Winum is operated by Galaxy Byte Lab SRL under Anjouan Gaming licence ALSI-202508040-FI2, issued by the Government of the Autonomous Island of Anjouan, Union of Comoros. The platform launched in 2025 and works with Indian players in rupees. Identity verification is mandatory before any withdrawal, rupee payouts run through IMPS from INR 1,500 to INR 50,000 and complete within an hour, and the response window for a document request is 30 days. Several protection features are not implemented: there is no two-factor authentication, no biometric login and no deposit, stake or session limits.
The sections below give the evidence behind each part of that answer, including the less comfortable parts. One search phrase deserves clearing up first: players frequently look for Winum Aguero casino, assuming the footballer Sergio Aguero is connected to the brand. He is not, and no partnership of that kind appears in the platform's own materials.
Who Operates Winum and Under Which Licence
Regulation decides who a player can escalate to and under whose rules a dispute is settled. Winum publishes identifying details rather than a generic claim of being licensed, and the table lists them.
| Parameter | Value |
|---|---|
| Licence | Anjouan Gaming licence ALSI-202508040-FI2 |
| Regulator | Government of the Autonomous Island of Anjouan, Union of Comoros |
| Operator | Galaxy Byte Lab SRL |
| Launched | 2025 |
| Official domain | winum.casino |
A licence number that can be checked against a register is a different signal from the phrase international licence used on many affiliate pages covering this brand. The single official domain matters too: casino, sports, bonuses and the account area all run inside it, so any other address claiming to be the main site is either a mirror issued by support or something else entirely.
Check the Licence Details →Verification Rules That Decide a Payout
Verification is where most payout complaints begin, so the useful question is not whether Winum runs checks but when they start and what happens if a request is missed. Both are documented.
When checks are triggeredThe platform applies Know Your Customer procedures to confirm identity, age and place of residence under AML, CTF and FATF requirements, and it uses a risk-based approach rather than checking everyone at registration. Standard Customer Due Diligence starts in three situations: at the first withdrawal request, when total deposits exceed 10,000 USD or the equivalent, and when unusual or suspicious activity is detected. Verification can also be required before access to financial operations where a single transaction is treated as significant or high risk.
Documents and enhanced checksThe document set is conventional, and having it prepared in advance is what keeps verification to a single submission.
| Requirement | What is accepted |
|---|---|
| Personal data | Full legal name, date of birth, nationality, residential address, government-issued photo document |
| Identity | Valid passport, national identity card, driving licence or another officially recognised document |
| Address | Utility bill no older than three months, or a bank statement or official document issued within the last three months |
| Additional checks | Selfie holding the document, video verification or other methods where authenticity needs confirming |
Every file has to be clear and legible. For higher-risk users and transactions, Enhanced Due Diligence adds four measures: requests for additional documents, independent checks through accredited third-party providers, verification of the source of funds, and closer transaction monitoring. Politically exposed persons fall under the same enhanced controls.
The thirty-day deadlineOne number decides how a verification request ends. A player has 30 days to respond. Missing that window, or submitting forged or altered documents, leads to four consequences: suspension or permanent closure of the account, the balance being held until checks conclude, transactions being voided, and information being passed to competent authorities where the law requires it.
Thirty days is a wide window that covers a change of address or a lost document, and the procedure is written down in advance rather than decided case by case. Verifying right after registration means every later withdrawal proceeds without repeating it.
Complete Verification First →Account Rules and Enforcement at Winum
Sanctions feel arbitrary until the rules behind them are visible. Winum sets its conditions in the user agreement, and a player who uses one account, their own payment details and no location-masking software will not meet any of them.
Registration carries five conditions. An account requires accurate and verifiable data - full name, date of birth, country of residence, email and payment details - and is complete only once the platform confirms it. Every player confirms being at least 18 or the legal age in their jurisdiction, confirms full legal capacity, and confirms that online gaming is lawful where they live. Technical reachability from a country is explicitly not confirmation that using the platform there is permitted, and false or incomplete data is itself a breach.
Only one account per player is allowed. Duplicates under other names, emails, IP addresses or devices are prohibited, and where linked accounts are identified, the platform may close all of them, void winnings and hold the balance pending review. An account is personal and non-transferable, and any action taken under a player's credentials counts as theirs.
Eight categories of conduct are prohibited outright, and the table sets them out as the agreement does.
| Category | What is prohibited |
|---|---|
| Account manipulation | Multiple accounts, re-registering after a block or self-exclusion, impersonation, transferring an account or granting third-party access |
| Fraud | Stolen, cloned or unauthorised payment instruments, chargebacks and reversals of completed payments, forged documents, misleading the platform during verification |
| Bots and software | Bots, scripts, scrapers and automated systems used to manipulate gameplay, software creating an unfair advantage, viruses and malicious code |
| Exploiting vulnerabilities | Finding, using or distributing information about errors and vulnerabilities for gain, interfering with algorithms and randomisation systems |
| Copying the platform | Copying, reverse engineering, decompiling, translating, distributing or creating derivative products from the software, databases, design and interface without written consent |
| Illegal use | Money laundering, terrorist financing, processing illegal payments |
| Destructive behaviour | Publishing false, defamatory or unlawful material, harassment, hate speech, actions damaging the platform's reputation or operation |
| Bonus abuse | Any abuse of bonus terms and manipulation of bonus activity, including holding bonus rounds open while a bonus is active in order to activate another |
Activity is tracked by automated detection, risk analysis and manual review, and confirmed breaches can lead to closed accounts, cancelled winnings, seized funds and disclosure to regulators or law enforcement.
