Last updated: March 31, 2026

This is the original English version and the legally binding document.

WinThe.watch respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Data Controller

The data controller is Winthe Watch Ltd, a company registered in England and Wales, operating the WinThe.watch platform. For any privacy-related inquiries, contact us at privacy@winthe.watch.

2. Information We Collect

Account information

When you create an account, we collect your first name, last name, country, phone number (optional) and email address, together with your password (stored securely as a hash, in line with industry standards).

Payment information

When you purchase entries for premium draws, payment is processed securely by Stripe. We do not store your credit card details — this is handled entirely by Stripe in compliance with PCI DSS standards.

Usage data

We do not use analytics tools or advertising trackers. We only process the information you provide and the record of your participation in our draws. Our hosting provider keeps standard server logs to ensure security and prevent fraud.

3. How We Use Your Data

We use your data for the following purposes:

• To create and manage your account
• To process draw entries and premium entry purchases
• To notify winners and arrange prize delivery
• To send important platform updates and notifications
• To improve our services and user experience
• To comply with legal obligations

4. Legal Basis for Processing

We process your data based on: (a) your consent when creating an account, (b) the performance of a contract when you participate in draws, (c) our legitimate interest in improving our services, and (d) compliance with legal obligations.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe — for secure payment processing
• RandomDraws.com — for verified draw execution (anonymised entry data only)
• Delivery partners — for prize shipping (winner's name and address only)

6. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Access — request a copy of your personal data
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — request your data in a portable format
• Objection — object to processing based on legitimate interest
• Restriction — request limitation of processing

To exercise any of these rights, contact us at privacy@winthe.watch.

8. Cookies

We use essential cookies for site functionality and age verification. We do not use third-party advertising or analytics trackers. You can manage cookie preferences through your browser settings. See our Cookie Policy for details.

9. Security

We implement industry-standard security measures including SSL encryption, secure password hashing, and regular security audits. Payment processing is handled by Stripe, a PCI DSS Level 1 certified provider.

10. International Transfers

Your data is primarily processed within the European Economic Area. Where data is transferred outside the EEA (e.g., to service providers), we ensure appropriate safeguards are in place as required by the GDPR.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users.

12. Contact

For privacy-related inquiries: privacy@winthe.watch