Your Privacy at Nova Casino
We collect only the personal data we need to run your account, verify your identity, process payments and meet our legal obligations. This policy sets out exactly what we hold, why we hold it, how long we keep it and what you can do about it.
What Data We Collect
We collect the following categories of personal data, and nothing beyond what is listed here. Each category has a specific purpose tied to your account or a legal duty.
- Identity data: full name, date of birth, email address, phone number, residential address.
- Verification documents: passport, driver's licence or other government ID, proof of address, proof of payment method, collected under KYC rules before your first withdrawal.
- Transaction data: deposits, withdrawals, wagering records, bonuses claimed, amounts in AUD or cryptocurrency.
- Device and connection data: IP address, device type, browser, operating system, approximate location derived from IP.
- Gameplay behaviour: games played, session times, bet sizes, win and loss history, used for responsible-gambling monitoring.
- Marketing preferences: whether you opt in to bonus emails, SMS or push notifications, and which channels you chose.
How We Use Your Data
We use your data for seven purposes, no more: creating and managing your account, verifying your identity under KYC, processing deposits and withdrawals, preventing fraud and money laundering, monitoring play for responsible-gambling signals, sending you marketing where you have consented, and complying with laws and regulator requests from the Curaçao Gaming Control Board.
- Account creation and login, including security checks on each session.
- KYC verification before your first withdrawal, as required by our licence.
- Payment processing across cards, e-wallets, bank transfer and crypto.
- Fraud prevention, including multi-account and payment-fraud detection.
- Responsible-gambling monitoring against your deposit and loss limits.
- Marketing messages only where you have given consent.
- Legal, tax and regulatory reporting obligations.
Why We Hold It Lawfully
Contract: we process identity and transaction data to provide the gaming service you signed up for. Without it, we cannot open or maintain your account.
Legal obligation: verification documents, AML records and transaction histories are kept because our licence and anti-money-laundering law require it. You cannot opt out of these.
Legitimate interest: device and IP data support fraud prevention and platform security. This interest is weighed against your privacy rights and limited to security purposes.
Consent: marketing communications and non-essential cookies run on your consent. You can withdraw it at any time, and we will stop processing those activities immediately.
How Long We Keep Records
Retention is fixed per category, not open-ended. Where a regulator sets a minimum, we follow it. When the period expires, we delete or anonymise the data.
| Data category | Retention period |
|---|---|
| Identity and account data | 5 years after account closure |
| KYC verification documents | 5 years minimum after account closure, per AML rules |
| Transaction and wagering records | 5 years minimum, per licence conditions |
| Device and IP logs | 12 months |
| Gameplay behaviour data | 2 years, or while your account is active |
| Marketing preferences | Until you withdraw consent or ask us to delete them |
Who We Share Data With
We share data only with processors that need it to deliver a specific service, under written data-processing agreements. We never sell your personal data.
Payment processors handling deposits and withdrawals, such as card networks, e-wallets and crypto gateways.
KYC and AML verification providers that check your documents against sanctions and identity databases.
The Curaçao Gaming Control Board and other regulators or law enforcement, where legally required.
Analytics and hosting providers operating under data-processing agreements, with access limited to what they need.
Your Rights Over Your Data
You can exercise any of these rights at any time by emailing our support team or our data protection officer. We respond within 30 days and never charge a fee for a first reasonable request.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is wrong or incomplete.
- Erasure: request deletion where no legal retention duty applies.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing and cookie-based tracking at any time.
- Complain: raise a complaint with our data protection officer or the relevant data protection authority.
Cookies and Tracking
We use strictly necessary cookies for login sessions and security, plus optional analytics and marketing cookies that only load after you consent through the cookie banner. You can change or withdraw your cookie choices at any time from the cookies page, which lists every cookie we set and how long each one lasts.
How We Protect Your Data
All traffic between your device and our platform runs over TLS encryption. Verification documents are stored in encrypted storage with access restricted to trained compliance staff on a need-to-know basis, and every access is logged and auditable.
We test our defences regularly and keep an incident response plan. If a breach affects your personal data, we will notify you and the relevant regulator within 72 hours of confirming it, as GDPR-style timelines require.
Contact Our Data Team
Questions about this policy or your data? Email our Data Protection Officer at [email protected] or reach support 24/7 via live chat and [email protected]. We answer privacy requests within 30 days, usually faster.
Frequently Asked Questions
Can I get a copy of all data Nova Casino holds about me?
Yes. Email [email protected] requesting access and we will send a structured copy of your personal data within 30 days, free of charge.
How do I stop marketing emails?
Use the unsubscribe link in any email, or withdraw consent in your account settings. Marketing stops immediately and we delete your preferences when the retention period ends.
Why do you need my ID before withdrawal?
Our licence and anti-money-laundering rules require identity verification before your first withdrawal. We keep those documents for at least 5 years after account closure.
Do you sell my data to advertisers?
No. We never sell personal data. We only share it with processors such as payment providers and KYC vendors, under strict data-processing agreements.