PRIVACY POLICY
Last updated: June 2026 // Version 3.1.0
OVERVIEW
§ 01At YourWinningTurn.com ("the Platform", "we", "our"), we are deeply committed to protecting your privacy. This Privacy Policy describes in full detail how we collect, use, store, and protect the personal information you provide when you access or use our free-to-play social gaming platform, including all games, features, and services available at yourwinningturn.com.
By accessing our Platform you agree to the terms described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services immediately. We encourage you to read this document in full so you understand your rights and how we handle your data.
This policy applies to all users of the Platform worldwide. Where regional laws impose stricter requirements (such as GDPR in the European Economic Area, or CCPA in California), we apply those stricter standards to all users globally, not just those in those regions. We believe that strong privacy protections should be universal.
QUICK NAV
INDEX01 — DATA WE COLLECT
§ 02When you register an account we collect your email address, username, and hashed password. We never store plaintext passwords. Your email is used only for account recovery and critical service announcements. We do not sell email addresses to third parties.
We collect anonymised gameplay telemetry including game session durations, in-game credit transactions (all virtual, no real money), and feature engagement metrics. This data helps us balance the game and improve the player experience. It cannot be linked back to individuals without your account data.
Standard server logs include your IP address, browser type, operating system, and referring URL. Logs are retained for 30 days for security purposes and then permanently deleted. We do not build permanent profiles based on IP addresses or device fingerprints.
02 — HOW WE USE DATA
§ 03Your data is used exclusively to operate, maintain, and improve the Platform. We do not use your data for targeted advertising. We do not sell, rent, or trade your personal information to any third party for commercial purposes.
Specifically, we use your data to: authenticate your account and maintain session security; send transactional emails such as password resets; analyse aggregate (anonymised) gameplay trends to improve game balance; detect and prevent fraudulent activity or abuse of our platform; comply with legal obligations in jurisdictions where we operate.
We apply strict data minimisation principles. We only collect what is necessary for the operation of the Platform and delete data when it is no longer needed for those purposes.
03 — DATA STORAGE
§ 04All user data is stored on encrypted servers. We use AES-256 encryption at rest and TLS 1.3 encryption in transit. Our infrastructure is hosted in data centres that are ISO 27001 certified and comply with the highest industry security standards.
Account data is retained for as long as your account remains active. If you delete your account, all personal data linked to it is permanently erased within 30 days. Anonymised gameplay statistics may be retained indefinitely as they cannot be linked back to any individual.
We conduct regular security audits and penetration testing. In the event of a data breach, we will notify affected users within 72 hours in compliance with GDPR requirements, and will provide full transparency about what data was involved and the steps we are taking to mitigate any harm.
05 — COOKIES & TRACKING
§ 06We use cookies and similar technologies to maintain your session state and remember your login. We use only the cookies necessary for the Platform to function. We do not use third-party tracking cookies, advertising cookies, or any cross-site tracking mechanisms.
You can configure your browser to block or delete cookies at any time. Note that blocking all cookies may prevent you from logging in to your account. Our cookie consent interface (presented on first visit) allows you to accept or reject optional analytics cookies independently of the required functional cookies.
06 — YOUR RIGHTS
§ 07You may request a complete copy of all personal data we hold about you at any time. We will respond within 30 days with a machine-readable export of your data.
You may request the permanent deletion of your account and all associated personal data. Deletion will be completed within 30 days. This action is irreversible.
If any data we hold about you is inaccurate, you have the right to request its correction. You can update most account information directly through your account settings page.