This Privacy Notice describes how Fortunica Casino (Winstar N.V., Curaçao) processes your personal data. It covers what data is collected, the legal basis for processing, how data is shared and retained, and what rights you hold.
Legal Basis for Processing
Fortunica processes personal data under the following legal bases:
| Processing activity | Legal basis |
|---|---|
| Account registration and management | Contract performance |
| KYC and identity verification | Legal obligation (AML/KYC regulations) |
| Payment processing | Contract performance and legal obligation |
| Fraud detection and security | Legitimate interests |
| Responsible gambling monitoring | Legitimate interests and legal obligation |
| Marketing communications | Consent (opt-in) |
Categories of Data Processed
Fortunica collects and processes the following categories of personal data: identity and contact data (name, email, phone, address, date of birth, government ID); financial data (payment method details, transaction history, account balance); technical data (IP address, device fingerprint, browser type, login history); and behavioural data (game history, session duration, wager volumes). Special category data — such as health information — is not intentionally collected and should not be submitted.
Third-Party Processors
Fortunica uses third-party processors for specific functions. These include payment service providers for deposit and withdrawal processing; identity verification services for KYC; cloud infrastructure providers for hosting and data storage; fraud prevention and analytics providers. All processors operate under data processing agreements requiring GDPR-equivalent protections regardless of their location. Data is not transferred to countries without adequate protection frameworks unless appropriate safeguards (standard contractual clauses) are in place.
Profiling and Automated Decisions
Fortunica uses automated profiling in limited contexts: responsible gambling monitoring (detecting patterns suggesting problem gambling) and fraud detection (flagging unusual account activity). These automated processes may result in account-level actions — such as a responsible gambling prompt or a temporary account hold — but material decisions are reviewed by a human agent. You may request human review of any automated decision affecting your account by contacting support.
Your Data Rights
You have the following rights over your personal data: access (receive a copy of data held); rectification (correct inaccurate data); erasure (delete data not required for compliance); restriction (limit processing while a dispute is resolved); portability (receive data in a machine-readable format); objection (object to processing based on legitimate interests or direct marketing); and withdrawal of consent for consent-based processing. Submit requests to Fortunica customer support from your registered email. Response time: 30 days. Requests that cannot be fulfilled due to regulatory retention obligations will receive a written explanation.
Cookies and Tracking
Fortunica uses cookies for session management (strictly necessary), functional purposes (preferences, settings), analytics (aggregate traffic data), and marketing (affiliate attribution). The full Cookie Policy is published separately on the Fortunica site. You can manage cookie preferences via the consent banner on first visit or through your browser settings. Withdrawing marketing cookies does not affect your ability to use the site or claim bonuses.
Data Controller Contact
The data controller is Winstar N.V., operating Fortunica Casino under Curaçao Gaming Authority Licence No. 8048/JAZ. For data rights requests or privacy concerns, contact Fortunica customer support via live chat (24/7) or through the support section of the site, using your registered account email address. Responses are provided within 30 days.
FAQ
Fortunica processes data under contract performance (account management, payments), legal obligation (KYC, AML), legitimate interests (fraud detection, responsible gambling monitoring), and consent (marketing communications). The legal basis depends on the specific processing activity.
Fortunica may transfer personal data to processors in other countries for hosting, payment processing, or KYC verification. Transfers outside adequate protection frameworks are covered by standard contractual clauses (SCCs) or equivalent safeguards to maintain GDPR-level protections regardless of processor location.
Yes, in limited contexts: responsible gambling monitoring and fraud detection use automated profiling. Material decisions resulting from automated processes are reviewed by a human agent. You may request human review of any automated decision affecting your account by contacting Fortunica customer support.
Yes. Submit a Subject Access Request (SAR) to Fortunica customer support from your registered email address. Fortunica will provide a copy of all personal data held within 30 days. The response is provided in a machine-readable format where technically feasible.
Opt out via the unsubscribe link in any Fortunica marketing email, or contact customer support to update your communication preferences. Opt-out requests are processed within 5 business days. Withdrawing marketing consent does not affect your account access or bonus eligibility.