Three further rules come up far more often in day-to-day play than anything in that table. VPN services, proxies and TOR are prohibited and detected through geolocation systems, and an account found in a restricted jurisdiction may be suspended or closed, with the balance returned except for winnings earned after the last deposit and subject to verification and AML procedures. Accounts with no logins or transactions for 12 consecutive months may be closed without prior notice, so a dormant balance is better withdrawn than left sitting. Voluntary closure works the other way round and is available at any time through the official contact channels, with open bets settled and the balance withdrawn first; the platform may delay or decline a voluntary closure only while a review is running, a dispute is unresolved or AML and KYC procedures are incomplete. And confirmed contact details cannot be changed by the player - the interface states that changing confirmed data requires contacting support, which is a protection against account takeover rather than an obstacle.
Technical faults are covered by three rules: operations affected by a system or human error may be voided, corrected or recalculated under the terms that should have applied; funds and winnings credited in error can be recovered, including amounts already withdrawn; and a player who notices a fault must stop play and report it, since continuing can be treated as attempted exploitation. Liability is capped at the amount deposited in the 30 days before the event behind a claim.
How Payouts Work for Indian Players
Reliability is measured by whether money leaves the platform. For Indian accounts there is one fiat channel and one crypto channel, both with published limits.
| Withdrawal method | Limits | Processing time |
|---|---|---|
| IMPS | from INR 1,500 to INR 50,000 | Up to 1 hour |
| Cryptocurrencies | Depends on the chosen coin | Up to 1 hour |
A single dedicated payout rail means one predictable timeframe instead of methods clearing at different speeds. Withdrawals in India are not available without identity verification, which is the practical reason to complete it early.
Five payment rules apply on top. Payments must come from legitimate sources using instruments registered in the account holder's own name, and third-party deposits including those from relatives are prohibited and may be returned to the payer. Withdrawals are, where possible, processed by the same method used for the deposit. Chargebacks and reversals of approved transactions are prohibited, and the platform may recover costs, debit the corresponding amounts and void related winnings. Credit and overdraft are never extended, so play requires a positive balance. Tax obligations on winnings are the player's own responsibility.
Data Protection on Winum
The company acts as Data Controller, so it defines the purposes and methods of processing and answers for them. Data reaches it from three sources: what the player supplies at registration and verification, what is generated automatically during use such as IP address, device identifiers and session logs, and what comes from third parties including verification services, anti-fraud providers, payment processors and sanctions lists. Special categories such as ethnic origin, religious beliefs, biometric and health data are deliberately not collected unless law or verification procedures require it.
Processing rests on four grounds: performance of the contract, legal obligation for KYC, AML, CTF and licensing duties, legitimate interest for fraud prevention, and consent for marketing, which can be withdrawn at any time. Data is not sold or rented, and sharing is limited to group affiliates, authorised service providers, regulators and law enforcement on legal demand, professional advisers and parties to corporate transactions, with every recipient bound by confidentiality obligations. Identification documents, verification data and transaction history are kept for at least five years after closure, then securely deleted or irreversibly anonymised.
Nine rights are available to the player, and they are the practical measure of how a platform treats data.
| Right | What it covers |
|---|---|
| Access | Obtaining a copy of the personal data held |
| Rectification | Correcting inaccurate or incomplete data |
| Erasure | Deleting data no longer needed for the processing purposes |
| Restriction | Limiting processing in specific cases |
| Objection | Objecting to processing based on legitimate interest and to direct marketing |
| Portability | Receiving data in a structured machine-readable format |
| Human review | Human intervention in decisions made solely by automated processing, including profiling |
| Withdrawal of consent | Withdrawing consent at any time |
| Complaint | Complaining to the competent data protection authority in the country of residence |
Cookies fall into four groups: strictly necessary ones that cannot be disabled without losing functionality, analytical ones working on anonymised data, functional ones remembering language and display settings, and marketing ones set only after explicit consent.
Responsible Gambling Measures at Winum
The stated principle is that gaming is entertainment and outcomes are never guaranteed. Access is restricted to players aged 18 or over, or the legal age in their jurisdiction.
Two tools are available, and both take effect immediately. Self-exclusion closes access for a minimum of six months, during which the account cannot be reactivated, with the remaining balance withdrawn before the period starts. Account closure ends all activity permanently at any time.
