Privacy Policy
Effective: February 16, 2026
WinStash is a closed-loop gift card system operated by Highwire Solutions, LLC ("we," "us," or "our"). This Privacy Policy describes what personal information we collect, how we use it, and who we share it with. We are committed to protecting your privacy and handling your data responsibly.
Information We Collect
We collect the following personal information when you register for a WinStash gift card at a participating operator location:
| Data Category | What We Collect | Why We Need It |
|---|---|---|
| Identity | Full name, date of birth | Age verification (18+), account identification, regulatory compliance |
| Contact | Mobile phone number | Transaction receipts, verification codes, account alerts |
| ID Document | Driver's license number, state of issuance | Identity verification, duplicate account prevention |
| Transaction | Card loads, withdrawals, balances, timestamps, location | Account management, receipts, regulatory reporting |
| Device | IP address, device type (when using winstash.app) | Security, fraud prevention |
How We Use Your Information
We use your personal information for the following purposes:
Transactional communications. We send SMS messages to your mobile phone number for load confirmations, balance alerts, PIN verification codes, dormancy notices, and other account-related notifications. These messages are triggered by your account activity or by legal compliance requirements — not for marketing purposes.
Account management. We use your identity and contact information to create and maintain your WinStash gift card account, process loads and withdrawals, and provide customer support.
Regulatory compliance. We use your information to comply with Georgia COAM regulations, the federal Credit CARD Act, the Georgia Gift Card Integrity Act, and Georgia unclaimed property laws, including dormancy tracking and escheatment reporting.
Security and fraud prevention. We use device information and transaction patterns to detect and prevent unauthorized access and fraudulent activity on your account.
Marketing & Promotional Use
We may use your contact information to send you promotional offers, rewards, and announcements related to WinStash and participating operator locations. We may also share aggregated or de-identified data with business partners for marketing and analytical purposes.
If you prefer not to receive marketing messages, you may opt out at any time by replying STOP to any promotional message or by contacting us at [email protected]. Opting out of marketing messages will not affect transactional messages such as load confirmations, verification codes, and legally required notices.
Information Sharing
We may share your personal information in the following circumstances:
Operator locations. The location where you registered and use your card has access to your account information as needed to facilitate card loads, withdrawals, and in-person support.
Service providers. We use third-party service providers to operate WinStash, including cloud hosting, SMS delivery, and payment processing. These providers access your data only to perform services on our behalf.
Business partners. We may share aggregated, de-identified, or personally identifiable information with business partners for marketing, analytics, and promotional purposes. These partners may use this information to offer you products or services that may be of interest to you.
Legal requirements. We may disclose your information when required by law, regulation, or legal process, including Georgia unclaimed property reporting obligations.
Business transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
SMS Messaging
When you register for a WinStash gift card, you consent to receive transactional SMS messages at the mobile phone number you provide. Message types include:
Load confirmations — sent when funds are added to your card.
Verification codes — sent when you set or reset your PIN.
Account alerts — sent for security events or account changes.
Dormancy notices — sent when your account has been inactive, as required by law.
Message frequency varies based on your card activity. Message and data rates may apply. You may opt out of SMS messages at any time by replying STOP to any message. Note that opting out may limit our ability to send you transaction confirmations and security alerts.
Data Retention
We retain your personal information for as long as your WinStash account is active and for a minimum of five years after your last transaction, as required by Georgia unclaimed property law. Transaction records may be retained longer as required for regulatory compliance, tax reporting, or legal obligations.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. PIN data is encrypted and never stored in plain text. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.
Your Rights
You may request access to the personal information we hold about you, request correction of inaccurate information, or ask questions about this Privacy Policy by contacting us at the address below. Please note that certain information may be retained as required by law even after an account closure request.
Children's Privacy
WinStash is not available to individuals under the age of 18. We do not knowingly collect personal information from children. Age is verified during registration by scanning a valid government-issued ID.
Changes to This Policy
We may update this Privacy Policy from time to time. The effective date at the top of this page indicates when the policy was last revised. Continued use of your WinStash card after changes are posted constitutes acceptance of the revised policy.