Our Privacy Policy
This Privacy Policy explains what personal data we collect when you play at Gamblezen Casino, why we collect it, how long we keep it and the rights you hold over it. By opening an account with us you agree to the practices described on this page.
Data We Collect
Categories of personal data
We collect only the data we need to run a licensed casino. When you register we ask for your full name, date of birth, email address, phone number and residential address. Before your first withdrawal we request verification documents under our KYC policy: a government-issued ID, proof of address and confirmation of the payment method you use.
- Identity data: name, date of birth, residential address, email, phone number
- Verification documents: passport, driver licence, utility bill, card or wallet confirmation
- Transaction data: deposits, withdrawals, wagering, bonus activity
- Technical data: IP address, device identifiers, browser type, operating system
- Gameplay behaviour: games played, session duration, bet and win history
- Marketing preferences: which channels you consent to receive offers on
How We Use Your Data
Purposes of processing
We use your data to create and manage your account, verify your identity, process deposits and withdrawals in AUD or crypto, and meet our legal obligations as a Curaçao-licensed operator (OGL/2023/174/0098). Your gameplay data also feeds our responsible-gambling monitoring, so we can spot harmful patterns and act early. Marketing messages go out only where you have given consent, and we stop the moment you withdraw it.
Our Legal Bases
Why the law permits the processing
Contract: we process identity and transaction data to deliver the gambling service you signed up for. Without it we cannot hold your balance or pay your winnings.
Legal obligation
KYC, AML checks and transaction record-keeping are required by our licence and by anti-money-laundering law, so we cannot offer opt-outs for these.
Legitimate interest
Fraud prevention, security monitoring and aggregate analytics rest on our legitimate interest in keeping the platform safe and functioning.
Consent
Marketing emails, SMS and personalised offers run only on your consent, which you may withdraw at any time via your account settings or a link in each message.
How Long We Keep It
Retention depends on the type of data and the rules that apply to it. We never keep data longer than the purpose requires.
| Data category | Retention period |
|---|---|
| Identity and account data | 5 years after account closure |
| Transaction and wagering records | Minimum 5 years, as required by AML regulations |
| KYC verification documents | 5 years after the last transaction |
| Technical and device logs | Up to 12 months |
| Marketing consent records | Until consent is withdrawn, then proof of withdrawal for 3 years |
| Support correspondence | 2 years after resolution |
Who We Share Data With
Categories of recipients
We never sell your personal data. We share it only with processors and authorities that need it for a defined purpose.
- Payment processors handling your deposits and withdrawals
- KYC and AML verification providers
- The Curaçao regulator and other authorities with lawful requests
- Analytics and hosting providers under data-processing agreements
- Email delivery services, only if you consent to marketing
Your Rights Over Data
What you can request
You control your data. Send any request to [email protected] and we respond within 30 days. Verifying your identity first protects your account from unauthorised requests.
- Access: get a copy of the data we hold about you
- Rectification: correct inaccurate or outdated details
- Erasure: delete data we no longer need to keep by law
- Portability: receive your data in a machine-readable format
- Objection: object to processing based on legitimate interest
- Withdraw consent: stop marketing at any time
- Complain: escalate to the relevant data protection authority
Cookies and Tracking
We use cookies to keep your session secure, remember your preferences and understand how the site performs. Analytics cookies collect aggregated statistics, and marketing cookies fire only with your consent. You manage every category in the cookie banner or your browser settings. Full details, including the list of cookies and their lifespans, sit on our dedicated Cookies Policy page.
How We Protect Your Data
Technical and organisational controls
All traffic between your device and our servers runs over TLS encryption. Stored verification documents sit in encrypted storage with strict access controls, and staff see personal data only where their role requires it. We log access to sensitive records and test our defences regularly.
- TLS 1.2+ encryption in transit and encryption at rest
- Role-based access control and access audit logs
- Regular security testing and staff data-protection training
- Documented incident response with breach notification to affected players and regulators where legally required
Contacting Our Data Team
Questions about this policy or your data? Email our Data Protection Officer at [email protected] or write to Gamblezen N.V. via the support channel on gamblezen.com. Our support team answers around the clock, and DPO enquiries get a substantive reply within 30 days. Changes to this policy are announced on this page before they take effect.
Frequently Asked Questions
Do you share my data with marketing partners?
Only with email delivery services, and only if you have consented to marketing. We never sell your data to third parties.
Can I get my KYC documents deleted?
We must keep verification documents for 5 years after your last transaction under AML rules. After that period we delete them automatically.
How do I stop marketing emails?
Use the unsubscribe link in any email, change preferences in your account settings, or email [email protected]. Processing stops immediately.
Who do I complain to about my data?
You can escalate to the relevant data protection authority in your jurisdiction, or contact our DPO at [email protected] first and we will try to resolve the matter directly.