Your Privacy at Goldenreels Casino

This Privacy Policy explains what personal data we collect when you play at Goldenreels Casino, why we collect it, who we share it with and the rights you hold over it. It applies to every visitor and registered player on goldenreels-aud.com.

Data We Collect From You

We collect only the data we need to run your account, meet our legal obligations and keep our casino secure. When you register, we ask for your full name, email address, phone number and date of birth. Before your first withdrawal we request verification documents: a government-issued ID, proof of address and confirmation of your payment method.

  • Identity data: name, date of birth, email, phone number, residential address
  • Verification documents: ID, proof of address, payment method verification (KYC)
  • Transaction data: deposits, withdrawals, bets, wins and losses
  • Technical data: IP address, device and browser type, operating system
  • Gameplay behaviour: games played, session times, betting patterns
  • Marketing preferences: which offers you opt in to and how you want to hear from us

How We Use Your Data

Every use of your data maps to a specific purpose. We create and manage your player account, verify your identity under KYC rules, process deposits and withdrawals, and detect fraud and bonus abuse. We also monitor play for signs of problem gambling so we can act responsibly, and we send you marketing offers only where you have consented.

  • Account creation, login and customer support
  • Identity verification (KYC) and anti-money-laundering checks
  • Payment processing across fiat and crypto methods
  • Fraud prevention and detection of multiple accounts
  • Responsible-gambling monitoring and interventions
  • Marketing and promotions, where you have given consent
  • Compliance with legal and regulatory obligations

Contract. We process your data to perform the agreement between you and us. Without your identity and transaction data we cannot open an account, take a deposit or pay out a withdrawal.

Legal obligation. Curaçao licence conditions and anti-money-laundering law require us to verify your identity and retain transaction records for at least five years. We cannot waive these duties.

Legitimate interest. We rely on legitimate interest to secure our platform, prevent fraud and multiple accounts, and analyse gameplay for responsible-gambling purposes. This interest never overrides your rights.

Consent. Marketing communications and non-essential cookies run on your consent alone. You can withdraw that consent at any time and we will stop the relevant processing.

How Long We Keep It

We keep each category of data only as long as its purpose requires. Transaction and KYC records stay with us for a minimum of five years after your last activity, as our licence demands. Marketing preferences we hold until you delete them. After the retention period ends, we erase or anonymise the data.

  • Identity and account data: for the life of your account, then up to 5 years
  • KYC documents: 5 years after account closure
  • Transaction data: minimum 5 years, per regulatory requirement
  • Gameplay and device data: up to 5 years for dispute and audit purposes
  • Marketing preferences: until you withdraw consent or delete your account

Who We Share Data With

We never sell your data. We share it only with parties who help us operate the casino, and only as far as each purpose requires.

  • Payment processors handling your deposits and withdrawals
  • KYC and AML verification providers
  • The Curaçao regulator and other authorities, on lawful request
  • Analytics and hosting providers under data-processing agreements
  • Game providers, limited to the data needed to run a session

Your Rights Over Your Data

You control your personal data. Send any request to [email protected] and we will respond within 30 days. We may ask for ID to confirm your identity before acting on a request.

  • Access: get a copy of the data we hold about you
  • Rectification: correct anything inaccurate or incomplete
  • Erasure: ask us to delete data we no longer need to keep
  • Portability: receive your data in a machine-readable format
  • Objection: object to processing based on legitimate interest
  • Withdrawal of consent: stop marketing at any time
  • Complaint: raise a concern with the relevant data protection authority

Cookies and Tracking

We use essential cookies to keep you logged in and your session secure, plus optional analytics and marketing cookies that run only with your consent. You manage cookies through the banner on your first visit or your browser settings. Full detail sits in our separate Cookies Policy page.

Security We Apply Daily

We encrypt data in transit with TLS and protect stored data with strong access controls. Only staff who need your data for support, payments or compliance can reach it, and every access is logged. If a data breach occurs, we notify the regulator and affected players without undue delay.

Contact Our Data Officer

Questions about this policy or your data go to our Data Protection Officer at [email protected]. Support is also available 24/7 through live chat or at [email protected]. We review this Privacy Policy regularly and publish the current version on this page.

Frequently asked questions

Do I need to send ID documents to Goldenreels Casino?

Yes. Before your first withdrawal we verify your identity with a government-issued ID, proof of address and payment method confirmation. Processing takes up to 48 hours.

Can I stop marketing emails?

Any time. Withdraw consent via the unsubscribe link in any email, your account settings, or by emailing [email protected].

How long do you keep my transaction history?

Regulatory rules require us to retain transaction records for at least five years. After that we erase or anonymise them.

Do you sell my personal data?

No. We share data only with payment processors, KYC providers, regulators and service providers who need it to run the casino.

Who do I complain to about my data?

Write to our Data Protection Officer at [email protected] first. You also have the right to complain to the relevant data protection authority.