This Privacy Policy explains how BigDrago, operated by Win Top Ltd, collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to players residing in the United Kingdom. Please read this page carefully so you understand your rights and our responsibilities.

What We Collect and Why

When you create an account, we collect information such as your name, date of birth, email address, and chosen payment details. This information is necessary to verify your identity, process deposits and withdrawals, and comply with our obligations under applicable gaming and anti-money laundering standards. During transaction processing, we may also collect data related to the payment method you use — for example, partial card details or e-wallet identifiers — solely to facilitate secure financial transfers.

We also gather technical data as you navigate our web platform. This includes session logs, browser type, device identifiers, and IP addresses. We use this information to maintain the security and stability of the platform, detect suspicious activity, and ensure that your experience functions as intended. Cookies are used to remember your preferences and keep your session active; you can manage cookie settings through your browser at any time, though disabling certain cookies may affect how parts of the platform operate.

How We Share and Protect Your Data

Your data is protected using 256-bit SSL encryption across all connections to our web platform. Personal information is stored on secure servers with restricted internal access — only staff who require your data to perform their role are permitted to view it. We do not sell your personal information to third parties under any circumstances.

There are limited situations in which we share your data externally. Payment gateways receive the minimum information needed to process your transactions. Identity verification services may receive documentation you submit during account checks. Regulatory and law enforcement authorities may request data where we are legally obliged to comply. In each case, data is shared only to the extent strictly necessary and in accordance with our obligations as a licensed operator under the Anjouan Gaming Authority (licence number ALSI-202509029-FI1).

You have the right to request access to the personal data we hold about you, to ask us to correct inaccurate information, or to request the removal of your account data where no legal retention obligation applies. To exercise any of these rights, please contact us through the support channels available on our web platform. We will respond to verified requests within a reasonable timeframe.

We retain your personal data for as long as your account remains active. Following account closure or a period of inactivity, we retain data only for as long as required by applicable legal and regulatory obligations. Once that retention period has elapsed, your data is securely deleted or anonymised.

If we make material changes to this Privacy Policy, we will notify you through a notice on our web platform or by email to the address registered on your account. Continued use of the platform following such notification constitutes acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how we handle your data.