Privacy Policy | Betpanda Casino Data Handling
This Privacy Policy explains what personal data we collect when you play at Betpanda Casino, why we collect it, who we share it with, and the rights you hold over it.
The Data We Collect
We collect only the personal data we need to run your account, process your payments and meet our legal obligations. When you register, we ask for your name, email address, date of birth and phone number. If you deposit or withdraw via fiat methods, we may ask for verification documents such as a passport, driver licence or utility bill. Crypto transactions run without KYC checks unless an anti-money-laundering (AML) trigger applies.
- Identity data: name, date of birth, email, phone number, residential address
- Verification documents: government ID, proof of address, source-of-funds evidence where required
- Transaction data: deposits, withdrawals, bets, winnings, payment method details
- Technical data: IP address, device type, browser, operating system, approximate location
- Gameplay behaviour: games played, session duration, bet sizes, bonus usage
- Marketing preferences: which promotions you opt in to and how you want us to contact you
How We Use Your Data
We use each category of data for a defined purpose. Your account data creates and maintains your player account. Verification documents support our KYC checks for fiat withdrawals. Transaction records let us process deposits and payouts through payment processors and reconcile your balance. Device and gameplay data feeds our fraud-prevention systems and our responsible-gambling monitoring, which flags patterns such as chasing losses or sudden deposit spikes.
- Creating, verifying and administering your account
- Processing deposits and withdrawals (minimum deposit AUD 15, minimum withdrawal AUD 30)
- Fraud prevention and AML compliance under our Anjouan licence (ALSI-202408063-FI3)
- Responsible-gambling monitoring and enforcing limits you set
- Sending marketing messages where you have consented
- Meeting tax, regulatory and audit obligations
Our Legal Bases
Contract. We process your identity and transaction data to perform the player agreement you accept at registration. Without it we cannot open an account or pay out winnings.
Legal obligation. Gaming and AML law requires us to verify identity for certain withdrawals and to keep transaction records for at least five years. We cannot shorten these periods at your request.
Legitimate interest. We rely on legitimate interest for fraud prevention, security monitoring and aggregated service-improvement analytics. These uses never override your privacy rights.
Consent. Marketing emails, SMS and personalised bonus offers run only on your consent. You can withdraw it at any time through your account settings or the unsubscribe link in any message.
How Long We Keep It
Retention depends on the category. Regulatory rules set a floor for transaction and KYC records, and we hold marketing preferences only until you delete them. If you close your account, we keep the minimum data the law requires and erase the rest.
| Data category | Retention period |
|---|---|
| Identity and account data | Life of the account, then 5 years after closure |
| Transaction and KYC records | Minimum 5 years per AML and gaming regulations |
| Device and gameplay logs | Up to 12 months for security and fraud analysis |
| Marketing preferences | Until you withdraw consent or delete your profile |
| Support correspondence | Up to 3 years after the last contact |
Who We Share Data With
We never sell your personal data. We share it only with service providers who need it to deliver a function, and each one works under a data-processing agreement that restricts further use.
- Payment processors handling your deposits and withdrawals in AUD or crypto
- KYC and AML screening providers used for fiat verification checks
- The Anjouan licensing authority and other regulators when legally required
- Analytics and hosting providers operating under strict confidentiality terms
- Auditors and legal advisers, only where professional duties apply
Your Rights Over Data
You control your personal data. If you access our services from the EU or a jurisdiction with comparable law, GDPR rights apply in full; Australian players also hold rights under the Australian Privacy Principles. Email [email protected] and we will respond within 30 days.
- Access: get a copy of the personal data we hold about you
- Rectification: correct inaccurate or incomplete details
- Erasure: request deletion where no legal retention duty applies
- Portability: receive your data in a machine-readable format
- Objection: object to processing based on legitimate interest
- Withdrawal of consent: stop marketing at any time
- Complaint: lodge a complaint with your data protection authority
Cookies and Tracking
We use essential cookies to keep you logged in and secure your session, plus optional analytics and marketing cookies that activate only with your consent via the cookie banner. You can change your choices at any time in your browser settings or through our cookie preferences link. Read our full Cookies Policy for the complete list of cookies and their purposes.
Security and Contact
We encrypt data in transit with TLS and at rest with industry-standard encryption. Access to personal data follows a need-to-know model with role-based controls, and our systems undergo regular security reviews. If a data breach affects your personal data, we will notify you and the relevant supervisory authority without undue delay, as GDPR requires.
Questions about this policy or your data? Contact our Data Protection Officer at [email protected] or write to Betpanda S.R.L. support at [email protected]. Our live chat team is available 24/7 if you need a faster answer about your privacy settings.
Frequently Asked Questions
Do you run KYC checks on crypto players at Betpanda Casino?
No. Crypto deposits and withdrawals in BTC, ETH, USDT, LTC and DOGE run without identity verification. We may request documents for fiat withdrawals or when an AML obligation applies.
How do I stop marketing messages?
Open your account settings and switch off marketing, or click the unsubscribe link in any email or SMS. We stop sending offers immediately and delete your marketing preferences when you ask.
Can I get a copy of all data you hold about me?
Yes. Email [email protected] from your registered address and we will send your data in a portable format within 30 days.
How long do you keep my transaction history?
Regulations require us to keep transaction and KYC records for a minimum of five years, so we cannot delete them earlier even on request.