Casinia Privacy Policy
Most people do not read privacy notices; they scroll and accept. For a reader who cares about discretion that is a poor habit, and this page is meant to make the reading easier. It restates the Privacy Notice of Casinia in plain language and arranges it around a practical distinction: what the customer can decide and what is fixed by the operator’s obligations. The notice itself, with an effective date of October 2024, is the authoritative text. This page adds no facts to it.
A reservation must be made at once. Nothing here is a reason to register. Each reader must independently check whether online casino or betting activity is permitted in their jurisdiction before registering, making a deposit or playing, and only persons over 18 are accepted. The notice is written with reference to European data protection law, the GDPR in particular, and covers registered players as well as visitors who merely open the site.
The Notice in Brief
The table answers the questions asked most often, each in a line.
| Question | What the notice says |
|---|---|
| Who is responsible for the data? | The operator of the site, as data controller, together with a joint controller |
| Whom can one write to? | The Data Protection Officer at [email protected], or customer support |
| Is data collected from visitors? | Yes – device, usage and general location data are recorded automatically |
| Are documents required? | They may be requested for identity checks and anti-money-laundering duties |
| Is marketing compulsory? | No – it depends on consent, which can be withdrawn |
| How long is data kept? | While the account exists, and longer where the law requires |
| Is security guaranteed? | Safeguards are described; absolute security is expressly not promised |
A summary of this kind is a starting point and no more. A reader may wish to use it to decide which sections of the full notice deserve closer attention.
What Is Collected and From Where
Three sources are named. The first is the customer: registration involves an email address, full name, date of birth, country, phone number, gender, postal code and username, and verification adds an identity document number, proof of address, information on the source of funds and financial statements, with IBAN or payment system details for transactions. The second is automatic recording – IP address, device identifiers, operating system, pages viewed, the date and length of sessions. The third is outside sources: public and government databases, financial and credit institutions, fraud-prevention agencies and whatever a person has made public on social media. From all of this the operator may also draw inferences about a customer’s interests and preferred games. It is worth pausing over the third source in particular before proceeding.
What the Customer Decides and What Is Fixed
The notice names four legal grounds for processing, and they differ in how much room they leave to the customer. Processing needed to open and run the account rests on the contract, and processing required by law – checks of age and identity, measures against money laundering and fraud, the management of risks linked to problem gambling – is a legal obligation. Neither can be declined while the account exists. A third group rests on the operator’s legitimate interests: security, analytics, customer segmentation, the detection of cheating and the analysis of gaming behaviour by machine-learning algorithms to recommend games. A customer may object to such processing, though the outcome of an objection is not guaranteed.
The fourth ground is consent, and here the decision is the customer’s own. Direct marketing by email, SMS, telephone or notifications, offers tailored to gaming history, and targeted advertising all require consent, and consent may be withdrawn at any time without affecting what was done before. The same applies to non-essential cookies, which are requested on the first visit and can be changed later in the Cookie Settings; strictly necessary cookies operate regardless. A reader who prefers a quiet inbox may simply decline these consents from the outset.
Recipients of Data
The operator does not keep personal data to itself. The notice lists the following categories of recipients:
- authorised staff, related brands, affiliates and subsidiaries within the group;
- payment providers and financial institutions, which may also receive verification documents;
- suppliers of customer support, messaging, technology and cloud hosting;
- marketing partners and analytics providers;
- fraud-prevention agencies and game providers;
- law enforcement, regulatory and licensing authorities;
- a new owner, should the business be merged or sold.
One further case is described. When a customer takes a complaint to an outside platform, such as a review site or a dispute resolution body, the operator may disclose what is strictly necessary to identify the account and answer. It is reasonable to bear this list in mind when deciding how much to share.
Retention, Security and Transfers
Data is held for as long as the account is maintained and may be kept longer where anti-money-laundering or other regulatory rules require it; when no legal or business need remains after closure, it is deleted or anonymised. No fixed period in years is given. Protection consists of administrative, technical and physical safeguards, and the notice admits candidly that no system or internet transmission is completely secure. Data may be processed outside the EU and EEA, subject to recognised safeguards such as Standard Contractual Clauses. A customer does well to add personal precautions: a unique password and a mailbox no one else can open.
Rights and Contacts
The notice grants the customer the right to see the data held, to have errors corrected, to ask for erasure where no compelling legal or business reason for processing remains, to restrict processing, to receive the data in a portable form, to object, and to withdraw consent. A complaint to a supervisory authority is also provided for, described with reference to EU member states. Requests are addressed to [email protected] or to the Data Protection Officer at [email protected]. The time within which a reply is given is not specified in the notice. Anyone unsure which right applies may describe the situation in plain words and ask.
A Privacy Checklist Before Registering
The following steps are a practical suggestion drawn from the content of the notice, not a procedure prescribed by the operator:
- 1. Read the full Privacy Notice and the Cookie Notice linked at the foot of the site;
- 2. Set cookie preferences on the first visit, leaving non-essential cookies off if desired;
- 3. Decide whether to give marketing consent, remembering that it can be withdrawn later;
- 4. Register with an email address used by no one else;
- 5. Keep the address of the Data Protection Officer for future questions.
The notice may be revised as technology and the law change, and the customer is expected to review it from time to time. One last observation: personal data is also used to recognise potentially harmful patterns of play and to support responsible gaming, a reminder that gambling carries risk and promises nothing. Before registering, making a deposit or playing, each reader must independently confirm that such activity is permitted in their jurisdiction. Those who proceed may wish to work through the checklist first.