POPIA Notice

The Protection of Personal Information Act 4 of 2013 (POPIA) is the comprehensive data privacy law of South Africa. It governs how organisations collect, use, store, share and dispose of personal information.

Winfinity is committed to complying with POPIA and ensuring that your personal information is processed lawfully, fairly and in a transparent manner.

We collect personal information that you voluntarily provide when you register as a member, enter competitions, make inquiries, or interact with our services. This may include your name, surname, contact details, identity number, date of birth, residential address, email address, phone number, and payment information.

We may also collect information automatically through cookies and similar technologies, including device information, browser type, IP address, and usage patterns on our website.

We collect and process your personal information for the following lawful purposes:

• To provide membership services and manage your account.
• To process competition entries and notify winners.
• To communicate promotional offers, events, and updates.
• To verify your identity and prevent fraud.
• To comply with legal and regulatory obligations.
• To improve our services and user experience.

Your personal information is used only for the purposes for which it was collected, unless you consent to a new use or the law permits further processing. We do not sell your personal information to third parties.

We may share your information with trusted partners and service providers who assist us in delivering our services, provided they are bound by confidentiality and data protection obligations.

Winfinity implements appropriate technical and organisational measures to safeguard your personal information against unauthorised access, alteration, disclosure or destruction. This includes encryption, secure servers, access controls, and regular security assessments.

Despite our efforts, no security system is impenetrable. We encourage you to protect your account credentials and report any suspected security breaches immediately.

As a data subject, you have the following rights under POPIA:

• Right to access — request confirmation of whether we hold your personal information and obtain a copy.
• Right to correction — request correction of inaccurate or incomplete information.
• Right to deletion — request deletion of your personal information in certain circumstances.
• Right to object — object to the processing of your information for direct marketing or legitimate interests.
• Right to withdraw consent — withdraw consent at any time where processing is based on consent.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Once the retention period expires, your information will be securely deleted or anonymised.

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and personalise content. You can manage your cookie preferences through your browser settings.

Where we transfer your personal information outside of South Africa, we ensure that the recipient country or organisation provides an adequate level of protection, or that appropriate safeguards are in place as required by POPIA.

We may update this POPIA Notice from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated to you via email or through our website.

The effective date at the top of this notice indicates when it was last revised.

If you have any questions about this POPIA Notice, wish to exercise your rights, or have concerns about how we handle your personal information, please contact our Information Officer: