Welcome to the Cazeus Casino privacy policy — your complete guide to understanding exactly how we handle, protect and respect your personal data in 2026. As a UK-regulated online casino, Cazeus Casino data protection is built on transparency, security and full compliance with UK GDPR and the Data Protection Act 2018. This policy is written in plain English so you can understand your rights and how your information is used without needing a legal dictionary.
📋 Table of Contents
- 🔐 What Personal Data We Collect
- 💾 How Your Data is Stored and Secured
- 🤝 Who We Share Your Data With
- 🛡️ Your Rights Under UK GDPR
- 📱 Cookies and Third-Party Analytics
- 🎮 Responsible Gambling and Data Usage
- ✉️ How to Submit a Data Subject Request
- ❓ Frequently Asked Questions About Your Data
🔐 What Personal Data Does Cazeus Casino Collect?
When you register and play at Cazeus Casino in 2026, we collect information at various touchpoints. Understanding what we gather helps you control your digital footprint and stay informed about your privacy.
Data Collected During Registration
To create your Cazeus Casino account, we require:
- Identity Information: Full name, date of birth, nationality
- Contact Details: Email address, phone number, residential address
- Account Verification: Government-issued ID, proof of address (driving licence, passport, utility bill)
- Payment Details: Bank account or payment card information (encrypted and tokenised)
- Account Preferences: Username, password, preferred language, currency
This data is mandatory under UK Gambling Commission (UKGC) licensing requirements to verify your identity and prevent fraud, money laundering and underage gambling.
Data Collected During Gameplay
As you play, Cazeus Casino player data includes:
- Betting History: Game selections, bet amounts, win/loss records, session duration
- Account Activity: Login timestamps, IP addresses, device types, browser information
- Payment Transactions: Deposits, withdrawals, bonus claims, payment method used
- Behavioural Metrics: Frequency of play, preferred game categories, time spent per session
- Communication Data: Support tickets, live chat messages, promotional preferences
Data Collected Automatically
Our systems automatically log:
- Your IP address and location (to enforce UK market restrictions)
- Device information: operating system, browser type, screen resolution
- Cookies and tracking pixels (see Cookies and Analytics section)
- Account security events: login attempts, password changes, two-factor authentication usage
| Data Category | Collection Point | Legal Basis | Retention Period |
|---|---|---|---|
| Identity & verification docs | Registration & KYC verification | UKGC compliance, fraud prevention | 7 years (regulatory requirement) |
| Payment & financial records | Deposits, withdrawals, bonuses | Money laundering regulations (AML) | 7 years (HMRC requirement) |
| Gameplay & betting logs | In-game activity | Contract performance, responsible gambling | 5 years or account closure + 1 year |
| Device & IP logs | Automatic system collection | Account security, fraud detection | 1 year |
| Communications | Support tickets, chat, email | Contract performance, dispute resolution | 3 years |
💾 How Your Data is Stored and Secured
At Cazeus Casino, data protection is not just a legal checkbox—it's fundamental to our operations in 2026. We employ enterprise-grade security measures to keep your information safe from unauthorised access, theft and misuse.
Security Infrastructure
- Encryption: All data in transit uses TLS 1.3 encryption (HTTPS). Sensitive data at rest is encrypted using AES-256 standard.
- Secure Data Centres: Your information is stored on ISO 27001-certified servers in the UK and EU, with redundancy and disaster recovery protocols.
- Access Controls: Only authorised personnel with documented need-to-know can access personal data. Staff undergo annual data protection training.
- Firewalls & Intrusion Detection: Multi-layered firewalls, DDoS protection and 24/7 network monitoring prevent unauthorised access.
- Payment Card Security: All card data is handled via PCI-DSS Level 1 compliant processors. We never store full card numbers on our servers.
- Two-Factor Authentication (2FA): Players can enable 2FA on their accounts for additional login security.
Data Minimisation & Retention
We follow the GDPR principle of data minimisation: we collect only what's necessary and retain it only as long as required. Once data serves its purpose, we securely delete or anonymise it. For example:
- Gameplay logs older than 5 years are automatically purged (unless a dispute is pending)
- Device and IP logs are retained for 1 year only—old entries are deleted weekly
- Email communications unrelated to account management are deleted after 3 years
🤝 Who We Share Your Data With
Your Cazeus Casino data is shared only when legally required or necessary to provide our service. We never sell your data to third parties for marketing purposes.
Required Sharing Under UK Regulations
- UK Gambling Commission (UKGC): As a licensed operator, we provide regulatory reports including player data for compliance audits.
- Financial Intelligence Unit (FIU): Suspicious transactions and money laundering reports are shared with the National Crime Agency (NCA) under AML obligations.
- Law Enforcement: Police and courts may request player data via legal warrant or court order.
- Fraud Prevention Agencies: Data is shared with credit reference agencies (Experian, Equifax) and fraud prevention networks (Cifas) to detect fraud.
