Privacy Policy at Divaspin Casino
This Privacy Policy explains what personal information Divaspin Casino collects when you play at divaspin-aud.com, why we collect it, how long we keep it and the rights you have over it. By registering an account with us you accept the practices described here.
What data we collect
Categories of personal information
We collect only the information needed to run your account, verify your identity, process your payments and meet our legal obligations under the Curaçao licence OGL/2023/174/0090.
- Identity data: full name, date of birth, email address, phone number and residential address.
- Verification documents: copies of your passport or ID, proof of address and proof of payment method, collected during KYC.
- Transaction data: deposits and withdrawals in AUD, BTC, ETH, USDT or LTC, payment method details and wagering history.
- Technical data: IP address, device type, operating system, browser and approximate location derived from your IP.
- Gameplay behaviour: games played, bets placed, wins and losses, session times and bonus usage.
- Marketing preferences: whether you opted in to promotional emails or SMS and which offers you engage with.
How we use your data
Purposes of processing
Every processing activity we carry out serves one of the purposes listed below. We never sell your personal data, and we do not use it for automated decision-making beyond fraud scoring that a human can review on request.
- Creating and managing your player account, including the 5-tier VIP program from Bronze to Diamond.
- KYC verification before your first withdrawal and ongoing AML checks.
- Processing deposits and withdrawals and preventing payment fraud and chargeback abuse.
- Monitoring play for responsible-gambling indicators, such as chase patterns that trigger a session reminder.
- Sending marketing messages such as the Friday reload 50% up to 300 AUD offer, only with your consent.
- Meeting legal and regulatory obligations, including record-keeping and reporting to the Curaçao authority.
Our legal bases
Why the law permits it
Contract. We process your identity and account data to perform the agreement you enter when you register. Without it we cannot open an account, hold your balance in AUD or pay out winnings.
Legal obligation. Verification documents, transaction records and AML reports are processed because our licence and anti-money-laundering law require it. We cannot delete these records before the statutory retention period expires, even if you ask.
Legitimate interest. Fraud prevention, security logging and aggregated service analytics rely on our legitimate interest in operating a safe platform. We weigh this interest against your privacy and restrict it to what is necessary.
Consent. Marketing emails, SMS offers and non-essential cookies run only on your consent. You can withdraw it at any time, and withdrawal never affects the lawfulness of messages sent before it.
How long we keep it
Retention schedule
We keep each category of data no longer than necessary. Regulatory rules require transaction and KYC records to be held for at least five years after account closure, so those deletion requests are fulfilled only after that period lapses.
| Data category | Retention period |
|---|---|
| Identity and account data | While the account is open, then 5 years after closure |
| KYC verification documents | 5 years after the last transaction or account closure |
| Transaction and wagering records | Minimum 5 years under AML rules |
| Device, IP and security logs | Up to 12 months, then deleted or anonymised |
| Marketing preferences | Until you withdraw consent or ask us to delete them |
| Closed-account data not subject to retention law | Deleted within 30 days of closure |
Who we share data with
Categories of recipients
We share your data only with processors and authorities who need it for a specific purpose, under written contracts that bind them to confidentiality and security standards comparable to ours.
- Payment processors handling Visa, Mastercard, Skrill, MiFinity, Jeton, bank transfer and crypto transactions.
- KYC and AML verification providers that check your ID documents and screening lists.
- Game providers whose titles you play; they receive only a pseudonymous player identifier, never your identity documents.
- The Curaçao regulator and law-enforcement bodies where a lawful request or reporting duty exists.
- Analytics and hosting providers operating under data-processing agreements.
- Auditors and professional advisers bound by professional secrecy.
Your privacy rights
What you can request
Email [email protected] or contact our live chat, available 24/7, and we will respond within 30 days. Verification of your identity may be required before we act on a request, and it never costs you anything.
- Access: a copy of the personal data we hold about you.
- Rectification: correction of inaccurate details such as a misspelt name or old address.
- Erasure: deletion of data we no longer need, subject to the 5-year regulatory retention rule.
- Portability: your account, transaction and gameplay history in a machine-readable format.
- Objection: objection to processing based on legitimate interest, such as fraud scoring.
- Withdrawal of consent: stop marketing at any time via the unsubscribe link or your account settings.
- Complaint: raise a concern with the Office of the Australian Information Commissioner (OAIC) or your local data protection authority.
Cookies and tracking
Short version
We use strictly necessary cookies for login sessions, security and payment flows, plus optional analytics and marketing cookies that load only after you accept them in the consent banner. Full details, including how to withdraw cookie consent per category, are set out on our dedicated Cookies Policy page.
How we protect your data
Safeguards in place
All traffic to and from divaspin-aud.com runs over TLS encryption, and stored verification documents sit in encrypted storage with strict access controls. Only trained staff who need access for KYC, payments or support can view your data, and every access is logged.
If a data breach is likely to cause you serious harm, we notify the relevant regulator without undue delay and inform affected players directly. Our Data Protection Officer can be reached at [email protected] for any question about this policy or a specific processing activity.
Frequently Asked Questions
Can I delete my KYC documents before the 5-year period ends?
No. Our licence and anti-money-laundering obligations require us to keep verification documents and transaction records for at least 5 years after account closure. All other data can be deleted on request.
Do game providers see my identity?
No. Providers such as those powering our 10,000-title library receive only a pseudonymous player identifier tied to your session, never your name, documents or payment details.
How do I stop marketing emails?
Use the unsubscribe link in any message, adjust preferences in your account settings or email [email protected]. Marketing stops immediately; account-related and legal notices are not affected.
Who do I complain to about my privacy?
Contact our Data Protection Officer first at [email protected]. If the matter is unresolved, you can complain to the Office of the Australian Information Commissioner (OAIC).