Last updated: March 31, 2026

This is a translation provided for convenience. In case of discrepancy, the English version prevails as the legally binding document.

WinThe.watch respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Data Controller

The data controller is WinThe.watch, operated from the Principality of Andorra. For any privacy-related inquiries, contact us at privacy@winthe.watch.

2. Information We Collect

Account information

When you create an account, we collect your email address and password (stored securely using industry-standard encryption).

Payment information

When you purchase tickets for premium draws, payment is processed securely by Stripe. We do not store your credit card details — this is handled entirely by Stripe in compliance with PCI DSS standards.

Usage data

We collect anonymised usage data including pages visited, raffle participation, and device/browser information to improve our platform.

3. How We Use Your Data

We use your data for the following purposes:

• To create and manage your account
• To process draw entries and premium ticket purchases
• To notify winners and arrange prize delivery
• To send important platform updates and notifications
• To improve our services and user experience
• To comply with legal obligations

4. Legal Basis for Processing

We process your data based on: (a) your consent when creating an account, (b) the performance of a contract when you participate in raffles, (c) our legitimate interest in improving our services, and (d) compliance with legal obligations.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe — for secure payment processing
• RandomDraws.com — for verified draw execution (anonymised entry data only)
• Delivery partners — for prize shipping (winner's name and address only)

6. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Access — request a copy of your personal data
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — request your data in a portable format
• Objection — object to processing based on legitimate interest
• Restriction — request limitation of processing

To exercise any of these rights, contact us at privacy@winthe.watch.

8. Cookies

We use essential cookies for site functionality and age verification. We use anonymised analytics cookies to understand usage patterns. You can manage cookie preferences through your browser settings. See our Cookie Policy for details.

9. Security

We implement industry-standard security measures including SSL encryption, secure password hashing, and regular security audits. Payment processing is handled by Stripe, a PCI DSS Level 1 certified provider.

10. International Transfers

Your data is primarily processed within the European Economic Area. Where data is transferred outside the EEA (e.g., to service providers), we ensure appropriate safeguards are in place as required by the GDPR.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users.

12. Contact

For privacy-related inquiries: privacy@winthe.watch