This Privacy Policy explains how BigDrago, operated by Win Top Ltd, collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to players residing in the United Kingdom. We encourage you to read this page carefully so you understand exactly how your information is handled.

What We Collect and Why

When you create an account with us, we collect personal information such as your full name, date of birth, email address, and postal address. This information is necessary to verify your identity, comply with responsible gambling obligations, and process your account securely. During transaction processing — including deposits and withdrawals — we also handle payment-related data such as card details or wallet identifiers. We do not store full card numbers on our servers; payment data is processed through secure third-party gateways that operate to recognised industry standards.

We also collect technical data generated during your sessions on the web platform. This includes your IP address, browser type, device identifiers, and session activity logs. We use this information to maintain site security, detect unusual behaviour, prevent fraud, and ensure the platform functions correctly for you. Cookies are used to keep your session active and to remember certain preferences. You can manage cookie settings through your browser, though disabling certain cookies may affect how the platform operates for you.

How We Share and Protect Your Data

Your data is protected using 256-bit SSL encryption across all connections between your browser and our servers. Personal information is stored on secure servers with restricted internal access — only staff who require it to perform their role are permitted to view your data, and those individuals are bound by confidentiality obligations.

We share your personal information only in strictly limited circumstances. We may pass relevant data to payment processors and identity verification services where this is necessary to complete a transaction or satisfy our know-your-customer requirements. We may also disclose information to regulatory authorities, including the Anjouan Gaming Authority, when we are legally required to do so. We do not sell your personal data to third parties, and we do not share it for marketing purposes without your explicit consent.

You have the right to request access to the personal data we hold about you, to ask us to correct any inaccuracies, or to request that your account data be removed, subject to any legal retention requirements. To exercise any of these rights, please contact us through the support channels available on the platform. We will respond to your request within a reasonable timeframe.

Following account closure or a period of inactivity, we retain your personal data for as long as we are required to do so under applicable law and regulatory guidance. Once that retention period has passed, your data is securely deleted or anonymised.

If we make material changes to this Privacy Policy, we will notify you by posting an updated version on the platform and, where appropriate, by sending a notification to your registered email address. Continued use of the platform following such notification constitutes your acceptance of the revised policy. If you have questions about our data practices, please reach out to our support team.