Kyc Policy

Scope and purpose

Goawin’s Know Your Customer (KYC) policy sets out the mandatory identity verification, anti-money laundering (AML) measures, and related data processing practices applicable to the Goawin services. The policy governs how we collect, verify, store, share and retain personal data in connection with opening, operating and closing accounts, as well as processing payments and detecting illicit activity.

Definitions

• Personal data: any information relating to an identified or identifiable natural person processed by Goawin in connection with the Services.
• Data controller: the entity responsible for determining the purposes and means of processing personal data, being Goawin for data collected under this policy.
• AML: anti-money laundering and countering the financing of terrorism regulations applicable to the Services.
• KYC: processes to verify identity and assess risk of customers prior to and during the use of the Services.

Legal basis and consent

We process personal data under applicable data protection laws on grounds including contract performance, compliance with legal obligations (including AML/KYC requirements), and legitimate interests in preventing financial crime and protecting customers. Where required by law, we obtain your explicit consent for specific processing activities. By registering and using the Services, you acknowledge and agree to the data practices described herein and in our Privacy Policy.

Eligibility and age

Goawin provides access to Services only to individuals who are at least 18 years old and legally eligible to gamble in their jurisdiction. By creating an account, you confirm your eligibility and age; we may require suitable evidence to verify this status.

What personal data we collect

• Identity data: name, date of birth, nationality, government-issued identification numbers, and scanned identification documents.
• Contact data: address, email address, telephone number, and other communication details.
• Financial data: payment method details, bank account information, and transaction histories necessary to process deposits and withdrawals.
• Account data: login credentials, device identifiers, IP address, and activity logs.
• Verification data: information and documents submitted for identity verification and enhanced due diligence.

Identity verification and KYC procedures

We perform identity verification before providing access to certain features, and periodically thereafter. Verification may require submission of documents and, where appropriate, biometric verification or live checks. Procedures may include:

1. Collecting government-issued identification documents (e.g., passport, national ID, driver’s license) and proof of address (e.g., utility bill) that match the account information.
2. Verifying ownership of payment instruments used for deposits or withdrawals (e.g., card or wallet statements) and assessing funds’ source when required.
3. Conducting additional checks for higher-risk activities or when mandated by regulators, including facial verification or supplemental documentation.

Thresholds and ongoing due diligence

We apply enhanced due diligence where warranted by risk assessments. In particular, when cumulative deposits or withdrawals reach a threshold of five hundred euros (or the equivalent in another currency), or when suspicious activity is detected, we may require additional documentation, suspend certain transactions, or temporarily restrict account activity pending completion of verification.

Prohibited jurisdictions

Goawin restricts access from individuals located in jurisdictions where online gambling is prohibited or restricted by law. We may implement restrictions based on regulatory requirements. If you reside in or are otherwise located in a restricted jurisdiction, you may not open an account or use the Services.

Data sharing and recipients

Personal data may be shared with entities for the purposes of processing payments, conducting AML checks, and complying with regulatory obligations. Recipients may include payment processors, financial institutions, fraud prevention providers, and competent authorities. We require such recipients to process data solely for specified purposes and to implement appropriate safeguards to protect the information.

Data retention and security

Goawin retains personal data for a period of eight (8) years after the termination of the customer relationship or as required by applicable law. We implement technical and organizational security measures, including encryption in transit and at rest, access controls, and regular monitoring of systems to protect data from unauthorized access or disclosure.

Your rights under data protection laws

• Access and obtain a copy of your personal data processed by Goawin.
• Rectify inaccurate or incomplete data.
• Delete data where there is no legal basis for continued processing, subject to legal obligations and contract limitations.
• Limit or object to processing, including profiling for AML purposes.
• Portability of data in a structured, commonly used format.
• Withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

Consequences of withholding data

Failure to provide required information or documents may prevent account creation, impede verification, or lead to suspension or termination of services or restricted access to certain features, in accordance with applicable laws and our Terms & Conditions.

Exercising rights and contact information

To exercise any data protection rights or to raise concerns, contact Goawin at [email protected]. We will respond within a reasonable timeframe in accordance with applicable law. You may also contact our data protection officer or regulator as provided in our Privacy Policy.

Policy updates

Goawin may update this KYC Policy from time to time. Material changes will be communicated to users in accordance with regulatory requirements, and the updated policy will govern the processing of personal data after the effective date.