This Privacy Policy explains how BigDrago, operated by Win Top Ltd, collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to players residing in the United Kingdom. Please read this page carefully so you understand your rights and our responsibilities.

What We Collect and Why

When you create an account with us, we collect information such as your full name, date of birth, email address, and chosen payment details. This information is necessary to verify your identity, process deposits and withdrawals, and comply with our obligations under applicable gaming and anti-money laundering standards. During transaction processing, we may also collect data related to the payment method used — for example, partial card details or e-wallet identifiers — solely to facilitate secure and accurate transfers.

We also gather technical data as you navigate our web platform. This includes session logs, browser type, device identifiers, and IP addresses. We use this information to maintain the security and stability of the platform, detect unusual activity, and ensure that your experience functions as intended. Cookies are used to manage your session and remember your preferences; you can adjust cookie settings through your browser at any time, though doing so may affect certain platform features.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption during transmission, and stored on secure servers with restricted internal access. Only staff members who require access to perform their specific duties are permitted to view your personal information, and all such access is logged and monitored.

We do not sell your data to third parties. There are, however, limited and strictly defined circumstances in which your information may be shared externally. These include sharing with payment gateways and identity verification services that are necessary to process your transactions and confirm your identity, and disclosure to regulatory or law enforcement authorities where we are legally required to do so. Any third party we work with is required to handle your data in a manner consistent with applicable data protection standards.

Following account closure or a period of inactivity, we retain your personal data for as long as required by our regulatory obligations. Once that retention period has elapsed, your data is securely deleted or anonymised. The specific retention period may vary depending on the nature of the data and the requirements of the authority under which we operate.

You have the right to request access to the personal data we hold about you, to ask us to correct any inaccuracies, or to request the removal of your account data where no legal obligation requires us to retain it. To exercise any of these rights, please contact our support team through the channels available on our web platform. We will respond to your request within a reasonable timeframe and in accordance with our obligations.

If we make material changes to this Privacy Policy, we will notify you through our web platform or by email before those changes take effect. Continued use of the platform following notification will be taken as acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we handle your data.