Skip to main content

MyWinners Privacy Policy - Connecticut

Our Commitment to Transparency, Data Protection, and Compliance with the Connecticut Data Privacy Act (CTDPA)

Rob Lawson avatar
Written by Rob Lawson
Updated over a month ago

NOTE: If you are located outside the State of Connecticut, please review the MyWinners Privacy Policy – Rest of USA for information on how we collect and process data in other jurisdictions.

Effective Date: 11/04/2025
Applies To: MyWinners websites (including MyWinners.com), the MyWinners mobile app, customer-support channels, and our communications programs (including SMS) in CT only.


1. Who We Are & Scope

MyWinners (“MyWinners,” “we,” “us,” or “our”) provides pari-mutuel betting services in jurisdictions where such activity is legally permitted and licensed.

Controller/Operator: Sportech Venues Inc
Business Address: One Hamden Center 2319 Whitney Avenue, Suite 5-a, Hamden, CT 06518, USA
Contact: [email protected] | 1-800-468-2260

This Policy explains how we collect, use, disclose, and protect personal information and describes your rights under the Connecticut Data Privacy Act (CTDPA) and similar state laws.


2. Categories of Information We Collect

Category

Examples

Purpose(s)

Source(s)

Shared With

Identifiers & Contact Details

Name, username, email, phone, postal address

Account setup, service delivery, support

Direct from user

Payment, KYC, support vendors

Eligibility & Verification Data (Sensitive)

Date of birth, government ID, SSN (last 4), photos for ID check

Age, identity & residence verification, AML/KYC

User & verification partners

KYC vendors, regulators

Geolocation Data (Sensitive)

Precise device location

Verify legal betting jurisdiction

Device location services

Geolocation providers

Account & Betting Data

Bet history, transactions, payouts, bonuses, self-exclusion settings

Enable betting, recordkeeping, tax reporting, responsible gaming

User activity

Regulators, tax agencies

Financial Data

Bank or card tokens, billing address, tax ID

Deposits, payouts, tax withholding

User submission

PCI-compliant payment processors

Device & Usage Data

IP, device ID, browser, app version, pages viewed

Fraud prevention, security, analytics

Device or browser

Analytics vendors

Communications Data

Emails, chats, call recordings, preferences

Customer support, quality assurance

Direct interaction

Support vendors

Cookies / SDK Data

Session cookies, pixels, SDK identifiers

Authentication, performance, advertising (where enabled)

Browser or app

Analytics / ad platforms


2A. Information Collected at Winners Venues

In addition to the information collected through the MyWinners online Service, Sportech Venues Inc. also operates Winners off-track betting venues across Connecticut. This section explains how personal information is collected and processed when you visit or interact with those physical locations.

Data We Collect in Venues

When you visit a Winners venue, we may collect:

Category

Examples

Purpose(s)

Visitor Identification Data

Name, photo ID, date of birth, address

Age and identity verification as required by law

Payment and Transaction Data

Cash or card payments, ticket information, winnings and payouts

Process transactions and comply with AML and tax reporting obligations

Loyalty and Player Account Data

MyWinners account number, rewards participation, responsible-gaming limits

Link in-venue activity with your MyWinners account for compliance and service continuity

CCTV and Security Data

Video footage from security cameras

Safety, crime prevention, fraud investigation, and regulatory compliance

Incident and Exclusion Records

Security or self-exclusion reports, patron removal logs

Maintain responsible-gaming and venue-safety records

Customer Service Interactions

In-venue inquiries, prize claims, complaint forms

Respond to requests and maintain service quality

How Venue Data Is Used

Information collected at Winners venues is used to:

  • Verify patron identity and eligibility to participate in wagering activities;

  • Process bets, redemptions, and payouts;

  • Record and report transactions for regulatory, audit, and tax purposes;

  • Support responsible-gaming and self-exclusion programs;

  • Maintain safety, security, and integrity of premises and staff;

  • Link in-venue transactions to online MyWinners accounts where applicable;

  • Respond to customer service inquiries and manage disputes.

