At Woolbet, operated by Win Top Ltd, we take your privacy seriously. This policy explains how we collect, use, store, and protect your personal data when you use our web platform. It applies fully to all players residing in the United Kingdom.

We encourage you to read this page carefully. If you have any questions about how your data is handled, please reach out to us through our support channels.

What We Collect and Why

When you create an account with us, we collect personal information such as your name, date of birth, email address, and preferred currency. This information is necessary to verify your identity, maintain your account, and comply with our obligations under applicable licensing and anti-money laundering requirements.

During transaction processing — whether you are depositing or withdrawing funds — we also handle payment-related data. This may include card details or wallet identifiers, depending on the method you choose. We do not store full payment credentials on our servers; sensitive financial data is processed through secure third-party payment gateways that operate to recognised industry standards.

We may share your data with a limited set of external parties where it is strictly necessary. These include payment processors who facilitate your transactions, identity verification services that help us confirm your details during account registration or responsible gambling checks, and regulatory or law enforcement authorities where we are legally required to do so. We do not sell your data or share it for marketing purposes with third parties.

How We Protect Your Data

We use 256-bit SSL encryption to protect all data transmitted between your browser and our web platform. Your personal information is held on secure servers with restricted internal access — only personnel who genuinely require access to your data in order to perform their role are permitted to view it. Access controls and audit procedures are in place to enforce this.

We retain your personal data for as long as your account remains active or as required by law following account closure or a period of inactivity. In practice, this means we may hold certain records for several years after an account is closed, in line with our regulatory and anti-fraud obligations. Once the applicable retention period has passed, data is securely deleted or anonymised.

You have the right to access the personal data we hold about you, to request corrections where information is inaccurate, and to ask us to delete your data where no legal obligation requires us to retain it. To exercise any of these rights, please contact our support team directly through the channels available on our web platform. We will respond to your request within a reasonable timeframe and in accordance with applicable data protection standards.

If we make material changes to this privacy policy, we will notify you through our web platform or by email prior to those changes taking effect. Continued use of the platform following such notice constitutes your acknowledgement of the updated terms.

For independent guidance on your data protection rights in the United Kingdom, you may contact the relevant national supervisory authority responsible for data protection matters.