on the site, and technical logs used for security, fraud detection and service optimisation.
Behavioural and profiling data: gameplay patterns, frequency and duration of sessions, preferred games, responsiveness to promotions, responsible gambling behaviour (including self-exclusion or time-out usage), and risk indicators generated by anti-fraud and anti-money-laundering tools.
Communications data: content of emails and messages you send to us (including to [email protected]), internal chat transcripts, feedback forms (where available), support tickets, and records of how we responded.
Cookies and similar technologies: unique identifiers stored by cookies, web beacons, local storage, software development kits (SDKs) and similar tracking tools that help us recognise your browser or device, remember your preferences, secure your account, conduct analytics, and, where permitted, deliver targeted marketing.

We may also derive or infer certain information (for example, risk profiles, preferred game categories, or suspected duplicate accounts) from the data we directly collect and from patterns in your behaviour.

Legal Basis for Processing

Because Wolf Winner operates offshore and serves users in multiple jurisdictions, we apply legal grounds for processing that are broadly consistent with international standards (such as the Australian Privacy Principles, GDPR and Mexican privacy law) even though our primary regulatory oversight is not clearly defined. Depending on the situation, we rely on one or more of the following bases:

Performance of a contract and pre-contractual steps: We process your identification, contact, account, gameplay and payment data because it is necessary to create and manage your account, provide you with casino services, process deposits and withdrawals, verify your eligibility to play, apply bonuses, and respond to your requests. Without this data, we cannot provide the services you request.
Compliance with legal and regulatory obligations: We process certain identification, payment, transactional and behavioural data to comply with obligations under anti-money-laundering (AML), counter-terrorist financing (CTF), fraud prevention and other financial-crime regulations that may apply in our operating jurisdiction(s). This includes conducting KYC checks once cumulative withdrawals exceed specified thresholds (such as €2,000 equivalent) and keeping records for legally mandated retention periods. We may also process data to comply with lawful requests from regulators or law enforcement bodies.
Legitimate interests: We process technical, usage, behavioural and communications data to:
- maintain the security and integrity of our platform;
- detect and prevent fraud, abuse, bonus misuse, chargebacks and other illegal or harmful activities;
- understand how our services are used, improve performance, develop new features and tailor content;
- enforce our Terms and Conditions and defend our legal rights.
Where required by local law, we balance these interests against your fundamental rights and freedoms and apply safeguards such as pseudonymisation and access controls.
Consent: In specific situations, we rely on your consent, for example:
- sending you direct electronic marketing (email, SMS, push notifications) where consent is required;
- using certain non-essential cookies or similar tracking technologies for advertising or personalised offers;
- processing certain sensitive or optional data that you choose to provide (for example, self-exclusion notes about your health or gambling behaviour).
You may withdraw your consent at any time, as described below, without affecting the lawfulness of processing based on consent before its withdrawal.

Purpose of Processing

We collect and use personal data for clearly defined purposes. The main purposes are:

Providing and operating the casino services: creating and managing user accounts; enabling deposits, wagers and withdrawals; resolving technical issues; processing bonuses and loyalty rewards; providing customer support; and administering promotions and tournaments.
Identity verification and regulatory compliance: performing KYC/AML and age verification checks; monitoring transactions and gameplay for suspicious activity; complying with reporting and record-keeping obligations; and enforcing our Terms and Conditions.
Service improvement and analytics: analysing site usage, game performance, player behaviour and marketing campaign effectiveness; testing new features; improving usability; and tailoring the user interface and content according to aggregated usage patterns.
Personalisation and marketing: subject to your preferences and applicable law, providing personalised recommendations, targeted bonuses and offers, VIP or loyalty programs, newsletters and promotional communications via email, SMS, on-site messages or push notifications.
Fraud prevention and security: protecting our platform and users against account takeover, multi-accounting, collusion, bonus abuse, payment fraud, hacking attempts and other security threats; enforcing IP and content rights; and logging access for security auditing.
Responsible gambling: administering self-exclusion, time-outs and limits; analysing behavioural indicators that may suggest potentially problematic gambling; and, where appropriate, contacting you about responsible gambling tools. (Note: our responsible gambling tools are internal; we do not integrate with Australian national systems such as BetStop.)
Legal defence and business operations: handling complaints and disputes; responding to legal claims or information requests; maintaining business accounting records; conducting internal audits; and managing corporate transactions (for example, a merger or sale of assets).

