Monoplay Casino Privacy Policy
This policy sets out what personal data we collect when you play at Monoplay Casino, why we hold it, who sees it, and the controls you have over it. Since we launched in 2020, we have treated data protection as part of our licence obligations, not an afterthought. Read it alongside our Cookies Policy, which covers tracking technologies in more detail.
Data We Collect
We only collect data we need to run your account, meet our regulatory duties under the Curaçao Gaming Control Board licence, and keep the platform safe. Everything below comes directly from what you enter, what our systems record, or what verification checks return.
- Identity data: full name, date of birth, email address, phone number, residential address, country of residence.
- Verification documents: passport or driver's licence scan, proof of address (utility bill or bank statement), and payment method confirmation, submitted during KYC.
- Transaction data: deposits, withdrawals, wagering records, bonuses claimed, and the payment instrument used (PayID reference, card BIN, crypto wallet address).
- Technical data: IP address, device type, operating system, browser, language preference, and approximate location derived from IP.
- Gameplay behaviour: games opened, session duration, bet sizes, win and loss history, and any responsible gambling limit settings on your account.
- Marketing preferences: which channels you opted into (email, SMS), and how you interact with our promotions.
How We Use Your Data
Each use below maps to a purpose we can point to in law or in our contract with you. We do not build shadow profiles or sell your data to advertisers.
- Creating and operating your account, including login, balance, and VIP tier calculations.
- Verifying your identity and age before your first withdrawal, as our KYC rules require.
- Processing deposits and withdrawals through the payment method you selected.
- Preventing fraud, bonus abuse, multi-accounting and payment chargebacks.
- Monitoring play against responsible gambling indicators and enforcing the deposit, loss and session limits you set.
- Sending you marketing messages where you have consented, such as our Monday reload or weekend free spins drops.
- Meeting legal and regulatory obligations, including anti money laundering reporting and tax or court orders.
Our Legal Bases Explained
Contract
When you register and accept our terms, you and we enter a contract. We process your identity, contact and transaction data because that processing is necessary to deliver the account and gaming service you signed up for. Without it, we cannot open an account or pay out winnings.
Legal obligation
Gambling law obliges us to verify your identity, monitor transactions for money laundering, and keep records for set periods. We cannot shorten these retention periods on request, because a statutory duty sits behind them.
Legitimate interest
Fraud prevention, security logging and aggregated service analytics rest on our legitimate interest in running a safe casino. This basis never covers marketing to you, and we weigh it against your rights before relying on it.
Consent
Marketing emails, SMS and non essential cookies run only on your consent. You can withdraw it at any time through your account settings or the unsubscribe link, and withdrawal takes effect immediately for future sends.
How Long We Keep Data
We hold each category only as long as its purpose requires, or as long as gambling regulation forces us to. Transaction and KYC records carry a five year minimum after account closure, so requests to delete them earlier hit a legal wall we cannot move.
| Data category | Retention period |
|---|---|
| Identity and account data | Life of the account, then 5 years after closure |
| KYC verification documents | 5 years after account closure |
| Transaction and wagering records | 5 years after account closure, per AML rules |
| Device and IP logs | 12 months |
| Marketing preferences | Until you withdraw consent or opt out |
| Self exclusion records | 5 years, to enforce the exclusion period |
Who We Share Data With
We share the minimum each category of recipient needs, under written agreements that bind them to equivalent protection standards. We never sell your personal data.
- Payment processors handling your deposits and withdrawals, such as card acquirers, e wallet operators and crypto gateways.
- KYC and AML verification providers that check your documents and screen transactions.
- The Curaçao Gaming Control Board and other regulators, auditors or law enforcement when lawfully required.
- Analytics and platform hosting services, working on aggregated or pseudonymised data.
- Game suppliers receiving the minimum session data needed to deliver play, settle bets and operate jackpots.
- Professional advisers, including auditors and legal counsel, bound by confidentiality.
Your Rights at Monoplay Casino
You control your data, and exercising any right below costs you nothing. Send requests to our data protection contact and we answer within 30 days. Where a legal obligation blocks full erasure, we tell you plainly which records must stay and why.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is wrong or out of date, including KYC details.
- Erasure: ask us to delete data we no longer need or that rests on withdrawn consent.
- Portability: receive your account and transaction data in a structured, machine readable format.
- Objection: object to processing based on legitimate interest, such as fraud analytics.
- Withdraw consent: stop marketing at any time via account settings or the unsubscribe link.
- Complain: raise a complaint with the relevant data protection authority, or with our support team first so we can try to fix it directly.
Cookies and Tracking
We use session cookies to keep you logged in, preference cookies to remember settings like currency and language, and, with your consent, analytics cookies that count visits in aggregate. No cookie on this site tracks you across other gambling sites for advertising. Full details, including how to change your cookie choices at any time, sit on our dedicated Cookies Policy page.
How We Protect Your Data
Our safeguards
All traffic between your device and our servers runs over TLS encryption, and stored KYC documents sit encrypted at rest. Access to personal data follows role based controls, so a support agent sees your account details but never your verification documents, and every access is logged. We test these controls regularly and patch our systems on a fixed schedule.
If something goes wrong
If a breach affects your personal data and creates a risk to you, we notify the relevant regulator without undue delay and tell affected players what happened, what data was involved and what we are doing about it. To reach our data protection officer, email [email protected], or write to Monoplay Gaming N.V., Curaçao. For gambling concerns, Gambling Help Online remains available on 1800 858 858.
Frequently asked questions
Can I delete my KYC documents before the five years are up?
No. Gambling and anti money laundering rules require us to keep verification and transaction records for at least five years after your account closes. We can delete marketing preferences and non essential data on request, but regulated records must stay.
Do you sell my data to advertisers?
Never. We share personal data only with payment processors, KYC and AML providers, regulators and service operators who need it, and each one works under a written data protection agreement.
How do I stop marketing messages?
Open account settings and untick the channels you no longer want, or use the unsubscribe link in any email. Withdrawal takes effect immediately for future sends, and we keep that preference on record so you are not re added by mistake.
What happens to my data if I self exclude?
We retain your identity and exclusion records for five years so the exclusion holds across your closed account, while deleting marketing preferences and stopping all promotional contact for the duration.