Privacy Policy at Zuzubet Casino

This policy sets out what personal data we collect when you use zuzubet-casino.com, why we collect it, how long we hold it and the controls you have over it. It applies to every visitor, registered player and account holder on our site.

What data we collect

When you register, deposit, wager or contact our 24/7 live chat, you generate several categories of personal data. We only collect what the service needs, and each category below maps to a specific purpose and retention period elsewhere in this policy.

• Identity data: full name, date of birth, email address, phone number, residential address and country of residence.
• Verification documents: government-issued ID, proof of address dated within 3 months and proof of your payment method, collected under our KYC obligations before your first withdrawal.
• Transaction data: deposits and withdrawals, amounts and currencies (including AUD, USD, EUR, NZD, CAD and crypto), payment method details and wallet addresses.
• Technical data: IP address, device and browser type, operating system, cookies and similar identifiers.
• Gameplay behaviour: games played, bet sizes, session duration, wins and losses, bonus and loyalty program activity.
• Marketing preferences: which channels you opted into (email or SMS), your promo code history such as ZUZU100, and every consent record with its timestamp.

How we use your data

Every processing activity traces back to a documented purpose. Creating your account and running your sessions requires identity and contact data. Verifying who you are before your first withdrawal, a process that takes up to 72 hours, requires your KYC documents.

Processing deposits and withdrawals requires transaction data routed to payment operators. Detecting bonus abuse, multi-accounting and payment fraud relies on device, IP and behavioural signals. Monitoring play for signs of gambling harm draws on your deposit, loss and session patterns, and feeds the responsible gambling tools we offer, including deposit limits, loss limits and self-exclusion.

• Creating and managing your player account.
• KYC identity verification and anti-money laundering checks.
• Processing deposits, bets and withdrawals.
• Fraud prevention and dispute handling.
• Responsible gambling monitoring and interventions.
• Marketing communications, only where you have consented.
• Meeting legal, regulatory and audit obligations.

The legal bases we rely on

Where the GDPR or comparable law applies, we process your data only under one of four bases, and we record which basis applies to each activity.

• Contract: processing necessary to open your account, honour bets, pay withdrawals and deliver the service you signed up for. Identity and transaction data fall largely here.
• Legal obligation: KYC, AML and record keeping demanded by our licence from the Curaçao eGaming authority and by the laws of the jurisdictions we serve. You cannot opt out of these, and neither can we.
• Legitimate interest: fraud prevention, security logging, site analytics and aggregate statistics, each balanced against your rights and limited to what is necessary.
• Consent: marketing emails, SMS promotions and non essential cookies. You give it freely, and you can withdraw it at any time without losing access to your account.

How long we keep your data

Nothing is kept forever, and nothing is deleted earlier than the law permits. Gambling regulation requires us to retain financial and wagering records for at least 5 years after account closure, so early erasure requests for those categories have limits we explain below.

• Identity and account data: for the life of your account, then up to 5 years after closure.
• KYC verification documents: up to 5 years after your last withdrawal, then securely destroyed.
• Transaction and wagering records: minimum 5 years after account closure under AML and gambling regulation.
• Technical and device logs: up to 12 months for security and fraud analysis.
• Marketing data and consent records: until you withdraw consent, plus a short window to action your opt out across all systems.
• Live chat transcripts: up to 12 months for quality and dispute purposes.
• Data of visitors who never register: technical data only, purged within 12 months.

Who we share data with

We never sell your personal data. Sharing happens only with processors and authorities that need it to deliver a function, and each one operates under a written data processing agreement with strict confidentiality and security terms.

• Payment processors handling deposits and withdrawals across methods such as PayID, Visa, Mastercard, Skrill, MiFinity, Jeton and cryptocurrency networks.
• KYC and AML screening providers that verify your documents and run sanctions checks.
• Game and platform providers whose servers generate and record your gameplay outcomes.
• Regulators, licensing authorities and law enforcement, where a lawful request or reporting duty applies.
• Analytics and site performance services that help us understand how the site is used, in aggregate or pseudonymised form.
• Professional advisers such as auditors and lawyers, strictly on a need to know basis.
• Email and SMS delivery services, only for messages you have consented to receive.

Your rights over your data

You can exercise any of the rights below at no cost, by emailing [email protected] or our data protection officer at [email protected]. We respond within 30 days and may ask for ID to confirm the request comes from the account holder.

If you are unsatisfied with how we handled your request, you can complain to the Office of the Australian Information Commissioner, or to your local supervisory authority if you are in the EU or elsewhere with a data protection regulator.

• Access: get a copy of the personal data we hold about you.
• Rectification: correct data that is inaccurate or out of date.
• Erasure: request deletion, subject to the regulatory retention periods listed above.
• Portability: receive your data in a structured, machine readable format.
• Objection: object to processing based on legitimate interest, including profiling for fraud.
• Withdrawal of consent: stop marketing at any time via account settings, email links or by contacting support.
• Complaint: escalate to the relevant data protection authority.

Cookies and similar tracking

Like most online services, our site uses cookies and similar technologies to keep you logged in, remember your preferences, secure sessions against hijacking and measure performance. Essential cookies run without consent because the site cannot function without them; analytics and marketing cookies load only after you accept them in the consent banner.

• Full details of every cookie category, its purpose and lifespan sit in our dedicated Cookies Policy page.
• You can change or withdraw your cookie choices at any time from the consent settings link in the site footer.

How Zuzubet Casino protects data

Since we launched in 2023, protecting player data has been a core operational duty, not an afterthought. All traffic between your device and our servers runs over TLS encryption. KYC documents and other sensitive records sit encrypted at rest, separated from public facing systems.

Access follows a strict need to know model with multi factor authentication for staff, role based permissions and logged access to sensitive records. We test our controls regularly and keep a documented incident response plan. If a breach affects your personal data and the law requires notification, we will inform you and the relevant regulator without undue delay, and within 72 hours where the GDPR applies.

• TLS encryption for all data in transit and encryption at rest for stored documents.
• Role based access controls with multi factor authentication for staff.
• Continuous logging and monitoring of access to sensitive data.
• Documented breach response with regulatory and player notification procedures.

Frequently asked questions

How do I stop marketing emails from you?

Use the unsubscribe link in any email, change your preferences in account settings, or contact [email protected]. We action opt outs promptly across all channels, and withdrawing consent never affects your account or gameplay.

Why can't you delete my transaction history?

Gambling and anti money laundering regulation requires us to keep transaction and wagering records for at least 5 years after your account closes. We can delete other categories sooner, and the retained records are locked to the minimum access needed for legal purposes.

Do you share my data with advertisers?

No. We never sell personal data and we do not share it with third party advertisers. Analytics partners receive pseudonymised or aggregate data only.

Do you use my KYC documents for anything else?

No. Your ID, proof of address and payment method proof are used solely for identity verification, fraud prevention and regulatory compliance, and are destroyed once the retention period expires.

Who do I contact about a privacy issue?

Email our data protection officer at [email protected] or use the contact details in this policy. We respond within 30 days, and you can escalate to the Office of the Australian Information Commissioner at any time.