Your Privacy, Our Responsibility
This Privacy Policy explains what personal data we collect when you play at Bitguruz Casino, why we collect it, who we share it with, and the rights you hold over it. By registering an account with us, you accept the practices described here.
Data We Collect
Categories of personal data
We collect only the data we need to run your account, verify your identity and meet our legal obligations. The categories below cover everything held in our systems.
- Identity data: full name, date of birth, email address, phone number, residential address
- Verification documents: government-issued ID, proof of address (no older than 3 months), proof of payment method
- Transaction data: deposits, withdrawals, wagering records, bonus and cashback history
- Technical data: IP address, device type, browser, operating system, approximate location
- Gameplay behaviour: games played, session times, betting patterns, win and loss history
- Marketing preferences: which channels you have opted into, and when you consented
How We Use Your Data
Every use of your data maps to a specific purpose. We do not profile you beyond what fraud prevention and responsible-gambling monitoring require.
- Creating and administering your player account
- Completing KYC verification before your first withdrawal (review takes up to 48 hours)
- Processing deposits and withdrawals through your chosen payment method
- Preventing fraud, bonus abuse and multi-accounting
- Monitoring play for signs of gambling harm and enforcing deposit or loss limits you set
- Sending you marketing messages where you have consented
- Meeting obligations under our Anjouan licence (ALSI-202505027-FI2) and anti-money-laundering law
Our Legal Bases
Contract. We process identity, transaction and account data to deliver the service you signed up for. Without it, we cannot hold a player account or pay out winnings.
Legal obligation. Verification documents and transaction records are kept and reviewed because gambling and AML law requires it. You cannot opt out of processing that law compels.
Legitimate interest. We process device, IP and gameplay data to detect fraud, secure the platform and monitor for gambling harm. This basis carries a balancing test: your privacy interests against the security of all players.
Consent. Marketing emails and SMS go out only if you opted in. You can withdraw consent at any time via your account settings or a link in every message; withdrawal stops future marketing but never affects processing already completed on other bases.
How Long We Keep Data
We retain each category only as long as its purpose or a legal deadline requires. After that, deletion is automatic where technically feasible.
| Data category | Retention period |
|---|---|
| Verification documents (KYC) | 5 years after account closure or last transaction, per AML rules |
| Transaction and wagering records | 5 years minimum, per regulatory requirement |
| Account and identity data | While your account is active, then 5 years for audit purposes |
| Marketing preferences | Until you withdraw consent or ask for deletion |
| Technical logs and security records | Up to 12 months |
| Gameplay behaviour data | While the account is active, then anonymised or deleted |
Who We Share Data With
We never sell your personal data. We share it only with processors and authorities that need it for a defined purpose, under written data-processing agreements.
- Payment processors handling your deposits and withdrawals
- KYC and AML verification providers that check your documents
- The Anjouan licensing authority and other regulators upon lawful request
- Analytics and hosting providers supporting site performance and security
- Professional advisers (legal, audit) where bound by confidentiality
- Law enforcement or courts where disclosure is legally compelled
Your Rights Over Data
You control your data. Email [email protected] or contact our data protection officer and we will respond within 30 days.
- Access: get a copy of the personal data we hold about you
- Rectification: correct data that is wrong or incomplete
- Erasure: request deletion where no legal retention duty applies
- Portability: receive your data in a machine-readable format
- Objection: object to processing based on legitimate interest
- Withdrawal of consent: stop marketing at any time
- Complaint: raise a concern with the Office of the Australian Information Commissioner (OAIC) or, if you are in the EU, your national data protection authority
Cookies and Tracking
We use essential cookies to keep you logged in and secure, plus optional analytics and marketing cookies set only with your consent. The banner on your first visit records your choice, and you can change it any time in your browser or account settings. Full details, including a category-by-category list, sit on our dedicated Cookie Policy page.
Security We Maintain
All traffic between you and Bitguruz Casino runs over TLS encryption. Player data is encrypted at rest, and access inside our systems is role-based and logged: only staff who need your data for support, payments or compliance can see it, and every access is auditable.
- TLS 1.2+ encryption for all connections
- Encryption of stored documents and payment data
- Two-factor authentication available on your account
- Role-based internal access controls with audit logs
- Regular penetration testing and vulnerability scanning
Breach notification
If a data breach occurs that risks your rights, we notify the relevant regulator within 72 hours and inform affected players directly without undue delay. For gambling-related support, Gambling Help Online is available on 1800 858 858, 24 hours a day.
Contact Our Data Officer
Questions about this policy, your data or a rights request go to our Data Protection Officer at [email protected]. We answer within 30 days, usually much sooner via live chat, which runs 24/7. This policy was last updated in 2026; material changes will be announced on this page before they take effect.
Frequently asked questions
How do I request a copy of my data?
Email [email protected] with your account details. We verify your identity and send your data within 30 days.
Can I delete my account and all my data?
Yes. Close your account via support or self-exclusion. Identity and transaction records are then kept for 5 years, because gambling and AML law requires it; everything else is deleted.
Do you share my data with advertisers?
No. We never sell personal data. Marketing partners act as processors under contract and only where you consented to receive marketing.
Why do you need my ID before withdrawal?
KYC checks before your first withdrawal are a legal requirement under our Anjouan licence. Review of your documents takes up to 48 hours.
How do I stop marketing emails?
Use the unsubscribe link in any message or the marketing settings in your account. Withdrawal takes effect immediately.