Scope

This Privacy Notice (hereinafter referred to as the «Notice») explains how CasinoLab and its direct and indirect subsidiaries (collectively, «CasinoLab», «we», «us», or «our») handle your personal data.

This Privacy Notice applies to the personal data collected from registered users («Players») who have an account on our Website and visitors to our Website.

Who We Are

The operator of this Website is the Data Controller of your personal data. We are the data controller because, in the context of our business relationship with you, we decide how and why your personal data is processed in the ways explained in this Notice.

Together with our joint controllers, we maintain the ownership and security of the personal data you provide to us.

If you have any questions regarding this Notice, including requests related to your privacy rights or data protection rights, you may contact our Data Protection Officer by email at:

[email protected]

What Personal Data Do We Collect?

Data You Provide to Us Directly

We may collect the following personal data depending on how you interact with our services.

Registration Data

To create an account on our Website, you may be required to provide:

  • Email address
  • Date of birth
  • Country of residence
  • Phone number
  • Gender
  • Full name
  • Social security number
  • ZIP/postal code
  • Username

Upon registration, we may also automatically collect your IP address and location data.

Due Diligence Data

To comply with Know Your Customer (KYC), Anti-Money Laundering (AML), age verification, identity verification, licensing obligations, and legal requirements, we may collect:

  • Identity card number
  • Driver’s licence number
  • Passport number
  • Proof of address
  • Social security number
  • Source of wealth and source of funds information
  • Bank information
  • Financial statements and related documentation

Financial Information

We may collect financial information including:

  • Bank ID
  • CPR number
  • CPF number
  • IBAN
  • Payment system details

This information may be used to facilitate deposits and withdrawals as well as for KYC and AML compliance purposes.

Personal Data We Collect Automatically

Device Information

We receive information about the device and software you use to access our services, including:

  • Internet Protocol (IP) address
  • Operating system version
  • Device identifiers

Logs and Usage Information

We automatically receive information about your interactions with our services, including:

  • Content viewed
  • Advertisements clicked
  • Searches performed
  • Social media interactions
  • Session dates and times
  • Pages visited
  • Navigation paths
  • Session duration

Some of this information is collected through cookies and similar technologies.

Location Information

We may collect or infer your general location when you use our services.

Personal Data We Receive From Other Sources

We may collect personal data from other sources in order to provide and personalize our services and comply with legal obligations.

Sources may include:

  • Publicly available databases
  • Government databases
  • Internet sources
  • Social media platforms
  • Online and printed media
  • Commercial databases
  • Credit institutions
  • Fraud prevention agencies
  • Public authorities

We may also make inferences about your interests and preferences based on your use of our Website and services.

Additionally, we may collect information that you have made publicly available through social media platforms, linked accounts (such as Facebook or Google), and other public online sources.

Why Do We Collect Your Data?

We use personal data to:

  • Provide our services
  • Respond to your requests and enquiries
  • Test, research, troubleshoot, and improve our products and services
  • Detect, prevent, and manage fraud and illegal activities
  • Send marketing communications and newsletters
  • Personalize marketing content
  • Resolve disputes and investigations
  • Fulfil legal and regulatory obligations

We also use personal data to maintain the security and functionality of our services and protect our systems against unauthorized access.

What Are Our Lawful Bases for Processing Your Personal Data?

Performance of a Contract

We process personal data where necessary to enter into or perform a contract with you, including:

  • Creating and maintaining your account
  • Providing customer support
  • Communicating with you regarding our services
  • Fulfilling obligations under our Terms and Conditions

We may process personal data to comply with legal obligations, including:

  • Verifying age and identity
  • Determining applicable legal requirements
  • Managing responsible gambling obligations
  • Ensuring network and information security
  • Complying with court orders and legal processes
  • Preventing money laundering, fraud, and financial crime
  • Regulatory reporting requirements
  • Handling requests related to data protection rights

Legitimate Interests

We may process personal data where necessary to protect our legitimate interests, provided your rights do not override those interests.

Examples include:

  • Managing legal claims and disputes
  • IT and security operations
  • Product and service improvement
  • Analytics and research
  • Customer segmentation
  • Risk management
  • Responsible gaming measures
  • Fraud detection and prevention

Where required, we process personal data based on your consent.

This may include:

  • Marketing communications via email, SMS, telephone, website, or app notifications
  • Personalized offers and promotions
  • Targeted advertising
  • Marketing analytics and effectiveness measurement
  • Participation in competitions, loyalty programs, and promotional campaigns

How We Share Your Personal Data

We may share your personal data with:

  • Authorized employees
  • Contractors and service providers
  • Affiliates and subsidiaries
  • Payment providers
  • Financial institutions
  • Customer support providers
  • Email, SMS, and communication providers
  • Cloud hosting providers
  • Marketing partners
  • Fraud prevention agencies
  • Analytics providers
  • Game providers
  • Law enforcement authorities
  • Regulatory and licensing authorities

We may also disclose information in connection with mergers, acquisitions, financing transactions, bankruptcy proceedings, or business transfers.

Where you submit a complaint through a third-party platform, we may disclose limited information necessary to investigate and resolve the matter.

How Long We Keep Your Data

We retain your personal data for as long as you maintain an account with us and for as long as necessary to fulfil the purposes described in this Privacy Notice.

We may retain data for longer periods where required by:

  • Anti-Money Laundering regulations
  • Legal obligations
  • Regulatory requirements

When data is no longer required, it will be deleted or anonymized.

Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of personal data
  • Restrict processing
  • Request data portability
  • Object to processing based on legitimate interests
  • Withdraw consent
  • Lodge a complaint with a supervisory authority

To exercise these rights, you may contact:

[email protected]

or

[email protected]

Cookies and Other Tracking Technologies

We use cookies, tags, pixels, web beacons, and similar technologies to improve your experience on our Website and applications.

Where required by law, we will obtain your consent before placing non-essential cookies.

Strictly necessary cookies do not require consent.

For more information, please refer to our Cookie Notice.

Data Security

We implement administrative, technical, and physical safeguards designed to protect personal data from unauthorized access, disclosure, alteration, loss, theft, and misuse.

Although we use industry-standard security measures, no system can guarantee absolute security.

We continuously review and improve our security practices to enhance data protection.

Transfer of Data Outside the EU/EEA

Your personal data may be processed in countries outside the European Union and European Economic Area.

Where international transfers occur, we implement appropriate safeguards, including:

  • Transfers to countries recognized by the European Commission as providing adequate protection
  • Standard Contractual Clauses approved by the European Commission
  • Other legally recognized transfer mechanisms

Change in Ownership or Control

In the event of a merger, acquisition, sale, restructuring, or other change in ownership or control of our business, your personal data may be transferred as part of that transaction.

The new owner may continue processing your personal data in accordance with this Privacy Notice unless you provide consent for a different use.

How to Contact Us

If you have questions regarding this Privacy Notice or our data collection practices, please contact us at:

[email protected]

or

[email protected]

Updates to This Notice

We may update, modify, or amend this Privacy Notice from time to time as our technology evolves or where required by law.

You are responsible for reviewing this Notice periodically.

Any updates become effective from the date published on the Website.

Updated: 04.09.2026