Wonaco Privacy Policy

The Data Controller Behind Wonaco

Wonaco is operated by NovaForge Ltd, registered at Bad Complex, Hamchako, Mutsamudu, Anjouan, Union of Comoros, and it is NovaForge Ltd that determines how and why your personal data is processed across the casino, sportsbook and cashier. Any reference to we or our in this policy refers to NovaForge Ltd acting under Anjouan Gaming Board licence ALSI-152406028-FI2.

Why We Process Your Data

We process your data to open and maintain your account, to verify your age and identity before releasing a withdrawal, to run the cashier and settle wagers, and to meet the record-keeping obligations attached to our gaming licence. Marketing communications, including reload bonus alerts and Weekend Reload reminders, are sent only where you have not opted out, and the legal basis for that processing is your consent, separate from the contractual basis that covers account operation and payment processing. Fraud prevention checks run on every deposit and withdrawal rely on our legitimate interest in protecting the cashier from misuse.

What Happens to Your Data After You Close Your Account

Once you close your Wonaco account, transaction records, KYC documents and wagering history are retained for the period required under our licensing obligations rather than deleted immediately, since a regulator or payment provider may request them during that window. After the retention period lapses, account data is deleted from active systems; anonymised statistical data derived from your play history may be kept indefinitely since it no longer identifies you.

Where You Can Lodge a Complaint

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the data protection authority in your country of residence, in addition to raising the matter with us directly first. We aim to resolve a data-related complaint internally within a reasonable timeframe before you escalate it externally, and we will confirm in writing once the internal review is complete.

Data We Collect

The data we collect starts at registration: your name, date of birth, email, phone number and residential address. Payment data follows every deposit and withdrawal, including the card, e-wallet or wallet address used. KYC documents such as an Australian driver’s licence, passport or Medicare card, together with a utility bill or bank statement for proof of address, are collected before your first withdrawal. Technical data, including your IP address, device type and browser, plus session logs and cookie identifiers, is recorded automatically during every visit and used to keep your login session secure.

How Your Data Crosses Borders

Because Wonaco’s servers and payment processing partners are not based in Australia, your data crosses borders as part of normal operation, moving between our hosting infrastructure and the jurisdictions where our payment and KYC partners operate. Where a transfer takes place outside your home jurisdiction, we rely on contractual safeguards with each processor to keep the handling standard consistent regardless of where the data physically sits, and we review those arrangements when a processor changes its own infrastructure.

Payment data passes to the processors handling your specific method, including card acquirers for Visa and Mastercard transactions and the relevant cryptocurrency payment gateway for Bitcoin, Litecoin, Ethereum, Dogecoin and Tether transfers. KYC documents are shared with our identity verification provider for the sole purpose of confirming your age and identity. Game outcome and RTP data is shared with Pragmatic Play, Evolution Gaming, NetEnt, Play’n GO, Hacksaw Gaming and the other studios whose titles you play, limited to what is needed to record and audit results, and with Evolution Gaming and Ezugi specifically for live dealer session logging.

You can request access to the personal data we hold, ask for a correction where it is inaccurate, request deletion where retention is not legally required, restrict certain processing, object to marketing use, or request a portable copy of your data in a common format. Submit any such request through the contact details below and expect a response once your identity has been confirmed.

Cookies on the site fall into three categories: essential cookies that keep you logged in and the cashier functioning, analytics cookies that measure which pages and games are used most, and marketing cookies tied to reload bonus targeting. Essential cookies cannot be disabled without breaking core site functions; analytics and marketing cookies can be declined from the cookie banner shown on your first visit, or adjusted later in your browser’s cookie settings.

Contact for Data Requests

Requests concerning your personal data, including access, correction or deletion requests, should be sent to [email protected] with your registered account email included so the request can be matched to your profile and actioned without an unnecessary delay.