Privacy Policy

Categories of personal data collected

To provide our services, we are required to collect and process specific information. This data is acquired directly from the user or generated automatically during interaction with the platform.

Identity and contact data

This category includes all information necessary to unequivocally establish the user's identity. We collect first name, last name, date of birth (essential for verifying legal age of 18), Italian residential address, phone number, and email address. Furthermore, to comply with security and prevention obligations, we may request copies of valid identification documents.

Usage and device data

We automatically monitor how the user interacts with our systems. We collect IP addresses, browser type and version, time zone, type of device used, operating system, and detailed information about browsing sessions, including access times and operations performed. This data is essential for maintaining infrastructure integrity.

Transaction data

If the platform involves financial operations, we securely record details related to fund movements. This includes amounts transferred, methods chosen for operations, transaction times, and internal account statuses. We never store complete credit card details, relying on encryption standards and certified payment service providers.

Communications and support

We store the content of interactions between the user and our customer support team. This includes email exchanges, live chat recordings, and any written communications. These records are used solely for troubleshooting, internal training purposes, and for the legal protection of both parties in case of disputes.

Legal bases for processing

Every processing operation carried out by CasinoYes is supported by a valid legal basis. Firstly, we process data for contract execution: to create and manage your account and provide the requested services. Secondly, we operate to comply with strict legal obligations, such as anti-money laundering regulations and identification requirements. Furthermore, we act based on our legitimate business interest to improve the platform and prevent cyber fraud. Finally, for non-essential activities such as sending specific promotional communications, we rely exclusively on the user's explicit and prior consent, which can be freely withdrawn at any time.

How we use your data

The collected information is used for a range of well-defined operational purposes. Primarily, data serves to validate user eligibility, manage the personal profile, and ensure all activities are conducted within a framework of legality and security. We use information to analyze statistical trends that allow us to correct system anomalies and optimize the user interface. Email communications are used to send crucial alerts regarding account status or changes to terms. Only with authorization can contact data be used for updates on new initiatives or platform features.

Data retention

CasinoYes does not retain personal information for longer than strictly necessary for the purposes described. Typically, data associated with an active account is maintained for the duration of the contractual relationship. Once the profile is closed, some information must be retained for additional periods (generally 5 to 10 years, in accordance with Italian legislation) to comply with tax, accounting, and regulatory obligations, as well as to protect our rights in any legal proceedings. At the end of this period, data is securely deleted or irreversibly anonymized.

Data sharing and service providers

Your privacy is paramount; therefore, we do not sell your data to third parties under any circumstances. Sharing occurs exclusively in necessary operational scenarios. We may transmit specific information to trusted service providers acting on our behalf as data processors. Such partners include secure hosting infrastructures, fraud prevention services, financial transaction processors, and technical analysis tools. All our providers are bound by strict confidentiality agreements. Furthermore, we reserve the right to share information with competent authorities if there is a well-founded suspicion of illicit activities or when explicitly required by law.

International transfers

The technological infrastructure supporting our services may involve transferring data outside the national territory. If information needs to be transmitted to providers located outside the European Economic Area, CasinoYes ensures that such transfers comply fully with current regulations. We implement appropriate safeguards, such as adopting standard contractual clauses or ensuring that the recipient country offers a level of protection recognized as adequate by the supervisory authorities.

Security measures

We have developed a multidimensional security protocol to protect the information provided. We employ advanced encryption technologies for data transmission, state-of-the-art firewalls, and strict access controls to our servers. However, while making every reasonable effort to defend our infrastructure against cyber threats, it is important to note that no data transmission over the internet and no electronic storage system can guarantee an absolute and infallible 100% security level. The user is also responsible for safeguarding their login credentials.

Your rights

As a user, you have specific rights regarding your data. You have the right to access the information we hold, requesting a copy. You can demand the correction of inaccurate or outdated data. Under certain circumstances provided by law, you have the right to be forgotten, meaning you can request the permanent deletion of your personal information. You can object to specific processing, such as for marketing purposes, and request the restriction of temporary processing in case of disputes. Where applicable, you are guaranteed the right to data portability in a structured and machine-readable format.

Contact for privacy inquiries

To exercise your rights, file a complaint, or simply ask questions regarding this Policy, we have established a dedicated channel. Our information protection team can be contacted in writing at any time. Please direct your communications exclusively to:

[email protected].

We will respond to all formal requests within the timelines established by current privacy regulations.

Updates

This Policy may be subject to periodic changes to reflect improvements to our platform or to comply with new legislative provisions. Any substantial modification will be accompanied by a clear notification published through service channels or sent via email. We invite all users to review this document frequently to fully understand the evolution of our privacy protection measures.

EN