Sign Up
Sign Up

Privacy Policy

This Privacy Policy ("Policy") describes how Iker Casillas Casino ("we", "us", "our") collects, uses, stores, shares, and protects personal data when you access or use our website, mobile applications, and related services (collectively, the "Services"). By registering an account, visiting our platform, or otherwise interacting with our Services, you acknowledge that you have read and understood this Policy.

We are committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR, and other relevant privacy legislation in the jurisdictions where we operate.

1. Data Controller

The data controller responsible for your personal data is Iker Casillas Casino, with its registered office at P.O. Box 1234, Valletta, VLT 1111, Malta. For any privacy-related enquiries, you may contact our Data Protection Officer at [email protected].

2. Personal Data We Collect

We collect personal data that you provide directly, data generated through your use of our Services, and data obtained from third-party sources where permitted by law. The categories of personal data we may process include:

2.1 Information You Provide

  • Full name, date of birth, gender, and nationality
  • Email address, telephone number, and residential address
  • Username, password, and account preferences
  • Identity verification documents (passport, national ID, driving licence)
  • Proof of address documents (utility bills, bank statements)
  • Payment information and transaction history
  • Communications with our customer support team

2.2 Information Collected Automatically

  • IP address, device type, operating system, and browser type
  • Log data including access times, pages viewed, and referring URLs
  • Gameplay activity, betting history, and session duration
  • Cookie identifiers and similar tracking technologies
  • Geolocation data derived from your IP address or device settings

2.3 Information from Third Parties

We may receive personal data from identity verification providers, payment processors, fraud prevention services, credit reference agencies, and publicly available sources to comply with legal obligations and maintain platform integrity.

3. Legal Basis for Processing

We process your personal data only where we have a valid legal basis under applicable law. Depending on the context, our legal bases include:

  • Contractual necessity — Processing required to create and manage your account, process transactions, and deliver the Services you have requested.
  • Legal obligation — Processing necessary to comply with anti-money laundering (AML), know-your-customer (KYC), tax, and gaming regulatory requirements.
  • Legitimate interests — Processing for fraud prevention, platform security, service improvement, and responsible gaming monitoring, balanced against your rights and freedoms.
  • Consent — Processing based on your explicit consent, such as for certain marketing communications or non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

  • Creating, verifying, and maintaining your player account
  • Processing deposits, withdrawals, and other financial transactions
  • Providing customer support and responding to your enquiries
  • Verifying your identity and age to prevent underage gambling
  • Detecting, investigating, and preventing fraud, money laundering, and other illegal activities
  • Enforcing our terms of service and responsible gaming policies
  • Personalising your experience and recommending relevant content
  • Sending service-related notifications, security alerts, and account updates
  • Conducting analytics to improve our platform, games, and user experience
  • Complying with legal, regulatory, and licensing obligations
  • Marketing our products and services, where permitted by law and subject to your preferences

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without providing you with meaningful information about the logic involved and the right to request human intervention.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance functionality, analyse traffic, and deliver personalised content. Cookies are small text files stored on your device when you visit our platform.

We use the following categories of cookies:

  • Strictly necessary cookies — Required for core site functionality, such as session management and security. These cannot be disabled.
  • Performance cookies — Collect anonymous usage data to help us understand how visitors interact with our platform and identify areas for improvement.
  • Functional cookies — Remember your preferences, such as language settings and login details, to provide a more tailored experience.
  • Marketing cookies — Used to deliver relevant advertisements and measure campaign effectiveness. These are placed only with your consent.

You can manage cookie preferences through your browser settings or our cookie consent tool. Please note that disabling certain cookies may affect the functionality of our Services.

6. Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information with the following categories of recipients where necessary and proportionate:

  • Payment service providers and financial institutions to process transactions
  • Identity verification and fraud prevention agencies
  • Game software providers and platform infrastructure partners
  • Customer support and IT service providers acting on our behalf
  • Regulatory authorities, law enforcement agencies, and courts when required by law
  • Professional advisers, including lawyers, auditors, and consultants
  • Affiliated companies within our corporate group for internal administrative purposes

All third-party processors are bound by contractual obligations to protect your data and process it only in accordance with our instructions and applicable law. Where data is transferred outside the European Economic Area (EEA) or the United Kingdom, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements. Retention periods vary depending on the type of data and the purpose of processing:

  • Account and identity verification data — retained for the duration of your account plus a minimum of five (5) years after account closure, as required by AML regulations.
  • Transaction records — retained for a minimum of five (5) years from the date of the transaction.
  • Customer support correspondence — retained for up to three (3) years from the date of resolution.
  • Marketing preferences — retained until you withdraw consent or object to processing.
  • Server logs and analytics data — typically retained for up to twelve (12) months.

When personal data is no longer required, we securely delete or anonymise it so that it can no longer be associated with you.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, destruction, and loss. These measures include:

  • SSL/TLS encryption for data transmitted between your device and our servers
  • Encryption of sensitive data at rest on our systems
  • Multi-factor authentication and role-based access controls for internal systems
  • Regular security assessments, penetration testing, and vulnerability monitoring
  • Employee training on data protection and information security practices
  • Incident response procedures to detect and address data breaches promptly

While we take every reasonable precaution to safeguard your information, no method of electronic transmission or storage is completely secure. We encourage you to use a strong, unique password for your account and to notify us immediately if you suspect unauthorised access.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Right of access — Request a copy of the personal data we hold about you.
  • Right to rectification — Request correction of inaccurate or incomplete data.
  • Right to erasure — Request deletion of your data where there is no compelling reason for continued processing.
  • Right to restriction — Request that we limit the processing of your data in certain circumstances.
  • Right to data portability — Receive your data in a structured, commonly used, machine-readable format.
  • Right to object — Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent — Withdraw consent at any time where processing is based on consent.
  • Right to lodge a complaint — File a complaint with a supervisory authority in your country of residence.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty (30) days, or within the timeframe required by applicable law. We may need to verify your identity before processing certain requests.

10. Marketing Communications

With your consent, we may send you promotional emails, SMS messages, or push notifications about bonuses, new games, and special offers. You can opt out of marketing communications at any time by clicking the unsubscribe link in any promotional email, adjusting your notification preferences in your account settings, or contacting us at [email protected].

Please note that even if you opt out of marketing, we may still send you essential service-related communications, such as account verification notices, security alerts, and changes to our terms or policies.

11. Children's Privacy

Our Services are strictly intended for individuals aged eighteen (18) years or older, or the minimum legal gambling age in your jurisdiction, whichever is higher. We do not knowingly collect personal data from minors. If we become aware that a person under the legal age has registered an account or provided personal data, we will take immediate steps to close the account and delete all associated information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by posting the updated Policy on our website with a revised "Last Updated" date and, where appropriate, by sending a notification to your registered email address. We encourage you to review this Policy periodically to stay informed about how we protect your data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Iker Casillas Casino — Data Protection Officer
Email: [email protected]
Address: P.O. Box 1234, Valletta, VLT 1111, Malta

We are committed to resolving privacy-related concerns promptly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner in Malta or the relevant supervisory authority in your country of residence.