Privacy Policy – Personal Data Processing at Indwin Play Casino

1. General Provisions

Indwin Play Casino (hereinafter “the Casino”, “we”, “us”, or “our”) operates the website https://indwin-play-casino.com/. This Privacy Policy governs the processing, storage, protection, and usage of personal data provided by players and visitors (“you”, “your”, “user”) when using the Casino’s services, including but not limited to account registration, deposits, withdrawals, gameplay, and communication with support.

We are committed to safeguarding your privacy in accordance with our licensing obligations, industry‑standard security practices, and applicable data protection laws for players in India and other jurisdictions where our services are lawfully accessible.

2. Data We Collect

2.1. Information you provide directly

Registration data: full name, date of birth, email address ([email protected]), mobile phone number, residential address.
Verification (KYC) documents: scanned copies of PAN card, Aadhaar card, passport, driver’s license, or other government‑issued ID, plus proof of address (utility bill, bank statement).
Financial information: UPI IDs, PayTM wallet details, net banking credentials (via secure payment gateways, the Casino does not store raw bank credentials), credit/debit card details (encrypted), prepaid voucher codes.
Communication data: emails, chat logs, support tickets, and any other information you voluntarily provide when contacting us.

2.2. Information collected automatically

Technical data: IP address, device type, browser type, operating system, time zone settings, and geolocation (country/city level).
Usage data: login/logout times, game history, deposit and withdrawal amounts, wagering activity, bonus usage, loyalty points accumulation.
Transaction data: payment method, transaction ID, amount, date, time, and status (pending, completed, failed).

2.3. Information from third parties

Payment gateways (UPI, PayTM, NetBanking, card processors) – limited to transaction confirmation and fraud prevention.
Game software providers – game session data to ensure fair play and calculate winnings.

3. Legal Basis for Processing

We process your personal data based on:

Performance of a contract: to create and manage your player account, process deposits/withdrawals, award bonuses, and provide customer support.
Legal obligations: to perform mandatory KYC, anti‑money laundering (AML) checks, comply with court orders or regulatory requests.
Legitimate interests: to prevent fraud, ensure account security (including Two‑Factor Authentication), maintain platform integrity, and analyze usage for service improvement.
Your consent: for marketing communications (opt‑in required), cookies (except strictly necessary ones), and any other processing that requires explicit permission under applicable law.

4. How We Use Your Personal Data

We use your data for the following purposes:

Account setup, authentication, and verification.
Processing deposits and withdrawals (including instant UPI, PayTM, NetBanking, cards, and prepaid vouchers).
Crediting bonuses – e.g., ₹10,000 welcome bonus + 750 free spins, and other promotional offers.
Meeting wagering requirements (e.g., 30x bonus amount) and determining game eligibility (slots, table games, Teen Patti, Andar Bahar, live dealer games).
Preventing money laundering, fraud, underage gambling, and unauthorized account access (including 2FA and suspicious activity monitoring).
Calculating loyalty tier progression (Silver, Gold, Platinum, Diamond) and providing VIP benefits (personal manager, faster withdrawals, cashback, reload bonuses).
Communicating important service updates, security alerts, and transactional notifications (e.g., withdrawal status: e‑wallets 2‑12 hours, bank transfers 24‑48 business hours, cards 3‑5 business days).
Responding to support requests via email ([email protected]).
Complying with legal and regulatory obligations, including reporting to licensing authorities.
Analyzing anonymous aggregated data to improve our game portfolio, website performance, and user experience.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data only in the following circumstances:

5.1. Service providers and partners

Payment processors (UPI, PayTM, NetBanking, card networks, prepaid voucher providers) to complete transactions – all are PCI‑DSS compliant.
Game and software providers (slot developers, live dealer studios) to deliver game content and verify fair play (RNG audits).
Identity verification and KYC service providers.
Cloud hosting, data storage, and email distribution services.

All third‑party processors are contractually bound to process data solely on our behalf and in accordance with this Privacy Policy.

5.2. Legal and regulatory disclosures
We may disclose your personal data if required by law, court order, or a request from a recognized law enforcement or regulatory authority, including our licensing jurisdiction and Indian authorities where applicable.

5.3. Business transfers
In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction, provided the recipient agrees to respect this Privacy Policy.