CCTV and Security

All Winners venues are equipped with CCTV monitoring systems as required by state regulation. Footage is recorded and retained for a limited period, except where extended retention is required for investigations or regulatory purposes. Access to footage is restricted to authorised personnel and regulatory authorities.

Sharing and Retention

Venue-collected data may be shared with:

  • The Connecticut Department of Consumer Protection (DCP) and other regulators for compliance and auditing;

  • Law enforcement authorities in the event of suspected fraud or criminal activity;

  • Licensed payment processors and service providers assisting in transaction handling;

  • Sportech Venues Inc. internal teams for operational and responsible-gaming oversight.

All personal data collected in venues is retained and protected according to the same security, retention, and deletion standards described in Sections 8–12 of this Privacy Policy.


3. Why We Use Information

We process personal data to:

  • Create and manage accounts and verify age, identity, and location.

  • Enable lawful betting, process deposits, withdrawals, and payouts.

  • Fulfil licensing, AML/KYC, and tax obligations.

  • Communicate about transactions, updates, and security.

  • Deliver customer support and investigate issues.

  • Improve website/app performance and prevent fraud.

  • Send promotional communications (with consent).

  • Respond to legal or regulatory requests.


4. Legal Bases

Processing is based on:

  • Contract: to provide requested services.

  • Legal Obligation: licensing, AML/KYC, tax, and gaming compliance.

  • Consent: SMS marketing, precise geolocation, optional features.

  • Legitimate Interest: fraud prevention, network security, analytics.


5. How We Share Information

We disclose data only as permitted by law:

  • Service Providers/Processors: KYC, geolocation, payment, hosting, analytics, messaging (contract-bound to our instructions).

  • Regulators & Authorities: CT Department of Consumer Protection, IRS, and other agencies for compliance reporting.

  • Corporate Affiliates & Transfers: within our corporate group or in a merger/acquisition.

  • Professional Advisors: auditors, accountants, and counsel under confidentiality.

We do not sell personal information.
If we use limited data for targeted advertising, you can opt out (see Section 9).


6. Third-Party Integrations

We rely on trusted third-party systems for:

  • Identity, age, and residence verification;

  • Geolocation and network authorization;

  • Payment processing and totalisator systems;

  • Regulatory reporting and tax withholding;

  • Analytics and cybersecurity;

  • Customer communication tools.

All vendors must follow written data-processing agreements and maintain equivalent protections.


7. SMS (Text Messaging)

If you opt in to MyWinners SMS:

  • Collected: phone number, consent status, engagement data.

  • Purpose: service updates, security alerts, and marketing (with consent).

  • Opt Out: reply STOP or contact [email protected].

  • Sharing: with SMS gateway vendors only to deliver messages.

  • Compliance: all SMS programs follow CTIA and FCC guidelines.


8. Cookies & Tracking

We use cookies, SDKs, and pixels for:

  • Session management and authentication;

  • Fraud detection and analytics;

  • Performance and personalization;

  • Optional targeted advertising (with consent).

You can manage cookies in your browser; disabling them may limit certain features.
A separate Cookie Notice is available in the site footer with full details.


9. Your Privacy Rights (CTDPA & Other States)

Under the Connecticut Data Privacy Act and similar laws, you may:

  • Access/Know what data we process;

  • Correct inaccurate information;

  • Delete personal data (subject to legal retention);

  • Port your data in a portable format;

  • Opt Out of targeted advertising, sale, or profiling.

Submit a Request: [email protected] | 1-800-468-2260
We verify your identity and respond within 45 days (extendable once).

Appeals (Connecticut): If denied, appeal within 45 days. We’ll reply within 60 days and explain how to contact the Connecticut Attorney General.

Global Privacy Control (GPC): We honour browser/device-level opt-out signals as required by law.

We do not discriminate against users who exercise privacy rights.


