Your Privacy at 9 Casino
This Privacy Policy explains what personal data we collect when you play at 9 Casino, why we collect it, how long we keep it, and the controls you have over it. It applies to every visit to our website and every account you hold with us.
What Data We Collect
We collect only the data we need to run your account, meet our licence obligations under the Curacao Gaming Control Board, and keep gambling safe. That breaks down into the following categories.
- Identity data: full name, date of birth, email address, phone number, residential address.
- Verification documents: photo ID (passport, driver licence), proof of address, and payment method verification required before your first withdrawal.
- Transaction data: deposits and withdrawals, payment method details (PayID, Visa, MiFinity, Bitcoin and others), amounts, timestamps.
- Technical data: IP address, device identifiers, browser type, operating system, approximate location derived from IP.
- Gameplay behaviour: games played, bets placed, wins and losses, session duration, bonus and tournament activity.
- Marketing preferences: which promotions you opted into, communication channels you chose, and consent records.
How We Use Your Data
We use your data to create and run your account, verify your identity under KYC rules, process deposits and withdrawals, and detect fraud and bonus abuse. These uses are not optional: without them we cannot lawfully offer you gambling services.
We also monitor play patterns for signs of problem gambling, run our responsible-gambling tools such as deposit limits and self-exclusion, and send you marketing messages when you have consented to receive them. You can opt out of marketing at any time from your account settings or by contacting support.
Our Legal Bases
Contract. Processing such as account creation, bet settlement and withdrawals is necessary to perform the agreement between you and us under our terms and conditions.
Legal obligation. Our Curacao licence and anti-money-laundering law require us to verify your identity, keep transaction records for at least five years, and report suspicious activity to the relevant authorities.
Legitimate interest. We rely on legitimate interest to prevent fraud, secure our platform, resolve disputes, and analyse aggregated gameplay data to improve our games and services.
Consent. Marketing emails, SMS and personalised offers run only on your consent, which you give when you tick the relevant box and can withdraw at any moment without affecting your account.
How Long We Keep It
Retention depends on the type of data and the reason we hold it. Gambling regulation requires long retention for financial records, while data used for marketing disappears as soon as you ask.
| Data category | Retention period |
|---|---|
| Identity and KYC documents | 5 years after account closure, per regulatory requirements |
| Transaction data (deposits, withdrawals, bets) | 5 years minimum, per AML and licence rules |
| Account data (profile, preferences) | Duration of the account, then 5 years |
| Marketing consent and preferences | Until you withdraw consent or request deletion |
| Technical logs (IP, device) | Up to 12 months for security and fraud analysis |
Who We Share Data With
We never sell your personal data. We share it only with parties who help us operate the casino, and only to the extent each of them needs it.
- Payment processors handling your deposits and withdrawals, including card schemes, e-wallet providers and crypto payment gateways.
- KYC and AML verification providers that check your ID documents and screen against sanctions lists.
- The Curacao Gaming Control Board and other regulators or law-enforcement bodies when we are legally required to disclose.
- Analytics and hosting providers working under data-processing agreements that prohibit any secondary use.
- Game providers (such as Pragmatic Play, NetEnt and Evolution) receiving only the technical data needed to deliver games to your session.
Rights You Hold Over It
You control your data. Whatever the outcome, exercising these rights never affects your right to play or withdraw your balance, except where verification law requires us to keep specific records.
If you believe we have mishandled your data, you may lodge a complaint with the data protection authority in your jurisdiction. If you are in the EU, that is your local supervisory authority under the GDPR; we handle all requests under GDPR-equivalent standards regardless of where you live.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is inaccurate or incomplete.
- Erasure: request deletion where no legal obligation requires us to retain it.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest, such as profiling for fraud checks.
- Withdraw consent: stop marketing processing at any time.
- Complain: escalate to the relevant data protection authority.
Cookies and Tracking
We use cookies to keep you logged in, remember your preferences, and understand how the site is used. Essential cookies run without consent because the site cannot function without them; analytics and marketing cookies load only after you accept them in the cookie banner. For the full breakdown of each cookie, its purpose and its lifespan, see our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers travels over TLS encryption. Card and wallet details are tokenised, so full payment credentials never sit in our systems in readable form.
Access to personal data is role-based and limited to staff who need it: KYC officers see verification documents, payment staff see transaction records, and nobody browses player data without a logged business reason. We log every internal access for audit.
If a personal data breach occurs that risks your rights, we will notify the relevant supervisory authority within 72 hours and inform affected players directly where the risk to you is high, in line with GDPR timelines.
Contact Our Data Officer
Our Data Protection Officer answers every privacy request within 30 days, usually faster. Email [email protected] with your account ID and a clear description of your request, or reach our 24/7 support team at [email protected] and they will route your query to the DPO. We may ask for ID verification before releasing account data, so that your information only ever goes to you.
Frequently Asked Questions
Will you delete my KYC documents if I close my account?
Not immediately. Gambling and anti-money-laundering rules require us to keep verification documents and transaction records for at least 5 years after account closure. Marketing data, however, is deleted as soon as you ask.
Can I stop marketing emails but keep playing?
Yes. Withdraw your marketing consent in account settings or via [email protected]. Your account, gameplay and withdrawals continue unaffected.
Do you share my data with game providers?
Only the technical data needed to load and run a game session, such as a session token and your account ID. Providers never receive your payment details or KYC documents.
How fast do you answer privacy requests?
Within 30 days at the outside, and in practice usually within a few business days. Complex requests covering large volumes of data may take the full period, and we will tell you if they do.