Privacy Policy

This policy explains what personal data we at Gamblezen Casino collect when you play at gamblezenonline.uk, why we collect it, how long we keep it and what rights you have over it. We operate under licence OGL/2023/174/0098 issued in Curaçao and apply GDPR-aligned standards to every player, regardless of where you are based.

Data We Collect

We collect only the data needed to run your account, verify your identity and meet our legal obligations. Collection happens when you register, deposit, play, contact support or open our marketing emails. Where you use crypto payments, we process wallet addresses instead of card numbers, and no banking credentials are ever visible to our staff.

• Identity data: full name, date of birth, email address, telephone number, country of residence
• Verification documents: government-issued ID, proof of address, payment method verification
• Transaction data: deposits, withdrawals, wagering history, wallet addresses for crypto transfers
• Technical data: IP address, device type, browser, operating system, approximate location
• Gameplay behaviour: games played, session times, bet sizes, win and loss records, bonus usage
• Marketing preferences: which channels you consented to, consent timestamps, opt-out requests
• Communications: live chat transcripts, email correspondence with our support team

How We Use Your Data

Every use of your data maps to a specific purpose. We do not repurpose data collected for verification into unrelated profiling, and we never sell your data. Bonus eligibility checks, such as confirming your 220% welcome bonus up to 450 GBP with 200 free spins, rely on your deposit and wagering records, not on behavioural profiles.

• Creating and managing your player account
• Verifying your identity and age before your first withdrawal (KYC)
• Processing deposits and withdrawals through your chosen payment method
• Preventing fraud, money laundering, bonus abuse and multi-accounting
• Monitoring gambling behaviour to support responsible-gaming interventions
• Sending marketing messages where you have given consent
• Meeting tax, licensing and regulatory reporting obligations

Our Legal Bases

Contract

Processing necessary to perform our contract with you. Your account, gameplay, bonuses and payouts cannot function without identity, transaction and gameplay data. If you close your account, contract-based processing stops once retention duties expire.

Legal obligation

Processing we must carry out under gambling, anti-money-laundering and tax law. KYC checks, transaction monitoring and suspicious-activity reporting fall under this basis, and we cannot waive them even if you ask us to.

Legitimate interest

Processing that protects our business and other players. Fraud detection, security logging and aggregated service improvements rely on this basis. We weigh our interest against your rights before each use and keep technical data minimal.

Consent

Processing you agree to and can withdraw at any time. Marketing emails, SMS and personalised offers run only on your consent. Withdrawal of consent never affects the lawfulness of messages sent before you opted out.

How Long We Keep Data

Retention periods follow the strictest applicable rule, not the shortest convenient one. Gambling regulation requires us to keep transaction and verification records for at least five years after account closure, so deleting these earlier is not possible even on request.

Who We Share Data With

We share data only with parties that deliver a service you use or that law compels us to inform. Every processor operates under a written data-processing agreement that limits what it may collect and how long it may hold it. We do not disclose your data to advertisers or data brokers.

• Payment processors handling your Visa, Mastercard, e-wallet or crypto transfers
• KYC and AML verification providers checking your documents
• The Curaçao licensing authority and other competent regulators
• Analytics providers measuring site performance in aggregate
• Game and platform providers operating the titles you play
• Professional advisers: lawyers, auditors, tax specialists
• Law enforcement where a lawful request is made

Your Rights Under GDPR

You can exercise any of the rights below at no cost by emailing [email protected] or [email protected]. We respond within one month and may ask for one piece of identification to confirm the request comes from you. Complaints about our handling of your data can be raised with your national data protection authority at any time.

• Access: a copy of the personal data we hold about you
• Rectification: correction of inaccurate or incomplete records
• Erasure: deletion where no legal retention duty applies
• Portability: your data in a structured, machine-readable format
• Objection: objection to processing based on legitimate interest
• Withdrawal of consent: opt out of marketing at any time, via account settings or unsubscribe links
• Complaint: escalate to the data protection authority in your country of residence

Cookies and Tracking

We use session cookies to keep you logged in, preference cookies to remember your settings, and analytics cookies to count visits. Marketing cookies are set only after you accept them in the cookie banner, and you can change your choices at any time from the cookie settings link in the footer. The full inventory of cookies, their purposes and lifespans sits in our separate Cookies Policy page, which we keep updated with every change.

Our Security Measures

All traffic between your device and our servers runs over TLS encryption. Card and wallet data are tokenised, so full payment details are never stored in our systems. Access to player data follows the principle of least privilege: support agents see only what a ticket requires, and verification documents are restricted to the KYC team.

• TLS 1.2 or higher on every connection
• Tokenised payment data and encrypted document storage
• Role-based access controls with activity logging
• Regular penetration testing and security audits
• Two-factor authentication available for your account

If a breach happens

If a personal data breach occurs, we contain it first, then notify the relevant supervisory authority within 72 hours of becoming aware of it. Where the breach poses a high risk to you, we inform you directly and without undue delay, with clear steps on what to do next. Our data protection officer can be reached at [email protected] for any security or privacy concern.

Frequently Asked Questions

Can I delete all my data from Gamblezen Casino?

We delete marketing preferences immediately and account data once your account closes. Verification documents and transaction records must be kept for 5 years under gambling regulations, after which they are securely destroyed.

Do you use my data for marketing without asking?

No. We send marketing emails, SMS and offers only where you have given consent. You can withdraw that consent at any time from your account settings or the unsubscribe link in any message.

How do I request a copy of my data?

Email [email protected] or [email protected] with your request. We verify your identity and deliver the data in a machine-readable format within one month, free of charge.

Is my payment information stored?

Payment details are tokenised and processed by licensed payment providers. Full card numbers and crypto wallet keys are never held in our own systems.

Who do I complain to about privacy issues?

Contact our data protection officer first at [email protected]. If the issue is unresolved, you can escalate to the data protection authority in your country of residence.