Your Privacy at Playfina Casino
This policy explains what personal data we collect when you play at Playfina Casino, why we collect it, who we share it with, and the rights you hold over it. It applies to every interaction with playfina.com and our support channels.
What Data We Collect
We collect only what we need to run your account, verify your identity and meet our legal obligations. That data falls into the categories below.
- Identity data: name, date of birth, email address, phone number, residential address.
- Verification documents: photo ID, proof of address and payment method evidence for KYC checks.
- Transaction data: deposits, withdrawals, bonuses, wagering records and payment instrument details.
- Technical data: IP address, device and browser information, session logs and approximate location.
- Gameplay behaviour: games played, stakes, wins, losses and session duration.
- Marketing preferences: which channels you opted into and which offers you receive.
How We Use Your Data
Your data works for you, not against you. We use it to open and maintain your account, process deposits and withdrawals, run KYC and AML checks, prevent fraud and bonus abuse, and monitor play for signs of gambling harm. With your consent we also send promotional offers such as our weekly reload bonuses, Friday free spins and cashback up to 25%.
Where a law requires it, such as transaction reporting or records retention, we keep and disclose data regardless of marketing choices.
Our Legal Bases Explained
Contract: we process identity and transaction data to create your account and deliver the gaming service you signed up for. Without this data we cannot operate your account.
Legal obligation: KYC, AML record-keeping and regulatory reporting under our Curaçao licence (8048/JAZ2021-169) require us to hold and share specific data.
Legitimate interest: fraud prevention, security monitoring and service improvement rely on analysing technical and gameplay data in ways that do not unduly affect your rights.
Consent: marketing emails, SMS and promotional alerts only run with your clear opt-in, which you may withdraw at any time.
How Long We Keep Data
Retention is category-specific and driven by regulatory minimums. We never hold data longer than the purpose requires.
Identity and verification documents: 5 years after account closure, per regulatory requirements.
Transaction and wagering records: a minimum of 5 years for AML compliance.
Account data: while your account is open and 5 years after closure.
Marketing preferences: until you withdraw consent or ask us to delete them.
Security and access logs: 12 months.
Who We Share Data With
We share data only with categories of processors who need it to deliver the service:
Payment processors handling deposits and withdrawals, including card, e-wallet and crypto operators.
KYC/AML verification providers checking your documents and screening against sanctions lists.
Our regulator, when reporting is legally required.
Analytics and hosting providers operating under data processing agreements.
Game providers, only where technically necessary to credit wins and load game sessions.
We never sell your personal data, and every processor is bound by confidentiality and security terms.
Your Rights Over Your Data
You control your data. Under Australian privacy principles and, where applicable, GDPR, you can ask us at any time to act on the rights below. We respond within 30 days and verify your identity first.
Access: get a copy of the personal data we hold about you.
Rectification: correct inaccurate or outdated details.
Erasure: request deletion where no legal retention duty applies.
Portability: receive your data in a structured, machine-readable format.
Objection: object to processing based on legitimate interest.
Withdraw consent: opt out of marketing instantly, without affecting your account.
Complain: you may escalate to the relevant data protection authority or the Australian Information Commissioner.
Cookies and Tracking
We use essential cookies to keep you logged in and secure, plus optional analytics and marketing cookies with your consent. Full details, including how to switch each category off in your browser, are on our dedicated Cookies page.
How We Protect Your Data
All traffic between you and our servers runs over TLS encryption. Data at rest is encrypted, access is restricted to staff who need it under role-based controls, and payments run through PCI-DSS compliant processors.
If a data breach occurs that risks your rights, we notify the relevant regulator and, where required, you directly, without undue delay.
Contact Our Data Team
Questions about this policy or your data? Email our data protection officer at [email protected], or reach our 24/7 support team at [email protected]. We treat every privacy request seriously and respond within 30 days.
Frequently Asked Questions
Does Playfina Casino sell my personal data?
No. We share data only with processors who deliver the service (payments, KYC, hosting, regulators), always under confidentiality agreements.
How long do you keep my transaction records?
A minimum of 5 years after your account closes, as required by AML regulations. Marketing preferences are deleted as soon as you withdraw consent.
How do I stop marketing emails?
Use the unsubscribe link in any email, adjust settings in your account, or email [email protected]. Withdrawal of consent takes effect immediately.
Can I get a copy of all data you hold on me?
Yes. Send an access request to [email protected]. After identity verification we provide your data within 30 days in a machine-readable format.
Is my payment information stored on your servers?
Card and wallet details are handled by PCI-DSS compliant payment processors. We keep transaction records for accounting but do not store full payment credentials.