Personal information protection and data processing procedures for casino services.

Privacy Policy

This Privacy Policy describes the procedures for collecting, using, storing, sharing, and protecting personal information when accessing or using casino and betting services in South Africa. Use of the services constitutes agreement to the terms set out in this policy.

1. Legal Framework and Compliance

Personal information is processed in accordance with the Protection of Personal Information Act No. 4 of 2013 (POPIA). Data processing is further conducted under applicable gambling regulations, including requirements from the National Gambling Board and relevant provincial gambling authorities, with particular attention to anti-money-laundering (AML) measures and prevention of underage gambling.

2. Information Collected

2.1. Personal Data

Types of personal information collected:

Identity data: full name, date of birth, identity or passport number
Contact data: email address, phone number, postal address, city, province, postal code
Demographic data: preferences, interests, survey responses
Financial data: payment card details, bank account numbers, transaction records
Technical data: IP address, browser type, device data, operating system
Usage data: betting history, account activity, site interaction

2.2. Purpose of Collection

Personal data is collected and processed for the following:

Account registration and management
Identity verification and compliance with Know Your Customer (KYC) requirements
Processing deposits, withdrawals, and other transactions
Compliance with anti-money-laundering and fraud detection obligations
Record maintenance and service improvement
Compliance with legal and regulatory obligations
Prevention and detection of underage gambling
Transmission of service-related communications
Market research and analytics
Direct marketing communications (with prior consent)

3. Use of Information

Collected personal information may be used for:

Identity and age verification prior to granting access to services
Payment processing and maintenance of accurate financial records
Responding to regulatory authority requests, including from the National Gambling Board and provincial gambling boards
Investigation of suspected fraud, money laundering, or other illegal activity
Compliance with legal obligations and court orders
Securing user accounts and detecting unauthorised access
Improving services based on user activity and feedback

4.1. Categories of Recipients

Personal data may be shared with:

Regulatory authorities: National Gambling Board, provincial gambling boards (e.g., Gauteng Gambling Board), South African Revenue Service (SARS)
Payment service providers: banks, payment processors, card issuers
Identity verification and fraud detection providers
Third-party service providers: hosting, IT support, customer service platforms
Legal and professional advisors: auditors, lawyers, consultants
Law enforcement agencies: as required by law or court order

4.2. Legal and Regulatory Disclosure

Disclosure of personal data, including betting history and account information, occurs in the following instances:

Required by law or regulation
Upon request by regulatory authority decision
In the case of suspected underage gambling
In the case of suspected money laundering, fraud, or criminal activity
To comply with licensing conditions

Personal information is not sold, distributed, or leased to third parties for commercial purposes except with explicit user permission or where legally required.

5. Data Security

Physical, electronic, and managerial measures are used to protect personal information from unauthorised access, disclosure, alteration, or destruction. Security safeguards include:

SSL encryption for data transmitted between devices and servers
Access controls restricting personnel access to personal data
Periodic security audits and vulnerability assessments
Incident response protocols in the event of suspected data breaches

In the event of suspected account compromise, an investigation will be initiated. Notification to the user and relevant authorities will occur as required by law. Users should contact support immediately if unauthorised access is suspected.

6. Data Retention

Personal information is retained only for as long as necessary to fulfill the purposes outlined and comply with legal and regulatory requirements. Retention periods depend on the type of data and applicable laws, including:

Account and transaction records: retained in accordance with gambling and financial regulations
Identity verification documents: retained for the duration of the account relationship and any statutory retention period
Marketing communications data: retained until consent is withdrawn or deletion is requested

7. User Rights Under POPIA

Under POPIA, users have rights regarding personal data:

Right of access: request details of personal information held
Right to correction: request correction of inaccurate or incomplete data
Right to object: object to data processing for direct marketing
Right to restriction: request restriction of certain processing activities
Right to lodge a complaint: submit a complaint to the Information Regulator for non-compliance with POPIA

To exercise these rights, contact must be made using the information provided in section 10. Proof of identity may be required. Access requests may be subject to an administrative fee where permitted.

8. Marketing Communications

With user consent, contact data may be used for promotional emails, SMS, or other communications about products, offers, or related information. Consent may be withdrawn at any time by:

Using the unsubscribe link in marketing communications
Contacting support to adjust preferences
Changing communication settings in the account

Requests to opt-out will be processed promptly and in accordance with legal timeframes.

9. Changes to the Policy

This Privacy Policy may be updated periodically to reflect changes in practices, legal obligations, or regulatory guidance. Updated versions will be published on the website, with revised effective dates. Continued use of services after publication of changes constitutes acceptance of the updated policy.

10. Contact Information

For questions regarding this Privacy Policy, to exercise data protection rights, or to update marketing preferences, contact details are available in the Contact section of the website.

This Privacy Policy is effective from the date of publication and applies to all personal information processed in connection with casino and betting services in South Africa.