Privacy Policy
What personal data we hold, why we hold it, how long we keep it, and who else ever sees it.
Effective Date:
We at our site (āWebsiteā, āweā, āusā, āourā) are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and safeguard your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (āGDPRā) and other applicable data protection laws. By using our Website and services, you acknowledge and agree to this Privacy Policy.
What Data We Collect
When you access or use our site, we may collect, generate, or process the following categories of personal data. The specific data collected depends on your use of our Website, the services you engage with, and the regulatory requirements applicable to your jurisdiction:
Identity Data
- Full legal name, date of birth, nationality, gender.
- Identification documents: passport, national ID card, residence permit, driverās license.
- Proof of address: utility bills, bank statements, tax records, or government correspondence.
Contact Data
- Email address, telephone number (mobile and/or landline).
- Residential or correspondence address.
- Alternative contact details were provided.
Account Data
- Chosen username and password.
- Security credentials, authentication factors, or PINs.
- Account preferences and communication settings.
- Responsible gaming settings: deposit/loss limits, time-outs, self-exclusion measures.
Usage Data
- IP address, browser type and version, operating system, device identifiers, device model.
- Session activity logs: login time, logout time, duration of use.
- Referring URLs and navigation paths.
- Clickstream data, game preferences, and time spent on individual Website sections.
Compliance Data
- Documents and information required for Know Your Customer (KYC) verification.
- Data collected for Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) compliance.
- Screening results against sanctions lists, politically exposed persons (PEP) databases, and other fraud-prevention tools.
- Risk scoring and due diligence outcomes.
Purposes of Data Collection
We process your personal data only for specific, explicit, and legitimate purposes. Depending on your interaction with our site, your data may be used for one or more of the following:
- Account Registration & Service Delivery
- Legal and Regulatory Compliance
- Identity Verification
Legal Basis for Processing
Under the General Data Protection Regulation (GDPR), we are required to identify the legal grounds that allow us to process your personal data. Depending on the specific purpose of processing, we rely on one or more of the following bases:
Performance of a Contract
We process personal data where it is necessary to perform the contract entered into between you and our site. This includes:
- Creating, verifying, and managing your player account.
- Providing access to gaming services and associated features.
- Processing deposits, withdrawals, and other payment transactions.
- Ensuring delivery of bonuses, loyalty rewards, and promotional offers associated with your account.
- Providing customer support, dispute resolution, and account management services.
If you fail to provide the data necessary for these activities, we may not be able to provide you with our services.
Legitimate Interests
We may process your data where it is necessary to pursue our legitimate interests, provided that your fundamental rights and freedoms are not overridden. These legitimate interests include:
- Ensuring the security and integrity of our Website and gaming platform.
- Detecting and preventing fraudulent transactions, account misuse, or multiple account abuse.
Where we rely on this ground, we balance our interests with your rights by implementing appropriate technical and organizational safeguards.
Consent
In certain situations, we process your data only when you have provided explicit consent, which you may withdraw at any time. This applies to:
- Sending direct marketing communications, including promotional emails, newsletters, and bonus offers.
- Using non-essential cookies, pixels, and tracking technologies for analytics and personalized advertising.
- Processing certain optional categories of data (e.g., survey participation, marketing preferences).
You are always free to refuse or withdraw consent without affecting your access to core services, except where consent is required to use optional features.
Protection of Vital Interests
In rare and exceptional cases, we may process personal data to protect the vital interests of you or another person, such as:
- Preventing imminent harm to life, safety, or physical integrity.
- Responding to urgent medical or legal emergencies involving users of our platform.
This basis is applied only in extraordinary circumstances where no other lawful ground applies.
Data Transfers to Third Parties
General Principle
We respect your privacy and only share personal data where it is strictly necessary to fulfill the purposes outlined in this Privacy Policy, in compliance with applicable laws (including the GDPR and gambling regulations). All third parties are subject to confidentiality and data protection obligations, and we never sell or rent your data to external parties for commercial gain.
Accountability & Vendor Management
All third-party service providers are subject to Data Processing Agreements (DPAs) or equivalent contractual obligations to ensure that your personal data is handled in compliance with GDPR, and only for the purposes specified by our site.
User Rights
As a data subject under the General Data Protection Regulation (GDPR), you have the following but not limited rights regarding the personal data we process about you:
- You have the Right of Access, which allows you to request confirmation of whether we are processing your personal data. If we are, you have the right to receive a copy of that data, including details on the purposes of processing, the categories of personal data, recipients or categories of recipients, retention periods, and information about your rights.
- You have the Right to Rectification, which enables you to request correction of any inaccurate or incomplete personal data we hold about you.
Exercising Your Rights
To exercise any of these rights, please contact our Data Protection Officer or privacy team (see Section 7). We will respond to requests without undue delay and within one month of receipt, in full compliance with GDPR requirements. Where requests are particularly complex, the response period may be extended by a further two months, and you will be notified of any extension and the reasons for it.
Contact Information for Privacy Inquiries
If you have any questions regarding this Privacy Policy, wish to exercise your rights under the General Data Protection Regulation (GDPR), or raise concerns regarding the processing of your personal data, you may contact us as follows:
Data Protection Officer (DPO):
Email:
All inquiries will be handled in accordance with GDPR requirements, and we will respond promptly to any requests or concerns regarding your personal data.
Data Retention and Deletion
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, and in compliance with applicable legal, regulatory, and contractual obligations. Specific retention periods are as follows:
Account and Transaction Data
- Retained for the duration of your account activity.
- After account closure, retained for 5ā7 years to comply with anti-money laundering (AML), financial reporting, and other regulatory requirements.
KYC Documentation
- Identification and verification documents (passport, ID, proof of address, etc.) are retained for at least 5 years following account closure, in accordance with legal obligations under AML regulations.
Marketing Data
- Data used for marketing purposes (emails, preferences, consent records) is retained until you withdraw consent or unsubscribe from marketing communications.
Technical Logs and Security Data
- Logs, IP addresses, and other technical data collected for fraud prevention, security monitoring, and auditing are retained for 12ā24 months.
Secure Deletion and Anonymization
Once retention periods expire, personal data is securely deleted or anonymized so that it can no longer be linked to you. We implement strict technical and organizational measures to ensure data is disposed of securely.
Security Measures
We implement appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of your personal data, including but not limited to:
- Data Encryption and Pseudonymization - all sensitive personal data, including financial and identity data, is encrypted in transit using TLS/SSL protocols. Where appropriate, personal data is pseudonymized to minimize identification risk.
- Network and System Security - Firewalls, intrusion detection and prevention systems, and continuous network monitoring are in place. Regular vulnerability assessments, penetration testing, and security audits are performed.
- Access Controls - Personal data access is restricted to authorized personnel based on role and necessity. Staff are bound by confidentiality obligations and undergo security awareness training.
- Data Backup and Recovery - regular secure backups are maintained to prevent accidental loss or destruction. Data recovery procedures are tested to ensure integrity and availability in case of incidents.
- Incident Management - Data breach detection, response, and notification protocols are in place in compliance with GDPR Articles 33 and 34.