Our Privacy Policy, Your Data
This Privacy Policy sets out what personal information we collect when you play at Vegasino Casino, how we use it, who we share it with, and what rights you have over it. It applies to vegasino-pokies.com and every product we operate under our Anjouan licence (ALSI-202411023-FI2), held by NovaForge Ltd. We launched in 2024 with a simple rule that still governs our data handling: we collect only what we need, we keep it no longer than required, and we tell you exactly what we do with it.
What Data We Collect
We collect personal information across six categories, each tied to a specific function of your account. You give some of it directly, and our systems generate the rest as you play.
- Identity data: your full name, date of birth, email address, phone number, residential address and country of residence, collected at registration.
- Verification documents: photo ID or passport, proof of address, and payment method verification, collected under our KYC requirements before your first withdrawal.
- Transaction data: deposits and withdrawals, payment method details, wallet addresses for crypto transfers, and bonus wagering records.
- Technical data: IP address, device type, operating system, browser fingerprint, and session logs tied to your account.
- Gameplay behaviour: games played, bet sizes, win and loss history, session duration, and responsible-gambling indicators such as chasing patterns.
- Marketing preferences: which channels you opted into, when you consented, and how you responded to our promotions.
How We Use Your Data
Every use of your data maps back to one of seven purposes, and we do not stretch your information beyond them. Your identity data opens and runs your account. Your verification documents let us confirm you are who you say you are before we release funds, in line with our 1-3 business day KYC processing window. Your transaction data moves money: PayID, Neosurf, card, e-wallet and crypto transfers all require it.
Fraud prevention runs continuously against your play and payment patterns, and responsible-gambling monitoring uses your gameplay behaviour to flag signs of harm so we can act early with deposit limits or a check-in. Marketing communications go out only where you have consented, covering our reload bonuses, cashback offers and bonus shop updates. Finally, we hold and report certain data to meet the legal obligations attached to our Anjouan licence, including anti-money-laundering record keeping.
Our Legal Bases
We process your data on four legal bases, and we match each processing activity to the correct one.
- Contract: creating your account, processing deposits and withdrawals, running bonuses, and delivering the games you play all sit on the contract between you and us, since none of it works without your personal data.
- Legal obligation: KYC verification, AML record keeping, and regulator reporting rest on our legal duties under our Anjouan licence, and we cannot waive them even at your request.
- Legitimate interest: fraud detection, security monitoring, and aggregate analytics that improve our site operate on our legitimate interest in running a safe, honest casino. We weigh that interest against your rights and keep the data involved to a minimum.
- Consent: marketing emails, SMS, and any non-essential cookies run only on your consent. You can withdraw it at any time, and we stop the corresponding processing the moment you do.
How Long We Keep It
Retention periods follow the strictest applicable rule for each category, not our convenience. Where gambling regulation requires a minimum, that minimum wins.
Identity and account data stay for the life of your account, then for five years after closure to satisfy record-keeping obligations. Transaction data is held for at least five years from the transaction date, a regulatory floor we do not undercut. Verification documents are kept for five years after your last withdrawal. Gameplay records follow the same five-year span. Technical logs rotate within months unless tied to an open investigation. Marketing preferences are kept until you delete them or withdraw consent, after which they are erased within 30 days.
Who We Share It With
We never sell your data, and we share it only with categories of processors who need it to deliver a service you use. Each one works under a contract that binds them to our security and retention standards.
Payment processors handle your card, e-wallet and crypto transfer details. KYC and AML verification providers check your documents against sanctioned lists and identity databases. The Anjouan licensing authority receives reports and records when regulation requires it. Analytics providers process aggregated usage data to help us fix faults and improve load times. Game providers receive only the minimum needed to deliver sessions to your account, such as a session token and your jurisdiction, never your full identity.
Your Rights Over Data
Y
o
u
h
o
l
d
a
f
u
l
l
s
e
t
o
f
r
i
g
h
t
s
o
v
e
r
y
o
u
r
p
e
r
s
o
n
a
l
i
n
f
o
r
m
a
t
i
o
n
,
a
n
d
w
e
a
n
s
w
e
r
e
v
e
r
y
r
e
q
u
e
s
t
w
i
t
h
i
n
3
0
d
a
y
s
t
h
r
o
u
g
h
o
u
r
s
u
p
p
o
r
t
t
e
a
m
a
t
s
u
p
p
o
r
t
@
v
e
g
a
s
i
n
o
.
c
o
m
,
a
v
a
i
l
a
b
l
e
2
4
/
7
v
i
a
l
i
v
e
c
h
a
t
.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct anything inaccurate or incomplete, including KYC details that changed.
- Erasure: request deletion where no legal retention duty blocks it. Regulatory records survive; the rest goes.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest, such as profiling for fraud checks.
- Withdraw consent: pull your marketing consent at any time, in account settings or via any marketing email.
- Complain: raise a complaint with our data protection officer at [email protected], or with the relevant data protection authority in your jurisdiction.
Cookies and Tracking
Our site uses strictly necessary cookies to keep you logged in and your session secure, plus analytics and optional marketing cookies that run only on your consent, which we ask for through a consent banner on first visit. You can change or withdraw your cookie choices at any time in your browser or account settings. Full detail on every cookie category, its lifespan and its purpose sits on our dedicated Cookies Policy page, which we keep as the single source of truth for tracking.
How We Protect Your Data
Your data moves over TLS encryption in transit and sits encrypted at rest in our storage layer. Access follows a strict need-to-know model: staff who handle KYC documents are a separate, trained group, every access is logged, and credentials are enforced with multi-factor authentication across our internal systems. Payment card details never touch our servers directly, since processors tokenise them at entry.
If a breach affects your personal data despite these controls, we will notify the relevant regulator without undue delay and, where the risk to you is real, tell you directly what happened, what data was involved, and what we are doing about it.
Frequently asked questions
How do I request a copy of my data?
Email [email protected] or use live chat and ask for a data access request. We verify your identity, then send your data in a structured format within 30 days.
Can I delete my Vegasino Casino account and its data?
Yes. Close your account through support, and we erase your marketing preferences within 30 days. Transaction and KYC records must be retained for five years under our Anjouan licence obligations before automatic deletion.
Why do you need my ID before a withdrawal?
Our licence requires KYC verification, which means a photo ID or passport, proof of address, and payment method verification before your first withdrawal. We process these within 1-3 business days.
Do you share my data with game providers?
Only the minimum needed to run your session, such as a session token and your jurisdiction. Game providers never receive your full identity or payment details.
How do I stop marketing emails?
Withdraw consent any time via the unsubscribe link in any marketing email or in your account settings. Processing stops immediately, and your preference records are erased within 30 days.