Privacy Policy
This notice describes the personal information Casino Days collects when you register, deposit and play, the lawful reasons we hold it, and the choices you can exercise over it. It applies to our website, mobile interface and all communications sent from our accounts.
Information we collect
At registration we ask for your full name, date of birth, residential address, email address, mobile number and chosen currency. This set is not optional: identity and age verification are conditions of our Curaçao Gaming Control Board licence OGL/2023/159/0076 and of the anti-money-laundering rules that sit alongside it.
During verification we request documentary evidence — typically a passport or driver licence, and a recent utility bill or bank statement confirming your address. Where a deposit or withdrawal pattern triggers enhanced due diligence, we may additionally request evidence of source of funds, such as payslips or account statements. Documents are reviewed by trained staff and stored in encrypted form.
Transactional and gameplay records accumulate automatically as you use the account: deposits, withdrawals, bonus claims, bets placed, game rounds, session start and end times, and the payment instrument used. We also log technical signals including IP address, approximate geographic region derived from it, device type, operating system, browser fingerprint characteristics and referring page.
Why we process it and on what basis
The largest category of processing exists because we must perform our contract with you — creating the account, crediting deposits, settling wagers, paying withdrawals and answering support enquiries all require the data described above and cannot proceed without it.
A second category exists because the law compels it. Age and identity verification, sanctions and politically-exposed-person screening, transaction monitoring for suspicious activity, and the retention of complete betting records for regulatory inspection are legal obligations, and you cannot object to them while holding an active account. Geolocation checks serve the same purpose: they confirm you are not accessing the service from a territory where we are prohibited from offering it.
A third category rests on our legitimate interests — preventing fraud and bonus abuse, detecting account takeover, testing site performance, and analysing aggregate play patterns to decide which games to license. We assess these interests against your rights before relying on them, and you may object at any time.
Marketing by email or SMS proceeds only on your consent. Consent is recorded with a timestamp, is never bundled into the registration checkbox for the terms, and can be withdrawn through the unsubscribe link, the communications panel in your account, or a one-line message to support. Withdrawing it does not affect operational messages about your balance, verification status or security.
Sharing with third parties
Casino Days does not sell personal information, and we do not disclose it to advertisers or data brokers. Sharing is limited to parties who need the data to make the service function or who are entitled to it by law.
These include payment processors and acquiring banks handling your deposits and withdrawals; identity verification bureaus performing document and sanctions checks; game studios whose titles run on our platform and which receive a pseudonymous session identifier rather than your name; cloud hosting and email delivery providers; and our external auditors and legal advisers. Each operates under a written agreement restricting use of the data to the instructed purpose.
We disclose information to the Curaçao Gaming Control Board on request, to law enforcement where a valid order compels it, and to financial intelligence authorities where our anti-money-laundering obligations require a report. Where a report of suspicious activity is filed, we are typically prohibited by law from informing you that it has been made.
Some recipients are located outside New Zealand and outside the European Economic Area. Where that is the case we rely on standard contractual clauses or an equivalent recognised transfer mechanism, and we satisfy ourselves that the recipient applies protections comparable to those described here.
Security and how long we keep records
Connections to Casino Days are encrypted in transit using current TLS standards, and identity documents and payment details are encrypted at rest. Access to production data is restricted by role, logged, and reviewed periodically; card numbers are tokenised by our processors and are never stored in full on our systems.
Account, transaction and verification records are retained for a minimum of five years after the account closes, this being the period our licence and applicable anti-money-laundering law require. We cannot delete these earlier even at your request, because the obligation to retain them overrides the erasure right for that specific category.
Self-exclusion records are kept for the duration of the exclusion and afterwards, permanently in reduced form, so that a previously self-excluded person cannot re-register unnoticed. Marketing consent records, support correspondence and technical logs follow shorter schedules — generally between twelve and twenty-four months — after which they are deleted or irreversibly aggregated.
Your rights and how to use them
You may request a copy of the personal information we hold about you, ask that inaccurate details be corrected, object to processing founded on legitimate interests, request restriction while a dispute is resolved, and ask for a portable copy of the data you supplied to us. Where no retention obligation applies, you may request erasure.
Requests should be sent from the email address registered to the account, and we may ask a security question or request identity documentation before releasing anything — an unverified request is the most common route to an account being compromised. We respond within twenty working days; if the request is unusually complex we will tell you before that period expires and explain the delay.
New Zealand residents may raise a complaint with the Office of the Privacy Commissioner if they consider we have mishandled their information, and players anywhere may raise the matter with the Curaçao Gaming Control Board. We would ask that you contact us first, since most concerns turn out to be resolvable directly.
Cookies and similar identifiers are governed by the preference panel presented on your first visit. Strictly necessary cookies keep you logged in and protect the session and cannot be switched off; analytics and preference cookies can be, and your choice is stored and honoured until you change it.
Where to get help
- Casino Days Data Protection contact — reachable via the Privacy section of our Help Centre
- Casino Days player support — live chat and email, available daily from your account dashboard
- Office of the Privacy Commissioner (New Zealand) — 0800 803 909, for unresolved privacy complaints