This Privacy Policy explains how TiffanyLuck, operated by Win Vision N.V., collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to all players, including those residing in the United Kingdom. Please read this page carefully so you understand your rights and our responsibilities.

What We Collect and Why

When you create an account, we collect information such as your name, date of birth, email address, and chosen payment details. This information is necessary to verify your identity, process deposits and withdrawals, and meet our obligations under applicable gaming and anti-money laundering requirements. During transaction processing, we also collect financial data — such as payment method references and transaction amounts — solely to complete and record those transactions accurately.

We may receive additional data from third-party identity verification services and payment gateways when you transact on our platform. These providers supply us with confirmation of identity and transaction status, and they operate under their own data protection obligations. We share only the minimum data necessary for each specific purpose, and we do not sell your personal information to any third party.

Regulatory authorities, including our licensor the Anjouan Gaming Authority (licence number ALSI-202505034-FI2), may require us to disclose certain player data in the course of regulatory oversight or investigation. We comply with such requests strictly within the bounds of our legal obligations. Beyond these defined circumstances — identity verification partners, payment processors, and regulatory bodies — your data is not passed to external parties.

How We Protect Your Data and Your Rights

Your data is transmitted across our web platform using 256-bit SSL encryption, ensuring that information exchanged between your browser and our servers is protected in transit. Data at rest is held on secure servers with access restricted to authorised personnel only. Internal access controls mean that only staff with a legitimate operational need may view your personal information, and such access is logged and reviewed.

We retain your personal data for as long as your account remains active. Following account closure or a period of verified inactivity, we keep records for the minimum period required under applicable law and regulatory guidance — typically several years — after which data is securely deleted or anonymised. This retention period exists primarily to satisfy anti-money laundering record-keeping requirements and to resolve any disputes that may arise after closure.

You have the right to access the personal data we hold about you, to request corrections where information is inaccurate, and to request erasure of your data subject to any overriding legal obligations. To exercise any of these rights, please contact us through our support channels, which are accessible from the main navigation of the site. We will respond to verified requests within the timeframe required by applicable data protection law.

If we make material changes to this Privacy Policy, we will notify you through a prominent notice on our web platform before the changes take effect. Continued use of the platform following such notice constitutes your acknowledgement of the updated policy. We encourage you to review this page periodically so you remain informed about how your data is handled.