Our Privacy Policy

This policy explains what personal data we collect when you play at Aladdinsgold Casino, why we collect it, how long we keep it and the rights you hold over it. It applies to every visit to aladins-gold.uk and to every account you hold with us.

Data We Collect

We collect only the data we need to run your account, meet our licence obligations and keep the site secure. That breaks down into six categories:

  • Identity data: your name, date of birth, email address, phone number and residential address.
  • Verification documents: government-issued ID, proof of address from the last 3 months and proof of your payment method, collected during KYC before your first withdrawal.
  • Transaction data: deposits and withdrawals, amounts, currency, payment method and blockchain addresses if you use crypto.
  • Technical data: IP address, device identifiers, browser type, operating system and approximate location.
  • Gameplay behaviour: games played, bets placed, wins, losses, session times and bonus usage.
  • Marketing preferences: which promotions you opt into, your communication channels and your consent records.

How We Use Your Data

We use your data for seven purposes. We create and manage your account, verify your identity under KYC rules, and process your deposits and withdrawals, including the £20 minimum withdrawal and the £4,500 weekly withdrawal cap. We monitor transactions to prevent fraud and money laundering, and we track play patterns to identify potential problem gambling so we can offer deposit limits, session reminders or self-exclusion where needed.

We also send marketing about promotions such as the Monday 25% cashback and monthly slot tournaments, but only where you have consented, and we meet legal obligations set by our Curaçao licence, including tax and regulatory reporting.

Contract. We process your identity, account and transaction data because they are necessary to perform our agreement with you: opening your account, running your play and paying out your winnings.

Legal obligation. We process verification documents and transaction records to comply with anti-money-laundering law, KYC rules and the reporting duties attached to our Curaçao licence 8048/JAZ2020-013.

Legitimate interest. We rely on legitimate interest for fraud prevention, security monitoring and aggregate analytics of how the site performs, always balanced against your rights.

Consent. We send marketing messages and set non-essential cookies only with your consent, which you can withdraw at any time.

How Long We Keep It

Retention depends on the type of data. Where a regulator sets a minimum, we follow it; otherwise we keep data only as long as the purpose lasts.

  • Transaction and account records: at least 5 years after account closure, as required by AML regulations.
  • KYC verification documents: up to 5 years after your last transaction.
  • Identity and contact data: for the life of your account, then for the regulatory retention window.
  • Marketing preferences and consent logs: until you withdraw consent or delete your account.
  • Device, IP and log data: up to 12 months for security and analytics purposes.

Who We Share It With

We never sell your data. We share it only with partners who need it to deliver the service, each bound by data-processing agreements:

  • Payment processors handling your Visa Debit, Mastercard Debit, Trustly, PayPal, Skrill, Neteller, MiFinity, Jeton and crypto transactions.
  • KYC and AML verification providers who check your ID documents and address proofs.
  • Game and platform providers such as Pragmatic Play, Microgaming, NetEnt and Evolution, receiving only the data needed to run gameplay.
  • The Curaçao regulator and law-enforcement or tax authorities, where legally required.
  • Analytics and email-delivery providers working on our instructions.

Your Data Rights

You control your data. Whatever your location, we honour the full GDPR rights set:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: correct anything inaccurate or incomplete.
  • Erasure: ask us to delete data we no longer have grounds to keep.
  • Portability: receive your data in a machine-readable format.
  • Objection: object to processing based on legitimate interest.
  • Withdraw consent: stop marketing and non-essential cookies at any time.
  • Complain: raise a complaint with your national data protection authority.

Email [email protected] with any request. We respond within one month, and we may ask for ID to confirm you are the account holder before acting.

Cookies and Tracking

We use essential cookies to keep you logged in and secure the site, analytics cookies to understand usage, and marketing cookies to measure promotion performance. Non-essential cookies are set only after you accept them in the cookie banner, and you can change your choices at any time. Full details, including how to block or delete cookies by browser, are on our Cookies Policy page.

Security We Apply

All traffic between your device and our servers is encrypted with TLS. Verification documents sit in access-controlled storage, and staff access to personal data is limited by role and logged. We run regular security reviews of our payment and account systems.

If a personal-data breach occurs that risks your rights, we notify the relevant supervisory authority within 72 hours and inform affected players directly where the risk is high.

Contact Our DPO

Our data protection officer answers privacy questions, data-subject requests and complaints. Email [email protected] or write to Aladdins Gold N.V., Data Protection Office, and we will reply within one month. If you are unhappy with our response, you may escalate to your national data protection authority at any time.

Frequently Asked Questions

Do you share my data with advertisers?

No. We never sell or rent your personal data. Marketing partners act on our instructions under strict data-processing agreements, and only where you have consented.

How long do you keep my verification documents?

KYC documents such as your ID and proof of address are kept for up to 5 years after your last transaction, as required by anti-money-laundering regulations.

Can I get my deposits and gameplay history deleted?

You can request erasure, but transaction and account records must be retained for at least 5 years after account closure to meet regulatory obligations. We delete everything else that has no legal basis for retention.

How do I stop marketing emails?

Use the unsubscribe link in any email, adjust your preferences in your account settings, or contact [email protected]. Consent withdrawal takes effect immediately.