Privacy Policy

This Privacy Policy explains how onlywin ("we", "us", or "our") collects, uses, discloses, and protects your personal information. It applies to all users of our website only-win.ca, including registered players and visitors. The policy is effective as of June 2025 and is designed to ensure compliance with Canadian privacy laws and relevant industry standards.

Who We Are

Operator Name: Goodfly N.V., operating under the brand onlywin

Legal Address and Headquarters: Abraham de Veerstraat 9, Curacao

Company Registration Number: 163359

Legal Entity Type: N.V.

Founded: 2023

Licensing: onlywin operates under the Curacao eGaming license number 365/JAZ Sub-License GLH-OCCHKTW0707052023, valid through 2025 and renewable annually. This license permits the operation of casino games only.

Payment Processing and Complaints Handling: Conducted by Lavencia LTD, a subsidiary based in Cyprus.

Data Protection Contact

For all privacy-related inquiries or data protection concerns, you may contact our Data Protection Officer or responsible department at:

Email: [email protected]
Phone: +1-599-973-70200 (Support Department)

What Personal Data We Collect

onlywin collects several categories of data to provide services securely and efficiently:

Personal Data: Full name, email address, phone number, date of birth, and other identification data necessary to verify user identity.
Technical Data: IP address, device information (such as model and operating system), browser type, and server logs to maintain security and improve user experience.
Payment Data: Banking details, credit/debit card information, transaction records, and billing addresses used strictly for processing deposits and withdrawals.
Behavioral Data: Betting history, game interaction data, clicks, session durations, and activity logs used for personalization and fraud prevention.
Cookies and Tracking Technologies: Information collected via session and persistent cookies, as well as tracking pixels and similar technologies, which help in authentication, analytics, and targeted advertising (with user consent).

Legal Basis for Processing

Our processing of your personal data is founded on several legal grounds, compliant with applicable Canadian privacy regulations:

User Consent: Where applicable, we obtain your explicit consent, especially for marketing communications or third-party data sharing.
Contractual Necessity: Processing is essential to establish and maintain your account, provide our casino services, handle transactions, and process payouts.
Legitimate Interests: We process data to safeguard the security of our platform, prevent and detect fraud, conduct analytics for improving services, and enhance user experience, provided such interests do not override your fundamental privacy rights.
Legal Compliance: We comply with legal obligations such as Know Your Customer (KYC) and Anti-Money Laundering (AML) verification, tax and regulatory reporting enforced by authorities.

Purpose of Processing

Your data is processed by onlywin solely for legitimate and transparent purposes, including but not limited to:

Provision, operation, and maintenance of our online casino services.
Improving service quality, website functionality, and player experience through data analytics.
Marketing and promotional communications, subject to your consent and preferences.
Compliance with legal and regulatory requirements, including identification and verification procedures.
Fraud detection and prevention, maintaining platform integrity and secure transactions.

Disclosure & Sharing

onlywin may disclose your personal data under limited circumstances to trusted third parties involved in delivering our services or fulfilling legal requirements:

Payment Partners: Banks, payment processors, and financial institutions solely to process deposits, withdrawals, and payment verification.
Service Providers: IT infrastructure providers, customer support services, analytics, and marketing vendors who assist in the operation of our platform under strict confidentiality agreements.
Regulators and Authorities: When required by law, regulatory bodies, tax authorities, or law enforcement agencies for compliance investigations and reporting.
Affiliates: Our subsidiaries and group companies involved in your account management or payment processing (e.g., Lavencia LTD in Cyprus).
Advertising Networks: Only with your explicit consent, for targeted advertising and performance measurement purposes.

International Transfers

Since onlywin is legally registered and operates under Curacao jurisdiction while serving Canadian clients, international data transfers occur as part of our business operations. Your personal data may be transferred to and processed in countries including Curacao and Cyprus (among others) where our affiliates and service providers are located.

