This Privacy Policy explains how BigDrago, operated by Win Top Ltd, collects, uses, stores, and protects your personal data when you use our web platform. It applies fully to all players residing in the United Kingdom. Please read it carefully so you understand your rights and our responsibilities.

What We Collect and Why

When you create an account, we collect information such as your name, date of birth, email address, and payment details. This information is necessary to verify your identity, process deposits and withdrawals, and meet our obligations under applicable anti-money laundering and responsible gambling standards. During transaction processing, we also handle financial data — including card or e-wallet references — solely to complete the payment you have requested and to maintain accurate account records.

As you navigate our web platform, we collect technical data such as your IP address, browser type, and session activity. This information helps us keep the platform secure, detect unusual behaviour, and ensure that pages load and function correctly for you. We use cookies to maintain your session and remember your preferences. You may manage cookie settings through your browser, though disabling certain cookies may affect how parts of the site operate.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption during transmission, and stored on secure servers with restricted internal access. Only staff members who genuinely need access to your information in order to carry out their role are permitted to view it. We do not sell your personal data to third parties under any circumstances.

There are limited situations in which we share your data with external parties. Payment processors and identity verification services receive only the information they require to complete their specific function. Where we are legally obliged to do so — for example, in response to a request from a regulatory authority or law enforcement body — we will disclose data to the extent required by that obligation. All third parties we work with are required to handle your data responsibly and in accordance with applicable data protection standards.

We retain your personal data for as long as your account remains active. Following account closure or a period of inactivity, we keep your records for the duration required by our regulatory and legal obligations. Once that retention period has passed, your data is securely deleted or anonymised.

You have the right to request a copy of the personal data we hold about you, to ask us to correct any inaccuracies, or to request the removal of your data where we are not legally required to retain it. To exercise any of these rights, please contact our support team through the channels available on our web platform. We will respond to your request within a reasonable timeframe.

If we make material changes to this Privacy Policy, we will notify you through our web platform or by email before those changes take effect. Continued use of the platform following notification will indicate your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we handle your data.