Your Privacy at Blitzbet
This Privacy Policy explains what personal data we collect when you play at Blitzbet Casino, why we collect it, how long we keep it and the rights you hold over it. By registering an account you accept the practices described here.
What Data We Collect
Categories of personal data
We collect only the data we need to run your account, meet our licence obligations and keep the platform secure. The main categories are listed below.
- Identity data: full name, date of birth, residential address, email address and phone number.
- Verification documents: passport, driver's licence or utility bill submitted during KYC checks.
- Transaction data: deposits, withdrawals, bonuses claimed and wagering history, including payment method identifiers.
- Technical data: IP address, device type, operating system, browser and approximate location.
- Gameplay behaviour: games played, session times, bet sizes, win/loss records and self-assessment responses.
- Marketing preferences: which communications you have opted in or out of, and how you interact with our promotions.
How We Use Your Data
Purposes of processing
We process your data to create and manage your account, verify your identity before your first withdrawal, process deposits and payouts in AUD or crypto, and detect fraud and multi-accounting. We also monitor play patterns to identify players who may need responsible-gambling support, and we send marketing messages only where you have consented.
- Account creation, login and settings management.
- KYC and AML verification, with documents processed within 72 hours.
- Payment processing across fiat and crypto methods.
- Fraud prevention, chargeback checks and bonus abuse detection.
- Responsible-gambling monitoring and self-exclusion enforcement.
- Marketing with your consent, including bonus offers and tournament news.
- Compliance with our Curaçao licence and applicable law.
Our Legal Bases
Why the law lets us process
Contract: we process identity, contact and transaction data to set up and run your player account, because the account itself is a contract between you and us. Without this data we cannot offer you the service.
Legal obligation: KYC, AML and record-keeping rules under our Curaçao licence (OGL/2024/112/0974) oblige us to verify your identity and retain transaction records for a minimum period. You cannot opt out of these requirements.
Legitimate interest: we rely on legitimate interest for fraud prevention, security monitoring, service improvement and aggregated analytics. We weigh this interest against your rights and keep the data involved to a minimum.
Consent: marketing emails, SMS and optional cookies that are not strictly necessary run only on your consent. You can withdraw that consent at any time without affecting your account.
How Long We Keep It
Retention schedule
We keep each category of data only as long as the purpose requires, then delete or anonymise it. Transaction and KYC records are retained for at least 5 years to satisfy regulatory requirements.
| Data category | Retention period |
|---|---|
| KYC documents | 5 years after account closure |
| Transaction and wagering records | 5 years minimum, per AML rules |
| Account and identity data | For the life of the account, then 5 years |
| Marketing preferences | Until you withdraw consent or ask for deletion |
| Technical and analytics logs | Up to 12 months |
Who We Share Data With
Categories of recipients
We never sell your personal data. We share it only with parties who help us operate the casino, and always under strict confidentiality terms. In Australia, we cooperate with Gambling Help Online referral processes where you request self-exclusion support.
- Payment processors handling fiat and crypto transactions, including e-wallet and card providers.
- KYC and AML verification providers that check your documents.
- Game and platform providers who receive only the data needed to run sessions.
- Regulators and law-enforcement bodies where legally required.
- Analytics providers who receive pseudonymised usage data.
- Email and SMS delivery services for communications you have consented to.
Your Rights Over Your Data
How to exercise them
You can contact us at any time to exercise the rights below. We respond within 30 days and may ask for identity confirmation first, which is itself a legal requirement. If you believe we have mishandled your data, you can lodge a complaint with the relevant data protection authority, or with the Office of the Australian Information Commissioner (OAIC) if you are in Australia.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is inaccurate or out of date.
- Erasure: request deletion where no legal obligation requires us to keep it.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing or optional cookies at any time.
- Complain: escalate to the OAIC or the applicable supervisory authority.
Cookies and Tracking
We use strictly necessary cookies to keep you logged in and secure your session, plus optional analytics and marketing cookies that run only with your consent. Full details, including how to change your cookie settings, are on our dedicated Cookies Policy page, which forms part of this Privacy Policy.
How We Protect Your Data
Safeguards and breach response
All traffic between your device and our servers is encrypted with TLS, and payment and KYC documents are stored encrypted at rest. Access to personal data is limited to staff who need it for their role, with logging on every access. If a data breach occurs that risks your rights, we notify the relevant supervisory authority and, where required, you directly, without undue delay.
Contact Our Data Team
Questions about this policy or your data can go to our Data Protection Officer at [email protected], or to [email protected], reachable 24/7 via live chat and email. We review this Privacy Policy regularly and publish any changes on this page, with the updated date shown at the top. Material changes that affect your rights will be announced to you directly before they take effect.
Frequently asked questions
Do you share my data with advertisers?
No. We never sell your personal data. Marketing partners only receive the minimum data needed to deliver messages you have explicitly consented to receive.
How long do you keep my KYC documents?
We retain verification documents for 5 years after your account closes, as required by our Curaçao licence and AML obligations. After that they are securely destroyed.
Can I delete my account and all my data?
You can request erasure at any time. We delete marketing data immediately, but transaction and KYC records must be kept for a minimum of 5 years under regulatory rules before deletion.
Who do I complain to if I have a privacy issue?
Contact our DPO at [email protected] first. If you are unsatisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC).