Personal Data Processing Policy

1. General Provisions

This Personal Data Processing Policy (hereinafter the “Policy”) defines the procedure for processing and protecting the personal data of users of the website [domain] (hereinafter the “Website”).

Personal Data Controller: Winnersoft Technology Ltd
Address: 1st Floor, Columbus Centre, PO Box 2283, Road Town, Tortola VG 1110, BVI
Registration details: ALSI-202412036-F12
Email for inquiries: support@nova-casino.com

The Controller processes personal data in accordance with applicable law.

2. What Data We Collect

2.1 Data Provided by the User

• Name / nickname
• Email
• Phone number (upon registration)
• Payment details (via licensed providers)

The above data is used to register an account, perform financial transactions, and fulfill contractual obligations and is not shared with third-party analytics systems.

2.2 Data Collected Automatically

When using the Website, the following may be collected automatically:

• IP address
• Device type and OS
• Browser type
• Browser language
• Cookies and online identifiers
• Data about actions on the website (pages, clicks, time on site, events)

Collection is carried out using:

• Google Analytics 4
• Microsoft Clarity

3. Purposes of Data Processing

Personal data is processed for:

• Traffic analytics
• Improving user experience
• Ensuring security
• Fraud prevention
• Fulfilling contractual obligations
• Complying with legal requirements

4. Legal Grounds for Processing

Processing is carried out:

• based on the personal data subject’s consent
• to perform a contract
• within the Controller’s legitimate interests

5. Disclosure to Third Parties

The Controller may disclose personal data to the following third parties:

• Google LLC
• Microsoft Corporation
• Payment service providers
• Hosting providers

Disclosure is made to the extent necessary to achieve the purposes of processing.

6. Cross-Border Data Transfers

If the recipient country does not provide an adequate level of protection, the transfer is carried out:

• based on the personal data subject’s consent
• or where other lawful grounds exist

7. Data Retention Periods

Personal data is stored:

• for the period of account use
• or until consent is withdrawn
• or for the periods established by law

Analytics data is retained for the period specified in Google Analytics settings (typically 14–26 months).

8. Rights of the Personal Data Subject

The user has the right to:

• Obtain information about their data
• Request rectification
• Request deletion
• Withdraw consent
• Restrict processing

Requests should be sent to: [email]

9. Security Measures

The Controller applies:

• Access restrictions to data
• Encryption
• Server protection
• Action logging
• Employee access control

10. Prohibition of Transferring Explicit Personal Data to Analytics Systems

When using Google Analytics 4 and Microsoft Clarity, only anonymized statistical data is transmitted.

The Controller does not transmit to these systems any data that can directly identify the user, including email, phone number, internal account ID, and payment details.

The transmission of personal data in URL parameters and custom events is prohibited.

11. Policy Updates

The Controller may amend this Policy. The current version is always published on the Website.

Date of last update: 03.03.2026