Protection of minors rests on three measures: a strict prohibition on access below the legal age, age and identity verification against reliable documents, and immediate suspension or closure of accounts found to belong to minors. The platform also monitors activity for problem gambling patterns through transaction analysis, review of deposits and withdrawals and temporary restrictions, and for professional help it points to GamCare, Gambling Therapy and Gamblers Anonymous.
Complaints Deadlines and Support Channels
A dispute process is only meaningful with deadlines attached, and Winum publishes them. Complaints go to [email protected] with full name, account details and a clear description of the problem.
| Stage or subject | Deadline |
|---|---|
| Acknowledgement of a complaint | 1 working day |
| Substantive response with a proposed resolution | Up to 30 calendar days |
| Complaints about game results | Within 14 calendar days of the session |
| Complaints about the account, deposits, withdrawals, blocks and bonuses | Within 30 calendar days |
| Complaints on all other matters | Within 6 months |
The 14-day window for game disputes is the tightest of the five, which makes saving screenshots of a disputed session the practical precaution. Complaints filed late may not be considered, unresolved disputes may go to arbitration or the courts of the platform's jurisdiction, and the English version of the terms is the legally binding one.
Four support channels are available: live chat 24/7 from any page of the site and inside the app, [email protected] for technical and account matters, [email protected] for security issues, and the same support address for KYC questions.
Official Access and Fake Copies
The platform runs from winum.casino, and if that domain becomes unreachable, mirrors duplicate the full functionality with the account, balance, bet history and active bonuses intact. There are three legitimate ways to get a current mirror address: request it in the live chat available on every page, check the platform's official channels where addresses are published, or install the app or PWA, which keeps access working regardless of a block.
That matters because addresses found in search results or on third-party aggregators can lead to phishing copies built to harvest logins and payment details.
What Winum Has Not Implemented Yet
An honest assessment has to name what is missing, and the gaps follow from the 2025 launch.
No two-factor authentication or biometric login. Neither 2FA, fingerprint login nor Face ID is implemented, so account security rests on the password, confirmed contact details and the Active sessions control. That last tool is genuinely useful: a single End button closes every session on every other device at once, shutting out a borrowed or lost phone without changing the password.
No deposit, stake or session limits. The responsible gambling policy recommends personal limits, but the interface provides no tools to enforce them. What exists is self-exclusion from six months and account closure - measures that cannot be reversed on impulse, unlike a limit that can be switched off in a moment.
Unfinished sections after launch. A VIP club, a tiered privilege programme and official social media accounts are not implemented, and there is no phone line or official Telegram bot. Winum Points replace tiers, and the absence of social accounts removes the channel where impersonators most often pose as support: the live chat and the published email addresses are the only official contact points.
Inconsistent bonus values in the interface. Different figures for the welcome offer appear on the registration banner, the promotion cards and the actual bonus card. The platform's own guidance resolves it: the card of a specific bonus in the Bonuses section is the source of truth for the minimum deposit, wagering multiplier and win and withdrawal caps.
Trust Verdict on Winum
Reviewed by Aarav Deshmukh, iGaming Analyst
On the documented evidence, Winum is a transparent young operator rather than a risk. The licence carries a verifiable number and a named operating company, verification triggers and deadlines are written down instead of left to discretion, complaint windows are fixed at one working day and thirty days, and payout limits and timings are published.
The weaknesses are equally concrete. Account protection has no second factor, self-limitation tools beyond self-exclusion do not exist, rupee payouts run through a single method with a ₹1,500 floor and mandatory verification, and some interface values still disagree with each other. A player who verifies early, uses one account and their own payment details, and takes mirror addresses only from the live chat will find the documented rules working in their favour.
Safety Questions About Winum
Is Winum licensed to accept players from India?Winum holds Anjouan Gaming licence ALSI-202508040-FI2, issued by the Government of the Autonomous Island of Anjouan, and is operated by Galaxy Byte Lab SRL. The platform works with Indian players in rupees. Online gambling rules in India vary by state, and confirming that play is lawful in a particular place remains the player's own responsibility.
When does Winum request verification documents?Checks start in three situations: at a first withdrawal request, when total deposits exceed 10,000 USD or the equivalent, and when account activity looks unusual. For Indian players, withdrawals are not processed without identity verification at all. Verification can also be required earlier where a single transaction is treated as significant or high risk.
What happens if documents are not sent in time?The response window is 30 days. Missing it, or submitting forged or altered documents, leads to suspension or permanent closure of the account, the balance being held until checks conclude, transactions being voided, and information being passed to competent authorities where the law requires it. Completing verification early avoids the situation entirely.
Does Winum offer two-factor authentication?No. Two-factor authentication, fingerprint login and Face ID are not implemented. Account security rests on the password, confirmed contact details that cannot be changed without contacting support, and the Active sessions control, which ends every session on other devices with a single button without requiring a password change.
How long does a complaint take at Winum?A complaint is acknowledged within 1 working day and answered substantively within 30 calendar days. Complaints about game results must be raised within 14 calendar days of the session, account matters within 30 calendar days, and other issues within 6 months. Complaints filed after those deadlines may not be considered.
Open an Account at Winum →