Disclosure & Sharing

We treat your personal information as confidential and only share it with third parties where necessary for the purposes described above, where required by law, or where you have given your consent. Typical categories of recipients include:

Payment service providers and banks: to process deposits, withdrawals, chargebacks and fraud checks. These providers may be located in various jurisdictions and have their own privacy obligations.
Technical and operational service providers: providers of hosting, cloud infrastructure, content delivery networks, security and anti-fraud tools, KYC/AML verification services, analytics platforms, email and SMS gateways, customer support software and IT maintenance services.
Marketing and affiliate partners: advertising networks, affiliate programs and campaign management tools that help us promote our services and measure performance. We share data with these partners only where permitted by law, typically in pseudonymised or aggregated form, and where required based on your consent and marketing preferences.
Corporate counterparts: actual or potential buyers, investors, advisers or other parties involved in a corporate transaction (such as a sale, merger or restructuring), subject to appropriate confidentiality obligations and, where necessary, data protection safeguards.
Regulators, supervisory bodies and law enforcement: competent authorities in our operating jurisdiction(s) and any other country where we are legally obliged to disclose data, for example in connection with anti-money-laundering enforcement, fraud investigations, or regulatory inquiries. This may include communications with authorities such as the Australian Communications and Media Authority (ACMA) or equivalent bodies where they lawfully request information.
Professional advisers: lawyers, auditors, consultants and accountants who assist us in meeting our legal, financial and operational obligations, under strict confidentiality undertakings.

We do not sell your personal data in the sense of transferring it for monetary consideration as a standalone asset. However, some sharing with advertising or analytics partners may constitute a "sale" or "sharing" under certain local laws. Where such laws apply, we will endeavour to provide appropriate opt-out mechanisms.

International Transfers

Wolf Winner is an offshore operation and uses infrastructure and service providers located in multiple countries. As a result, your personal information may be transferred to and processed in countries outside your country of residence, including but not limited to Curaçao, member states of the European Economic Area (EEA), the United Kingdom, the United States and other jurisdictions where our technical and payment partners are based.

These countries may have data protection laws that differ from those in your country and may not be recognised as providing an equivalent level of protection. To help protect your information, we implement appropriate safeguards, including:

Contractual protections: where required by law (for example, for transfers from the EEA or the UK), we use standard contractual clauses or equivalent data transfer agreements approved by relevant regulators.
Organisational and technical measures: access controls, encryption, logging and internal policies designed to ensure that service providers handle personal data securely and only for authorised purposes.

If you are located in Australia, you acknowledge that by using Wolf Winner services via wolfwinnerbet-au.com, your personal information will be disclosed to overseas recipients who may not be subject to the Australian Privacy Act 1988 or the Australian Privacy Principles. By continuing to use the site, you consent to this cross-border disclosure and understand that, to the extent permitted by law, we may not be liable under the Australian Privacy Act for breaches by some overseas recipients.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes and to enforce our agreements. Retention periods may vary depending on the type of data and legal requirements in the applicable jurisdiction(s). As a general guide:

Account and identity data: identification documents, account details and core KYC records are typically retained for the duration of your relationship with us and for a period of up to five (5) to seven (7) years after account closure, in line with common anti-money-laundering and record-keeping obligations.
Transactional and payment data: deposit, withdrawal and betting records are retained for up to seven (7) years after the relevant transaction, to support regulatory reporting, audits, financial accounting and dispute handling.
Technical logs and security data: security logs, device identifiers and IP addresses used for fraud prevention and security analysis are generally kept for twelve (12) to twenty-four (24) months, unless longer retention is required in connection with ongoing investigations.
Marketing data: information about your marketing preferences and communications is kept for as long as you remain subscribed and for a limited period (usually up to two (2) years) after you opt-out, to demonstrate compliance with your request and to avoid re-contacting you inadvertently.
Complaint and dispute records: correspondence and materials related to complaints, chargebacks or legal claims are retained for as long as reasonably necessary to manage and document the issue, usually up to seven (7) years after final resolution.

When data is no longer required for any permitted purpose, we will either securely delete it, anonymise it so that it can no longer be associated with you, or, if deletion is not technically feasible within a reasonable period, isolate it from further active use. If applicable law requires us to retain data for a longer period, we will comply with that requirement.

Your Rights

Depending on your place of residence and applicable law, you may have specific rights in relation to the personal data we hold about you. Although Wolf Winner operates offshore and is not clearly established under EU or Mexican jurisdiction, we aim to handle requests in a way that aligns with the principles of the GDPR and Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), to the extent reasonably practicable.

