Privacy Policy
Version of 23 September 2026
This policy explains what we collect when you use GambleZen Casino, why, and what you can ask us to do with it.
We have been running since 2023, and in that time we have tried to keep this page readable. If any part of it is unclear, our live chat team answers questions about privacy around the clock, in English.
1. Who is responsible for your data
Your personal data is controlled by the company that holds our licence from the Curaçao Gaming Authority. Its full name, registration number and registered address are shown in the footer of every casino page, so you always have the current details in one place.
That company decides why and how your data is used, and it answers for it. When this policy says "we", "us" or "our", it means that operator.
We do not hold a licence from the UK Gambling Commission. Even so, we apply the same standards of care to personal data that UK players are used to, and UK players keep the rights described below.
2. What we collect
The data comes from three places: what you tell us, what your device sends while you use the casino, and what trusted partners pass back to us.
What you give us
- Who you are: full name, birth date, home address, email, a phone number and the currency you picked (GBP or a supported cryptocurrency).
- Verification documents: ID, proof of address and, where needed, proof of where deposited money came from.
- Payments: the method used, amounts and dates. Full card numbers are handled by the payment provider, not stored by us.
- Play: games played, stakes, wins, bonuses and limits you set.
- Conversations: chat transcripts and emails with support.
- Preferences: which offers you want to hear about and through which channel.
What we collect automatically
- Technical data: IP address, device type, browser, operating system and log-in times.
- Session activity: pages opened, games launched, the length of each session and any errors your device reported.
- Approximate location: worked out from your IP address, so we can confirm you are playing from a country we accept.
What we receive from others
Payment providers tell us whether a deposit or withdrawal went through. For card payments that covers Visa and Mastercard debit cards, Apple Pay and Google Pay; open banking services confirm the bank account used; crypto processors pass on the wallet address and transaction reference; and MiFinity or Jeton confirm payouts sent to those e-wallets.
Identity and fraud-check services return the result of an age or address check and, sometimes, a risk score. Game studios send back the outcome of each round you play against your player ID, which is how your balance stays correct.
3. Why we use it and on what basis
Data protection law asks us to name a legal reason for each use of your data. Here they are in plain words.
| What we do | Legal basis | What that means for you |
|---|---|---|
| Open and run your account, take deposits, pay out winnings | Contract | We cannot provide the service you signed up for without this data. |
| Confirm your age and identity, check where funds came from | Legal obligation | Our licence and anti-money-laundering rules require these checks. |
| Spot signs of harmful play and offer help | Legal obligation and legitimate interests | We are expected to look after players, and we want to. |
| Prevent fraud, bonus abuse and account takeovers | Legitimate interests | This protects your balance and keeps the games fair for everyone. |
| Answer support requests and keep records of them | Contract and legitimate interests | A transcript lets us pick up where the last conversation stopped. |
| Improve the site and fix faults | Legitimate interests | We look at usage in aggregate, not to follow one person around. |
| Send offers by email or in-account message | Consent | Only if you said yes, and you can change your mind whenever you like. |
Where we rely on legitimate interests, we have weighed our reasons against your privacy and kept the use narrow. You can object to any of these uses by writing to us, and we will explain our assessment.
4. Marketing and how to switch it off
Offers are sent only to players who opted in. Each channel has its own switch, so you can keep email and turn off text messages, or the other way round.
- Email: use the unsubscribe link at the bottom of any promotional email, or untick email in your account settings.
- Push and on-site messages: turn notifications off in your browser or device, and in your account preferences.
Changes take effect quickly, though a message already scheduled may still arrive for a short while. Service messages, such as a password reset or a note about your withdrawal, are not marketing and will still reach you.
If you self-exclude or take a break, all marketing stops for that period, whatever your settings say.
5. Profiling for safer gambling and fraud
Some checks run automatically, such as flags on unusual deposit patterns, very long sessions, a sudden rise in stakes or several accounts sharing one device. These patterns help us notice when someone may need support, or when an account may be at risk.
A flag never closes an account on its own: a person reviews it, and you can ask for that review to be explained. The outcome might be a friendly message, a suggestion to set a limit, a request for a document or, in rarer cases, a pause while we look closer.
To ask how a decision about your account was reached, contact our support team with "Privacy" in the subject. You can also give us your side of the story, and we will take it into account.
