Our Privacy Policy

This policy sets out how Cazzino Slots, operated by Cazzino Entertainment N.V. under licence 8048/JAZ2023-065 from the Curacao eGaming Authority, collects and handles your personal data. We keep it plain so you know exactly what we hold, why we hold it and what you can do about it.

Data We Collect

Categories of personal data

We only collect data we need to run your account, meet our licence obligations and keep the site safe. When you register, we ask for your name, email address, telephone number and date of birth. Before your first withdrawal we also request verification documents: a photo ID, proof of address and evidence of your payment method.

  • Identity data: name, date of birth, email, phone number
  • Verification documents: passport or driving licence, utility bill, card or wallet confirmation
  • Transaction data: deposits, withdrawals, bets, winnings and bonuses in GBP, EUR, USD, BTC or USDT
  • Technical data: IP address, device type, browser, approximate location derived from your IP
  • Gameplay behaviour: games played, session length, stakes, self-assessment responses
  • Marketing preferences: which channels you consent to and which offers you have claimed

How We Use Your Data

We use your data to open and maintain your account, verify your identity under our KYC duties, process deposits and withdrawals, and prevent fraud and bonus abuse. Gameplay data feeds our responsible-gambling monitoring, so we can spot unusual patterns and act early where a session or spending limit suggests you need a pause.

Where you have given consent, we also use your email and phone number to send promotional messages about daily free rolls, Red Ruby rewards and seasonal slot races. If you have not consented, you will only receive service messages such as withdrawal confirmations and security alerts.

  • Creating and managing your player account
  • KYC and anti-money-laundering checks before your first withdrawal
  • Processing payments through Visa Debit, Trustly, Skrill, Neteller, bank transfer or crypto
  • Fraud prevention, dispute handling and enforcement of our terms
  • Responsible-gambling monitoring and limit enforcement
  • Marketing where you have opted in, and legal reporting to our regulator

Why the law lets us process your data

Contract. Opening an account, processing your deposits and paying out winnings are all part of the contract between us. Without your identity and payment data we cannot provide the service you signed up for, so we process it to perform that agreement.

Legal obligation. Our Curacao licence obliges us to verify your age and identity, screen transactions for money laundering and keep records of gambling activity. We cannot lawfully operate without processing this data, and we cannot switch it off while your account is open.

Legitimate interest. We rely on legitimate interest to secure our platform, detect fraud, analyse aggregated gameplay trends and improve site performance. We weigh this interest against your rights and restrict it to what a reasonable player would expect.

Consent. Marketing messages and optional cookies that are not strictly necessary run on your consent only. You can withdraw it at any time through your account settings or the email link, and withdrawal never affects the lawfulness of messages sent before it.

How Long We Keep Data

Retention by category

We hold each category of data only as long as we need it. Transaction and gambling records carry a regulatory minimum of five years after the last activity on your account, so we cannot delete these earlier even if you ask. Everything else follows the table below.

Data categoryRetention period
Identity and account dataFor the life of your account, then up to 5 years for regulatory records
KYC verification documents5 years after account closure, as required by our licence
Transaction and betting historyMinimum 5 years after your last transaction
Marketing preferences and consent logsUntil you withdraw consent or ask us to delete them
Technical and device logsUp to 12 months for security and fraud analysis
Responsible-gambling self-exclusion recordsFor the full exclusion period plus 5 years

Who We Share Data With

We never sell your personal data. We share it only with processors and partners who need it to deliver the service, and every one of them works under a written data-processing agreement that limits what they may do with your information.

Payment processors receive the details needed to move your funds, such as your name, card or wallet identifier and transaction amount. KYC and AML providers receive your verification documents to confirm you are who you say you are. Our regulator can require transaction and account records for audit or investigation. Analytics providers receive aggregated or pseudonymised data about how the site is used. Where we partner with game studios to run slot races and prize draws, they receive only your display name and prize-eligibility status.

  • Payment and wallet processors
  • Identity verification and AML screening providers
  • The Curacao eGaming Authority and other competent regulators
  • Analytics and site-performance providers
  • IT and hosting suppliers under data-processing agreements

Your Rights Over Your Data

You control your data, and exercising any of these rights is free. Email [email protected] or our data protection officer at [email protected] and we will respond within one month. If you are unhappy with our answer, you can complain to the data protection authority in your country of residence.

  • Access: get a copy of the personal data we hold about you
  • Rectification: correct anything inaccurate or incomplete
  • Erasure: ask us to delete data we no longer have a legal reason to keep
  • Portability: receive your data in a machine-readable format
  • Objection: object to processing based on legitimate interest
  • Withdraw consent: stop marketing at any time, with immediate effect
  • Complain: escalate to your national data protection authority

Cookies and Tracking

We use strictly necessary cookies to keep you logged in, remember your deposit method and protect the site against attacks; these need no consent. Optional cookies support analytics and personalised offers, and they load only after you accept them in the consent banner. You can change your cookie choices at any time, and our dedicated cookies page lists every category, purpose and lifespan.

How We Protect Your Data

All traffic between your device and our servers travels over TLS encryption, and card and wallet details are tokenised so full payment credentials never sit in our systems. Access to player data is role-based: only staff who need it for verification, payments or support can see it, and every access is logged.

If a personal-data breach ever occurs, we will notify the relevant supervisory authority within 72 hours of confirming it, and we will tell you directly without undue delay whenever the breach is likely to affect your rights. Our support team is reachable 24/7 at [email protected] if you ever suspect unusual activity on your account.

Frequently Asked Questions

Can I play at Cazzino Slots without giving you my documents?

You can register and deposit with basic details, but our licence requires full KYC verification before your first withdrawal. That means we will need photo ID, proof of address and payment-method confirmation at that stage.

How do I stop marketing emails and SMS?

Open your account settings and switch off the channels you no longer want, or use the unsubscribe link in any message. Processing stops immediately, though service emails such as withdrawal confirmations will continue.

Do you keep my betting history forever?

No. We keep transaction and gambling records for a regulatory minimum of five years after your last activity, then delete or anonymise them. Marketing data goes as soon as you withdraw consent.

Who can see my verification documents?

Only our KYC and compliance staff plus the verification providers working under contract with us. Access is role-based and logged, and documents are deleted once the five-year retention period ends.

What happens if my data is breached?

We notify the supervisory authority within 72 hours and contact you directly where the breach could affect your rights. You can reach us at any time via [email protected], which is staffed 24/7.