Last updated: July 22, 2026

Privacy Policy

This privacy policy describes how Only Win collects, uses, stores, and protects personal data from players who access the platform from Canada. The policy applies to all account holders and visitors, regardless of the device or browser used. Understanding how personal information is handled is a reasonable expectation for any player before registering. Only Win operates under the Anjouan licence No. ALSI-202606013-FI1, issued by the Government of the Autonomous Island of Anjouan, Union of Comoros. The operator behind the platform is 3-102-961232 LIMITADA, also doing business as Goodfly Limitada, registered in Costa Rica. Legal inquiries related to data handling can be directed to legal@goodfly.io. This policy was last updated on 18 June 2026.

What Information Only Win Collects

When a player creates an account at the Only Win Canada, certain personal details are collected as part of the registration process. This includes full name, date of birth, email address, residential address, postal code, city, and a Canadian phone number. During the three-step registration flow, players also confirm that they are 18 years of age or older and accept the platform’s terms and privacy policy.

Beyond registration data, the platform may collect the following categories of information:

Identity documents such as a passport, driver’s licence, or national identity card submitted during KYC verification
Proof of address documents including utility bills, bank statements, or official correspondence dated within the last three months
Payment method details, including bank statements, e-wallet screenshots, or online banking records used to confirm ownership of the deposit instrument
Device data, IP address, browser type, and session activity logs generated during platform use
Financial transaction records, including deposit amounts, withdrawal requests, and bonus activity
Communications sent through live chat, the contact form, or to support@only.win

For players flagged as high-risk or politically exposed persons (PEPs), enhanced due diligence may apply, which can include source-of-funds or source-of-wealth documentation.

How Personal Data Is Used

Personal data collected by Only Win is used to operate the account, process payments, verify identity, and comply with applicable regulatory requirements. The platform uses account data to manage loyalty rank progression, apply bonus eligibility, and administer the VIP club system. Communication preferences, including marketing consent, are recorded at registration and can be updated through the account settings.

Data is also used to detect and prevent fraud, collusion, bonus abuse, chargebacks, and other prohibited activities outlined in the operator’s terms. IP address and device data help identify duplicate accounts, which are prohibited under a strict one-account-per-person policy covering household, postal address, email, and shared-device environments.

The platform does not store complete card PAN or CVV data. Payment transactions are processed through third-party gateways that comply with PCI DSS standards.

Only Win shares personal data with third parties only where necessary for the operation of the platform. This includes payment processors, identity verification services, fraud prevention providers, and software studios that supply games to the platform. Game providers such as Pragmatic Play, BGaming, Hacksaw Gaming, and others may have access to session data tied to gameplay.

Data may also be shared with regulatory or law enforcement bodies if required by applicable law or in response to a formal legal request. The casino does not sell personal data to advertising networks or unrelated commercial parties.

All third-party processors and service providers are expected to handle data in a manner consistent with this policy and applicable data protection standards.

Data Retention

KYC records and related personal data are retained for a minimum of five years after the end of the customer relationship. This retention period aligns with anti-money laundering obligations and the terms of the Anjouan gaming licence. Transaction records and account history are also retained for a similar period to support compliance reviews and dispute resolution.

Players who close their accounts or are excluded from the platform should be aware that their data will not be immediately deleted. Records remain on file for the legally required retention period.

Cookies and Tracking

The Only Win website uses cookies and similar tracking technologies to maintain session data, remember account preferences, and analyse usage patterns. Cookies help the platform deliver a consistent experience across desktop, smartphone, and tablet browsers. The installable mobile web app promoted on the Canadian site also relies on browser-level storage to support functionality.

Players may be able to adjust cookie preferences through their browser settings, though disabling certain cookies may affect how the platform loads or how account sessions are maintained.

Player Rights and Data Access

Players have the right to request access to the personal data held about them. A request can be submitted through the contact form available on the site or by writing to the support or legal team. The platform may require identity confirmation before processing any such request.

Additional rights may include the ability to request correction of inaccurate data, deletion of data where legally permissible, or restriction of processing in specific circumstances. These rights are subject to applicable law and the operator’s legal obligations, including the data retention requirements described above.

For responsible gambling inquiries or tools such as deposit limits, self-exclusion, or session limits, players are encouraged to review the Only Win responsible gambling page, which covers the full range of player protection tools available on the platform.

Security Measures

Only Win uses encrypted connections and secure third-party payment gateways to protect data during transmission. Account access is managed through a registered email and password combination. Players are responsible for keeping login credentials confidential and should contact support immediately if unauthorized access is suspected.

Cryptocurrency transactions supported on the platform, including Bitcoin, Litecoin, Dogecoin, USDT TRC-20, and others, offer an additional layer of transactional privacy. Players using crypto should note that funds sent to an incorrect wallet address or on an unsupported network cannot be recovered by the casino.

Contact for Privacy Matters

For questions related to this privacy policy or personal data handling, players can reach the operator through the following channels: the 24/7 live chat, the contact form on the site, or by email at support@only.win. Legal and compliance matters may be directed to legal@goodfly.io. The registered business address is Provincia 06 Puntarenas, Canton 11 Garabito, Jaco, Costa Rica, 61101.

Only Win reserves the right to update this policy at any time. Material changes will be reflected in the effective date displayed at the top of the document. Continued use of the platform after an update constitutes acceptance of the revised terms.