Privacy Policy

Information we collect

When you register, we ask for identifying details such as your full name, date of birth, residential address, email address, telephone number, and preferred currency. Anti-money-laundering rules connected to licence ALSI-202510007-FI1 require us to verify these before withdrawals are released, which usually means reviewing a government-issued document and a recent proof of address.

Financial records are generated whenever you fund or withdraw from your balance. We retain the transaction amount, timestamp, currency, and a masked reference to the payment instrument. Full card numbers are handled by our payment processors under PCI DSS conditions and are never stored on Casibom Casino servers.

Technical information is captured automatically: IP address, approximate location derived from it, device model, operating system, browser build, screen dimensions, and referring page. Gameplay telemetry covering rounds played, stakes, session duration, and bonus participation is logged as part of running the service.

Correspondence with our support team, including live chat transcripts, email threads, and any recorded callbacks, is kept so that later enquiries can be handled with full context.

Why we process your data

The primary basis is contractual necessity — we cannot open an account, credit a deposit, settle a wager, or release a payout without processing the categories described above.

A second basis is legal obligation. Gaming and financial-crime legislation applicable to our licence requires customer due diligence, source-of-funds enquiries in defined circumstances, transaction monitoring, and the retention of records for prescribed periods.

We also rely on legitimate interests to detect fraudulent activity, block bonus abuse, prevent duplicate accounts, secure our infrastructure, and analyse aggregate usage patterns so the platform can be improved.

Marketing communications rest on consent. You may opt in at registration or later, and every message includes a one-click unsubscribe. Withdrawing marketing consent has no effect on your ability to play or withdraw funds.

Disclosure to third parties

Game content is delivered by independent studios whose servers determine outcomes. Those providers receive a pseudonymous session identifier and wager data, but not your name or contact details.

Payment institutions, identity-verification bureaus, and fraud-screening networks receive the minimum information needed to complete their function. Each operates under a written processing agreement that restricts onward use.

Regulators, law enforcement, and tax authorities may receive information where a lawful request is made or where reporting is mandatory under the terms of our Anjouan Gaming authorisation.

Casibom Casino does not sell personal information, and we do not share it with data brokers or unaffiliated advertisers for their own marketing purposes.

Storage, security, and retention

Data is held on servers within the European Economic Area and in jurisdictions offering comparable safeguards. Transfers outside those regions are covered by standard contractual clauses or an equivalent mechanism.

Protective measures include TLS encryption in transit, encryption at rest for sensitive fields, segmented network access, mandatory two-factor authentication for staff, and logging of all administrative actions. No system can be guaranteed impenetrable, so we ask members to choose a strong unique password and enable two-factor authentication on their own accounts.

Account and transaction records are kept for at least five years after the relationship ends, as anti-money-laundering rules require. Marketing preferences, analytics identifiers, and support transcripts follow shorter schedules and are deleted or anonymised once their purpose expires.

Your rights and cookie choices

Depending on your jurisdiction you may request a copy of the information we hold, ask for inaccuracies to be corrected, object to certain processing, request restriction, or ask for erasure. Where retention is legally mandated we will explain which rule prevents deletion.

US residents in states with comprehensive privacy statutes, including California, may additionally request disclosure of the categories of information collected and the categories of recipients, and may appeal a refused request. Exercising any right will never result in degraded service.

Requests should be sent to [email protected]. We reply within thirty days and may ask for verification so that no one else can obtain your data by impersonation.

Our cookie banner separates strictly necessary cookies from analytics and preference cookies. Non-essential categories stay off until you accept them, and your selection can be revised at any time through the cookie settings link in the footer.