Your privacy at Godz Casino

This Privacy Policy explains what personal data we collect when you play at godzcasino.co.uk, why we collect it, how long we keep it and the rights you hold over it. We operate under licence 8048/JAZ2023-041 from the Curaçao Gaming Control Board and apply GDPR-aligned standards for every player.

What data we collect

We collect only the data needed to run your account, meet our legal duties and keep gambling safe. The categories below cover everything we hold about you.

• Identity data: full name, date of birth, email address, phone number, country of residence.
• Verification documents: government ID or passport, proof of address and proof of payment method, collected during KYC.
• Transaction data: deposits, withdrawals, payment method details and game history.
• Technical data: IP address, device identifiers, browser type and approximate location derived from your IP.
• Gameplay behaviour: bets placed, games played, win and loss records, session times.
• Marketing preferences: which offers you opted into, communication channels and consent records.

How we use your data

Each use has a specific purpose tied to your account. We never sell your data and we never use it for purposes you have not been told about.

• Creating and managing your player account.
• Verifying your identity and age before your first withdrawal.
• Processing deposits and withdrawals through Visa Debit, Mastercard Debit, PayPal, Skrill, Neteller, crypto and other listed methods.
• Preventing fraud, money laundering and multi-accounting.
• Monitoring gambling behaviour for responsible-gaming purposes, including deposit limits and GAMSTOP self-exclusion checks.
• Sending marketing offers where you have given consent.
• Meeting legal and regulatory obligations towards the Curaçao Gaming Control Board.

Our legal bases explained

Contract

We process your data to perform the contract you hold with us. Without your identity and payment details we cannot open an account, settle bets or pay out winnings, so this processing is required to provide the service.

Legal obligation

Anti-money-laundering and KYC rules oblige us to verify your identity and retain transaction records for five years or more. Refusal to provide verification documents means we cannot complete your withdrawal.

Legitimate interest

We rely on legitimate interest for fraud prevention, security monitoring and aggregate analytics that improve our games and site performance. This interest never overrides your rights, and you may object to it at any time.

Consent

Marketing emails, SMS offers and non-essential cookies run only on your consent. You withdraw consent whenever you like, and we stop that processing immediately without affecting your account.

How long we keep data

Retention depends on the type of data and our regulatory duties. The table shows each category and the period we hold it.

Who we share data with

We share data only with parties needed to run the casino, under written data-processing agreements. Categories include:

We share data only with parties that need it to deliver the service, always under written data-processing agreements.

• Payment processors handling your deposits and withdrawals.
• KYC and AML verification providers checking your documents.
• The Curaçao Gaming Control Board and other competent regulators when legally required.
• Analytics and site-performance providers working on our instructions.
• IT infrastructure and security providers hosting and protecting our systems.

Your rights over your data

You control what happens to your personal data. Submit any request through our support team at [email protected] and we respond within one month.

• Access: get a copy of the data we hold about you.
• Rectification: correct inaccurate or incomplete records.
• Erasure: request deletion where no legal retention duty applies.
• Portability: receive your data in a machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: stop marketing at any time, including via account settings.
• Complain: escalate to your national data protection authority if you believe we mishandled your data.

Cookies and tracking

We use session cookies to keep you logged in, preference cookies to remember your settings and, with your consent, analytics cookies that show us how the site performs. Full details, including the cookie list and how to change your choices, sit on our dedicated Cookies Policy page.

How we protect your data

All traffic between your device and our servers runs over TLS encryption. Data at rest is encrypted, access follows strict role-based controls limited to staff who need it, and we log every access to sensitive records.

If a breach affects your personal data, we notify the relevant supervisory authority within 72 hours and inform you directly where the risk to you is high.

Contact our Data Officer

Questions about this policy or your data go to our Data Protection Officer at [email protected]. We answer privacy queries within 30 days, and usually much faster.

Frequently asked questions

Do you need my ID before I can deposit?

No. Verification documents are requested before your first withdrawal. Deposits from £10 are possible with just your account details.

Can I delete my account and all my data?

Yes. Contact [email protected] and we close your account. Transaction records must be kept for at least 5 years under AML law; everything else is deleted.

How do I stop marketing emails?

Use the unsubscribe link in any email, or switch off offers in your account settings. We stop marketing messages immediately.

Who do I complain to about my data?

You can complain to your national data protection authority, and we ask you to contact our DPO at [email protected] first so we can resolve the issue directly.