Core rights (access, correction, deletion, restriction, objection)

Access: You can request confirmation as to whether we process your personal data and obtain a copy of the main categories of personal data we hold about you, along with information on how we use it.
Correction/Rectification: You can ask us to correct inaccurate or incomplete personal data. In many cases you can do this directly in your account settings; for verification-sensitive information, we may need supporting documentation.
Deletion/Cancellation ("Right to be forgotten" / "Cancelación"): You can request the deletion of your personal data where there is no compelling reason for us to continue processing it (for example, where data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal ground). We may retain certain data where required by law (for example, AML-related records) or where necessary to establish, exercise or defend legal claims.
Restriction: You can request that we temporarily restrict processing of your data (other than storage) in certain situations, for example while we verify its accuracy or assess an objection you have raised.
Objection/Oposición: Where we process your data based on legitimate interests or for direct marketing, you may object. We will stop processing for direct marketing immediately upon your objection. For other legitimate interests, we will cease processing unless we demonstrate compelling legitimate grounds.

Portability, consent and marketing preferences

Data portability: Where technically feasible and applicable under local law (for example under GDPR), you may request to receive certain personal data that you have provided to us in a structured, commonly used, machine-readable format and ask us to transmit it to another controller.
Withdrawal of consent: Where processing is based on your consent (for example, certain marketing communications or optional data), you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing already carried out. You can usually:
- click "unsubscribe" links in marketing emails;
- adjust your marketing preferences in your account, if available; or
- email us at [email protected] with your request.

Mexican ARCO alignment and additional notes

If you are located in Mexico, you may have ARCO rights (Acceso, Rectificación, Cancelación y Oposición) under the LFPDPPP. The rights described above are intended to be consistent with these ARCO rights. You may exercise them using the procedure described below, and you also have the right to lodge a complaint with the Mexican data protection authority (INAI).

How to exercise your rights

Submit your request: Send an email to [email protected] from the email address associated with your account, clearly specifying:
- your full name and username;
- the right(s) you wish to exercise; and
- any relevant details that will help us locate your data.
Verify your identity: To protect your privacy, we may ask you for additional information or documentation to verify your identity before acting on your request, especially for access, deletion or portability.
Response timeframe: We aim to respond to your request within 30 days of receipt. In complex cases or where we receive multiple requests, we may extend this period in accordance with applicable law, and we will inform you of any extension.
Fees: We will handle your request free of charge, unless it is manifestly unfounded or excessive (for example, repeated requests). In such cases, we may charge a reasonable fee or refuse to act on the request, as permitted by law.

Please note that because Wolf Winner is self-regulated and operates offshore, the practical enforceability of some rights may be limited by applicable law and by our legal obligations (for example, AML record-keeping). However, we will use reasonable efforts to honour your rights in good faith.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies on Wolf Winner websites (including wolfwinnerbet-au.com) to ensure basic functionality, enhance your user experience, perform analytics and, where permitted, deliver targeted promotions.

Types of cookies we use

Strictly necessary (session) cookies: These cookies are essential for the operation of the site and to enable core functions such as logging in, maintaining your session, and processing transactions. They are usually stored only for the duration of your session and are deleted when you close your browser.
Functional (persistent) cookies: These remember your preferences (such as language, currency or display settings) and help us provide enhanced, personalised features. They may remain on your device for a defined period or until you delete them.
Analytics and performance cookies: These cookies collect aggregated information about how visitors use our site (for example, pages viewed, time spent, game popularity). We use this data to understand usage patterns and improve performance and content. Third-party analytics providers may set these cookies on our behalf.
Advertising and targeting cookies: Where permitted by law and subject to your consent, these cookies track your browsing behaviour on our site (and possibly on others) to show you more relevant ads and promotions, measure campaign effectiveness, and limit the number of times you see a particular advertisement.

Managing cookies

Browser settings: Most browsers allow you to block or delete cookies, or to receive a warning before a cookie is stored. Please refer to your browser's help or settings section for instructions. Blocking certain cookies may affect the functionality of the site.
On-site controls: Where available, our site may present a cookie banner or preferences panel that allows you to accept or reject non-essential cookies (such as analytics and advertising cookies). Your choices will be stored in a functional cookie.
Third-party tools: Some third-party advertising networks offer opt-out tools for interest-based advertising. These options may vary by region and provider.

