Privacy Policy

Personal Data means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, by reference to identifiers such as a name, identification number, location data, or online identifier.

Processing means any operation or set of operations performed on personal data, whether or not by automated means.

Profiling refers to automated processing of personal data to evaluate certain personal aspects of a natural person.

Controller means the entity that determines the purposes and means of the processing of personal data.

Processor means an entity which processes personal data on behalf of the controller.

Recipient refers to any party to whom personal data is disclosed.

Third party means any party other than the data subject, controller, or processor.

Consent means any freely given, specific, informed, and unambiguous indication of the data subject's wishes.

Personal data breach refers to a security breach leading to the accidental or unlawful destruction or unauthorized disclosure of personal data.

Group of undertakings means a controlling undertaking and its controlled undertakings.

Supervisory authority is a public authority that oversees data protection in accordance with Article 51 GDPR.

Use of our services implies your consent to this Privacy Policy, which should be read alongside our Terms and Conditions. Updates may be posted on our platforms, and continued use constitutes acceptance.

If you do not accept this policy or fail to provide necessary information, access to certain features may be restricted.

This Privacy Policy forms a binding agreement between you and ChapinWin. We encourage periodic review to stay informed.

ChapinWin values your privacy and complies with the EU's General Data Protection Regulation (GDPR), managing data transparently and lawfully.

Our services are intended only for individuals aged 18 or older.

The Website www.chapinwin.com ("Casino", "Website", "Company", "We", "Us", "Our") is owned and operated by Gem Solutions B.V., registered in Curaçao. Gemplay Limited (Cyprus) serves as a European payment agent.

We are the data controller responsible for processing your data under applicable gambling regulations.

"We," "us," and "our" refer to Gem Solutions B.V.

For privacy-related questions, contact our Data Protection Officer at legal@chapinwin.com.

Contact us to:

• Confirm your data.
• Inquire about use.
• Opt-out of marketing.
• Request copies of data.

Opt out via your account settings or contact support@chapinwin.com.

You can update inaccurate information with proper documentation.

If unanswered within 10 days, follow up through other methods.

Legitimate requests will be addressed within one month, or you'll be updated.

Information You Provide: Name, address, contact details, ID, proof of funds, and more.

Technical Data: IP address, browser type, OS, cookies, etc.

Gameplay Data: Games played, time spent, interactions.

Analytics Data: Usage logs, timestamps, troubleshooting, and analysis.

Third-Party Sources: Includes business partners, payment processors, and marketing partners.

Categories of data we store include:

• Identity & Contact Data
• Financial & Transaction Data
• Technical & Usage Data
• Communication & Profile Data
• Special categories (e.g., responsible gaming info)

We use your information to:

• Provide services.
• Perform legal obligations.
• Customize advertising.
• Prevent fraud & ensure responsible gaming.
• Analyze performance & improve services.

We may share data with:

• Group members and employees.
• Game & payment providers.
• Marketing partners.
• Regulators and legal advisors.
• AML and KYC tool providers.
• Government authorities (when required).

Your data may be transferred outside the EEA. Safeguards like Standard Contractual Clauses are in place.

Data is retained only as long as necessary, subject to a legal minimum of 5 years for anti-money laundering compliance.

Generally not used. If implemented, you'll be informed as required by law.

Security measures include:

• Access control.
• Encryption.
• Confidentiality agreements.
• Optional two-factor authentication (2FA).

You may:

• Access, correct, or erase your data.
• Object to processing.
• Restrict processing.
• Request data portability.
• Withdraw consent.
• Lodge a complaint.

Use is restricted to persons 18+. Attempts by minors are investigated and data is removed.

Linked websites are not governed by our Privacy Policy. We disclaim responsibility for external sites.