What information do we collect?
To open and operate an account we collect identifying details: full name, date of birth, address, email, phone number and a copy of a valid photo ID along with proof of address. To process payments we collect transaction details, deposit and withdrawal methods and the relevant account or wallet identifiers. To keep the platform working smoothly we collect technical data such as IP address, device type, browser, operating system, language settings and pages visited.
Why we collect it
The legal basis for collecting personal data is the contract between you and the casino, the legal obligations under anti money laundering rules and the legitimate interest of running and improving the service. We use the data to verify your identity, comply with reporting obligations, prevent fraud, process payments, send service emails, offer relevant promotions where you have consented and analyse how the platform performs.
Who we share it with
Personal data is shared with payment providers to process transactions, with identity verification specialists during the KYC check, with fraud prevention partners to flag suspicious activity, with regulators where the law requires and with hosting and analytics partners under strict contractual safeguards. We do not sell personal data to third parties for marketing.
How long we keep it
Account and transaction records are kept for the full period the account is active plus a further five years to meet anti money laundering retention rules. Marketing preferences are kept until you change them. Technical logs roll over on a shorter window of typically 12 months.
What rights do you have over your data?
You have the right to request a copy of the personal data we hold, the right to correct inaccurate data, the right to ask for deletion where no overriding legal obligation applies, the right to restrict processing in certain situations and the right to object to direct marketing. Requests are handled through the help centre or by emailing the data protection contact listed there.
Security measures
All traffic between your device and the casino is encrypted with TLS. Passwords are hashed with industry standard libraries. Access to personal data inside the company is role based and logged. Backups are encrypted and stored in geographically separate locations. Penetration tests run on a regular cadence and findings are remediated through a tracked workflow.
Cookies
Cookies and similar technologies are covered in detail on the dedicated cookie policy. In short, essential cookies keep the session alive and remember preferences, analytics cookies measure how the site is used and marketing cookies support relevant offers where you have consented.
Updates to this policy
This policy can change as the platform evolves. Material changes are notified by email and posted at the top of the privacy page with a clear effective date. Continued use of the casino after the effective date counts as acceptance of the updated policy.
Contact
Privacy questions and data requests can be raised through the help centre. The response window is 30 days, faster where the request is straightforward.
International transfers
Where personal data is transferred outside your country of residence, the transfer is protected by appropriate safeguards. Standard contractual clauses are used with processors based in jurisdictions that do not have an adequacy decision, and additional technical measures such as encryption at rest and pseudonymisation are applied where the data is sensitive. The list of processor countries is reviewed regularly and updated if a new partner is added.
Automated decisions and profiling
Some platform decisions are partly automated. Fraud detection, risk scoring on individual transactions and personalisation of in account offers all use automated logic. Where automated decisions have a significant effect on you, such as a withdrawal hold pending review, a human reviewer is involved before the decision is finalised. You may request human review of any automated decision through the help centre.
Children
The platform is strictly for adults. No personal data of anyone under 18 is collected, stored or processed. If a parent or guardian becomes aware that a minor has created an account, please contact support immediately so the account can be closed and any deposits returned in line with the responsible gambling and AML procedures.
Where else can you read about this?
For how cookies are used see the cookie policy. For the rules that govern account use and the consequences of providing inaccurate personal data, see the terms and conditions.
Marketing preferences
Marketing emails, SMS and push notifications all run on explicit opt in. The first promotional message goes out only after you confirm marketing consent at signup or later from the account preferences screen. Every marketing message includes a one click unsubscribe and the preference is honoured immediately. Service communications, such as login alerts, KYC requests and transaction confirmations, sit outside marketing preferences because they are required to operate your account.
How would we respond to a data breach?
In the unlikely event of a data breach affecting personal data, the response follows a documented playbook. The incident response team scopes the affected data, contains the cause, notifies the relevant authority within the required window and notifies affected players directly with clear guidance. The playbook is reviewed annually and tested through tabletop exercises so the team is practised on the steps before any real incident happens.
Subprocessors and partners
Personal data is shared only with subprocessors that meet the security and privacy standards set out in our vendor management policy. The current categories include payment processors, identity verification specialists, hosting providers, customer support tooling, fraud detection partners and email delivery services. Each partner is bound by a written agreement that limits use of personal data to the purposes set out in this policy and requires appropriate technical and organisational measures.
A summary list of subprocessor categories and the regions they operate in is available on request through the help centre. Material changes to the list are notified through the standard policy update channel so you always have visibility on who is handling your data.
If you would prefer your data not to be processed by a specific category of partner, we cannot always accommodate that without affecting your ability to use the platform, particularly where the partner is part of the payment or identity verification flow. In those cases the available options are discussed openly during the support conversation.