Scope, controller and overview

This Privacy & Data Management Policy applies to Wj2 and governs the collection, use, storage, disclosure and protection of personal data in connection with the provision of our online gaming services. Wj2 acts as the data controller for the personal data processed in relation to use of our platforms, products and services. We aim to ensure that processing is lawful, fair and transparent, and that data subjects retain meaningful control over their information.

Categories of personal data we collect

  • Identity and contact data: name, date of birth, home address, postal address, email address, telephone number, government-issued identifiers where applicable.
  • Financial and transactional data: payment methods, bank details where provided, transaction history, deposits and withdrawals, billing information.
  • Account and activity data: account registration details, login information, device identifiers, IP address, browser and operating system, game or betting activity, promo codes, prize winnings and related communications.
  • Technical data: device type, network information, geolocation in approximate form, log files, error reports.
  • Marketing and communications data: preferences for communications, responses to surveys or promotions, consent records for direct marketing.
  • Other data: information you voluntarily provide in correspondence with us, and data derived from your use of our services (including profiling data for risk and compliance purposes).

How we collect and process personal data

We collect personal data directly from you when you create an account, place a bet or make a deposit, participate in promotions, or contact customer support. We also automatically collect data during your use of the services through server logs and tracking technologies. We may obtain data from third-party providers where legally permissible and in accordance with applicable law. We process personal data to operate, maintain and improve our services, assess risk, verify identities, prevent fraud and comply with legal obligations.

Purposes of processing and legal bases

  • Performance of a contract: to provide gaming services, manage accounts, process transactions and fulfill user requests.
  • Identity verification and AML/KYC compliance: to prevent fraud, money laundering and other illicit activity; to satisfy regulatory requirements.
  • Security and risk management: to detect and prevent unauthorized access, cheating, or circumvention of controls.
  • Legal obligations: to comply with applicable law, regulatory requests, and lawful orders.
  • Legitimate interests: to maintain and improve service quality, develop new features, and conduct risk assessment and personalization, provided such interests do not override your rights and freedoms.
  • Consent (where required): for direct marketing communications or other activities requiring consent under applicable law.

Sharing and disclosure

We may disclose personal data to:

  • companies, affiliates, or service providers engaged to support operations (including payments, identity verification, IT services and customer support) under written obligations of confidentiality;
  • regulators, law enforcement or other authorities as required by law or to protect the rights, property or safety of Wj2, users or the public;
  • third parties in the event of a corporate transaction, such as a merger or acquisition, subject to protective measures;
  • for anonymized data used for research or statistical purposes, where disclosure does not identify individuals.

International transfers and data security

Where necessary, personal data may be transferred to recipients located outside your country. In such cases, we implement appropriate safeguards to ensure an equivalent level of data protection, including contractual data protection obligations and where applicable, adherence to recognized transfer regimes. We maintain technical and organizational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, including encryption of data at rest and in transit, access controls, and regular security assessments.

Cookies and similar technologies

We use cookies and comparable technologies to manage sessions, remember preferences, prevent fraud and analyze usage. Strictly necessary cookies are essential for the operation of the platform. Other cookies may be used to tailor content and advertising. You may manage cookie preferences via your account settings or browser controls. Refusal of non-essential cookies may limit certain features.

Data retention

We retain personal data for as long as necessary to fulfill the purposes described in this Policy, or as required by law. Generally, transactional data is retained for a minimum of five (5) years from the date of the last transaction. Other data retained for periods determined by statutory obligations, contract terms, or for the defense of legal claims. When data is no longer required, we securely delete or anonymize it.

Minors

Our services are not directed at individuals under the age of eighteen (18). We implement age verification and, where a minor's data is discovered, we will purge such data in accordance with applicable law and internal procedures.

Automated processing and profiling

We may perform profiling and automated processing to assess risk, verify identity and detect potential fraud. Final decisions affecting your rights are made by human review, and no automated decision resulting in a legally significant effect will be solely based on automated processing without human involvement where required by law.

Your rights and choices

You may at any time:

  • access, correct or delete your personal data;
  • object to or restrict certain processing, including marketing;
  • withdraw consent where it is the basis for processing;
  • request data portability where applicable;
  • request information about the processing activities and recipients;
  • lodge a complaint with a supervisory authority in your jurisdiction.

Requests should be directed to the designated privacy contact within Wj2. We will respond within a reasonable timeframe and in accordance with applicable law.

Changes to this policy

We may update this Policy to reflect changes in our practices or legal obligations. We will post an updated version on our platform and indicate the effective date. Continued use of our services constitutes acceptance of the updated policy.

Contact information

Data controller: Wj2. For inquiries regarding this Policy or exercising your data rights, contact our privacy team at privacy@wj2.