We ensure that all international transfers comply with applicable legal safeguards, including:

Standard Contractual Clauses (SCCs) approved by relevant supervisory authorities;
Data processing agreements with third-party providers strictly adhering to privacy and security standards;
Regular audits and controls to maintain data confidentiality and integrity across borders.

Data Retention

onlywin retains your personal information only for as long as necessary to fulfill the purposes of processing, including legal, regulatory, and contractual obligations. The retention periods by category are:

Active Account Data: Retained for the duration of your account activity;
Closed Accounts: Personal data will be retained for no more than five (5) years after account closure to comply with legal and regulatory requirements, including AML laws;
Transactional and Payment Data: Stored for a minimum legally required period and up to five (5) years for audit and dispute resolution purposes;
Marketing Data: Retained only while your consent remains valid or until you opt-out;
Cookies and Tracking Information: Retained per their lifetime as specified in users' browser settings or until you delete them.

Personal data may also be deleted upon your verified request, provided it does not conflict with legal retention obligations or ongoing investigations.

Your Rights

As a user located in Canada, you have the following rights regarding your personal data processed by onlywin:

Access: You may request confirmation on whether your data is processed and access the personal data we hold about you.
Correction: You can request correction of inaccurate or incomplete personal data at any time.
Deletion: Subject to legal exceptions, you may request deletion of your personal data, especially after account closure.
Restriction: You may request restriction of processing under certain conditions, such as contesting data accuracy.
Objection: You have the right to object to data processing based on legitimate interests or marketing purposes.
Data Portability: You can request a copy of your personal data in a structured, commonly used electronic format suitable for transfer.
Withdrawal of Consent: You may withdraw any consent previously given for marketing or other non-essential processing without affecting the lawfulness of prior processing.

To exercise these rights, please contact us via the provided contact details. We will respond in accordance with applicable laws within reasonable timeframes.

Cookies & Tracking Technologies

onlywin uses cookies and similar tracking technologies to enhance your experience and analyze site usage. Types of cookies we employ include:

Session Cookies: Temporary cookies deleted when you close your browser, used for authentication and maintaining session state.
Persistent Cookies: Remain on your device for a specified period to remember preferences, login details, or security tokens.
Third-Party Cookies: Set by third-party partners for analytics, advertising, or social media integration, used only with your consent.

The purposes of these cookies include:

Facilitating secure login and access to account features;
Collecting anonymized analytics data to optimize website performance and understand user behavior;
Enabling personalized marketing and advertising, strictly subject to your explicit consent;
Supporting compliance with legal and security standards.

You may manage or disable cookies by adjusting your browser settings or through in-site cookie preference panels. Disabling certain cookies may impact website functionality or your user experience.

Data Security

onlywin prioritizes protecting your personal data using robust technical and organizational measures, including:

SSL Encryption: All data transmitted between your browser and our servers is secured using industry-standard Secure Socket Layer (SSL) encryption protocols.
Access Controls: Strict access restrictions limit data access only to authorized personnel who require it to perform their duties.
Regular Security Audits: Ongoing penetration testing and vulnerability assessments to identify and mitigate potential risks.
Data Encryption: Sensitive stored personal data, such as payment information, is encrypted at rest.
Staff Training: Employees receive continuous training on data privacy, security policies, and compliance requirements.

These measures are designed to prevent unauthorized access, loss, misuse, or alteration of personal data entrusted to onlywin.

Complaints & Contacts

If you have any questions or concerns regarding the handling of your personal data or wish to file a complaint, please contact onlywin's Data Protection Officer or support team:

Email: [email protected]
Phone: +1-599-973-70200

We take all complaints seriously and will investigate them promptly and thoroughly. If you remain unsatisfied, you have the right to escalate the matter to the relevant Canadian privacy supervisory authority.

Updates

onlywin may update this Privacy Policy from time to time to maintain compliance with legal requirements or reflect operational changes. Any material updates will be notified to you via our website at https://only-win.ca and, when appropriate, through email communications.

The date of the last revision is June 2025.