Our Privacy Policy in Full

This policy explains what personal data we collect when you play at Supercat Casino, why we hold it, who sees it and how long we keep it. We run the site supercatcasino.org.uk, and this document applies to every visitor and registered player.

Data We Collect From You

We collect only the data we need to run your account, meet our licence obligations and keep the site secure. That breaks down into six categories.

• Identity data: your full name, date of birth, email address, phone number and residential address.
• Verification documents: a passport, driving licence or national ID, plus proof of address and proof of payment method, submitted during KYC.
• Transaction data: deposits, withdrawals, bonuses claimed, wagering history and payment method details.
• Technical data: IP address, device type, browser language and approximate location derived from your IP.
• Gameplay behaviour: the games you open, session length, bet sizes and outcomes.
• Marketing preferences: which channels you opted into, when you consented and how you withdrew consent.

How We Use Your Data

We process your data for seven defined purposes, each tied to a lawful basis described in the next section. No purpose exists beyond these seven.

• Creating and managing your player account.
• Verifying your identity and age before your first withdrawal, as required by our Curaçao licence.
• Processing deposits and withdrawals, including BTC and USDT transactions.
• Preventing fraud, bonus abuse and multi-accounting.
• Monitoring play for responsible-gambling indicators, such as sudden loss spikes.
• Sending marketing messages where you have consented.
• Meeting legal, tax and regulatory reporting obligations.

Our Legal Bases

Contract. When you register and play, we process your data to perform our agreement with you. Account setup, deposits, withdrawals and gameplay records all sit under this basis, and we could not operate your account without it.

Legal obligation. Gambling regulation requires us to verify your identity, keep transaction records for at least five years and report suspicious activity. We process your documents and financial history because the law leaves us no choice.

Legitimate interest. We use technical and behavioural data to detect fraud, secure the platform and understand how the site performs. We weigh that interest against your rights and keep the data minimal for the purpose.

Consent. Marketing emails, SMS and personalised bonus offers run only on your explicit opt-in. You may withdraw consent at any time, and we stop those messages immediately.

How Long We Keep It

We hold each category only as long as the purpose requires. Gambling law obliges us to retain transaction and verification records for five years after your last activity, so we cannot delete those earlier on request.

• Account and identity data: for the life of your account, then five years after closure.
• Verification documents: five years after your last transaction, per regulatory requirements.
• Transaction and gameplay records: a minimum of five years.
• Marketing preferences: until you withdraw consent or ask us to delete them.
• Technical logs: up to 12 months for security analysis.
• KYC and AML files: five years, extended where an investigation is open.

Who We Share Data With

We never sell your data. We share it only with processors and authorities who need it for a specific function, under written data-processing agreements.

• Payment processors handling Visa, Mastercard, Skrill, Neteller, Trustly and crypto transactions.
• KYC and AML verification providers who check your documents against sanctioned and PEP lists.
• The Curaçao regulator and, where relevant, financial-intelligence and tax authorities.
• Game and platform providers hosting your gameplay sessions, receiving only a player ID rather than your identity.
• Analytics and email-delivery providers working on our instructions.
• Professional advisers such as auditors and lawyers, bound by confidentiality.

Your Rights Over Your Data

You control your data, and we answer every request within one month, extendable by two months for complex cases. Requests are free of charge, though we may refuse clearly excessive or repeated ones.

If you believe we have mishandled your data, you may complain to the Information Commissioner's Office at ico.org.uk or to the supervisory authority in your EU member state.

• Access: get a copy of the personal data we hold about you.
• Rectification: correct inaccurate details, such as a misspelt name or old address.
• Erasure: ask us to delete data we no longer need, subject to the five-year retention rule.
• Portability: receive your account and transaction data in a machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: stop marketing at any time via account settings or the unsubscribe link.
• Complain: escalate to the ICO or your national data protection authority.

Cookies and Tracking

We use strictly necessary cookies to keep you logged in and secure your session, plus optional analytics and marketing cookies that load only after you accept them in the consent banner. Full details, including how to change your choices, are on our Cookies Policy page.

How We Protect Your Data

All traffic between your device and our servers runs over TLS encryption. Stored verification documents sit encrypted on isolated systems, and only trained staff with a documented business need can reach them, with every access logged.

If a personal-data breach occurs, we notify the relevant supervisory authority within 72 hours and inform you directly where the risk to you is high. Our support team is available 24/7 at [email protected] if you notice anything unusual on your account.

Contact Our Data Officer

Our Data Protection Officer handles every privacy query, data-subject request and complaint. Write to [email protected] and include your registered email so we can verify your identity, or post to Supercat N.V., Curaçao. We update this policy whenever our processing changes, and the revision date always appears at the top of the page.

Frequently asked questions

Can I play without sharing my ID documents?

You can register and deposit with basic details, but our Curaçao licence requires us to verify your identity before your first withdrawal. We ask for an ID document, proof of address and payment method verification at that stage.

Why can't you delete everything when I close my account?

Gambling regulations oblige us to keep transaction, verification and gameplay records for at least five years after your last activity. Marketing preferences and consent records, however, are deleted or anonymised once you withdraw consent.

How do I stop marketing messages?

Use the unsubscribe link in any email, change your preferences in account settings, or email [email protected]. Withdrawal of consent takes effect immediately for future messages.

Do you use my gameplay data for anything besides my account?

We analyse gameplay behaviour to spot fraud and responsible-gambling risk, and in aggregate, anonymised form to improve the site. We never sell it or use it for purposes outside those listed in this policy.