- GamStop Database: If you self-exclude at Cazeus Casino, your details are shared with the GamStop self-exclusion scheme to enforce multi-operator blocking.
Service Providers & Partners
We share limited data with trusted vendors who assist us:
- Payment Processors: Stripe, PayPal, Skrill—receive only payment data necessary to process transactions
- KYC/AML Providers: Third-party verification companies (IDology, Jumio) verify identity and address documents
- Email & SMS Providers: SendGrid, Twilio deliver promotional and account notifications (you can opt-out anytime)
- Analytics Services: Google Analytics, Mixpanel process anonymised gameplay data to improve user experience
- Customer Support Tools: Zendesk, Intercom host support conversations and tickets
- Game Providers: Software vendors (Pragmatic Play, NetEnt, Playtech) receive only aggregate play data—never personal identity information
All third-party processors are bound by Data Processing Agreements (DPAs) under GDPR Article 28, ensuring they handle your data securely and only as instructed.
| Recipient | Data Shared | Purpose | Legal Basis |
|---|---|---|---|
| UK Gambling Commission | Full player record, transaction history | Regulatory compliance & licensing | Legal obligation |
| Fraud prevention networks | Name, DOB, address, ID document | Fraud & money laundering detection | Legal obligation (AML Act 2010) |
| Payment processors | Name, account number, transaction amount | Process deposits & withdrawals | Contract performance |
| Analytics providers | Anonymised gameplay metrics (no ID) | Improve website experience | Legitimate interest |
| GamStop scheme | Name, email, self-exclusion date | Enforce self-exclusion commitment | Consent + legal obligation |
| Game software providers | Aggregate play data only (anonymised) | Technical support, game integrity | Legitimate interest |
🛡️ Your Rights Under UK GDPR in 2026
Under the UK General Data Protection Regulation (GDPR) and Data Protection Act 2018, you have powerful rights over your personal data. Cazeus Casino respects and facilitates all of these rights at no cost.
Right to Access (Subject Access Request)
You can request a copy of all personal data Cazeus Casino holds about you. This includes:
- Identity and verification documents on file
- Complete betting and transaction history
- All communications with support
- Device logs and IP address records
- Automated decision-making profiles (including responsible gambling assessments)
We must provide this within 30 days of your request. Contact our data team to submit a Data Subject Access Request (DSAR).
Right to Rectification (Correction)
If your personal data is inaccurate or incomplete, you can request correction. For example:
- Name spelling errors
- Outdated address or contact information
- Incorrect date of birth
Update most details directly in your account settings. For complex corrections, contact support.
Right to Erasure ('Right to Be Forgotten')
You can request deletion of your personal data if:
- The data is no longer necessary for its original purpose
- You withdraw consent for data processing
- You object to processing and there's no overriding legal reason
- The data was collected unlawfully
Limitations: We cannot erase data required by UK Gambling Commission regulations (7-year AML records) or data needed to resolve disputes. However, we can anonymise it after the retention period expires.
Right to Data Portability
You can request your data in a structured, machine-readable format (CSV, JSON) so you can:
- Migrate your information to another casino
- Archive your own records
- Share data with third parties of your choice
We will provide this within 30 days at no charge.
Right to Restrict Processing
You can ask us to limit how we use your data while you verify its accuracy or lodge a complaint. Your data will be stored securely but not actively processed.
Right to Object
You can object to processing based on legitimate interests, including:
- Marketing emails and SMS promotions (opt-out anytime in account settings)
- Profiling for personalised game recommendations
- Analytics and behavioural tracking
Note: Objecting does not affect essential processing like account management or fraud prevention.
Rights Related to Automated Decision-Making
If we use automated systems to make decisions affecting you (e.g., account suspension due to suspected money laundering), you have the right to:
- Know that automated processing is occurring
- Request human review of the decision
- Appeal the decision with supporting evidence
📱 Cookies and Third-Party Analytics
Cazeus Casino uses cookies and similar technologies to enhance your experience, track site usage and prevent fraud.
Types of Cookies We Use
- Essential Cookies: Remember your login status, maintain session security, process transactions. These are mandatory—you cannot disable them.
- Functional Cookies: Remember your preferences (language, currency, theme), improve site navigation.
- Analytical Cookies: Google Analytics tracks page views, user flow, device type. Data is anonymised—we cannot identify individual players.
- Marketing Cookies: Track conversions from ad campaigns, retarget via Facebook/Google ads. You can opt-out in account settings.
Third-Party Analytics in 2026
We use Google Analytics 4 and Mixpanel to understand how players interact with our site. These services:
- Receive anonymised, aggregate data only (no personal identifiers)
- Cannot link analytics data to individual player accounts
- Store data separately from our player database
- Are bound by their own privacy policies (not controlled by Cazeus Casino)
Opt-Out: You can disable analytics tracking via Google Analytics opt-out extension or by requesting a tracking exemption.
