This Privacy Policy explains how BigDrago, operated by Win Top Ltd, collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to players residing in the United Kingdom. Please read this page carefully so you understand how your information is handled and what rights you hold over it.

What We Collect and Why

When you create an account, we collect personal information such as your full name, date of birth, email address, and billing details. This information is required to verify your identity, process transactions, and meet our obligations under applicable anti-money laundering and responsible gambling standards. During payment processing, we also handle transactional data — including deposit and withdrawal records — to maintain accurate account histories and support any disputes or queries you raise with us.

We also collect technical data generated during your sessions on our web platform. This includes your IP address, browser type, device identifiers, and session logs. We use this information to keep the site secure, detect unusual activity, and ensure that pages and features load correctly for you. Cookies are used to maintain your session state and remember certain preferences. You may adjust your browser settings to limit cookie use, though doing so may affect how parts of the platform function.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption across all connections between your browser and our servers. Personal and financial information is held on secured servers with restricted internal access — only staff members who require it to perform their role are permitted to view it. We do not sell your data to third parties under any circumstances.

There are limited, specific situations in which we share your information with external parties. Payment gateways process your deposit and withdrawal instructions and receive only the financial data necessary to complete those transactions. Identity verification services may receive documentation you submit to confirm your identity during registration or account review. Regulatory authorities and licensing bodies may also request data as part of their oversight functions, and we are obliged to comply with such requests. All third parties we work with are required to handle your data responsibly and in line with applicable data protection standards.

We retain your account data for as long as your account remains active. Following account closure or a defined period of inactivity, we keep records for as long as required under our regulatory and legal obligations. Once the applicable retention period has ended, your data is securely deleted or anonymised.

You have the right to request access to the personal data we hold about you, ask us to correct inaccurate information, or request deletion of your data where there is no legal reason for us to retain it. To exercise any of these rights, please contact our support team through the channels available on our web platform. We will respond to requests within a reasonable timeframe and in accordance with our obligations to UK-based players.

If we make material changes to this Privacy Policy, we will notify you through our web platform before those changes take effect. We encourage you to review this page periodically. Continued use of the platform following any update constitutes acceptance of the revised policy.