Privacy Policy – WinPrincess Tanzania
This policy explains what personal data WinPrincess Tanzania collects, how it is used, and your rights as a data subject. It applies to all users of this website and the WinPrincess Tanzania mobile app. Last updated: March 2026.
Data we collect and how we use it
We collect only the data necessary to operate your account, process payments, and comply with GBT licensing requirements including anti-money laundering (AML) and know-your-customer (KYC) obligations under Tanzania law.
| Data type | Examples | Purpose |
|---|---|---|
| Identity data | Full name, date of birth, national ID / passport | KYC verification, age check, AML compliance |
| Contact data | Mobile number, email address | Account communication, SMS OTP, support |
| Financial data | M-Pesa number, transaction history | Deposits, withdrawals, fraud prevention |
| Technical data | IP address, device type, browser, cookies | Security, session management, analytics |
| Usage data | Pages visited, bets placed, games played | Responsible gaming monitoring, product improvement |
| Marketing data | Promotion preferences, opt-in status | Bonus offers (only with your consent) |
Data sharing and retention
We do not sell your personal data. Data is shared only with the parties listed below where legally required or operationally necessary. All third-party processors are contractually bound to protect your data to the same standard as WinPrincess Tanzania.
| Recipient | Reason |
|---|---|
| Gaming Board of Tanzania (GBT) | Regulatory reporting, licence compliance |
| Payment processors (M-Pesa, Tigo Pesa, Airtel Money) | Transaction processing |
| KYC / AML verification providers | Identity verification as required by law |
| Game providers (Spribe, Evolution, Pragmatic Play) | Game delivery and fairness auditing |
| IT and hosting providers | Platform operation and security |
Account data is retained for a minimum of 5 years after account closure in line with GBT AML requirements. Marketing data is deleted immediately upon opt-out.
Your rights and contact
Under Tanzania's Electronic and Postal Communications Act and GBT data protection requirements, you have the following rights regarding your personal data. To exercise any right, contact our Data Protection Officer by email or live chat — requests are processed within 30 days.