Privacy Policy
This notice sets out how RollXO Casino handles the personal information of players registered from Canada and elsewhere, and what you can ask us to do with it. It applies to our website, our account interface and any correspondence with our support team.
Information we collect
At registration we gather identifying details: full name, date of birth, residential address, email address and telephone number. These fields are mandatory because our licence requires us to confirm that every account belongs to a verifiable adult.
During verification we may request a government-issued photo document, a recent utility bill or bank statement, and in some cases a selfie taken alongside the document. These files are stored in encrypted form and are visible only to the compliance officers who assess them.
Transactional records — deposits, withdrawals, bets placed, bonus claims and balance movements — are generated automatically as you use the platform. Alongside them we log technical data such as IP address, device type, browser build, operating system and approximate location derived from the connection.
Where you contact us, we retain the content of the exchange, including chat transcripts and attachments, so that later enquiries can be resolved with full context.
Why we process it and on what basis
The largest share of processing exists to satisfy legal duties placed on us by the Curaçao Gaming Authority under licence OGL/2024/161/0191, together with anti-money-laundering and counter-terrorist-financing rules. Age verification, source-of-funds checks and transaction monitoring all fall into this category and cannot be declined while an account remains open.
Contractual necessity covers everything required to run the account itself: crediting deposits, settling bets, releasing withdrawals and answering support tickets.
We rely on legitimate interest for fraud detection, bonus-abuse screening, service security and aggregate analysis of how the platform performs. This analysis works on grouped figures and does not single out individuals.
Marketing by email or SMS proceeds only where you have opted in, and consent can be withdrawn at any moment through the preferences panel or the unsubscribe link in any message.
Sharing with third parties
Game content on RollXO Casino is supplied by independent studios. When you open a title, limited session data passes to the studio so that the round can be recorded and settled correctly. These providers act under contract and may not repurpose the data.
Payment institutions, card acquirers and cryptocurrency processors receive the minimum needed to move funds. Identity-verification bureaus receive document images strictly for the duration of a check.
Regulators, auditors, law-enforcement bodies and tax authorities may receive information where a lawful request compels disclosure. We assess each request before responding and narrow the scope wherever the law permits.
We do not sell personal information, and we do not pass player lists to advertising networks for resale or profiling by unrelated companies.
Storage, security and retention
Traffic between your device and our servers is protected by TLS. Stored credentials are hashed with a salted algorithm, and access to production systems is restricted by role and protected with multi-factor authentication.
Records tied to gambling activity, identity checks and financial transactions are kept for a minimum of five years after an account closes, because retention periods of this length are imposed on licensed operators. Support correspondence is normally purged after twenty-four months.
Servers are located in the European Economic Area with backup infrastructure elsewhere. Where information moves outside that area, standard contractual clauses or an equivalent safeguard governs the transfer.
No system is beyond reach. Should a breach occur that is likely to affect your rights, we will notify the relevant supervisory authority and, where the risk warrants it, contact you directly with a description of what happened and what to do next.
Your choices and how to exercise them
You may request a copy of the data we hold, correct anything inaccurate, ask for deletion of records not subject to a retention obligation, object to processing based on legitimate interest, or request a portable export of the details you supplied.
Requests are answered within thirty days. Because gambling accounts are a target for impersonation, we will verify your identity before releasing anything, and we may extend the deadline once for genuinely complex cases with an explanation.
Cookies and similar technologies are governed by the consent banner shown on first visit. Strictly necessary cookies keep sessions alive and cannot be switched off; analytics and preference cookies are optional and adjustable at any time.
If our response does not satisfy you, Canadian residents may raise the matter with the Office of the Privacy Commissioner of Canada, and all players retain the right to complain to the Curaçao Gaming Authority.
Where to get help
Data Protection Officer, RollXO Casino — [email protected]
General enquiries — [email protected] or the live chat available from any page after sign-in
Office of the Privacy Commissioner of Canada — priv.gc.ca, for unresolved complaints from Canadian residents
This notice is published for transparency and reflects our practices at the date of last revision. It does not create rights beyond those granted by applicable data protection legislation, and where a conflict arises the governing statute takes precedence.