Data Security

We take the security of your personal information seriously and implement a combination of technical, organisational and administrative measures designed to protect it against unauthorised access, loss, misuse, alteration or disclosure. These measures include, among others:

Encryption: use of industry-standard TLS (Transport Layer Security) 1.2 or higher to encrypt data in transit between your browser and our servers; encryption or pseudonymisation of sensitive data at rest, where technically feasible.
Access controls: role-based access to personal data, granted only to personnel and service providers who need it for legitimate business purposes; authentication mechanisms and, where appropriate, multi-factor authentication for administrative access.
Infrastructure security: hosting on reputable data centres and cloud providers that implement robust physical and network security, including firewalls, intrusion detection and prevention systems, and regular security patching.
Monitoring and audits: logging and monitoring of critical systems and transactions; periodic internal reviews of our security practices and privacy controls; and risk assessments to identify and address emerging threats.
Staff awareness and confidentiality: staff with access to personal data are subject to confidentiality obligations and receive training on data protection and security practices relevant to their roles.
Incident response: procedures to detect, assess and respond to suspected data breaches, including containment measures, technical investigation, remediation and, where legally required, notification to affected individuals and relevant authorities under applicable breach notification regimes (such as Australia's Notifiable Data Breaches scheme or equivalent frameworks).

We endeavour to align our practices with recognised international information-security standards (such as ISO/IEC 27001 and SOC 2) as guiding frameworks, although Wolf Winner is not formally certified under these standards as at February 2026. No system can be guaranteed to be 100% secure, but we continuously work to maintain and improve the security of our services.

Complaints & Contacts

If you have questions about this Privacy Policy, concerns about how your personal data is handled, or wish to raise a complaint, you can contact us using the details below.

How to contact us

Primary privacy contact (DPO function): [email protected]

At this time, we do not provide a verified physical mailing address or phone number for privacy matters. All communications should therefore be directed to the email address above.

Internal complaint procedure

Submit your complaint: Email [email protected] with:
- your full name and username;
- the email linked to your account;
- a clear description of your concern (for example, suspected misuse of data, security issue, failure to honour a rights request); and
- any supporting documentation or screenshots.
Acknowledgement: We aim to acknowledge receipt of your complaint within seven (7) business days.
Investigation and response: We will investigate your complaint and aim to provide a substantive response within thirty (30) days. If we need more time due to complexity or the need to consult third parties, we will inform you of the delay and provide an updated timeline.
Escalation: If you are not satisfied with the initial response, you may request that your complaint be escalated within our organisation. We will review the matter again and provide a final position where possible.

Please note that Wolf Winner does not use an external ADR body and is effectively self-regulated. This means that all privacy and gambling-related complaints are handled internally via the above process.

Complaints to supervisory authorities

Depending on your location, you may have the right to lodge a complaint with a data protection or privacy authority in your country of residence or place of work. Examples include:

Australia: The Office of the Australian Information Commissioner (OAIC). Visit https://www.oaic.gov.au for current contact details and complaint procedures.
Mexico: The National Institute for Transparency, Access to Information and Personal Data Protection (INAI). Visit https://www.inai.org.mx for information on how to exercise ARCO rights and file complaints.
European Union / EEA: If local law applies and you are in the EU/EEA, you may contact your local data protection authority. Contact details are typically available on the authority's official website.

Because Wolf Winner is an offshore, self-regulated operation with opaque corporate details, the jurisdiction and practical effectiveness of regulatory recourse may vary. However, you remain free to seek advice and file complaints with the authority you consider competent.

Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal or regulatory developments, or improvements to our services. When we make changes, we will revise the "Last updated" date at the end of this document.

Notification of changes

Minor changes: For non-material updates (for example, clarifications or corrections), we may simply post the updated policy on https://wolfwinnerbet-au.com/en/privacy-policy without additional notice.
Material changes: For changes that significantly affect how we process your personal data or your rights (for example, new processing purposes, new categories of recipients or substantial changes to retention periods), we will, where reasonably practicable:
- notify you by email to the address registered in your account; and/or
- display a prominent notice or banner on the website and/or in your account dashboard.
Advance notice: Where feasible and required by law, we will provide at least 30 days' notice before material changes take effect, so that you have time to review the updated policy.

Your options

If you do not agree with the updated Privacy Policy, you should stop using Wolf Winner services and, where applicable, request account closure by contacting [email protected]. Continuing to use the site after the effective date of changes will be taken as your acknowledgement of the updated policy, to the extent permitted by law.

We may keep previous versions of this Privacy Policy for record-keeping and regulatory purposes and will provide a summary of material changes upon reasonable request.

Last updated: February 2026