Privacy Policy at Stacked Casino
This policy sets out what personal information we collect when you play at Stacked Casino, why we collect it, who we share it with, and the rights you hold over your data. We operate under licence 8048/JAZ2023-064 from the Curaçao Gaming Control Board and apply GDPR-grade standards to every player, including our Australian community.
What Data We Collect
We collect only the information needed to run your account, verify your identity, process payments and meet our regulatory obligations. Every category below ties back to a specific purpose described in the next section.
- Identity data: full name, date of birth, email address, phone number and residential address.
- Verification documents: ID, proof of address and payment method evidence gathered during KYC checks before your first withdrawal.
- Transaction data: deposits and withdrawals, amounts in AUD or your chosen currency, payment method identifiers and wallet addresses.
- Technical data: IP address, device type, browser, operating system and approximate location derived from your IP.
- Gameplay behaviour: games played, bet sizes, session duration, bonus usage and tournament participation.
- Marketing preferences: whether you opted in to promotions such as our weekly 10% cashback or weekend reload offers, and which channels you chose.
How We Use Your Data
Your data powers the day-to-day operation of your account. We use it to create and maintain your player profile, verify your identity under KYC rules, process deposits and withdrawals across Visa, Mastercard, MiFinity, Jeton, Skrill, bank transfer and crypto options, and settle winnings up to 8,000 AUD per day.
We also rely on your data for fraud prevention and responsible-gambling monitoring. Unusual betting patterns, chargeback risks and signs of problematic play are flagged internally so our team can act, including enforcing deposit limits, loss limits and self-exclusion where you have requested them.
With your consent, we send marketing about bonuses, slot tournaments and Drops & Wins promotions. You can withdraw that consent at any time from your account settings or by emailing us.
Our Legal Bases
Contract. Processing your data is necessary to perform our agreement with you: without identity and payment details we cannot open an account, settle bets or pay out withdrawals.
Legal obligation. Curaçao licensing law and anti-money-laundering rules require us to verify your identity, monitor transactions and retain records for set periods. We cannot waive these duties even at your request.
Legitimate interest. We use gameplay and device data to detect fraud, secure our platform and improve game performance. We balance this interest against your privacy rights and keep the data minimal.
Consent. Marketing emails, SMS and promotional notifications run only on your opt-in. You may withdraw consent at any time without affecting your account.
How Long We Keep Data
We retain each category of data only as long as the purpose requires. Transaction and KYC records are held for a minimum of 5 years after your last transaction, as our licence demands. After that, data is deleted or irreversibly anonymised.
| Data category | Retention period |
|---|---|
| Account and identity data | Life of the account, then 5 years |
| KYC verification documents | 5 years after account closure |
| Transaction records | Minimum 5 years (regulatory requirement) |
| Gameplay and betting history | 5 years for audit purposes |
| Marketing preferences | Until you withdraw consent or request deletion |
| Technical and log data | Up to 12 months |
Who We Share Data With
We never sell your personal data. Sharing is limited to service providers who need it to perform a function for us, all bound by confidentiality and data-protection terms.
Recipients fall into these categories: payment processors handling your deposits and withdrawals; KYC and AML verification providers checking your documents; game and platform suppliers delivering the 2,000 titles in our lobby; analytics providers measuring site performance; regulators and law-enforcement bodies when we are legally compelled to disclose; and IT security vendors protecting our infrastructure.
Your Privacy Rights
You control your data. Where Australian privacy law or the GDPR applies to you, you can exercise the rights below at any time by contacting our support team on 24/7 live chat or at [email protected]. We respond within 30 days.
If you believe we have mishandled your information, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or, if you are in the EU, with your local data protection authority.
- Access: request a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete details.
- Erasure: ask us to delete data where no legal retention duty applies.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing at any time, one click or one email.
- Complain: escalate to the OAIC or your national data protection authority.
Cookies and Tracking
We use essential cookies to keep you logged in and secure, plus optional analytics and marketing cookies set only with your consent through the banner shown on your first visit. Full details, including how to manage or delete cookies in your browser, are on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers travels over TLS encryption, and sensitive fields such as payment identifiers are encrypted at rest. Access to player data is role-based: only staff who need it for KYC, payments or support can view it, and every access is logged.
If a data breach occurs that risks your rights, we notify the relevant regulator within 72 hours and inform affected players without undue delay. If you spot a security concern, contact us straight away at [email protected] so our data protection officer can investigate.
Frequently asked questions
Can I play at Stacked Casino without sharing my ID?
You can register and deposit with basic details, but our licence requires ID, proof of address and payment verification before your first withdrawal. KYC review takes up to 48 hours.
How do I stop marketing emails from Stacked Casino?
Open your account settings and unsubscribe, use the link in any promotional email, or message our 24/7 live chat. Withdrawal of consent takes effect immediately.
Does Stacked Casino use my gameplay data for anything besides my account?
Gameplay data drives fraud detection, responsible-gambling monitoring and lobby improvements. We never sell it or use it to build external advertising profiles.
What happens to my data if I close my account?
Identity, verification and transaction records are kept for 5 years after closure to satisfy regulatory retention rules, then permanently deleted. Marketing data stops being processed immediately.
Who do I contact about a privacy question?
Email [email protected] for anything handled by our data protection officer, or use 24/7 live chat for faster account-related requests.