Privacy Policy at Casinado Casino
This Privacy Policy explains what personal data we collect when you play at casinado-au.com, why we collect it, how long we keep it and the controls you hold over it. It applies to every account holder and visitor, and it forms part of our terms of service. Established in 2023 under licence OGL/2023/174/0921 issued in Curaçao, we operate under strict data protection standards regardless of where you play from.
Data We Collect From You
Categories of personal data
We collect only the data we need to run your account, verify your identity, process payments and meet our legal obligations. Here is the full picture of what sits in each category.
- Identity data: your full name, date of birth, email address, phone number and residential address.
- Verification documents: copies of your ID, proof of address and proof of payment method, collected during KYC checks.
- Transaction data: deposits, withdrawals, bet history, bonuses claimed and winnings, including crypto wallet addresses where used.
- Technical data: IP address, device type, operating system, browser type and approximate location derived from your IP.
- Gameplay behaviour: games played, session times, wagering patterns and loyalty tier activity.
- Marketing preferences: which promotions you opted into, your communication channel choices and consent records with dates.
- Support communications: live chat transcripts and email correspondence with our 24/7 support team.
How We Use Your Data
Purposes of processing
Every processing activity we run has a defined purpose tied to your account or to a legal duty. We never sell your data, and we never use it for anything outside the purposes listed here.
- Creating and managing your player account, including login and authentication.
- Carrying out KYC verification before your first withdrawal, processed within 1-3 business days.
- Processing deposits and withdrawals across all supported methods, from PayID to Tether.
- Preventing fraud, bonus abuse, multi-accounting and money laundering.
- Monitoring play for responsible-gambling indicators and enforcing deposit limits, loss limits, session reminders and cool-off periods you set.
- Sending marketing offers, weekly 15% cashback news and tournament announcements, only where you have consented.
- Meeting legal and regulatory obligations, including reporting to the relevant authorities.
Our Legal Bases Explained
Contract. We process your identity, account and transaction data to perform the agreement you entered with us when you registered. Without this data we cannot open an account, settle bets or pay withdrawals.
Legal obligation. Anti-money-laundering law and gaming regulation require us to verify your identity, keep transaction records for at least five years and report suspicious activity. These duties override deletion requests for the data they cover.
Legitimate interest. We process technical logs, device data and gameplay patterns to detect fraud, secure our platform and improve game stability. We weigh this interest against your rights and keep the data involved to the minimum needed.
Consent. Marketing emails, SMS and personalised offers run only on your consent. You can withdraw it at any time through your account settings or by contacting us, and withdrawal never affects the lawfulness of earlier messages.
How Long We Keep Data
Retention schedule
We hold each category of data only as long as its purpose requires. Regulatory rules set a hard floor for transaction and verification records, while everything else is deleted or anonymised once its job is done.
| Data category | Retention period |
|---|---|
| Identity and account data | Life of the account, then 5 years after closure |
| KYC verification documents | 5 years after account closure |
| Transaction and wagering records | At least 5 years, as required by AML law |
| Technical and IP logs | 12 months for security and fraud analysis |
| Marketing consent records | Until you withdraw consent, plus 12 months as proof of withdrawal |
| Support chat and email transcripts | 24 months after the conversation ends |
Who We Share Data With
Categories of recipients
We share your data only with parties who need it to deliver our service, and always under written data processing agreements. We do not sell or rent your personal data to anyone.
- Payment processors handling your deposits and withdrawals across cards, e-wallets, bank transfer and crypto.
- KYC and AML verification providers that check your documents and screen against sanctions lists.
- The Curaçao regulator and other authorities where law or licence conditions require disclosure.
- Game providers and platform hosts that receive your player identifier to record bet outcomes and RTP.
- Analytics and IT service providers that help us keep the site secure and stable, bound to process data only on our instructions.
Your Rights Over Your Data
What you can ask us for
You control your data, and you can exercise any of the rights below at any time by emailing [email protected]. We respond within 30 days and never charge a fee for a first, reasonable request.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct anything inaccurate or incomplete.
- Erasure: ask us to delete data we no longer need, subject to regulatory retention.
- Portability: receive your account and transaction history in a machine-readable format.
- Objection: object to processing based on legitimate interest, such as fraud analytics.
- Withdrawal of consent: stop marketing at any time via account settings, the unsubscribe link or by email.
- Complaint: escalate to our Data Protection Officer or lodge a complaint with your national data protection authority.
Cookies and Tracking Technologies
We use strictly necessary cookies to keep you logged in and your session secure, plus optional analytics and marketing cookies that run only with your consent, set when you first arrive via the cookie banner. You can change your choices any time in your browser settings or through our dedicated Cookies Policy page, which lists every cookie, its purpose and its lifespan.
How Casinado Protects Your Data
Safeguards we run daily
All traffic between your device and our servers runs over TLS encryption, and stored verification documents sit encrypted at rest with access limited to trained compliance staff. Our systems sit behind firewalls, undergo regular penetration testing and log every internal access to player records.
If a breach ever affects your personal data, we will notify the relevant supervisory authority without undue delay and inform you directly where the risk to you is high, including clear steps on what to do next.
- TLS encryption in transit and encryption at rest for documents.
- Role-based access controls with full audit logging.
- Regular security testing and 24/7 monitoring.
- Documented breach response procedure with regulator and player notification.
Frequently asked questions
How do I request a copy of my data?
Email [email protected] from your registered address. We verify your identity and send your data in a machine-readable format within 30 days, free of charge.
Can I delete my account data completely?
We delete marketing data and technical logs on request, but AML law requires us to keep identity, verification and transaction records for at least 5 years after your account closes.
Do you share my data with game providers?
Game providers receive only your player identifier and bet activity needed to record outcomes. They never receive your full identity, documents or payment details.
How do I stop marketing messages?
Use the unsubscribe link in any email, switch off marketing in your account settings, or ask support via live chat or [email protected]. Consent withdrawal takes effect immediately.