This Privacy Policy explains how BigDrago, operated by Win Top Ltd, collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to players residing in the United Kingdom. Please read this page carefully so you understand your rights and our responsibilities.

What We Collect and Why

When you create an account, we collect information such as your name, date of birth, email address, and chosen payment details. This information is necessary to verify your identity, process deposits and withdrawals, and meet our obligations under anti-money laundering and responsible gambling standards. During transaction processing, we may also collect financial data — including payment method details and transaction histories — to complete your requests accurately and maintain a clear audit trail.

We also gather technical data as you navigate our web platform. This includes your IP address, browser type, device identifiers, and session activity logs. We use this information to keep the platform secure, detect unusual behaviour, and ensure that core functions operate reliably for every user. Cookies are used to maintain your session and remember your preferences between visits. You may adjust cookie settings through your browser at any time, though disabling certain cookies may affect how parts of the platform function.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption during transmission and is stored on secure servers with restricted internal access. Only staff members with a legitimate operational need are permitted to access personal data, and those individuals are bound by confidentiality obligations.

We do not sell your personal information to third parties. However, we may share data in a small number of strictly necessary circumstances. Payment gateways require transaction data to process your deposits and withdrawals. Identity verification services receive the information needed to confirm your identity as part of our onboarding process. Where required by law or by a regulatory authority — such as the Anjouan Gaming Authority, under licence number ALSI-202509029-FI1 — we will disclose relevant data in response to a lawful request. Beyond these situations, your data remains within our systems.

We retain your personal data for as long as your account remains active and for a period thereafter as required by applicable legal and regulatory obligations. If your account is closed or becomes inactive, we keep records for the minimum period necessary to satisfy our compliance duties, after which data is securely deleted or anonymised.

You have the right to request access to the personal data we hold about you, to ask us to correct inaccurate information, or to request the removal of your data where no legal obligation requires us to retain it. To exercise any of these rights, please contact us through the support channels available on our web platform. We will respond to your request within a reasonable timeframe and in accordance with applicable data protection standards.

If we make material changes to this Privacy Policy, we will notify you through your registered email address or via a notice on the platform before those changes take effect. Continued use of the platform after that point will indicate your acknowledgement of the updated terms. We encourage you to review this page periodically to stay informed about how we handle your data.