How we collect, use, and protect your personal information.
Last updated: January 4, 2026 · GDPR & CCPA oriented
We collect information you provide (name, email, phone, date of birth), automatically (device, IP, browser, cookies), and from partners (identity verification, payment processors). We use it to run the service, prevent fraud, and meet legal duties.
We use data to provide and improve the Platform, process transactions and redemptions, verify age/identity, prevent abuse, send optional marketing (with consent), and analyze product usage. We do not sell your personal information.
Essential cookies keep you signed in. Analytics (e.g. Google Analytics, PostHog, Clarity) help us understand usage. Marketing pixels may personalize ads where allowed. You can control non-essential cookies in your browser; disabling essentials may break login.
We use TLS in transit, hashed passwords, httpOnly auth cookies, and operational controls. No system is perfectly secure — we notify affected users of breaches as required by law.
Depending on your location you may request access, correction, deletion, portability, or opt-out of marketing. Contact us to exercise rights. Legal retention (e.g. financial records) may limit deletion.
We use vendors for analytics, error tracking (Sentry), payments, messaging, and identity checks. Each has its own policy. We are not responsible for external sites linked from the Platform.
Account and transaction data may be retained as required for fraud prevention and financial regulation after account closure. Marketing preferences are honored promptly when you opt out.
The Platform is not for anyone under 21. We delete underage accounts when discovered.
We do not sell personal information. California residents may still contact us for CCPA requests at the address below.
Email privacy@win.now or use Contact Us. We aim to respond within 30 days.