Privacy Policy

This policy traces personal information through its life on Ultrawin. What you hand over, what gets created as you play, where it travels, how long it lingers, and what you can require us to do with it.

It covers the site and the app equally. It is written so it can be read, since a policy nobody follows shields nobody.

Handed Over at Signup

Opening an account asks for very little.

A name. An email address. A mobile number. A password, held in scrambled form rather than as text anyone could read off a screen. Confirmation that you are old enough.

Nothing further is requested at this point, and no identity documents are involved, because checks on this platform happen later in the process rather than at the entrance.

Created While You Play

Using the platform produces records you never typed.

Each stake and each round is logged, together with what was staked, which market or title it sat on, the price, how it resolved and what it did to the balance. Each deposit and each payout is logged with amount, route and timing. Sessions are logged, including when a sign in happened and from where.

None of that is optional, because it constitutes the account. A platform unable to record what was staked could not settle anything, could not pay anybody, and could not show a history to the person asking for one.

Sent By Your Device

Certain things arrive by themselves the moment a connection opens.

Handset or computer type, operating system, browser or app version, network address. All of it serves account security, spotting access that does not look like the usual pattern, and keeping the platform working on the hardware people genuinely own rather than the hardware developers own.

Cookies belong to this group. They hold a session open, remember settings and support security. The essential ones cannot be disabled without breaking sign in itself. The rest are manageable through your browser, and wiping them ends your session and resets preferences, which is how it should behave rather than a malfunction.

Added at Verification

The first withdrawal request brings identification issued by a government body, plus the banking details for wherever the payout should land.

This is the most sensitive material attached to an account and it is gathered for a single purpose. Funds have to reach whoever owns them. Verification is what lets a payout land in your bank, and what keeps the platform from being turned into a channel for other people's money.

It happens once. Altering payout details afterwards may prompt a further check.

What Any of It Is For

Decisions Made By Machine

Parts of this run automatically instead of passing under human eyes each time.

Screening for multiple accounts. Flagging sign ins from hardware or places the account has not seen. Picking out behaviour resembling a hijacked account or an offer being worked.

A machine flag settles nothing on its own where the consequence would materially affect someone. A restriction gets human review, and where you think a decision was wrong you may ask for it to be revisited.

Screening of this kind exists because removing it makes things worse. Hijacked accounts and duplicate account abuse both get considerably easier without it, and both take money from ordinary players.

Messages

Anything about running the account is part of the service. Security warnings, payout confirmations, notices about changes to these terms. They go out whatever your marketing preference happens to be.

Marketing is separate and entirely optional. Switch the preference in your settings whenever you like, and silence promotional alerts in the app independently of that. Neither action touches anything else.

Who Else Sees It

Nothing here is sold. No arrangement exists under which personal information is passed to advertisers or brokers.

Sharing happens only where a defined purpose demands it.

• Banks and payment providers, to move money in either direction.
• Identity and fraud services, to establish who somebody is and detect hijacked or duplicated accounts.
• Hosting and technology suppliers, running the systems underneath the platform under confidentiality obligations.
• Game and data providers, only to the extent needed to deliver what you are using.
• Regulators, enforcement bodies and legal advisers, where the law demands it or a claim has to be brought or defended.

Each receives what its function needs and nothing further.

Details Belonging To Others

Now and then somebody attaches another person's information to a support message. Funds arriving from a relative's account, perhaps, or a screenshot that leaves someone else's details visible.

Please keep other people's information out of your messages unless your query genuinely cannot be settled without it. Where it does arrive, it falls under this policy and gets used only for that.

This links back to a rule running through everything. Accounts and payment methods have to be your own, so a case where another person's banking details become relevant usually signals something needing correction rather than explanation.

How Long Any of It Lasts

Account information stays while the account is open.

Once closed, it is held for whatever period legal, regulatory, financial and dispute obligations require, then removed or stripped of anything identifying.

Records tied to a self exclusion outlive that period deliberately. An exclusion somebody could erase by closing an account and opening another would protect nobody.

How It Is Protected

Measures proportionate to how sensitive the material is, meaning encryption while data moves, internal restrictions on who can see what, and monitoring for activity that does not fit an account's pattern.

Passwords are scrambled rather than stored readably. That is the reason support cannot recite yours back to you, and the reason a request for it can only be coming from somebody with no business asking.

Nothing is flawless, and the strongest safeguard on any account is not ours anyway. It is a password living in exactly one place, a code you pass to nobody, and ending sessions on hardware that is not yours.

What You May Require

• Sight of what is held, much of which already sits visible inside the account.
• Correction of contact details and settings, most of which you can alter yourself.
• Correction of anything you cannot alter directly, such as a verified name.
• Withdrawal of consent to marketing.
• Closure of the account.
• Deletion, insofar as nothing legally required to be kept is affected.

Requests travel through the official support channels. Confirming who you are may be necessary first, which protects you rather than obstructs you, given that altering or releasing account information is precisely what somebody impersonating you would be after.

For privacy-related questions or account information requests, visit Contact Us.

People Under Eighteen

Only those aged eighteen or above may use the platform, and material relating to anybody younger is not knowingly gathered.

An account discovered to belong to a minor is shut, and whatever was collected is handled according to our legal obligations.

Where a young person uses the same hardware as you, leave nothing stored on it and close your session properly each time.

Revisions and Questions

Revisions follow changes to the platform or to our obligations, and whatever is published stands as current. Where a revision materially alters how information gets used, that will be made plain rather than left to be noticed.

Privacy questions go through the official Ultrawin support channels. Say at the outset that the query concerns personal information so it reaches the right desk, include your username, and never attach a password to anything.