1. Data We Collect
We collect personal data that you provide directly during registration and account use: full name, date of birth, email address, residential address, phone number (optional), payment method details, and identity verification documents. We also collect technical data automatically: IP address, device type, browser version, session duration, pages visited, and interaction events.
Game activity data is retained for audit and responsible gaming purposes: game sessions, bet amounts, outcomes, deposit and withdrawal records, bonus activations, and wagering progress. This data is necessary for regulatory compliance and cannot be opted out of while your account remains active.
2. How We Use Your Data
Your personal data is used for: account management and verification; processing deposits and withdrawals; regulatory compliance (KYC, AML); fraud prevention and security monitoring; customer support; bonus and promotional communications (with your consent); improvement of platform functionality; and legal obligations under our Curaçao eGaming licence.
We do not sell your personal data to third parties. We share data only with: (a) licensed payment processors to facilitate transactions; (b) identity verification service providers for KYC; (c) regulatory authorities when legally required; (d) technology vendors operating under strict data processing agreements.
3. Data Retention
Account data is retained for a minimum of 5 years after account closure, as required by anti-money laundering regulations. Transaction records are retained for 7 years. Marketing preferences and communications data is retained until you opt out. Technical logs are retained for 12 months.
4. Your Rights
Subject to applicable law, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of data not subject to legal retention obligations; restrict or object to certain processing; and data portability. To exercise any of these rights, email [email protected] with subject: "Data Rights Request".
6. Security
All data transmissions use TLS 1.3 encryption. Passwords are stored as salted hashes using bcrypt. Payment card data is tokenized and never stored on our servers. We conduct regular security audits and maintain an incident response plan. In the event of a data breach affecting your rights, we will notify you within 72 hours of becoming aware of it.
7. Contact
For all privacy-related inquiries: [email protected]. We respond to privacy requests within 30 days. For unresolved complaints, you may contact the relevant data protection authority in your jurisdiction.