Your Privacy at Just Casino
This Privacy Policy explains what personal data we collect when you play at Just Casino (just-casino-aud.com), why we collect it, how long we keep it, and the controls you have over it. We operate under licence 8048/JAZ2020-13 issued by Antillephone N.V. in Curaçao, and we treat your data with the care that licence demands.
What Data We Collect
We collect only the data we need to run your account, verify who you are, process your payments and meet our legal obligations. Nothing on this list is optional decoration; each category serves a purpose set out in the next section.
During registration and gameplay we gather the following categories of personal data.
- Identity data: your full name, date of birth, email address, phone number and residential address.
- Verification documents: government-issued photo ID, proof of address (such as a utility bill dated within the last three months) and proof of payment method, collected before your first withdrawal.
- Transaction data: deposits and withdrawals, amounts in AUD or cryptocurrency, payment method details, and transaction timestamps.
- Technical data: IP address, device type, operating system, browser type and language settings.
- Gameplay behaviour: games played, bet sizes, session duration, wins and losses, and bonus usage.
- Marketing preferences: which communications you have opted into or out of, and how you engage with them.
How We Use Your Data
Every use of your data maps to a specific function of the casino. We do not sell your data, and we do not use it for purposes outside this list.
We process your data to create and maintain your account, including login, profile settings and self-exclusion flags. We run know-your-customer (KYC) checks before your first withdrawal to confirm your identity, age and address. We process deposits and withdrawals through your chosen payment method, whether that is PayID, Visa, crypto or another supported option.
We monitor gameplay and transactions to prevent fraud, money laundering and bonus abuse. We track play patterns to support responsible gambling, including the deposit limits, loss limits and session reminders available in your account settings. With your consent, we send promotional emails about bonuses such as our Friday reload or weekend cashback. Finally, we meet legal obligations set by our licence, including record-keeping and reporting to the regulator.
Our Legal Bases
Contract. We process identity, account and transaction data because they are necessary to perform our contract with you. Without a name, email and payment details, we cannot open an account or settle your bets.
Legal obligation. KYC documents, transaction records and anti-money-laundering checks are processed because our Curaçao licence and applicable law require us to verify players and retain records for set periods.
Legitimate interest. Fraud prevention, security monitoring and aggregated service analytics rest on our legitimate interest in keeping Just Casino safe and functional. This basis never overrides your rights; you can object to it at any time.
Consent. Marketing communications and non-essential cookies run only on your consent. You can withdraw that consent whenever you like, through your account settings or the unsubscribe link in any email, without affecting your ability to play.
How Long We Keep It
We hold each category of data only as long as the purpose requires, or as long as law demands. Gambling regulation requires us to retain transaction and KYC records for at least five years after your last transaction or account closure, whichever is later.
The table below shows the standard retention periods we apply.
| Data category | Retention period |
|---|---|
| Identity and account data | Duration of your account, then up to 5 years |
| KYC verification documents | At least 5 years after account closure |
| Transaction data | At least 5 years, per regulatory requirement |
| Gameplay and betting history | Up to 5 years for audit and dispute resolution |
| Technical and log data | Up to 12 months |
| Marketing preferences | Until you withdraw consent or delete your account |
Who We Share It With
We share personal data only with parties who need it to deliver our service, and always under strict confidentiality terms. We never sell your data to advertisers or data brokers.
Our sharing falls into these categories.
- Payment processors handling your deposits and withdrawals, including card acquirers, e-wallet providers and crypto payment gateways.
- KYC and AML verification providers that check your ID documents and screen against sanctions lists.
- Game providers and platform suppliers who receive the minimum data needed to deliver gameplay and settle bets.
- The Curaçao regulator and other authorities, where reporting or a lawful request requires it.
- Analytics and IT service providers working on our instructions under data processing agreements.
Your Rights Over Your Data
You control your data, and exercising these rights costs you nothing. Email [email protected] and we will respond within 30 days. Where verification is needed, we will ask for the minimum detail to confirm your identity.
You hold the following rights.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is wrong or incomplete.
- Erasure: request deletion where no legal retention duty applies.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing or consent-based processing at any time.
- Complain: lodge a complaint with your local data protection authority or with the authority overseeing our licence.
Cookies and Tracking
We use essential cookies to keep you logged in, secure your session and remember your preferences, plus optional analytics and marketing cookies that run only with your consent. You can change or withdraw your cookie choices at any time from the cookie banner or your browser settings. Full details of every cookie we set, including names and lifespans, are on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers travels over TLS encryption, and stored sensitive data such as KYC documents is encrypted at rest. Access to personal data is role-based and restricted to staff who need it, with every access logged and reviewed. Our payment flows run through PCI DSS compliant processors, so card details never sit on our own systems.
If a data breach occurs that risks your rights, we will notify the relevant supervisory authority within the statutory deadline and inform you directly where the law requires it, together with what we are doing to fix it.
Contact Our Data Officer
Questions about this policy, a data request or a complaint go straight to our Data Protection Officer at [email protected]. You can also reach our support team around the clock via live chat or at [email protected]. We review this Privacy Policy regularly and publish any changes on this page, with the updated date shown at the top.
Frequently asked questions
Does Just Casino sell my personal data?
No. We never sell your data to advertisers or brokers. We share it only with processors and authorities who need it to run accounts, payments and compliance, always under confidentiality terms.
How long do you keep my KYC documents?
Gambling regulation requires us to retain identity documents and transaction records for at least 5 years after your account closes or your last transaction, whichever comes later.
Can I delete my account and all my data?
You can close your account at any time. We will erase data that has no retention duty attached; KYC and transaction records must be kept for the regulatory minimum of 5 years before deletion.
How do I stop marketing emails?
Use the unsubscribe link in any email, or switch off marketing in your account settings. Withdrawal of consent takes effect immediately and never affects your access to the casino.
Who do I contact about a privacy concern?
Email our Data Protection Officer at [email protected] or use 24/7 live chat. We answer data requests within 30 days.