Privacy at PlayCroco Casino

Who We Are and What This Document Covers

PlayCroco Casino operates under a licence issued by the Gaming Control Board of Curaçao. This policy explains what personal information we collect, why we collect it, how long we keep it, and what rights you hold over your own data. It applies to all users who access our platform from Australia or any other country where we offer services.

We act as the data controller for all personal information processed through this website. If you have questions about how your data is handled, contact us at [email protected].

Information We Collect

When you register an account, we collect your full name, date of birth, residential address, email address, phone number, and payment details. During the verification process required under Curaçao GCB licence conditions, we may also request copies of government-issued identification documents, proof of address, and source-of-funds documentation.

As you use the platform, we automatically gather technical data: your IP address, device type, browser version, session timestamps, and gameplay activity. This data helps us detect unusual behaviour and meet our obligations under the Curaçao National Ordinance on the Identification of Clients when Rendering Services (AML legislation).

We may also receive information about you from payment processors, fraud prevention agencies, and identity verification providers. We use this third-party data solely to verify your identity and protect the integrity of our services.

Why We Process Your Data

Your account information is processed because it is necessary to fulfil the contract between you and PlayCroco Casino. Without it, we cannot create an account, process deposits, pay withdrawals, or provide customer support.

Identity and source-of-funds verification is a legal requirement under Curaçao GCB licensing conditions and applicable AML legislation. We have no discretion to waive this requirement, regardless of the size or frequency of your transactions. Failure to provide required verification documents will result in account suspension until the documents are supplied.

We process technical and behavioural data on the basis of our legitimate interest in preventing fraud, protecting platform security, and complying with responsible gambling obligations. Where we send you marketing communications, we do so only with your explicit consent, which you may withdraw at any time.

Responsible Gambling Data

PlayCroco Casino collects data related to your gambling activity, including deposit frequency, session length, and self-exclusion requests. This information is used solely to fulfil our responsible gambling obligations under Curaçao GCB licence conditions. We monitor for indicators of problem gambling and may use this data to contact you about support resources or to apply account restrictions where required.

Self-exclusion requests are processed immediately. Once applied, a self-exclusion cannot be reversed for the duration of the exclusion period you selected. We retain records of self-exclusion even after the exclusion period ends, to assist with re-enrolment decisions.

Sharing Your Information

We share your data with payment processors to handle deposits and withdrawals, identity verification providers to fulfil KYC requirements, fraud prevention agencies to detect and prevent financial crime, and IT service providers who host and maintain our platform. All third-party processors are bound by data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

We do not sell your personal information. We do not share it with advertisers or data brokers.

Where required by law, court order, or a request from a competent authority — including the Curaçao Gaming Control Board — we will disclose your data without prior notice to you.

International Data Transfers

PlayCroco Casino is operated from Curaçao. Your data may be transferred to and processed in countries outside Australia, including Curaçao and any jurisdiction where our service providers operate. These countries may not have data protection laws equivalent to those in Australia. Where such transfers occur, we apply contractual safeguards to protect your information.

How Long We Keep Your Data

Account data and identity verification records are retained for a minimum of five years from the date of account closure or your last transaction, whichever is later. This period reflects AML recordkeeping requirements under Curaçao legislation. Gameplay logs and transaction records are kept for the same minimum period.

Marketing consent records are kept for as long as the consent is active, plus three years after withdrawal. Technical logs are deleted after 12 months unless they relate to an open investigation or dispute.

Your Rights

You have the right to request a copy of the personal data we hold about you. You may ask us to correct inaccurate information or to delete data that we no longer have a legal basis to retain. You may object to processing based on legitimate interests and withdraw consent for marketing at any time.

Главный недостаток: where we are legally required to retain data — for example, under AML obligations — we cannot delete it on request, regardless of your preference. We will explain the applicable legal basis whenever we decline a deletion request.

To exercise any of these rights, write to us at [email protected]. We will respond within 30 days. If you are dissatisfied with our response, you may contact the Curaçao Gaming Control Board or the relevant regulatory authority in your country of residence.

Cookies and Tracking

We use cookies and similar technologies to keep you logged in, remember your preferences, and analyse platform usage. Full details of the cookies we use and your options for managing them are set out in our Cookie Policy.

Changes to This Policy

When we make material changes to this policy, we will notify you by email and display a notice on the website at least 14 days before the changes take effect. Continued use of the platform after that date constitutes acceptance of the updated policy.