Your privacy at our casino
This policy explains what personal data we collect when you play at Vegashero Casino, launched in 2021 under licence 8048/JAZ2021-000, why we hold it and how long we keep it. It applies to every account registered on our platform.
What personal data we collect
We collect only the data we need to run your account lawfully. That includes the basics you give us at sign-up, the documents we must verify under our Curaçao licence, and the technical records created automatically each time you log in or play.
- Identity data: name, date of birth, email address, phone number, country of residence
- Verification documents: passport or ID copy, proof of address, payment method evidence for KYC
- Transaction data: deposits, withdrawals, bet history, balances in GBP, EUR, BTC or DOGE
- Technical data: IP address, device and browser type, cookies, session logs
- Gameplay behaviour: games played, stakes, win and loss records, session duration
- Marketing preferences: which channels you agreed to receive offers on and how you opted in
How we use your data
We process your data for specific purposes only, never for anything unconnected to your account.
- Creating and maintaining your player account
- Verifying your identity and age before your first withdrawal
- Processing deposits and withdrawals through Visa Debit, Trustly, Skrill, BTC and other listed methods
- Preventing fraud, bonus abuse and underage gambling
- Monitoring gambling behaviour as part of our responsible-gambling tools, including deposit limits and self-exclusion via GAMSTOP
- Sending you promotions with your consent, such as the weekly reload bonus and Friday cashback
- Meeting legal, tax and AML obligations set by our regulator
Why the law permits it
Every processing activity rests on one of four legal bases under the UK GDPR and, where applicable, the EU GDPR.
Contract. We process your identity, payment and account data to deliver the service you signed up for. Without it we cannot open an account, settle bets or pay withdrawals.
Legal obligation. AML and licensing rules force us to verify your identity and keep transaction records. You cannot opt out of these checks while you hold an account.
Legitimate interest. We use gameplay logs and IP data to detect fraud, secure the platform and understand aggregate play patterns. We weigh this interest against your rights and keep it to the minimum needed.
Consent. Marketing emails, SMS and personalised offers run only on your consent. You withdraw it any time without losing access to your account.
How long we keep records
Retention follows the regulatory minimums of our licence and nothing longer. Once a period expires we delete or anonymise the data.
| Data category | Retention period |
|---|---|
| Identity and account data | Duration of account plus 5 years |
| KYC verification documents | 5 years after last transaction |
| Transaction and betting records | Minimum 5 years under AML rules |
| Marketing consent records | Until you withdraw consent, then proof of withdrawal for 3 years |
| Device, IP and cookie data | Up to 13 months |
Who receives your data
We never sell your data. We share it only with processors that need it to deliver a service you use, bound by written data processing agreements.
- Payment processors handling your deposits and withdrawals
- KYC and AML screening providers checking your documents
- The Curaçao regulator and, where compelled, UK or EU authorities
- Analytics and platform hosting suppliers working on our instructions
- Game providers receiving your player ID and bet data to settle rounds
Rights you can exercise
You control your data. Email [email protected] or our DPO and we respond within one month, extendable by two for complex cases with notice.
- Access: get a copy of the personal data we hold about you
- Rectification: correct anything inaccurate or incomplete
- Erasure: deletion where no legal retention duty applies
- Portability: receive your data in a machine-readable format
- Objection and restriction: object to legitimate-interest processing
- Withdraw consent: stop marketing at any time from account settings or any email
- Complain: escalate to the ICO or your local data protection authority after our response
Cookies on our site
We use session cookies to keep you logged in, analytics cookies to measure site performance and, with your consent, marketing cookies to personalise offers. The cookie banner lets you accept or reject non-essential categories before any script loads. Full details, including a per-category table and a how-to-disable guide, sit on our dedicated Cookies Policy page.