Data Protection & GDPR
How we protect your personal data and comply with GDPR
Last Updated: 10/24/2025
1. Introduction
u-wave.win is committed to protecting your privacy and ensuring the security of your personal data. This policy explains how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller Information
Data Controller: u-wave.win Ltd.
Address: 12 Arch. Makarios III Avenue, Limassol 3030, Cyprus
Email: privacy@u-wave.win
Phone: +357 22 867 000
Data Protection Officer: dpo@u-wave.win
3. Personal Data We Collect
Account Information
- Full name and contact details
- Email address and phone number
- Date of birth and nationality
- Address and proof of residence
- Identity verification documents
Financial Information
- Payment method details
- Transaction history
- Bank account information
- Source of funds documentation
Technical Information
- IP address and device information
- Browser type and version
- Operating system details
- Website usage analytics
- Cookies and tracking data
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract Performance: To provide our lottery services
- Legal Obligation: To comply with gaming and financial regulations
- Legitimate Interest: To improve our services and prevent fraud
- Consent: For marketing communications (where applicable)
5. How We Use Your Data
Service Provision
- Account creation and management
- Lottery ticket processing
- Payment processing and withdrawals
- Customer support and communication
Compliance & Security
- Identity verification and KYC procedures
- Anti-money laundering monitoring
- Fraud prevention and detection
- Regulatory reporting requirements
Improvement & Analytics
- Service optimization and development
- User experience improvement
- Statistical analysis and reporting
- Marketing and promotional activities
6. Data Sharing and Transfers
We may share your data with the following parties:
- Service Providers: Payment processors, hosting providers, analytics services
- Regulatory Authorities: Gaming commissions, financial regulators
- Legal Requirements: Law enforcement, court orders, legal proceedings
- Business Partners: Referral program partners (with consent)
International Transfers
When we transfer data outside the EEA, we ensure adequate protection through standard contractual clauses, adequacy decisions, or other appropriate safeguards as required by GDPR.
7. Data Security
We implement comprehensive security measures to protect your data:
- 256-bit SSL encryption for all data transmission
- Secure data centers with physical and digital security
- Regular security audits and penetration testing
- Access controls and authentication systems
- Employee training on data protection
- Incident response and breach notification procedures
8. Data Retention
We retain your personal data for the following periods:
- Account Data: Duration of account + 7 years
- Transaction Records: 7 years (regulatory requirement)
- KYC Documents: 5 years after account closure
- Marketing Data: Until consent withdrawal
- Analytics Data: 2 years (anonymized after 6 months)
9. Your Rights Under GDPR
Access & Portability
Right to access your data and receive it in a portable format
Rectification
Right to correct inaccurate or incomplete data
Erasure
Right to delete your data (subject to legal requirements)
Restriction
Right to limit processing of your data
Objection
Right to object to processing based on legitimate interests
Withdrawal
Right to withdraw consent for marketing communications
10. Exercising Your Rights
To exercise your GDPR rights, contact us:
Email: privacy@u-wave.win
Postal Address: Data Protection Officer, u-wave.win Ltd., 12 Arch. Makarios III Avenue, Limassol 3030, Cyprus
Response Time: We will respond within 30 days
Verification: We may request additional information to verify your identity
11. Complaints
If you have concerns about our data processing, you can:
- Contact our Data Protection Officer
- Lodge a complaint with your local data protection authority
- Seek legal remedies through the courts
12. Updates to This Policy
We may update this policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes via email or through our website.