Privacy Policy of Casiny Casino (Casiny Casino privacy policy)

1. Scope and responsible entity

This Casiny Casino privacy policy applies to personal information collected and handled through casinycasiino.com, including when you create an account, access games, make deposits or withdrawals, contact support, or otherwise use the services. For the purposes of applicable privacy and data protection requirements, the responsible entity (data controller) is Casiny Casino, operating the website casinycasiino.com. You may contact the responsible entity for privacy and data protection matters at [email protected].

The services are offered to users in Australia and are operated under a gambling licence issued in the jurisdiction of Curaçao (Curaçao eGaming). Where Australian privacy requirements apply, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), processing will be managed consistently with those principles (including openness, data security, and access/correction). Where other frameworks may apply due to your location or the location of service providers, comparable safeguards and principles are applied.

2. Categories of collected data

The categories of personal information collected depend on how you use the services and the verification steps required for gambling and anti-financial crime compliance. Casiny Casino may collect the following categories of data:

Identity and account data: full name, date of birth, username, password (stored in hashed form), residential address, nationality, and account status.
Contact data: email address, telephone number, and communication preferences.
Verification (KYC/AML) data: copies of identification documents (such as passport, driver licence, or proof-of-age card), proof of address (such as a utility bill or bank statement), and where required, source-of-funds or source-of-wealth information.
Financial and transaction data: deposit and withdrawal amounts, payment instrument details (typically via tokenised references), transaction IDs, chargeback information, and limited payment verification metadata.
Technical data: IP address, device identifiers, browser type and version, operating system, time zone settings, and crash logs.
Usage and gameplay data: login timestamps, session durations, wagering and game interaction history, bonus or promotion eligibility records (where applicable), and responsible gambling interactions (such as limit-setting requests).
Communications: support tickets, emails, chat logs, and records of disputes or complaints.

3. Purposes of data processing

Personal information is processed for defined and legitimate purposes connected to the operation of an online gambling service. The main purposes include the following:

Account creation and administration, including identity matching, age verification, and maintaining accurate account records.
Know Your Customer (KYC) and anti-money laundering/counter-terrorism financing (AML/CTF) checks, including fraud screening and ongoing monitoring where required.
Payment processing, including deposits, withdrawals, reconciliation, refund management, and management of chargebacks and payment disputes.
Security and integrity controls, including detecting unauthorised access, account takeovers, multi-accounting, bonus abuse, bot activity, and other misuse.
Responsible gambling and player protection, including administering self-exclusion, deposit limits, time-out requests, affordability or risk indicators (where used), and record-keeping relevant to harm minimisation.
Service improvement and diagnostics, including performance monitoring, troubleshooting, and analysis of how features are used to maintain stability.
Compliance with legal and regulatory obligations, including responding to lawful requests from competent authorities and maintaining audit trails.

4. Legal bases for processing

Processing is conducted on lawful grounds recognised in common privacy and data protection frameworks and aligned with Australian privacy principles. Depending on the context, Casiny Casino relies on one or more of the following bases:

Performance of a contract: to provide account access, enable gameplay, and process deposits and withdrawals in accordance with the website terms.
Compliance with legal obligations: to satisfy licensing, AML/CTF, anti-fraud, and record-keeping requirements, including verification steps that may require government-issued identification.
Legitimate interests: to protect the service, users, and the business from fraud and security incidents, to maintain platform integrity, and to prevent misuse, provided such interests are not overridden by your rights and interests.
Consent (where applicable): for certain optional technologies or settings, such as non-essential cookies, where consent mechanisms are presented; consent may be withdrawn through available controls.

Where sensitive information is collected (for example, information derived from identification documents), it is handled with heightened care and limited to what is reasonably necessary for verification and compliance.

5. Data security

Casiny Casino implements technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Security controls are selected with regard to the nature of gambling-related data and the risk profile of online transactions.

Measures may include:

Encryption in transit using TLS (including configurations supporting 256-bit encryption where compatible) for data exchanged between your device and the platform.
Encryption and access controls for sensitive data at rest, including key management procedures and segregation of environments.
Role-based access controls, multi-factor authentication for administrative access, and least-privilege access practices.
Network security controls such as firewalls, intrusion detection/prevention systems, and monitoring for suspicious activity.
Regular vulnerability assessment, patch management, and security testing, including periodic review of critical dependencies.

