Privacy Policy

Last updated: 29 September 2026. This notice explains privacy information for the UK section of WinnerOnline.

1. Who to contact

WinnerOnline is responsible for the personal information it handles in operating this website. For privacy enquiries, requests or complaints, email [email protected] or see Contact Us.

2. Information involved

When you email us, we receive your email address, your message and any name, attachments or other information you supply. Providing this information is voluntary, but we may be unable to answer an enquiry without enough information to understand it or reply.

Operating a website involves technical information such as requested pages, connection details, browser information and error or security events. The hosting and security services involved may process this information to deliver pages and protect the website. Wordfence security software is installed on this website.

Please provide only information relevant to your enquiry. Do not send passwords, payment-card details, identity documents or sensitive information about your health or gambling history unless a specific, secure process has been agreed.

3. Purposes and lawful bases

We use enquiry information to read and respond to messages, investigate reported errors and handle privacy requests or complaints. Our legitimate interests are managing correspondence and maintaining an accurate, functioning website. Website security and troubleshooting serve our interest in protecting the service and its users. Processing based on legitimate interests must be necessary and balanced against your rights.

We rely on legal obligation when processing is necessary to meet an applicable legal duty, including relevant data-protection obligations. Where we rely on consent for a particular activity, you can withdraw it without affecting processing that was lawful before withdrawal. Sending a website enquiry does not itself constitute consent to marketing.

4. Website measurement, cookies and similar technologies

This website includes a Cloudflare Web Analytics performance beacon. Cloudflare describes this service as measuring page usage and performance, and states that it does not use cookies or local storage to collect usage metrics or fingerprint visitors for its analytics. See Cloudflare’s data-collection explanation and privacy information for Web Analytics.

This description applies to that analytics service, not every hosting, security or website function. Cookies and similar technologies can support functions such as authentication and security. Browser controls can show, block or delete stored cookies, although blocking them can affect functionality.

Where UK rules require consent for device storage or access, valid consent is needed before that activity. Any exception has its own conditions. Reading this notice is not consent, and browser controls are not a substitute for a required consent mechanism. Contact us with questions about a particular cookie or technology.

5. Service providers and external websites

Hosting, website-security, technical-support and email-service providers may handle information where needed to deliver their services. Information may also need to be disclosed to a regulator, authority or professional adviser where there is an applicable legal requirement or a justified need connected with a dispute. This notice does not grant permission for unrelated uses of your information.

External links lead to services with their own privacy notices. Please read the notice of any service you contact or use.

6. Retention and security

Retention should be limited to the period needed for the relevant purpose. For correspondence, the relevant considerations are whether the enquiry is resolved, whether follow-up is needed, and whether records are needed for a complaint or legal obligation. Technical and security records depend on the incident, service and applicable retention settings. Contact us for information about the retention of records relating to you.

The website uses HTTPS. No internet transmission or storage system can be guaranteed completely secure. Report a suspected privacy or security issue to the contact above without including passwords or unnecessary sensitive information.

7. International processing

The UK section’s address does not mean that all information is stored in the UK. Provider locations and processing arrangements determine whether an international transfer occurs. A restricted transfer requires an applicable legal mechanism and safeguards. You can ask us for details of the providers, processing locations and safeguards relevant to your information. See the ICO’s international-transfer guidance.

8. Your rights

Depending on the circumstances, you can request access, correction, deletion or restriction of your personal information. Data portability applies in specified circumstances, including certain automated processing based on consent or contract. These rights have conditions and exceptions.

Your right to object

You can object to processing based on legitimate interests on grounds relating to your particular situation. You can object to direct marketing at any time. Send an objection to [email protected].

Requests are normally free and the usual response period is one month. Applicable rules may permit an extension or affect when the response period begins. We may need proportionate information to verify identity or clarify a request; any relevant delay should be explained. See the ICO’s information for the public.

9. Complaints

Please send privacy concerns to [email protected]. You also have the right to complain to the UK Information Commissioner’s Office. Visit the ICO complaints page for contact options and guidance. You do not need our permission to complain.

10. Audience and updates

WinnerOnline is intended for adults aged 18 and over. If you believe a child has supplied personal information, contact us so the situation can be reviewed. Material changes to this notice will be reflected on this page with an updated date.