How We Handle Your Personal Data
This Privacy Policy explains what personal information we collect when you play at Levelup Casino, why we collect it, who we share it with and the rights you have over it. It applies to every visit to our website and every account held with us.
Data We Collect About You
Categories of personal data
We collect only what we need to run your account, meet our licence obligations and keep the platform safe. That covers six broad categories, from basic identity details to how you interact with our games.
- Identity data: full name, date of birth, email address, phone number and residential address
- Verification documents: passport or ID scan, proof of address and proof of payment method, collected as part of KYC before your first withdrawal
- Transaction data: deposits, withdrawals, bonuses claimed, wagering history and payment method details
- Technical data: IP address, device type, browser, operating system and approximate location derived from your IP
- Gameplay behaviour: games played, session times, bet sizes, win/loss records and tournament entries
- Marketing preferences: which channels you opted into, communication history and consent records
Why We Process Your Data
Every use of your data maps to a specific purpose. We do not process your information for anything outside these purposes.
Account management comes first: creating your account, verifying you are of legal age and running the VIP programme that tracks your comp points. Payment processing covers your deposits through PayID, cards, e-wallets and crypto, plus withdrawals to Visa, Mastercard, Skrill, bank transfer or cryptocurrency wallets.
- Creating and managing your player account
- Verifying your identity under KYC and AML rules before your first withdrawal
- Processing deposits, withdrawals and bonus wagering
- Preventing fraud, bonus abuse and multi-accounting
- Monitoring for responsible-gambling signals, such as sudden loss-pattern changes
- Sending marketing offers when you have consented
- Meeting legal and regulatory obligations tied to our Curaçao licence
Our Legal Bases
Contract. Processing your identity and transaction data is necessary to perform the agreement you enter when you register. Without it we cannot open an account, process payments or pay out winnings.
Legal obligation. Curaçao gambling law and anti-money-laundering rules require us to verify your identity, retain transaction records and report suspicious activity. These processes are not optional for either side.
Legitimate interest. We rely on legitimate interest for fraud prevention, security monitoring, resolving disputes and aggregate analytics that keep the platform functioning. This interest never overrides your fundamental rights.
Consent. Marketing emails, SMS and personalised offers run only on your opt-in. You withdraw consent at any time via account settings or the unsubscribe link in every message we send.
How Long We Keep Records
Retention depends on why we hold the data. Regulatory rules set minimum periods for financial and verification records, while data used purely for marketing has a shorter clock.
| Data category | Retention period |
|---|---|
| Identity data (active account) | For the life of your account |
| KYC verification documents | 5 years after account closure |
| Transaction and wagering records | 5 years minimum, per AML requirements |
| Account closure data | Up to 5 years, then deleted or anonymised |
| Marketing consent and preferences | Until you withdraw consent, then deleted |
| Technical logs (IP, device) | 12 months, then automatically purged |
Who We Share Data With
We never sell your personal data. Sharing is limited to providers who need it to deliver a service, and each one is bound by a data-processing agreement that limits their use of your information.
Payment processors receive only the details needed to move your funds. KYC and AML screening providers verify your documents. Game providers receive your player ID and gameplay results so your session synchronises with their servers. Regulators receive reports when the law demands it. Analytics providers receive pseudonymised data that cannot identify you directly.
- Payment processors handling deposits and withdrawals
- KYC and AML verification services
- Game and platform providers delivering your session data
- Regulators and licensing authorities, on lawful request
- Analytics and marketing tools, on a pseudonymised basis
- IT security and hosting providers under strict data agreements
Your Rights Over Your Data
You control your personal information, and we respond to every request within 30 days. Where EU privacy law applies to you, GDPR-level rights apply. Contact us at [email protected] or reach our data protection officer to exercise any of the following.
- Access: get a copy of the personal data we hold about you
- Rectification: correct inaccurate or incomplete records
- Erasure: request deletion where no legal retention duty applies
- Portability: receive your data in a machine-readable format
- Objection: object to processing based on legitimate interest
- Withdraw consent: stop marketing at any time, effective immediately
- Complain: escalate to your national data protection authority
Cookies and Tracking
Our site uses cookies to keep you logged in, remember your game preferences and measure how pages perform. Session cookies are essential and need no consent; analytics and marketing cookies are set only after you accept them in the cookie banner. Manage or withdraw your cookie choices at any time on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers runs over TLS encryption. Stored data sits encrypted at rest on access-controlled infrastructure, and staff access follows a least-privilege model with audit logging. Payment card details are never stored on our servers; they stay with the payment processors.
If a data breach affects your personal information, we notify the relevant regulator within 72 hours and inform affected players directly where the risk to you is high. Our support team is reachable 24/7 through live chat and email at [email protected], and you can contact our data protection officer at [email protected] with any privacy concern. This policy was last updated in 2026.
Frequently asked questions
Does Levelup Casino sell my personal data?
No. We share data only with service providers such as payment processors and KYC services, each bound by strict data-processing agreements. We never sell your information to third parties.
How long do you keep my verification documents?
KYC documents are retained for 5 years after your account closes, as required by anti-money-laundering rules. After that period they are securely deleted.
Can I stop marketing emails?
Yes. Use the unsubscribe link in any message or change your preferences in account settings. Withdrawal of consent is effective immediately, though transactional emails about your account continue because they are necessary.
How do I request a copy of my data?
Email [email protected] or our DPO at [email protected]. We provide your data in a portable format within 30 days of a verified request.