❗NOTE: If you are located outside the State of Connecticut, please review the MyWinners Privacy Policy – Rest of USA for information on how we collect and process data in other jurisdictions.
Effective Date: 11/04/2025
Applies To: MyWinners websites (including MyWinners.com), the MyWinners mobile app, customer-support channels, and our communications programs (including SMS) in CT only.
1. Who We Are & Scope
MyWinners (“MyWinners,” “we,” “us,” or “our”) provides pari-mutuel betting services in jurisdictions where such activity is legally permitted and licensed.
Controller/Operator: Sportech Venues Inc
Business Address: One Hamden Center 2319 Whitney Avenue, Suite 5-a, Hamden, CT 06518, USA
Contact: [email protected] | 1-800-468-2260
This Policy explains how we collect, use, disclose, and protect personal information and describes your rights under the Connecticut Data Privacy Act (CTDPA) and similar state laws.
2. Categories of Information We Collect
Category | Examples | Purpose(s) | Source(s) | Shared With |
Identifiers & Contact Details | Name, username, email, phone, postal address | Account setup, service delivery, support | Direct from user | Payment, KYC, support vendors |
Eligibility & Verification Data (Sensitive) | Date of birth, government ID, SSN (last 4), photos for ID check | Age, identity & residence verification, AML/KYC | User & verification partners | KYC vendors, regulators |
Geolocation Data (Sensitive) | Precise device location | Verify legal betting jurisdiction | Device location services | Geolocation providers |
Account & Betting Data | Bet history, transactions, payouts, bonuses, self-exclusion settings | Enable betting, recordkeeping, tax reporting, responsible gaming | User activity | Regulators, tax agencies |
Financial Data | Bank or card tokens, billing address, tax ID | Deposits, payouts, tax withholding | User submission | PCI-compliant payment processors |
Device & Usage Data | IP, device ID, browser, app version, pages viewed | Fraud prevention, security, analytics | Device or browser | Analytics vendors |
Communications Data | Emails, chats, call recordings, preferences | Customer support, quality assurance | Direct interaction | Support vendors |
Cookies / SDK Data | Session cookies, pixels, SDK identifiers | Authentication, performance, advertising (where enabled) | Browser or app | Analytics / ad platforms |
2A. Information Collected at Winners Venues
In addition to the information collected through the MyWinners online Service, Sportech Venues Inc. also operates Winners off-track betting venues across Connecticut. This section explains how personal information is collected and processed when you visit or interact with those physical locations.
Data We Collect in Venues
When you visit a Winners venue, we may collect:
Category | Examples | Purpose(s) |
Visitor Identification Data | Name, photo ID, date of birth, address | Age and identity verification as required by law |
Payment and Transaction Data | Cash or card payments, ticket information, winnings and payouts | Process transactions and comply with AML and tax reporting obligations |
Loyalty and Player Account Data | MyWinners account number, rewards participation, responsible-gaming limits | Link in-venue activity with your MyWinners account for compliance and service continuity |
CCTV and Security Data | Video footage from security cameras | Safety, crime prevention, fraud investigation, and regulatory compliance |
Incident and Exclusion Records | Security or self-exclusion reports, patron removal logs | Maintain responsible-gaming and venue-safety records |
Customer Service Interactions | In-venue inquiries, prize claims, complaint forms | Respond to requests and maintain service quality |
How Venue Data Is Used
Information collected at Winners venues is used to:
Verify patron identity and eligibility to participate in wagering activities;
Process bets, redemptions, and payouts;
Record and report transactions for regulatory, audit, and tax purposes;
Support responsible-gaming and self-exclusion programs;
Maintain safety, security, and integrity of premises and staff;
Link in-venue transactions to online MyWinners accounts where applicable;
Respond to customer service inquiries and manage disputes.
CCTV and Security
All Winners venues are equipped with CCTV monitoring systems as required by state regulation. Footage is recorded and retained for a limited period, except where extended retention is required for investigations or regulatory purposes. Access to footage is restricted to authorised personnel and regulatory authorities.
Sharing and Retention
Venue-collected data may be shared with:
The Connecticut Department of Consumer Protection (DCP) and other regulators for compliance and auditing;
Law enforcement authorities in the event of suspected fraud or criminal activity;
Licensed payment processors and service providers assisting in transaction handling;
Sportech Venues Inc. internal teams for operational and responsible-gaming oversight.
All personal data collected in venues is retained and protected according to the same security, retention, and deletion standards described in Sections 8–12 of this Privacy Policy.
3. Why We Use Information
We process personal data to:
Create and manage accounts and verify age, identity, and location.
Enable lawful betting, process deposits, withdrawals, and payouts.
Fulfil licensing, AML/KYC, and tax obligations.
Communicate about transactions, updates, and security.
Deliver customer support and investigate issues.
Improve website/app performance and prevent fraud.
Send promotional communications (with consent).
Respond to legal or regulatory requests.
4. Legal Bases
Processing is based on:
Contract: to provide requested services.
Legal Obligation: licensing, AML/KYC, tax, and gaming compliance.
Consent: SMS marketing, precise geolocation, optional features.
Legitimate Interest: fraud prevention, network security, analytics.
5. How We Share Information
We disclose data only as permitted by law:
Service Providers/Processors: KYC, geolocation, payment, hosting, analytics, messaging (contract-bound to our instructions).
Regulators & Authorities: CT Department of Consumer Protection, IRS, and other agencies for compliance reporting.
Corporate Affiliates & Transfers: within our corporate group or in a merger/acquisition.
Professional Advisors: auditors, accountants, and counsel under confidentiality.
We do not sell personal information.
If we use limited data for targeted advertising, you can opt out (see Section 9).