Cookie Management
When you first visit Cazeus Casino, our cookie consent banner appears. You can:
- Accept all cookies
- Accept essential cookies only
- Customise which types you consent to
- Manage preferences anytime in your account settings
🎮 Responsible Gambling and Data Usage
Your Cazeus Casino data is used to support responsible gambling practices and player protection. Learn more about our responsible gambling tools.
How We Use Gameplay Data for Player Protection
- Spending Limits Enforcement: We monitor deposits against your set limits and block further spending if limits are exceeded.
- Session Time Alerts: If you play for extended periods, we may send reminders and offer session breaks.
- Loss Limit Tracking: We track net losses and can proactively offer self-exclusion if patterns suggest problem gambling.
- Underage Prevention: Age verification data is cross-checked before each login.
- Multi-Operator Blocking: Data is shared with GamStop to enforce self-exclusion across UK licensed operators.
Your Responsible Gambling Rights
- Set deposit, loss and session limits anytime
- Request a temporary self-exclusion (7 days to 6 months)
- Request permanent account closure
- Opt into GamStop multi-operator self-exclusion scheme
- Access gameplay history and spending reports
✉️ How to Submit a Data Subject Request
To exercise any of your GDPR rights, contact Cazeus Casino's data protection team:
Contact Methods
- Email: [email protected]
- Online Support: Live chat via contact page
- Post: Data Protection Officer, Cazeus Casino, UK address
What to Include in Your Request
- Your full name and registered email
- Your account username or player ID
- Specific type of request (access, deletion, portability, correction)
- Any supporting documents (proof of identity if verifying from a different address)
Our Commitment
- 30-day response time: We will respond within 30 days of receiving a valid request
- No charge: Subject access requests are free (additional copies may incur a small fee)
- Plain language: We explain any technical aspects clearly
- Verification: We verify your identity to prevent unauthorised data access
❓ Frequently Asked Questions About Cazeus Casino Data Protection
How long do you keep my data after I close my account?
This depends on the data type and applicable regulations:
- Identity & payment records: 7 years (UK Gambling Commission & AML requirements)
- Gameplay logs: 5 years or until dispute resolution, then deleted
- Account communications: 3 years
- Device logs & IP addresses: 1 year
After retention periods expire, we securely delete or permanently anonymise the data.
Do you share my data with other casinos?
No, we do not share your personal data with competing casinos. We only share data:
- With GamStop (if you request multi-operator self-exclusion)
- With fraud prevention networks and law enforcement (if required)
- With regulatory authorities (UKGC) as legally mandated
Game providers receive only anonymised gameplay metrics, not your identity.
What happens if there's a data breach?
In the unlikely event of a security incident, we will:
- Notify affected players within 72 hours (UK GDPR requirement)
- Explain what data was compromised
- Advise on protective steps (password reset, credit monitoring)
- Notify the Information Commissioner's Office (ICO) if risk is high
We maintain cyber insurance and conduct annual penetration testing to prevent breaches.
Can I opt-out of all data processing?
No—some processing is mandatory to provide the service legally. However, you can opt-out of:
- ✅ Marketing emails and promotional SMS
- ✅ Analytics and behavioural tracking
- ✅ Personalised game recommendations
- ✅ Retargeting ads on other websites
Essential data processing (account management, fraud prevention, regulatory compliance) cannot be disabled.
Who is the Data Protection Officer (DPO) at Cazeus Casino?
Our appointed Data Protection Officer oversees all compliance matters. Contact the DPO directly for privacy concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk
How do I know Cazeus Casino actually follows this policy?
We are audited annually by independent assessors and comply with:
- UK GDPR (Data Protection Act 2018)
- UK Gambling Commission licensing requirements
- PCI-DSS (payment card security)
- ISO 27001 (information security management)
Audit reports are available to regulators. Players can verify our license status on the UKGC register.
What happens to my data if Cazeus Casino is sold or goes out of business?
Any transfer of data to a successor company must:
- Be approved by the UKGC
- Maintain the same GDPR protections
- Notify affected players (you can object to transfer)
If we cease operations, player data is securely destroyed per regulatory timelines.
Is my data transferred outside the UK?
Our primary data storage is in the UK and EU, which have UK GDPR-approved adequacy. Some third-party processors (payment firms, analytics) may process data in other countries. When transfers occur:
- We use Standard Contractual Clauses (SCCs) under GDPR Article 46
- Recipient countries must have adequate data protection laws, or
- Additional safeguards are implemented (encryption, restricted access)
📌 Changes to This Privacy Policy
We may update this policy to reflect changes in data protection law or our operations. You will be notified of material changes via:
- Email notification to your registered address
- Prominent notice on our website
- New version published with effective date
Your continued use of Cazeus Casino after changes constitute acceptance of the updated policy.
Last Updated: January 2026
Effective Date: January 1, 2026
🏆 Your Data, Your Control
At Cazeus Casino, we believe data protection is not just regulatory compliance—it's respect for your privacy and trust. We're committed to transparency, security and honouring every right you have under UK GDPR 2026.
Have questions about how your data is used? Contact our team anytime—we're here to help you understand and control your information.
