Privacy Policy

Information we gather

When you open an account we record identifying details such as your full name, date of birth, residential address, email address and telephone number. These fields exist because licence 365/JAZ requires us to know who holds each account.

Verification documentation — passport or national identity card, proof of address, and evidence of payment ownership — is collected at withdrawal stage or earlier where risk indicators are present. Such documents are stored in encrypted form with access restricted to the compliance function.

Technical information is captured automatically: IP address, approximate geographic region, device type, browser version, operating system and referral path. We also log wagering history, deposit and withdrawal records, session duration and support correspondence.

Cookies and comparable technologies record session state and preference settings. Non-essential cookies used for analytics or campaign attribution are only placed after you accept them through the consent banner, and the choice can be revised at any point.

Purposes and legal basis

Contractual necessity underpins the bulk of our processing: creating and maintaining your account, settling wagers, executing payments and responding to service requests all flow from the agreement between you and Cashwin.

Legal obligation covers anti-money-laundering checks, sanctions screening, age verification and the retention of transactional records for the periods our regulator specifies. We cannot waive these steps at a player's request.

Legitimate interest supports fraud detection, bonus-abuse investigation, network security monitoring and the aggregate analysis we use to improve game selection and page performance. We weigh that interest against your rights before proceeding.

Consent governs marketing email, SMS campaigns and push notifications. Withdrawing consent is a single click in any message or a toggle in your communication preferences, and it never affects your ability to play.

Sharing, transfers and retention

Game content is supplied by licensed studios whose servers process round outcomes. Payment institutions, identity-verification providers and fraud-prevention networks receive only the minimum data required for their specific function, under written processing agreements.

Regulators, financial-intelligence units and law-enforcement bodies may receive data where a lawful request is made. We do not sell personal information, and we do not pass player lists to third-party advertisers.

Where data moves outside the European Economic Area, transfers are governed by Standard Contractual Clauses or an equivalent recognised safeguard. A description of the mechanism in force for a given recipient is available on request.

Account and transaction records are retained for a minimum of five years after closure to satisfy anti-money-laundering rules. Marketing data is deleted once consent is withdrawn; self-exclusion records are kept permanently so that a reinstatement request can be assessed properly.

Your rights and how to exercise them

Players resident in Ireland and elsewhere in the EEA may request a copy of their data, correction of inaccurate entries, deletion where no overriding obligation applies, restriction of processing, portability in a machine-readable format, and objection to processing based on legitimate interest.

Requests are answered within one calendar month. Because personal data is involved, we will confirm your identity before releasing anything — this protects you as much as it protects us.

If you consider our response inadequate, you may lodge a complaint with your national supervisory authority. Irish players may contact the Data Protection Commission, and we will cooperate fully with any resulting enquiry.

Security measures include TLS encryption in transit, encryption at rest for verification documents, role-based access control, and periodic penetration testing. No system is perfect; should a breach carry a high risk to your rights, we will notify you directly and without undue delay.