6. Third-Party Integrations
We rely on trusted third-party systems for:
Identity, age, and residence verification;
Geolocation and network authorization;
Payment processing and totalisator systems;
Regulatory reporting and tax withholding;
Analytics and cybersecurity;
Customer communication tools.
All vendors must follow written data-processing agreements and maintain equivalent protections.
7. SMS (Text Messaging)
If you opt in to MyWinners SMS:
Collected: phone number, consent status, engagement data.
Purpose: service updates, security alerts, and marketing (with consent).
Opt Out: reply STOP or contact [email protected].
Sharing: with SMS gateway vendors only to deliver messages.
Compliance: all SMS programs follow CTIA and FCC guidelines.
8. Cookies & Tracking
We use cookies, SDKs, and pixels for:
Session management and authentication;
Fraud detection and analytics;
Performance and personalization;
Optional targeted advertising (with consent).
You can manage cookies in your browser; disabling them may limit certain features.
A separate Cookie Notice is available in the site footer with full details.
9. Your Privacy Rights (CTDPA & Other States)
Under the Connecticut Data Privacy Act and similar laws, you may:
Access/Know what data we process;
Correct inaccurate information;
Delete personal data (subject to legal retention);
Port your data in a portable format;
Opt Out of targeted advertising, sale, or profiling.
Submit a Request: [email protected] | 1-800-468-2260
We verify your identity and respond within 45 days (extendable once).
Appeals (Connecticut): If denied, appeal within 45 days. We’ll reply within 60 days and explain how to contact the Connecticut Attorney General.
Global Privacy Control (GPC): We honour browser/device-level opt-out signals as required by law.
We do not discriminate against users who exercise privacy rights.
10. Sensitive Data & KYC/AML
We process sensitive information (precise location, government ID, SSN, financial data) only when:
Required for AML/KYC, licensing, or tax law;
Needed to operate betting and payment systems;
Necessary to verify legal eligibility;
Permitted by user consent.
We comply with the Bank Secrecy Act (BSA) and maintain Customer Identification Program (CIP) and Suspicious Activity Report (SAR) records where required.
11. Responsible Gaming and Self-Exclusion Records
We maintain responsible-gaming and self-exclusion data to meet CT Gaming Division requirements.
These records are retained for the legally required period and are not deleted while restrictions remain in effect.
12. Data Retention
We keep data only as necessary for service, compliance, and legal defense:
Data Type | Typical Retention Period |
KYC/AML records | 7 years after account closure |
Betting & transaction records | 7 years (minimum) |
Tax records | 7 years or as required by IRS/CT law |
Responsible-gaming/self-exclusion | Duration of restriction + 3 years |
Support logs & security records | 12–36 months |
Marketing preferences | Until opt-out + confirmation period |
After expiry, we securely delete or de-identify the data.
13. Security
We implement industry-standard safeguards:
HTTPS/TLS encryption in transit;
Encryption at rest for sensitive records;
Multi-factor authentication for internal access;
Network and intrusion monitoring;
Principle of least privilege and staff training;
Regular vendor security reviews and penetration testing.
No system is 100% secure, but we take commercially reasonable measures to protect personal data.
14. Tax & Legal Disclosures
We may share information with:
IRS and state tax agencies for winnings reporting (Form W-2G and equivalent).
Law enforcement/regulators in response to lawful requests.
Payment processors and collection agencies in cases of disputes or chargebacks.
We may also retain or disclose data required for legal defense, AML investigations, or court orders.
15. International Transfers
We process and store all data in the United States. If information is transferred abroad, we apply legally recognized safeguards such as contractual clauses.
16. Do Not Track
We do not respond to legacy browser “Do Not Track” signals but honour legally mandated opt-out mechanisms (see Section 9).
17. Automated Decision-Making & Profiling
We may use limited automated systems for fraud detection, risk scoring, and responsible-gaming monitoring. These do not produce legal or similarly significant effects without human review. You may request information about such processing under Section 9.
18. Data Protection Impact Assessments (DPIAs)
For processing that presents a heightened risk of harm—such as profiling, targeted advertising, or new high-risk technologies—we conduct internal DPIAs to evaluate necessity, proportionality, and risk mitigation consistent with CTDPA §42-521 et seq.
19. Corporate Changes
In a merger, acquisition, or asset sale, personal data may be transferred as part of the transaction. Any successor entity will continue to honour this Policy or provide equivalent protection.
20. Children’s Privacy
Access to MyWinners is restricted to adults meeting legal betting age in their jurisdiction. We do not knowingly collect information from anyone under 18.
21. Changes to This Policy
We may update this Privacy Policy periodically. The “Effective Date” reflects the latest revision. Material changes will be posted on our website/app and, where required, notified to you directly.
22. Contact Us
Email: [email protected]
Phone (toll-free): 1-800-468-2260
Mail: Sportech Venues Inc., One Hamden Center 2319 Whitney Avenue, Suite 5-a, Hamden, CT 06518, USA
Annex A – Summary of Data Categories, Legal Bases, and Recipients
Category | Legal Basis | Recipients |
Identifiers & Contact | Contract; Legitimate Interest | Service providers, support vendors |
Eligibility/KYC | Legal Obligation; Legitimate Interest | Regulators, KYC vendors |
Financial Data | Contract; Legal Obligation | Payment processors, tax authorities |
Geolocation | Consent; Legal Obligation | Geolocation vendors |
Betting Data | Contract; Legal Obligation | Regulators, tax agencies |
Marketing/SMS | Consent | Marketing vendors, SMS gateways |
Security/Fraud | Legitimate Interest; Legal Obligation | Security vendors, law enforcement |
Responsible-Gaming | Legal Obligation; Public Interest | Regulators, compliance auditors |
