
Privacy Policy
Personal information collection and processing practices for casino services compliance.1. Information Collected
The following categories of personal information are collected and processed:
1.1. Registration and Identity Details
When creating an account, users provide full name, date of birth, residential address, email address, telephone number, and identity document details. Collection is required for identity verification, compliance with anti-money laundering (AML) requirements, and regulatory obligations set by the National Gambling Board and provincial gambling authorities.
1.2. Financial and Payment Data
Collected information includes bank account numbers, card details, transaction history, deposit and withdrawal records, and activity data related to betting or gaming. This is necessary for transaction processing and statutory record-keeping.
1.3. Technical and Usage Information
Automatically collected data includes IP addresses, device identifiers, browser type, operating system, access times, pages viewed, and usage logs. Data is used for security, fraud detection, analytics, and service optimization.
1.4. Communications and Correspondence
Records of user interactions with customer support, including emails, chat transcripts, and telephone call recordings where legally permitted, are retained.
2. Legal Basis and Purposes of Processing
Personal information is processed on the following legal grounds:
2.1. Contractual Necessity
Processing required for contract performance, including account management, identity verification, financial transactions, and provision of casino and betting services.
2.2. Legal Obligations
Information processed to comply with AML laws, tax obligations, gambling regulations, court orders, and requests from regulatory authorities such as the National Gambling Board and provincial bodies.
2.3. Legitimate Interests
Data is processed for fraud prevention, security, internal record-keeping, service improvement, and business analytics, provided such processing does not override users’ fundamental rights.
2.4. Consent
Consent is obtained where required by law, including for marketing communications and profiling for promotional activities not covered by other legal bases. Consent can be withdrawn at any time.
3. Data Sharing and Disclosure
Personal data may be shared or disclosed under the following circumstances:
3.1. Regulatory Authorities
Personal information may be disclosed to the National Gambling Board, provincial gambling boards (including the Gauteng Gambling Board), the South African Revenue Service, the Financial Intelligence Centre, and other authorities when legally required.
3.2. Service Providers
Data is shared with payment processors, identity verification services, fraud detection vendors, data hosting providers, and other third parties providing services on behalf of the platform. Such parties are contractually obligated to secure the data and use it solely as directed.
3.3. Legal Requirements
Personal data may be disclosed in response to court orders, subpoenas, or legal obligations, or as necessary to investigate criminal activity, money laundering, fraud, underage gambling, or breaches of service terms.
3.4. Business Transfers
If the business is sold, merged, or reorganised, personal information may transfer to the acquiring entity. The receiving party will be required to comply with this Privacy Policy and applicable law.
Personal data is not sold or leased to third parties for independent marketing purposes without explicit user consent.
4. Data Security
Technical and organisational measures are implemented to protect personal data from unauthorized access, disclosure, alteration, or destruction. Safeguards include:
- SSL/TLS encryption for data transmission between user devices and company servers
- Access controls restricting personnel access to personal data
- Security audits and vulnerability assessments
- Physical security of storage facilities
- Incident response procedures for data breaches
No transmission or storage method is entirely secure. Users should contact support and change passwords if unauthorized access or a breach is suspected.
5. Data Retention
Personal information is retained for the duration of account activity and as required for legal, regulatory, tax, accounting, and dispute resolution obligations. Retention periods vary by data type and legal requirements. Financial records are typically kept for at least five years in accordance with South African law.
When no longer required, personal data is deleted or anonymised following the data retention schedule.
6. User Rights under POPIA
Users have the following rights concerning personal information:
6.1. Right of Access
Request confirmation of possession of personal data and obtain a copy.
6.2. Right to Correction
Request correction of inaccurate or incomplete information. Reasonable steps will be taken to verify and update data.
6.3. Right to Object
Object to processing of personal data on reasonable grounds, except where processing is legally required.
6.4. Right to Restrict Direct Marketing
Opt out of marketing communications at any time via unsubscribe mechanisms or by direct request.
6.5. Right to Complain
Lodge a complaint with the Information Regulator of South Africa if unlawful processing is suspected.
To exercise these rights, contact details are provided in section 8. Proof of identity may be requested before any action is taken.
7. International Data Transfers
Some service providers and data processors may be based outside South Africa. International transfers are carried out with appropriate safeguards in line with POPIA, including contractual measures and verification of data protection adequacy in destination jurisdictions.
8. Contact Information
For questions, requests, or complaints regarding this Privacy Policy or data processing practices, contact the Data Protection Officer:
Email: [contact email as per operational requirements]
Postal address: [registered business address]
For independent recourse, contact the Information Regulator of South Africa:
Website: https://www.justice.gov.za/inforeg/
Email: [email protected]
9. Changes to the Privacy Policy
This Privacy Policy may be updated to reflect changes in practices, technology, legal requirements, or operational needs. Material changes will be communicated by notice on the website or by email. Continued use of services after such notification constitutes acceptance of the updated policy.
Last updated: 2025.
