Your privacy and your data with us
This policy explains what personal data Aladdinsgold Casino collects when you register, play or transact with us, why we hold it, how long we keep it, and the rights you can exercise at any time. It applies to every visit to aladinsgold.uk and to all account activity on our platform.
Data we collect about you
We collect only the data we need to run your account, verify your identity and meet our licence obligations. Collection happens at registration, during KYC checks, at every deposit and withdrawal, and as you use the site.
- Identity data: full name, date of birth, email address, phone number, residential address
- Verification documents: government-issued ID, proof of address dated within the last 3 months, proof of payment method
- Transaction data: deposits, withdrawals, amounts, currency, payment method identifiers, wallet addresses for crypto
- Technical data: IP address, device type, browser, operating system, approximate location derived from IP
- Gameplay behaviour: games played, stakes, wins, losses, session times, bonus and loyalty activity
- Marketing preferences: which channels you opted into, and when you consented or withdrew consent
How we use your data
Each purpose below is tied to a specific category of data and to a legal basis set out in the next section. We never sell your personal data.
Your documents and gameplay history serve purposes beyond account administration: they let us meet anti-money-laundering duties, detect fraud before payouts, and spot patterns that may indicate gambling harm.
- Creating and administering your player account
- KYC identity verification before your first withdrawal, processed within 48 hours
- Processing deposits and withdrawals, including crypto transactions
- Fraud prevention, bonus abuse detection and dispute handling
- Responsible-gambling monitoring and enforcement of limits or self-exclusion you set
- Sending marketing messages where you have consented, such as reload offers and tournament news
- Meeting legal and regulatory obligations under our Curaçao licence
Our legal bases for processing
Contract. We process identity, account and transaction data to open your account, operate gameplay and pay out winnings. Without this data we cannot provide the service you signed up for.
Legal obligation. Licence conditions require us to verify your identity, keep transaction records for at least 5 years, report suspicious activity and cooperate with regulators. We process your documents and financial records for these purposes whether or not you consent.
Legitimate interest. We rely on this basis for fraud prevention, security monitoring, aggregate analytics and improving our games and site. We balance these interests against your rights and keep the data involved to a minimum.
Consent. Marketing emails, SMS and personalised offers run only on your consent. You can withdraw it at any time through your account settings or the unsubscribe link in every message, without affecting your access to the casino.
How long we keep each record
Retention follows our regulatory duties and the purpose of each data category. When a period expires, we delete or anonymise the data.
| Data category | Retention period |
|---|---|
| Transaction and account records | At least 5 years after account closure, per regulatory requirement |
| KYC verification documents | 5 years after verification or account closure |
| Gameplay and betting history | 5 years, linked to transaction records |
| Technical logs (IP, device) | Up to 12 months for security and fraud analysis |
| Marketing consent records | Until you withdraw consent, plus 2 years as proof of consent |
| Self-exclusion records | For the duration of the exclusion plus 5 years |
| Closed accounts without balance | Deleted or anonymised after 24 months |
Who we share your data with
We share data only with categories of processors that need it to deliver a service you use, and always under written data-processing agreements. We do not disclose your data to advertisers or data brokers.
- Payment processors handling your Visa Debit, Mastercard, PayPal, Skrill, Neteller, Trustly and crypto transactions
- KYC and AML verification providers checking your documents
- Game and platform providers, who receive your account ID and gameplay activity, not your full identity
- Regulators and law enforcement, where we are legally required to disclose
- Analytics providers measuring site performance in aggregate
- Email and communication service providers delivering messages you asked for
The rights you can exercise
You hold the following rights over your personal data at all times. Submit a request through live chat, 24/7, or by email to [email protected]. We respond within one month and may ask for ID to confirm you are the account holder.
- Access: get a copy of the personal data we hold about you
- Rectification: correct inaccurate or incomplete data
- Erasure: ask us to delete data we no longer need for a legal basis
- Portability: receive your account and gameplay data in a machine-readable format
- Objection: object to processing based on legitimate interest
- Withdraw consent: stop marketing processing at any time
- Complain: lodge a complaint with your national data protection authority
Cookies and tracking on our site
We use essential cookies to keep your session and wallet secure, plus optional analytics and marketing cookies you can accept or reject at the cookie banner. Read the full list of cookies, their purposes and lifespans on our dedicated Cookies Policy page, where you can also change your choices later.
Security measures we apply
All traffic between your device and our servers runs over TLS encryption. Stored documents sit in encrypted storage with strict role-based access: only verification and security staff can open KYC files, and every access is logged.
If a personal data breach occurs that risks your rights, we notify the relevant supervisory authority within 72 hours and inform affected players directly without undue delay.
- TLS encryption for all data in transit
- Encrypted storage for verification documents
- Role-based access controls with audit logging
- 72-hour breach notification procedure
- Regular security reviews of payment and account systems
Contacting our data officer
For questions about this policy, a data request or a complaint about how we handled your information, email [email protected] or write to the Data Protection Officer, Aladdins Gold N.V. Our support team is also available on live chat 24/7 and at [email protected]. We review this policy regularly and publish the date of the last update at the top of the page.
Frequently asked questions
Do I have to send my ID before my first withdrawal?
Yes. Licence rules require us to verify every player before the first payout. We ask for a government-issued ID, proof of address from the last 3 months and proof of payment method, and process checks within 48 hours.
Can I stop marketing emails but keep playing?
Yes. Withdraw consent in your account settings or use the unsubscribe link in any message. Your account, gameplay and withdrawals are unaffected.
How long do you keep my transaction history?
We retain transaction and betting records for at least 5 years after your account closes, as our regulator requires. Marketing data is deleted as soon as you withdraw consent.
Can I get a copy of all data you hold on me?
Yes. Send an access request to [email protected] and we will deliver your data in a portable format within one month, after confirming your identity.
Is my gameplay data shared with game providers?
Providers receive your account ID and betting activity so games can function. They do not receive your full identity, documents or payment details.