This Privacy Policy explains how KSI Casino, operated by Win Top Ltd, collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to all players residing in the United Kingdom. Please read this page carefully so you understand how your information is handled.

We are committed to being transparent about our data practices. If you have questions that are not answered here, you can reach us through our support channels at any time.

What We Collect and Why

When you create an account with us, we collect personal information such as your full name, date of birth, email address, and chosen payment details. This information is necessary to verify your identity, process deposits and withdrawals, and meet our obligations under applicable licensing and anti-money laundering requirements. During transaction processing, we also record payment method details and transaction histories so that financial activity on your account remains accurate and auditable.

We collect this data because we cannot operate a lawful, secure gambling service without it. Identity verification in particular is a regulatory requirement, and we use trusted third-party identity verification services to carry out these checks. Those providers receive only the minimum data necessary to complete verification and are contractually bound to handle it responsibly.

Beyond account and payment data, our web platform automatically collects certain technical information during your sessions — including your IP address, browser type, and session activity logs. We use this data solely to maintain the security and stability of the platform, to detect unusual or potentially fraudulent behaviour, and to ensure the site functions correctly across different devices and browsers.

How We Protect and Share Your Data

All data transmitted between your browser and our servers is protected using 256-bit SSL encryption. Your personal information is stored on secure servers with restricted internal access — only staff members who genuinely need to view your data in order to carry out their role are permitted to do so.

We do not sell your personal data to third parties. We may share it in a limited number of strictly defined circumstances: with payment gateway providers to process your transactions, with identity verification services as described above, and with regulatory or law enforcement authorities where we are legally required to do so. In each case, data sharing is limited to what is strictly necessary.

You have rights over your personal data. You may request a copy of the information we hold about you, ask us to correct inaccurate records, or request that your account data be removed, subject to any legal retention obligations we must fulfil. To exercise any of these rights, please contact our support team, who will direct your request to the appropriate compliance team member.

We retain your data for as long as your account remains active. Following account closure or a period of inactivity, we retain certain records for the minimum period required by our licensing authority and applicable financial regulations, after which data is securely deleted or anonymised.

If we make material changes to this Privacy Policy, we will notify you via the email address registered to your account or by a notice on the web platform before the changes take effect. Continued use of the platform after notification constitutes acceptance of the updated policy. We encourage you to review this page periodically.