What we hold, and why we hold it
Running a licensed casino means collecting more about you than a shop would, and being straight about it is the least we owe you in return. This policy covers what we take, the reason each piece exists, how long it stays, who else ever sees it, and what you can tell us to do with it.
Last updated: 1 September 2026
What we collect
Four kinds of information, and nothing beyond what each of them is for.
| Category | Examples | Why it exists |
|---|---|---|
| Identity | Name, date of birth, residential address, email, phone, photo ID and proof of address when we verify you. | Our licence requires us to know who holds the account and to confirm you are over eighteen. |
| Financial | Deposits, withdrawals, the method used, masked card or wallet identifiers, crypto addresses you cash out to. | To move money, to meet anti-money-laundering obligations, and to answer you when a payment is queried. |
| Play | Games opened, stakes, results, bonus activity, session length, limits you have set. | To settle bets correctly, apply bonus terms, and spot patterns that suggest gambling harm. |
| Technical | IP address, approximate location, device and browser, and the pages you looked at. | Security, fraud prevention, and knowing which jurisdiction you are connecting from. |
What we do not hold. We never store your full card number, your card PIN or any banking password. Card details are handled by the payment providers themselves; what reaches us is a masked reference and a yes or no.
The reasons we rely on
- Performing our contract with you. Opening the account, taking deposits, settling games, paying withdrawals.
- Legal obligation. Age verification, identity checks, anti-money-laundering monitoring and record keeping, all set by our licence.
- Legitimate interests. Preventing fraud and bonus abuse, securing the platform, and improving what we run — balanced against your privacy each time, not assumed.
- Consent. Marketing emails and non-essential cookies only. You can withdraw it whenever you like and nothing else about your account changes.
Who else sees it
A short list, and it stays short. Everyone on it is contractually bound to use your data only for the job we gave them.
- Payment providers and banks, to move money in and out.
- Identity verification services, to confirm documents are genuine.
- Game studios, which receive the session data needed to run and settle a round — not your identity documents.
- The Malta Gaming Authority and law enforcement, where a valid legal request obliges us.
- Our hosting and security suppliers, which process data on our instructions and nothing else.
Selling data is not part of our business. We do not sell, rent or trade personal information, and we do not hand it to advertisers to build profiles of you elsewhere.
How long we keep it
Five years on account and financial records is an anti-money-laundering requirement rather than our preference. Self-exclusion records are the one thing we keep indefinitely, because the whole point of a self-exclusion is that it cannot be undone by deleting an account and opening another.
What you can ask us to do
Write to [email protected] from the address on the account. We reply within thirty days, and we do not charge for it.
- See it. A copy of everything we hold about you.
- Correct it. Anything inaccurate, fixed.
- Delete it. Subject to the retention periods above — we cannot erase records a regulator requires us to keep, and we will tell you plainly which those are.
- Take it elsewhere. Your data in a portable, machine-readable format.
- Object. To processing based on legitimate interests, including profiling.
- Stop the marketing. One click in any email, or one message to live chat.
If our answer does not satisfy you, you can complain to the Office of the Australian Information Commissioner or to the data protection authority in the jurisdiction of our licence. We would rather you came to us first, but that route is yours either way.
Keeping it safe
Traffic between your device and us runs over TLS. Stored data sits encrypted. Access inside the company is limited to staff whose job needs it, is logged, and is audited. Documents you upload for verification are held separately from the ordinary account record.
No system is beyond reach and we will not claim otherwise. If a breach ever affects your data, we will tell you and the regulator within the timeframes the law sets, describe what happened, and say what we are doing about it.
Changes to this policy
When something material changes we update the date at the top and notify account holders by email before it takes effect. Wording tidy-ups happen quietly; changes to what we collect, why, or who sees it do not.
Quick answers
Why do you need my ID at all?
Because our licence requires us to confirm you are over eighteen and that the account is genuinely yours before money leaves us. It is a condition of operating, not a marketing exercise.
Can I have everything deleted today?
We will delete everything we are allowed to delete. Account and transaction records must be kept for five years after closure under anti-money-laundering rules, and self-exclusion records are permanent. We will list exactly what stays and why.
Do you store my card number?
No. The payment provider handles the card. We hold a masked reference so you can recognise the method, and nothing that could be used to charge it elsewhere.
Questions about your data go to [email protected]. Everything else is faster on live chat.