Privacy Policy at Casino Bello
This policy sets out, in plain terms, what personal data we collect when you play at Casino Bello, how we use it, who we share it with, and the control you keep over it at all times.
What Data We Collect
We collect only the data we need to run your account, meet our licence obligations, and keep the site safe. When you register, we ask for your full name, date of birth, residential address, email address, and phone number. We also process identity and verification documents, such as a passport or driver licence photo, a proof of address, and payment method verification, before your first withdrawal.
- Identity data: name, date of birth, address, email, phone number
- Verification documents: photo ID, proof of address, payment method evidence
- Transaction data: deposits, withdrawals, wagering records, bonus history
- Technical data: device type, operating system, browser, IP address, session logs
- Gameplay behaviour: games played, bets placed, wins, losses, session duration
- Marketing preferences: which channels you opted into and how you responded
How We Use Your Data
Every use of your data maps back to a specific purpose. We create and manage your account, process deposits and withdrawals, verify your identity under our know your customer checks, and detect fraud and bonus abuse. We also monitor play patterns for responsible gambling indicators, and we send you promotional material only where you have consented.
Where a legal or regulatory duty applies, such as anti money laundering reporting to the Malta Gaming Authority, we process your data to comply with that duty. We never sell your data, and we never use it for purposes that are incompatible with those listed here without telling you first.
- Account creation, login, and account management
- KYC verification and payment processing
- Fraud prevention, bonus abuse detection, and dispute handling
- Responsible gambling monitoring and intervention
- Marketing with your consent, and withdrawal of marketing on request
- Compliance with licence conditions, tax, and reporting obligations
Our Legal Bases
Contract
We process identity, contact, and transaction data to set up and run your player account, because that processing is necessary to perform the contract you entered when you registered. Without it, we cannot hold your balance or pay your withdrawals.
Legal obligation
Verification documents, transaction records, and suspicious activity reports are processed because gambling and anti money laundering law requires us to. These duties sit under our Malta Gaming Authority licence, and refusing to process this data would breach it.
Legitimate interest
Fraud prevention, security monitoring, and aggregated service analytics rest on our legitimate interest in keeping the platform safe and functional. We weigh that interest against your rights and restrict the processing to what is strictly needed.
Consent
Marketing emails, SMS, and push notifications run on your consent only. You can withdraw that consent at any time through your account settings or the unsubscribe link in every message, and withdrawal costs you nothing and affects nothing else.
How Long We Keep It
We keep each category of data only as long as the purpose requires, and gambling regulation sets a hard floor for financial records. When a retention period ends, we delete or irreversibly anonymise the data.
| Data category | Retention period |
|---|---|
| Identity and account data | Life of the account, then 5 years after closure |
| KYC verification documents | 5 years after account closure, per licence rules |
| Transaction and wagering records | Minimum 5 years, per anti money laundering law |
| Device and IP logs | 12 months, unless needed for an investigation |
| Marketing preferences | Until you withdraw consent or ask us to delete them |
| Dispute and complaint records | 5 years after resolution |
Who We Share It With
We share data only with processors and authorities who need it for a defined purpose, and each one is bound by a written data processing agreement. We name categories rather than a long list of companies, and we never disclose your data for third party advertising.
- Payment processors handling your deposits and withdrawals, including crypto payment providers
- KYC and identity verification providers who check your documents
- The Malta Gaming Authority and other regulators or law enforcement where legally required
- Game and platform suppliers, limited to the technical data needed to run a session
- Analytics and hosting providers operating under our instructions
- Professional advisers, such as auditors and lawyers, under confidentiality duties
Your Rights Over Data
You control your data, and exercising any of the rights below is free of charge. Send your request to [email protected] or contact the Data Protection Officer directly, and we respond within 30 days. Where your request affects your account, we may ask a security question to confirm your identity before acting.
- Access: get a copy of the personal data we hold about you
- Rectification: correct data that is wrong or incomplete
- Erasure: ask us to delete data we no longer have grounds to keep
- Portability: receive your data in a machine readable format
- Objection: object to processing based on legitimate interest
- Withdraw consent: stop marketing processing at any time
- Complain: lodge a complaint with your data protection authority, including the Office of the Australian Information Commissioner if you are in Australia
Contacting our DPO
Our Data Protection Officer answers privacy questions, handles requests, and reviews this policy. Write to [email protected] and mark your message for the attention of the DPO. You can also reach our support team on live chat, 24/7, for anything urgent.
Cookies and Tracking
We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how the site performs. Strictly necessary cookies cannot be switched off; analytics and marketing cookies load only after you accept them in the consent banner, and you can change your choice at any time. Full details, including the cookie categories and how to manage them in your browser, sit in our dedicated Cookies Policy.
How We Protect Data
All traffic between your device and our servers runs over TLS encryption, and stored verification documents sit in encrypted storage with strict access controls. Only trained staff who need access for their role get it, every access is logged, and we review permissions regularly.
If a data breach occurs that risks your rights, we notify the relevant supervisory authority within 72 hours of becoming aware of it, and we tell you directly without undue delay where the risk to you is high. Established in 2023, Casino Bello has maintained this incident response process since launch, and we test it annually alongside independent security audits of our platform.
Frequently asked questions
How do I request a copy of my data?
Email [email protected] with the subject line Data Access Request. We verify your identity and send the copy within 30 days, free of charge.
How do I stop marketing messages?
Use the unsubscribe link in any message, adjust preferences in your account settings, or ask live chat to remove you. Marketing data is then deleted or suppressed straight away.
Why do you need my ID documents?
Our Malta Gaming Authority licence requires identity verification before your first withdrawal. We check your photo ID, proof of address, and payment method to prevent fraud and underage play.
Do you keep my data after I close my account?
Transaction and verification records are kept for 5 years after closure because gambling and anti money laundering law requires it. Everything else is deleted once the closure is final.