Last updated: July 22, 2026

Privacy Policy

This page explains how Only Win collects, uses, stores, and protects personal data submitted by players registered on the Canadian platform. Understanding these terms helps account holders make informed decisions about the information they share when signing up, verifying identity, or using casino services.

What Information Only Win Collects

Only Win gathers personal data at several points during a player’s lifecycle on the platform. At registration, the system collects an email address, a password, and basic profile details including first name, last name, date of birth, and gender. Contact and address information - city, postal code, street address, and a Canadian mobile number - are collected in the third step of account creation.

During KYC verification, which becomes mandatory before any withdrawal and once cumulative deposits exceed the equivalent of €2,000, additional documents are requested. These typically include a government-issued identity document such as a passport or driver’s licence, a proof of address dated within the last three months, and confirmation of payment method ownership. Financial data processed through the cashier is handled via PCI DSS-compliant third-party gateways; complete card numbers or CVV codes are not stored directly by the casino.

Beyond registration and verification, the platform also records transactional history, gameplay activity, device information, IP addresses, and communication records between players and the support team.

How Collected Data Is Used

Personal information collected by Only Win serves several core purposes:

Verifying account identity and confirming that applicants meet the minimum age requirement of 18 years
Processing deposits and withdrawals through supported payment methods including Interac, Visa, Mastercard, MiFinity, and cryptocurrencies such as Bitcoin, Litecoin, and Dogecoin
Conducting KYC and enhanced due diligence checks, particularly for politically exposed persons or transactions above US$10,000
Administering bonuses, loyalty rank progress, and VIP Club entitlements
Detecting fraud, collusion, duplicate accounts, and prohibited software-assisted activity
Sending account-related and promotional communications where marketing consent has been provided
Complying with applicable legal, regulatory, and anti-money laundering obligations

KYC records are retained for a minimum of five years after the conclusion of the customer relationship, in line with standard compliance frameworks used across regulated gaming markets.

Only Win operates under the legal entity 3-102-961232 LIMITADA, also trading as Goodfly Limitada, registered in Costa Rica. The platform holds a gaming licence issued by the Government of the Autonomous Island of Anjouan under number ALSI-202606013-FI1. Legal inquiries can be directed to legal@goodfly.io.

Player data may be shared with contracted third parties that support platform operations, including payment processors, KYC and identity verification providers, fraud-prevention systems, and game software studios. These parties receive only the data necessary to perform their specific function. Only Win does not sell personal data to unrelated commercial third parties.

In cases where regulatory authorities or law enforcement bodies make lawful requests, the casino is obligated to cooperate and may disclose relevant account information as required.

The website uses cookies and similar tracking technologies to maintain session continuity, improve performance, and analyse user behaviour. Functional cookies are required for the site to operate correctly. Analytics and marketing cookies may be optional depending on settings presented at the time of first visit. Players can manage cookie preferences through browser settings, though disabling certain cookies may affect the functionality of account features, game loading, or promotional displays.

Player Rights Over Personal Data

Players registered on the Canadian platform retain rights in relation to the personal data held about them. These generally include the right to access a copy of stored information, request corrections to inaccurate data, and in certain circumstances request deletion of data no longer needed for the purpose it was collected. Requests related to data access or correction can be submitted through the support team via the contact form, live chat available around the clock, or the support email.

Account holders are responsible for keeping registration details accurate and up to date. Providing false information, using third-party payment methods, or creating duplicate accounts violates the platform’s terms and may result in account suspension or closure. Players should also be aware that Only Win responsible gambling tools - including deposit limits, session time limits, and self-exclusion options - may involve processing personal data to apply and enforce those restrictions.

Security Measures

All data transmitted between a player’s browser and the platform is protected through encryption. Payment transactions are routed through secure, PCI DSS-compliant gateways, and the casino does not store full card details on its servers. Cryptocurrency deposits and withdrawals benefit from the transparency of blockchain networks, with transfers confirmed on-chain before funds are credited or released.

Account security is the shared responsibility of the player and the platform. Players are advised to use a unique, strong password and avoid accessing their account on shared or public devices. Session management and device trust are monitored as part of the fraud-prevention framework.

Updates to This Policy

Only Win may revise this privacy policy periodically to reflect changes in operations, legal requirements, or data-handling practices. The current terms were last updated on 18 June 2026. Continued use of the platform after a policy update constitutes acceptance of the revised terms. For questions or formal data inquiries, players can reach the compliance team through the channels listed on the online casino Only Win contact pages, including 24/7 live chat and the official support email.

Players who require further information about their data rights or the regulatory framework governing the platform are encouraged to review the full terms published in the account area or to contact the support team directly.