Your Privacy at Casea Casino
This policy sets out what personal data we collect when you play at casea-casino.co.uk, why we collect it, how long we keep it and the rights you have over it. We operate under licence MGA/B2C/394/2026 and treat GDPR compliance as a baseline, not an afterthought.
What Data We Collect
Categories of personal data
We only collect data we can justify under GDPR. The categories below cover everything our systems hold about you as a player at Casea Casino.
- Identity data: full name, date of birth, email address, telephone number, residential address.
- Verification documents: copies of your ID, proof of address and payment method evidence gathered during KYC checks.
- Transaction data: deposits, withdrawals, bonus activations, bet amounts and results, including crypto wallet addresses.
- Technical data: IP address, device identifiers, browser type, operating system and approximate location.
- Gameplay behaviour: games played, session times, stakes, win and loss history, loyalty points and VIP tier.
- Marketing preferences: which channels you consented to (email, SMS) and how you interact with our promotions.
- Communication records: live chat transcripts and email correspondence with our 24/7 support team.
How We Use Your Data
Purposes of processing
Every processing activity maps to a specific purpose. We do not use your data for anything outside this list without telling you first.
- Creating and managing your player account.
- Carrying out KYC verification before your first withdrawal, with processing completed within 48 hours.
- Processing deposits and withdrawals through Visa Debit, Mastercard Debit, Trustly, Skrill, Neteller, e-wallets and crypto.
- Preventing fraud, money laundering, bonus abuse and multiple-account creation.
- Monitoring gambling behaviour to detect harm and apply responsible-gambling measures such as session reminders and reality checks.
- Sending marketing messages where you have given consent.
- Meeting legal, regulatory and licensing obligations, including reporting to the Malta Gaming Authority.
Our Legal Bases
Contract. We process your identity and account data to open and maintain your player account and to honour bets and withdrawals. Without this data we cannot provide the gambling service you signed up for.
Legal obligation. Anti-money-laundering law and our MGA licence require us to verify your identity, retain transaction records for at least five years and report suspicious activity. You cannot opt out of processing required by law.
Legitimate interest. We rely on legitimate interest to secure our platform, prevent fraud, analyse aggregated gameplay patterns and improve our 12,508-game library. We weigh our interests against your rights and never use this basis for marketing.
Consent. Marketing emails, SMS and non-essential cookies run only on your consent. You can withdraw consent at any time via your account settings or by emailing [email protected], and withdrawal costs you nothing.
How Long We Keep It
Retention by data category
We keep each category of data only as long as the law or the purpose requires. Once the retention period expires, deletion is automatic.
| Data category | Retention period |
|---|---|
| Transaction and betting records | Minimum 5 years after account closure, as required by MGA and AML regulations |
| KYC verification documents | 5 years after the last transaction |
| Account and identity data | Duration of your account, then up to 5 years for regulatory records |
| Marketing preferences and consent logs | Until you withdraw consent, plus a short record of the withdrawal |
| Support chat transcripts | Up to 12 months for quality and dispute purposes |
| Technical and analytics data | Up to 24 months, then aggregated or deleted |
Who We Share Data With
Categories of recipients
We never sell your personal data. We share it only with recipients who need it to deliver our service, and each one is bound by a data processing agreement.
Payment processors handle your card, e-wallet and crypto transactions. KYC and AML providers verify your documents. Our platform and game providers, including Evolution, Pragmatic Play and NetEnt, receive the minimum data needed to operate gameplay. Analytics providers measure site performance in aggregate. Regulators, including the Malta Gaming Authority, receive reports where the law demands it, and GAMSTOP receives self-exclusion records when you register with it.
Your Rights Over Your Data
Exercising your rights
GDPR gives you enforceable rights over your data, and we honour every one of them. Email [email protected] and we respond within one month.
You can request a copy of everything we hold about you, ask us to correct inaccurate data, or ask us to erase data we no longer have a legal reason to keep. You can receive your account and transaction history in a portable format, object to processing based on legitimate interest, and withdraw marketing consent at any time. If you believe we have mishandled your data, you have the right to complain to your national data protection authority, including the Information Commissioner's Office in the United Kingdom.
Cookies and Tracking
We use strictly necessary cookies to keep you logged in and to run the platform, plus optional analytics and marketing cookies that load only after you consent through our cookie banner. You can change your cookie choices at any time from the banner link or your browser settings. The full breakdown of every cookie, its purpose and its lifespan sits on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers runs over TLS encryption, and payment data is handled exclusively by PCI DSS-certified processors, so card details never sit on our systems. Access to player data is restricted to trained staff on a need-to-know basis, with role-based permissions, audit logging and regular access reviews.
If a personal data breach ever affects your rights, we notify the relevant supervisory authority within 72 hours of becoming aware of it and inform you directly where the risk to you is high. Our incident response plan covers containment, assessment and remediation, and we test it annually.
Contact Our Data Team
Casea Casino, established in 2023 and operated by Casea Gaming Ltd (Malta), keeps a dedicated data protection contact for every question this policy raises. Write to [email protected] or send a letter to the registered address published in our website footer, and we will get back to you within one month. We may ask you to verify your identity before acting on a request, purely to protect your own data from anyone else claiming to be you.
Frequently asked questions
Can I play at Casea Casino anonymously?
No. MGA licensing and anti-money-laundering law require us to verify your identity, so we need your name, date of birth, address and ID documents before your first withdrawal.
How do I stop marketing emails?
Use the unsubscribe link in any email, adjust your preferences in your account settings, or email [email protected]. We stop marketing messages immediately after you withdraw consent.
Does Casea Casino keep my data forever?
No. Transaction and KYC records are kept for a minimum of 5 years after your last transaction because our licence demands it, then deleted. Marketing data goes when you withdraw consent.
Who can I complain to if I am unhappy?
Contact us first at [email protected]. If the issue is unresolved, you can complain to your national data protection authority, such as the Information Commissioner's Office in the UK.