Fortunica Privacy Policy

Data Controller

Winstar N.V., licensed under Anjouan Offshore Financial Authority Gaming Licence No. ALSI-202501022-F11, with registered operations at Hamchako, Mutsamudu, Anjouan, Union of Comoros, is the controller responsible for personal data collected through the Fortunica platform.

What Data Is Collected

Registration data includes an email address, password, date of birth and account currency selection. Payment data includes the method used for deposits and withdrawals and associated transaction identifiers, though full card or wallet credentials are handled by the relevant payment processor rather than stored directly by Fortunica. Verification data includes copies of identity documents such as an Australian driver’s licence, passport or Medicare card, together with proof-of-address documents submitted during KYC review. Technical data includes IP address, device type, browser information and session logs collected automatically during use of the website and app. Cookie data covers preferences and analytics identifiers described in the cookies section below.

Purposes and Legal Basis of Processing

Personal data is processed to open and administer player accounts, to process deposits and withdrawals, to meet identity verification and anti-fraud obligations under the operator’s licence conditions, to respond to support enquiries, and to detect and prevent misuse of the platform such as multiple accounts or bonus abuse. Processing is carried out on the basis of contractual necessity for account and gameplay functions, legal obligation for KYC and anti-fraud checks, and legitimate interest for fraud prevention and service improvement.

Transfer to Third Parties

Personal data is shared only where necessary for the operation of the platform, including with payment providers to process deposits and withdrawals, with identity verification services to complete KYC checks, and with game software and live casino providers such as Vivo Gaming, HO Gaming and Iconic 21, strictly to the extent required to deliver gameplay. Data is not sold to third parties for marketing purposes.

International Data Transfers

Because Fortunica operates from outside Australia, personal data submitted by Australian players is transferred to and processed on servers located outside the player’s home jurisdiction. Appropriate contractual and technical safeguards are applied to protect data during such transfers.

Cookies and Analytics

Fortunica uses essential cookies required for login sessions and cart-style functionality, together with analytics cookies that measure site usage and performance. Cookie preferences can be adjusted through the cookie banner shown on first visit or through browser settings at any time; disabling non-essential cookies does not affect the ability to log in or play.

Data Retention

Account and transaction data is retained for as long as the account remains active and for a further period afterward as required to meet anti-fraud, audit and licensing obligations. Verification documents are retained under the same schedule and are then securely deleted once the retention obligation expires. Closing an account does not immediately erase transaction records that must be kept for regulatory or accounting purposes.

Data Subject Rights

Players may request access to the personal data held about them, correction of inaccurate data, deletion where no legal obligation requires retention, restriction of processing, objection to processing based on legitimate interest, and, where technically feasible, portability of their data to another provider. Requests are handled by the support team and may require identity confirmation before being actioned.

The Right to Lodge a Complaint

A player who believes their personal data has been mishandled may raise the matter directly with Fortunica support in the first instance, and may separately have the right to lodge a complaint with a data protection supervisory authority with jurisdiction over the matter.

Contact for Personal Data Requests

Requests relating to personal data, including access, correction or deletion requests, can be sent to [email protected]. Include your registered email address so the request can be matched to the correct account.