Research briefing / Global

Winum safety and ownership: the evidence so far

Separate website claims about Winum ownership and licensing from independently verified records, regional permission and security testing.

Claim by claim

Evidence register

Explore sources ↗

The status describes this precise observation. Read each limitation before drawing a wider conclusion.

Claims, evidence status, sources and research dates
QuestionStatusFinding and limitationSource / accessed
Operator identityInternational claimOperator claim

The Winum.io About Us page names Galaxy Byte Lab SRL as manager.

Scope & limitations

Site affiliation, company record and control of specific domains have not been independently authenticated.

Recorded as a self-description, not a registry-verified ownership conclusion. Checked and edited by Alex Rowan.

Winum.io (self-described brand site; affiliation not independently authenticated)10 Oct 2026
Licence register matchAnjouan claim; no IN authorisation inferredConfirmed

The public register lists Galaxy Byte Lab SRL, ALSI-202508040-FI2 and winum.casino, with status valid.

Scope & limitations

Confirms the accessed register entry, not Indian permission, actual payout performance or affiliation of other Winum-branded domains. The matched domain list does not include winum.io.

Exact company/licence/domain match in the embedded public register JSON. Issued 29 August 2025; expiry 28 August 2027. Checked and edited by Alex Rowan.

Anjouan Gaming10 Oct 2026
Payout timingPublished policy; no IN availability inferredOperator claim

Clause 8.3.3 of the brand-facing terms does not guarantee an exact processing time.

Scope & limitations

The actual contract and method-specific estimates may differ. No observed settlement times or cash-out success rate measured.

Terms text inspected, not an account or payment test. Checked and edited by Alex Rowan.

Winum.io (brand-facing site; affiliation not independently authenticated)10 Oct 2026

The licence record is specific, not brand-wide

The Anjouan public register lists Galaxy Byte Lab SRL under ALSI-202508040-FI2 and includes winum.casino. This is an exact documentary match, rather than an inference from a badge. It does not establish the relationship of every similar domain to that company.

Which hostname was checked?

The licence’s matched domain list excludes winum.io. Our review uses that site’s About, app and policy pages as attributed statements; we do not treat its affiliation as independently established. Another hostname, a changed spelling or a regional suffix must be checked separately.

Identity question Current answer
Is there a relevant register entry? Yes, the exact company/licence match was found
Is the domain in that entry? winum.casino is listed
Does the match authenticate winum.io? No; it is absent from the inspected list
Was corporate incorporation independently checked? No corporate registry extract was obtained
Does this establish local permission? No; regional law requires separate analysis

What does a licence prove?

A licence entry supplies an identifiable holder, record and domain scope. It is useful evidence about that record. It cannot demonstrate the outcome of a payment, the handling of personal documents, the behaviour of a particular application or compliance in a different territory. Those questions need their own observations.

Do not reduce the assessment to either “licensed therefore safe” or “unresolved therefore scam”. The regional analysis addresses the regional question. The application review addresses software provenance.

An important policy issue: adjustments

Clause 10.3 of the published policy reserves recovery of amounts described as credited in error, including withdrawn amounts. The review question is therefore the explanation and evidence for any adjustment. A clause should not be mistaken for proof that an adjustment was justified in a particular case.

Ask which transaction is affected, what calculation is disputed and which version of the terms is relied on. Whether a clause is legally enforceable requires qualified analysis of the actual contract and jurisdiction; the editor does not decide that from a web page alone.

Security evidence still needed

We have not tested account controls, personal-data storage or a software binary. Transport encryption is a narrower property than the identity and conduct of the recipient. A future technical assessment should record its exact target, procedure and date, rather than borrowing certainty from an ownership or licence record.

Assessment

The register observation strengthens one part of the review. It leaves domain authentication, corporate incorporation, regional legality and customer outcomes as separate questions. That is the useful distinction: a concrete record with a defined scope, rather than a general trust label.

Follow the evidence

Sources & their scope

Access dates identify when a source was consulted. A source reference does not establish the truth of every statement it contains or constitute a professional legal opinion.

  1. Winum.io About Us — claims about operation and licensing
    Winum.io (self-described brand site; affiliation not independently authenticated) · operator · Accessed 9 Oct 2026

    Page names Galaxy Byte Lab SRL and describes an Anjouan licence. Treated only as a brand-site assertion; no registry or regulator validation completed. Not an endorsement or gaming referral.

  2. Anjouan Gaming public licence register
    Anjouan Gaming · primary regulator · Accessed 9 Oct 2026

    Matched Galaxy Byte Lab SRL, ALSI-202508040-FI2 and winum.casino in the public ag-licence-data JSON embedded in HTML. Page text extraction alone omitted the rows. Records status valid, B2C, issued 2025-08-29, expiry 2027-08-28. The matched domain list does not include winum.io. Corporate incorporation and site control were not independently authenticated.

  3. Winum.io Terms and Conditions
    Winum.io (brand-facing site; affiliation not independently authenticated) · operator · Accessed 9 Oct 2026

    Inspected clauses 5.2, 7.3, 8.3.3, 10.3 and 14.3–14.4. Summaries describe published policy wording, not measured payout times, legal enforceability or an authenticated account contract.