Our Privacy Policy, in plain terms
The Data We Collect
When you register an account with Novajackpot Casino, we collect the information needed to run that account lawfully and safely. Here is the full picture, category by category.
- Identity data: your full name, date of birth, email address, phone number and residential address.
- Verification documents: passport, driver's licence or other government ID, proof of address (utility bill or bank statement) and payment method verification, as required by our KYC checks before your first withdrawal.
- Transaction data: deposits, withdrawals, wagering history, bonus usage and payment method details.
- Technical data: IP address, device identifiers, browser type, operating system and approximate location derived from your IP.
- Gameplay behaviour: games played, session times, betting patterns and outcomes.
- Marketing preferences: whether you opted in to promotional emails, SMS or on-site offers.
How We Use It
Every use of your data maps back to a specific purpose. We do not collect data on a "just in case" basis.
We create and manage your player account, verify your identity and age under our Curaçao licence (8048/JAZ2023-016), process your deposits and withdrawals, prevent fraud and bonus abuse, and monitor play for responsible-gambling signals such as chasing losses or unusual session lengths. Where you have given consent, we also send you promotional offers and use analytics tools to understand how our site performs. Finally, we meet legal and regulatory obligations, including anti-money-laundering reporting and responding to lawful requests from authorities.
The Legal Bases We Rely On
Contract: processing your data is necessary to open your account, honour your wagers and pay out your winnings. Without it, we cannot provide the service you signed up for.
Legal obligation: Curaçao gaming law and anti-money-laundering rules require us to verify your identity, keep transaction records for at least five years and report suspicious activity. You cannot opt out of these.
Legitimate interest: we use gameplay and technical data to detect fraud, secure our platform and understand aggregate site usage. We balance this against your privacy rights and keep it to what is genuinely necessary.
Consent: marketing emails, SMS and personalised offers run only on your consent, which you can withdraw at any time via your account settings or the unsubscribe link.
How Long We Keep It
Retention depends on the type of data and the rules that apply to it. We delete or anonymise data as soon as the retention period ends.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then 5 years after closure |
| Verification (KYC) documents | 5 years after your last transaction, per AML rules |
| Transaction and wagering data | Minimum 5 years, as required by gaming regulations |
| Technical and analytics data | Up to 24 months, then aggregated or deleted |
| Marketing preferences | Until you withdraw consent or ask us to delete them |
Who We Share It With
We never sell your personal data. We share it only with parties who need it to deliver our service, under written data-processing agreements:
We share data with payment processors (card acquirers, e-wallet and crypto payment providers) to complete your transactions; KYC and AML verification providers that check your documents; the Curaçao regulator and other authorities when legally required; analytics and hosting providers that run our platform; and email delivery services for the marketing you consented to. Each recipient processes data only for its stated purpose.
Your Rights Over Your Data
Send requests to our Data Protection Officer and we will respond within 30 days. Identity verification may be needed before we release account data.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is inaccurate or incomplete.
- Erasure: ask us to delete your data where no legal retention duty applies.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: turn off marketing at any time, without affecting the lawfulness of earlier processing.
- Complaint: raise a complaint with the Office of the Australian Information Commissioner (OAIC) or, if you are in the EU, your national data protection authority.