This policy explains what personal information Wishio ("Wishio", "we", "us") collects when you use wishio.win, why, and the choices you have. We collect only what we need to run your account, the games and the Sweepstakes, and we do not sell your information.
1. What we collect
| Kind | What |
|---|---|
| Account | Email address, username, and your password. Your password is stored only as a one-way hash, so nobody at Wishio can read it. |
| Coins and play | Your Gold Coin and Sweeps Coin balances, every coin movement (purchases, bonuses, game plays and wins, redemptions), and your settings such as purchase limits. |
| Devices and security | IP address, browser and device type, and sign-in times, used to keep your account secure and to confirm you are in a permitted location. We find the state from the IP address on our own server, with the free database of IP Geolocation by DB-IP; your address is not sent anywhere to be located. We keep a record of these checks (time, IP address, state, and whether it was allowed), as sweepstakes rules require. |
| Identity check | Before your first redemption: your legal name, date of birth, state, and photos of your identity document and of you holding it. Our compliance team checks them. The photos are stored encrypted, only authorised staff can open them (each viewing is recorded), and they are deleted after the check is finished (at the latest 180 days after the decision). We keep your name, date of birth, state, document type, the last 4 characters of the document number and a one-way code made from the number (so one ID can't open two accounts). If we use an identity verification provider instead (Didit, didit.me), the photos stay with that provider. |
| Payments | Purchase and payout records: the package, the coin and amount, the blockchain transaction of your payment, and the crypto wallet address you give for prize payouts (stored encrypted). Blockchain transactions are public by nature. We never ask for your wallet’s private keys or recovery phrase. |
| Messages | What you send our support team. |
2. How we use it
- to create and run your account, confirm your email and keep you signed in;
- to hold and record your coins, run games and pay prizes;
- to check eligibility, age, identity and location, as sweepstakes rules and the law require;
- to prevent fraud, cheating and account takeover, and to keep an audit trail of account changes;
- to send account emails (confirmation, password reset, security notices) and to answer support requests;
- to support responsible play, such as limits and self-exclusion.
We only send promotional emails if you agree to receive them, and you can stop them at any time.
5. How long we keep it
- Account, coin and redemption records are kept while your account is open and afterwards for as long as sweepstakes, tax and anti-fraud rules require.
- The text of account emails, including any links in them, is deleted from our servers once the email is sent, or after 3 days if it could not be sent.
- Backups are kept for 14 days.
6. Security
All traffic to Wishio is encrypted (HTTPS). Passwords are stored as one-way Argon2 hashes. Sign-in attempts are limited, and staff access requires two-factor authentication. Changes to accounts and coins are recorded in an audit log that cannot be edited.
7. Your choices and rights
- See and update your email, username and password in your account.
- Ask for a copy of your information, for corrections, or for deletion. We delete what we are not required to keep.
- Close your account at any time by contacting support.
Depending on where you live, you may have further rights under local law. We will respond to requests within the time the law requires.
8. Children
Wishio is only for adults 18 and older (21 where required). We do not knowingly collect information from anyone younger, and we close accounts we find belong to minors.
9. Where information is processed
Our servers and service providers may be located outside your state or country. Wherever information is processed, we protect it as described in this policy.
10. Changes
We will post any changes here with a new date, and tell you about important changes by email or on the site.
11. Contact
Privacy questions and requests: support@wishio.win.