No method of transmission over the internet or method of electronic storage is completely secure. You are responsible for keeping your login credentials confidential and for promptly notifying [email protected] of any suspected unauthorised use of your account.

Personal information may be disclosed to third parties where necessary to operate the service, meet compliance obligations, and protect the platform. Disclosures are limited to what is relevant for the stated purpose and, where appropriate, subject to contractual confidentiality and data protection commitments.

Categories of recipients may include:

Payment service providers, payment gateways, and banking partners to process deposits and withdrawals and to manage fraud and chargebacks.
Identity verification, sanctions screening, and fraud prevention providers to conduct KYC/AML checks and risk screening.
Hosting, cloud infrastructure, content delivery, and IT security providers to operate and secure platform services.
Game and platform vendors, where technically required to deliver games, verify session integrity, and resolve disputes.
Professional advisers (such as auditors, legal advisers, and compliance consultants) under duties of confidentiality.
Regulators, law enforcement, and competent authorities where disclosure is required or reasonably necessary to comply with a lawful request.

Personal information is not sold or rented to third parties for their own direct marketing purposes. Where service providers act as processors, they are required to process personal information only on documented instructions and to apply appropriate safeguards.

7. Use of cookies and similar technologies

casinycasiino.com uses cookies and similar technologies (such as local storage identifiers and pixels) to support essential website functions, maintain secure sessions, and improve reliability. Cookies may be placed by the website (first-party) or by certain service providers (third-party) where required for security, performance, or analytics.

Cookie categories may include:

Strictly necessary cookies: required for login, account authentication, security controls, and fraud prevention.
Preference cookies: used to remember settings such as language and session preferences.
Analytics cookies: used to understand usage patterns, measure performance, and diagnose errors.

You can manage cookies through your browser settings, including blocking or deleting cookies. If you disable certain cookies, some functions (including secure login, account access, or payment-related workflows) may not operate properly. Where consent tools are offered for non-essential cookies, your selection will be recorded and can be changed later through the same controls.

8. Data subject rights and how to exercise them

Individuals have rights in relation to their personal information, subject to applicable law and appropriate verification of identity. Requests may be made by contacting [email protected], and Casiny Casino may request additional information to confirm identity before actioning a request.

Your rights may include the following 6 rights commonly recognised across modern privacy frameworks:

Access: request a copy of the personal information held about you.
Rectification: request correction of inaccurate or incomplete information.
Erasure: request deletion of personal information where it is no longer required, subject to legal retention duties.
Restriction: request that processing be limited in certain circumstances.
Objection: object to certain processing based on legitimate interests, where applicable.
Data portability: request certain information in a structured, commonly used format where technically feasible.

Where requests cannot be fulfilled (for example, due to AML/CTF record-keeping obligations), Casiny Casino will provide reasons to the extent permitted by law. If you are dissatisfied with the handling of a privacy complaint in Australia, you may also be able to contact the Office of the Australian Information Commissioner (OAIC).

9. Data retention

Personal information is retained only for as long as necessary to fulfil the purposes described in this policy, unless a longer period is required by law, regulation, or to establish, exercise, or defend legal claims. Retention periods vary depending on the category of information and the nature of the obligation.

By way of example, KYC/AML records and transaction audit trails may be retained for at least 5 years after account closure or after completion of the relevant transaction, consistent with common regulatory expectations. Security logs may be retained for shorter periods, such as 90 days to 12 months, unless an investigation requires longer retention. At the end of the applicable retention period, information is securely deleted, anonymised, or de-identified.

10. External links

casinycasiino.com may contain links to external websites or services that are not operated by Casiny Casino. Links are provided for convenience and do not imply responsibility for the privacy practices, security measures, or content of third-party websites.

If you follow an external link, your information will be handled in accordance with that third party’s privacy policy and terms. You should review those documents before providing personal information to any third-party service.

11. Changes to this privacy policy

Casiny Casino may update this policy from time to time to reflect changes in legal requirements, licensing obligations, operational practices, security standards, or the features offered through the website. Updates will be published on casinycasiino.com and will apply from the date of publication unless otherwise stated.

You should review this Casiny Casino privacy policy periodically to remain informed about how personal information is handled. Where changes materially affect your rights or the way personal information is used, additional notice may be provided through your account interface or by email, where appropriate and permitted.