6. Who receives it
Payment providers, identity verification services, game studios (only a player ID, never your name), our hosting and customer support tools, and authorities where the law requires it. We do not sell personal data.
Every provider works under a written agreement that limits what it can do with your data and requires it to keep that data safe. Our professional advisers, such as auditors and lawyers, may see records when their work needs it, under a duty of confidentiality.
7. Where it is kept
Some of our providers are outside the UK and the European Economic Area. Where data leaves those areas it is protected by contract clauses that require the same level of care.
If you would like to know which safeguard covers a particular provider, ask us and we will explain it or send you a copy of the relevant terms.
8. How long we keep it
We keep data only for as long as there is a reason to. Once that reason ends, records are deleted or made anonymous.
| Type of record | How long | Why |
|---|---|---|
| Account, payment and verification records | Five years after the account closes | Anti-money-laundering rules require it |
| Chat transcripts | Two years | To handle follow-up questions and disputes |
| Self-exclusion records | As long as the exclusion lasts, plus a reasonable period after | So that the exclusion can be enforced |
| Marketing preferences | Until you change them or close your account | So we respect the choice you made |
| Deposit limits and other safer gambling settings | For the life of the account | They only work if we remember them |
Closing your account does not wipe everything at once. The five-year period for account, payment and verification records starts on the day the account closes, and chat transcripts follow their own two-year clock. A self-exclusion record stays in place for the whole exclusion and a reasonable time afterwards, because deleting it early would let a new account slip through.
Anything without a legal reason to stay, such as your marketing choices or notification settings, is removed once the account is closed. If you ask us to delete data sooner, we will do so for every record we are not required to keep and tell you which ones must remain, and for how long.
9. How we keep it safe
Connections are encrypted, staff access is limited to what each role needs, and two-step sign-in is available on every account.
Behind the scenes, verification documents are stored separately from everyday account data, and access to them is logged. Our systems are updated regularly, and we test them for weak spots.
You can help too. Use a password you do not use anywhere else, switch on two-step sign-in, and log out on shared devices. We will never ask for your password by chat or email.
10. Children
Accounts are for adults, 18 and older. Age is checked when you sign up, so information about younger people should never reach us in the first place.
If we find that an account belongs to someone under 18, we close it, return any deposits where the law allows, and keep only what we must. A parent or guardian who is worried can contact us and we will look into it promptly.
11. If something goes wrong
Data incidents are rare, and we plan for them anyway. If one happened and it was likely to affect you, we would tell you by email or when you next log in, in plain words.
That message would explain what happened, which of your details were involved, what we have done about it and any simple steps you could take, such as changing your password. Where the law requires it, we would also inform the relevant data protection authority.
12. Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete what we are not required to keep, object to marketing, and ask for the data you gave us in a portable format. Write to our support team with the word "Privacy" in the subject; we reply within one month.
You may also ask us to limit how we use your data while a question about it is being settled, and you can withdraw consent at any time. Withdrawing consent does not affect anything we did before.
Making a request is free. If a request is plainly unfounded or repeated many times, we may decline it or ask for a reasonable fee, and we would explain why.
13. How to make a request
- Write to us. Email our support team from the address linked to your account, with "Privacy" in the subject line. Our live chat can also start the process for you.
- Say what you need. Tell us which right you want to use, for example a copy of your data or a correction, and add anything that helps us find the right records, such as your username.
- Confirm it is you. We may ask you to log in or answer a security question before we share anything. This stops someone else getting hold of your details.
- Get our reply. We respond within one month. If a request is complex we may need longer; in that case we tell you within the first month and explain why.
Copies of data are sent in a common electronic format, unless you ask for something else.
14. Complaints
If you are unhappy with how we have handled your data, please tell us first. Most concerns are settled quickly once we understand them.
You also have the right to complain to a data protection authority. UK players can contact the Information Commissioner's Office (ICO), which is the UK regulator for personal data. You do not need to wait for our answer before doing so.
15. Cookies
How we use cookies is covered in our Cookie Policy.
16. Changes to this policy
If this policy changes in a way that matters, we tell you by email or when you next log in.
Smaller edits, such as clearer wording or an updated list of payment methods, appear here with a new date at the top of the page. Earlier versions are available on request.
