Last updated: July 22, 2026

Privacy Policy

This page explains how Only Win collects, uses, stores, and protects personal information submitted by players registered on the Canadian platform. Understanding these practices helps account holders make informed decisions about the data they share during registration, verification, and day-to-day use of the casino.

What Information Only Win Collects

Only Win gathers personal data at different stages of the player journey. During registration, the platform collects full name, date of birth, email address, gender, residential address, postal code, and a Canadian phone number. Payment processing requires additional details depending on the selected method, including banking credentials or cryptocurrency wallet identifiers.

KYC verification, which becomes mandatory before any withdrawal and once cumulative deposits reach the equivalent of €2,000, requires document uploads such as a passport, driver’s licence, or national identity card, along with proof of address dated within the last three months. Enhanced due diligence may also request source-of-funds or source-of-wealth documentation for high-risk profiles or linked transactions above US$10,000.

Beyond account data, technical information is collected automatically. This includes device type, browser details, IP address, session timestamps, and navigation behaviour within the platform. Cookies and similar tracking technologies are used to maintain session continuity and support platform functionality.

How Collected Data Is Used

Personal information is used for a defined set of purposes:

Account creation, verification, and ongoing identity confirmation
Processing deposits and withdrawals across supported methods such as Interac, Visa, Mastercard, MiFinity, and major cryptocurrencies
Fraud prevention, anti-money laundering checks, and compliance with applicable financial regulations
Delivering promotional communications where marketing consent has been granted
Operating the loyalty program, VIP club, missions, and other gamification features
Responding to support requests submitted through live chat, the contact form, or the support email
Complying with legal retention obligations, including keeping KYC records for at least five years after the end of the customer relationship

Only Win does not sell personal data to third parties for marketing purposes unrelated to the platform.

To operate the platform, Only Win works with third-party service providers. Payment gateways used by the casino are PCI DSS-compliant, meaning complete card numbers and CVV data are not stored by the casino itself. Cryptocurrency transactions are routed through supported blockchain networks, and players must use the exact wallet address and supported network to avoid irreversible fund loss.

Game providers, KYC verification partners, fraud detection services, and technical infrastructure suppliers may receive limited data necessary to perform their specific functions. These parties operate under data processing agreements that restrict use to the stated purpose.

The operator, 3-102-961232 LIMITADA, operating as Goodfly Limitada and registered in Costa Rica, is the data controller. Legal enquiries can be directed to legal@goodfly.io. The platform holds an Anjouan licence under reference ALSI-202606013-FI1, issued by the Government of the Autonomous Island of Anjouan, Union of Comoros.

Cookies and Tracking

The platform uses cookies to support login sessions, remember account preferences, and enable platform analytics. Players can manage cookie settings through their browser. Disabling certain cookies may affect platform functionality, including access to the full game lobby, the Activity Hub, and promotional features such as Fortune Wheels, Missions, and the Store.

Marketing cookies, where consent is given during registration, support the delivery of tailored promotional communications. Consent for marketing can be withdrawn at any time through account settings or by contacting support.

Data Retention

Account information is retained for the duration of the customer relationship and for a minimum of five years afterward, in line with the platform’s KYC policy effective 18 June 2026. Financial transaction records may be retained longer where required by applicable regulation. Data collected for fraud prevention, compliance, and dispute resolution may also be held beyond the standard period where there is a legitimate legal basis to do so.

Player Rights Regarding Personal Data

Players have the right to request access to personal data held by the platform, to request corrections where information is inaccurate, and to request deletion subject to legal retention requirements. Requests related to personal data should be submitted through the support channel or directed to the legal contact. Account access may be temporarily restricted during the processing of such requests.

For more detail on responsible data practices and the platform’s approach to player protection, refer to Only Win responsible gambling, which covers self-exclusion, deposit limits, loss controls, and external support resources.

Security Measures

Only Win states that the website uses encryption to protect data in transit. Payment transactions are processed through PCI DSS-compliant gateways. Account access is protected through password authentication, and players are advised not to share login credentials with any third party.

One account is permitted per player, household, IP address, email, or shared device environment. Using another person’s payment method or providing false registration data is prohibited and can result in account suspension, balance confiscation, or permanent closure.

Contact for Privacy Matters

For questions about this privacy policy or about personal data held by the platform, contact the support team through the 24/7 live chat available on the Only Win online, the contact form on the Contact Us page, or by email at support@only.win. Legal and compliance matters can be addressed directly to legal@goodfly.io.