Privacy Policy

Who we are

Jumpman Gaming Limited, La Corvee House, La Corvee, Alderney, GY9 3TQ, United Kingdom, is the controller of personal data collected through wongagames.co. We follow the UK General Data Protection Regulation and the Data Protection Act 2018. For anything in this policy, write to privacy@wongagames.co.

Registration data

When you register we collect your first and last name, date of birth, email address, home address, city and postcode, a hashed version of your password, whether you accepted our terms and privacy policy and when, and your marketing choice. We never store your password in readable form.

Verification data

To confirm your age and identity we send your name, address and date of birth to identity and credit reference agencies and receive a match result. If you upload documents, we keep copies of them along with the result of our review. Where we need to understand whether your gambling is affordable, we may ask for bank statements or payslips.

Payment information

Card details are handled by our payment provider, which is certified to the PCI DSS standard. We keep only the card type, the last four digits, the name on the card and a record of each deposit and withdrawal: amount, date, reference and status.

Gameplay activity

We record the games you open, stakes, wins and session times. We need this to settle games, to meet our licence conditions, and to spot patterns that can indicate gambling harm, such as chasing losses or playing through the night.

Gameplay data is shared with the game studios and platform providers whose games you play, because their servers run the game, calculate each stake and win and hold the round record. They receive a player ID and the session data, not your name or contact details. We also use gameplay data to meet the Gambling Commission's licence conditions on responsible gambling, for example to detect markers of harm and act on them, and on anti-money laundering, for example to compare what you deposit and stake with what we know about your income.

Technical and device data

Your IP address, browser type, device and login times are logged. We use them to keep accounts secure and investigate fraud. Your IP address is also used to work out your approximate location, so that we can confirm you are in the United Kingdom and block access from countries where we are not allowed to offer gambling.

We may use device fingerprinting and similar techniques, which combine technical details such as your browser, screen size, language and operating system, to recognise a device across sessions. We use this for fraud prevention and to detect duplicate accounts, not for advertising.

Cookies

Necessary cookies keep you logged in and protect our forms. Other cookies are only set with your permission. The cookie table in the Cookie Policy lists every cookie by name, who sets it, how long it lasts and what it is for. Some cookies, together with your IP address or a device identifier, can count as personal data, and this policy applies to them.

You can change your cookie choices at any time through Cookie settings in the footer, and you can also manage or block cookies in your browser settings. Rejecting optional cookies does not stop you registering, logging in, depositing or playing, but some conveniences, such as remembered lobby filters, will not work, and disabling necessary cookies in the browser will prevent you from logging in. You have the right to object to marketing cookies at any time.

Purposes and lawful bases

How long we keep data

Anti-money laundering law and our licence conditions set the minimum periods for most records. Our retention periods are:

• Registration data: 5 years after your account closes.
• Verification documents and check results: 5 years after your account closes.
• Transaction records: 5 years after the transaction.
• Gameplay data: 5 years after your account closes.
• Marketing data and preferences: until you withdraw consent or close your account, plus up to 30 days to remove you from mailing lists; we keep a record that you opted out so that we don't contact you again.
• Self-exclusion records: for the whole self-exclusion period plus 7 years after it ends, so that the exclusion can be enforced and the account is not reopened by mistake.
• Contact form messages from people without an account: 2 years.
• Complaint files: 6 years after the complaint is closed, in case of a legal claim.

After these periods, data is securely deleted or anonymised so it can no longer identify you. Where a court order, an investigation or a dispute requires it, we keep the relevant records for longer. Data is stored in the United Kingdom or in countries with UK adequacy regulations or equivalent safeguards.

Security

We use industry-standard TLS encryption for all data transmitted to and from the site. Passwords are stored only as salted hashes, uploaded documents are stored outside public web folders, and staff access is limited to people who need it for their job, with every access logged. Our systems are reviewed regularly for security weaknesses, including independent penetration testing, and our staff receive regular training on data protection and confidentiality. If a breach puts your rights at risk, we will tell you and the Information Commissioner's Office without undue delay.

Third parties

We share only what each party needs:

• identity and credit reference agencies, for verification;
• our payment provider and your card issuer, for deposits and withdrawals;
• game studios and platform providers, who receive a player ID and session data but not your name or contact details;
• GAMSTOP, to check whether you are self-excluded;
• the Gambling Commission, the police, HMRC or other authorities, when the law requires;
• IBAS, if you refer a dispute to them;
• IT, email and hosting suppliers working under contract and our instructions.

We don't sell personal data.

Your rights

You can ask for a copy of your data, ask us to correct it, restrict or object to some uses, move it to another provider, and withdraw consent for marketing. You can ask us to erase data, but we have to keep records the law requires. We reply within one month. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Contact

Privacy: privacy@wongagames.co
Jumpman Gaming Limited, La Corvee House, La Corvee, Alderney, GY9 3TQ, United Kingdom