10. Sensitive Data & KYC/AML

We process sensitive information (precise location, government ID, SSN, financial data) only when:

  • Required for AML/KYC, licensing, or tax law;

  • Needed to operate betting and payment systems;

  • Necessary to verify legal eligibility;

  • Permitted by user consent.

We comply with the Bank Secrecy Act (BSA) and maintain Customer Identification Program (CIP) and Suspicious Activity Report (SAR) records where required.


11. Responsible Gaming and Self-Exclusion Records

We maintain responsible-gaming and self-exclusion data to meet CT Gaming Division requirements.
These records are retained for the legally required period and are not deleted while restrictions remain in effect.


12. Data Retention

We keep data only as necessary for service, compliance, and legal defense:

Data Type

Typical Retention Period

KYC/AML records

7 years after account closure

Betting & transaction records

7 years (minimum)

Tax records

7 years or as required by IRS/CT law

Responsible-gaming/self-exclusion

Duration of restriction + 3 years

Support logs & security records

12–36 months

Marketing preferences

Until opt-out + confirmation period

After expiry, we securely delete or de-identify the data.


13. Security

We implement industry-standard safeguards:

  • HTTPS/TLS encryption in transit;

  • Encryption at rest for sensitive records;

  • Multi-factor authentication for internal access;

  • Network and intrusion monitoring;

  • Principle of least privilege and staff training;

  • Regular vendor security reviews and penetration testing.

No system is 100% secure, but we take commercially reasonable measures to protect personal data.


14. Tax & Legal Disclosures

We may share information with:

  • IRS and state tax agencies for winnings reporting (Form W-2G and equivalent).

  • Law enforcement/regulators in response to lawful requests.

  • Payment processors and collection agencies in cases of disputes or chargebacks.

We may also retain or disclose data required for legal defense, AML investigations, or court orders.


15. International Transfers

We process and store all data in the United States. If information is transferred abroad, we apply legally recognized safeguards such as contractual clauses.


16. Do Not Track

We do not respond to legacy browser “Do Not Track” signals but honour legally mandated opt-out mechanisms (see Section 9).


17. Automated Decision-Making & Profiling

We may use limited automated systems for fraud detection, risk scoring, and responsible-gaming monitoring. These do not produce legal or similarly significant effects without human review. You may request information about such processing under Section 9.


18. Data Protection Impact Assessments (DPIAs)

For processing that presents a heightened risk of harm—such as profiling, targeted advertising, or new high-risk technologies—we conduct internal DPIAs to evaluate necessity, proportionality, and risk mitigation consistent with CTDPA §42-521 et seq.


19. Corporate Changes

In a merger, acquisition, or asset sale, personal data may be transferred as part of the transaction. Any successor entity will continue to honour this Policy or provide equivalent protection.


20. Children’s Privacy

Access to MyWinners is restricted to adults meeting legal betting age in their jurisdiction. We do not knowingly collect information from anyone under 18.


21. Changes to This Policy

We may update this Privacy Policy periodically. The “Effective Date” reflects the latest revision. Material changes will be posted on our website/app and, where required, notified to you directly.


22. Contact Us

Email: [email protected]
Phone (toll-free): 1-800-468-2260
Mail: Sportech Venues Inc., One Hamden Center 2319 Whitney Avenue, Suite 5-a, Hamden, CT 06518, USA


Annex A – Summary of Data Categories, Legal Bases, and Recipients

Category

Legal Basis

Recipients

Identifiers & Contact

Contract; Legitimate Interest

Service providers, support vendors

Eligibility/KYC

Legal Obligation; Legitimate Interest

Regulators, KYC vendors

Financial Data

Contract; Legal Obligation

Payment processors, tax authorities

Geolocation

Consent; Legal Obligation

Geolocation vendors

Betting Data

Contract; Legal Obligation

Regulators, tax agencies

Marketing/SMS

Consent

Marketing vendors, SMS gateways

Security/Fraud

Legitimate Interest; Legal Obligation

Security vendors, law enforcement

Responsible-Gaming

Legal Obligation; Public Interest

Regulators, compliance auditors

Did this answer your question?