6. Data Security Measures

We implement robust technical and organizational measures to protect your personal data:

Encryption: 256‑bit SSL/TLS encryption for all data transmitted between your browser and our servers – the same standard used by major Indian financial institutions.
Secure storage: Personal and financial data stored on servers protected by firewalls, intrusion detection systems, and access controls.
PCI‑DSS compliance: All payment gateways integrated into our platform maintain PCI‑DSS Level 1 certification.
Account security tools: Mandatory password protection; optional but strongly recommended Two‑Factor Authentication (2FA) via SMS or authenticator app for logins from new devices.
Internal access controls: Only authorized employees (e.g., compliance, support, IT) with a legitimate need can access personal data, and such access is logged and audited.
Fraud monitoring: Automated systems continuously scan for suspicious login attempts, geographically disparate access, rapid transaction failures, and unusual withdrawal patterns.

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continually update our safeguards to meet evolving threats.

7. Data Retention

We retain your personal data only as long as necessary for the purposes set out in this Privacy Policy and to satisfy legal, regulatory, accounting, or reporting requirements.

Account data: For the duration of your active account and for 7 years thereafter (to comply with AML and financial record‑keeping laws).
KYC documents: For 7 years after account closure.
Transaction records: For 7 years from the date of each transaction.
Communication logs: For 5 years from the last interaction.
Marketing data: Until you withdraw consent (opt‑out).

After the retention period expires, we securely delete or anonymize your data so that it can no longer be linked to you.

8. Your Rights

Depending on your jurisdiction and applicable data protection laws, you may have the following rights regarding your personal data:

8.1. Right to access – Request a copy of the personal data we hold about you.
8.2. Right to rectification – Correct inaccurate or incomplete data.
8.3. Right to erasure (right to be forgotten) – Request deletion of your data, subject to our legal obligations (e.g., AML retention).
8.4. Right to restriction of processing – Limit how we use your data while we resolve a dispute.
8.5. Right to data portability – Receive your data in a structured, machine‑readable format.
8.6. Right to object – Object to processing based on legitimate interests (e.g., direct marketing).
8.7. Right to withdraw consent – Withdraw previously given consent for marketing or cookies at any time.

To exercise these rights, contact us at [email protected]. We will respond within 30 days. We may require proof of identity (e.g., PAN card or Aadhaar) before processing your request. Some requests may be denied if they would compromise legal compliance or the rights of others.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

Ensure essential functionality (session management, security).
Remember preferences (language, currency INR).
Analyze site traffic and user behavior to improve performance.
Support affiliate and referral tracking.

You can control cookies via your browser settings. Disabling non‑essential cookies will not affect core functionality (account login, deposits, withdrawals, gameplay). Detailed cookie information is available in our separate Cookie Policy.

10. Responsible Gaming and Data Protection

We promote responsible gaming as an integral part of data privacy. When you use self‑help tools (deposit limits, cooling‑off periods, self‑exclusion), we record and honor those requests without sharing them for marketing purposes. Aggregated, anonymized data may be used to identify at‑risk behavior patterns, but personally identifiable information is never disclosed to external counseling services unless you explicitly request a referral (e.g., to Hope Trust India). In such cases, we only share the minimum necessary data (first name, contact method) with your consent.

11. International Data Transfers

We operate under an international gaming license, and our servers may be located outside India. Consequently, your personal data may be transferred to and stored in countries with different data protection laws. We ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses, data processing agreements) to protect your data in accordance with this Privacy Policy and applicable law.

12. Children’s Privacy

Our services are strictly for individuals aged 18 years or older (or the legal age for gambling in your jurisdiction, whichever is higher). We do not knowingly collect personal data from minors. If we discover that a person under 18 has registered, we will immediately close the account, delete all data (subject to retention laws), and report the incident to relevant authorities as required by our license.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our data processing practices, or features of the website. The “Last updated” date at the top will be revised accordingly. Material changes (e.g., new purposes for processing, expanded data sharing) will be notified via email to registered users or by a prominent notice on our website at least 14 days in advance. Your continued use of the Casino after the effective date constitutes acceptance of the revised Privacy Policy.

14. Contact Us

For any questions, requests, or complaints regarding this Privacy Policy or the processing of your personal data, please contact us at:

Email: [email protected]
Address for correspondence: As indicated on our official website /privacy page.

We will investigate and attempt to resolve all complaints within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority or the relevant regulator under our gaming license.

This Privacy Policy is effective as of 2026 and supersedes all previous versions