Casoola Casino Privacy Policy

The Company Behind Casoola and Your Rights Over Your Data

Casoola is operated by Casoola Entertainment N.V., registered at Level 3, Tower Business Centre, Tower Street, Swatar, BKR 4013, Malta, and licensed by the Malta Gaming Authority under Licence No. MGA/B2C/812/2021. As the controller of your personal data, we rely on your express consent for sensitive information, such as the identity documents submitted during verification, and on implied consent for routine account administration, such as processing a deposit you initiate. Where the law requires it independently of consent, such as anti-money laundering reporting obligations, we process the minimum data necessary to meet that obligation. You may access the personal data we hold about you, request correction of inaccurate information, and withdraw consent for anything not required by law or contract, though withdrawing consent for identity verification will prevent us from processing withdrawals. If you are a resident of Quebec, the Act respecting the protection of personal information in the private sector (Law 25) additionally gives you the right to request de-indexation of personal information made public without your consent and to receive certain data in a structured, commonly used format for portability. Where you are located outside Malta, including anywhere in Canada, your data may be processed by staff and systems located in Malta, and by processors located in other jurisdictions where our payment and verification partners operate; in each case we rely on contractual data protection clauses with those processors to maintain a standard of protection consistent with PIPEDA.

Data We Collect When You Play

Registration data includes your name, date of birth, email address, and phone number. Payment data includes the method used (Interac, iDebit, Instadebit, Visa, Mastercard, ecoPayz, MuchBetter, Bitcoin, or bank transfer), transaction amounts, and, where applicable, the last four digits of a card or the identifier of an e-wallet. Verification (KYC) data includes copies of a driver’s licence, passport, or provincial photo ID card, and a proof-of-address document such as a utility bill or bank statement. Technical data includes your IP address, device type, browser, and session logs recording gameplay and account activity, collected automatically through cookies and similar technologies each time you use the site.

How We Use Cookies and Send You Marketing

Cookies on the Casoola site fall into three categories: strictly necessary cookies that keep you logged in and remember your session, analytics cookies that measure how the site is used, and marketing cookies that personalize promotional content. Necessary cookies cannot be disabled without affecting core functionality; analytics and marketing cookies can be declined through the cookie preferences link in the site footer without affecting your ability to play. We send promotional emails, including bonus and reload offers, only where you have given consent in line with Canada’s Anti-Spam Legislation (CASL), and every marketing message includes a working unsubscribe link that takes effect within 10 business days of use.

What Happens to Your Data After You Close Your Account

We retain account, payment, and verification data for as long as your account remains open, and for a further period after closure to meet anti-money laundering and financial record-keeping obligations that apply to a licensed operator. Once that retention period ends, data that is no longer required for a legal or regulatory purpose is deleted or irreversibly anonymized. If you close your account voluntarily, transaction records already generated remain subject to the same retention period, since they cannot be selectively removed from records we are required to keep. You may lodge a complaint about how we have handled your data with the Office of the Privacy Commissioner of Canada, and if you are a resident of Quebec, with the Commission d’accès à l’information du Québec, if you believe our handling of a request has not resolved your concern.

We share payment data with the processors behind each supported method, including Interac, iDebit, Instadebit, and the card and e-wallet networks behind Visa, Mastercard, ecoPayz, and MuchBetter, solely to complete the transaction you requested. Verification data is shared with our identity verification provider for the sole purpose of confirming your identity and age before a withdrawal is released. Gameplay data, limited to what is needed to run a session, is shared with the software providers whose games you play, including NetEnt, Microgaming, Play’n GO, Pragmatic Play, Red Tiger Gaming, Hacksaw Gaming, Nolimit City, iSoftBet, and Evolution Gaming for live dealer tables. We do not sell personal data to third parties for their own marketing purposes.

Reaching Us About Your Data

To exercise any of the rights described above, including a request for access, correction, or withdrawal of consent, contact us at [email protected] with your registered email address so we can locate your account. We respond to data requests within the timeframe required under PIPEDA, and will confirm in writing once a request has been actioned.