Privacy Policy

Welcome. This Privacy Policy explains how we (AllStar Casino) collect, use, share and protect personal information when you visit our website, create an account, use our services or contact our support team. We aim to be clear about your choices and rights under applicable data protection laws, including the GDPR where it applies to you.

Information we collect

We collect personal data that is necessary to provide our services and to comply with legal obligations. This may include:

• Account and identity data: name, date of birth, email address, telephone number and postal address you provide when registering.
• Verification documents: copies or images of identity documents (e.g. passport, ID card), proof of address and other documents required to confirm identity or age.
• Account activity and gameplay data: account identifiers, game history, session times, device identifiers, and other activity related to your use of our services.
• Device and technical data: IP address, device type, browser type, operating system, and technical data collected automatically when you access our website.
• Communications and support records: messages, chat transcripts and emails when you contact customer support or when we contact you about your account.
• Marketing preferences: whether you have consented to receive promotional communications and the channels you prefer.
• Fraud prevention and security data: information needed to detect and prevent fraud, abuse or unlawful activity.

How we use your information

We use your data to operate our services, meet legal requirements and improve your experience. Typical uses include:

• Account creation and management, including identity verification and age checks.
• Providing and personalising our services and the website experience.
• Security, fraud prevention and risk management.
• Responding to your inquiries and providing customer support.
• Meeting legal and regulatory obligations, including record-keeping and reporting requirements.
• Communicating about your account, important service changes and (with your consent) marketing offers.
• Detecting and preventing problem gambling and offering responsible gaming interventions.

Lawful bases for processing

Where the GDPR applies, we rely on one or more of these lawful bases:

• Performance of a contract: to provide the services you request and to manage your account.
• Legal obligations: to comply with anti-money laundering, age verification and other statutory requirements.
• Legitimate interests: to prevent fraud, maintain security, improve our services and enforce our terms. We balance these interests against your rights and freedoms.
• Consent: for optional processing such as marketing communications and some analytics where we ask for and receive your consent.

Cookies and similar technologies

We and our service providers use cookies and similar tools to operate the site, analyse usage, remember preferences and deliver personalised content. Cookies fall into categories such as:

• Strictly necessary cookies required for core site functions.
• Preference cookies that remember language and display settings.
• Analytics cookies used to improve the site and understand usage patterns.
• Marketing cookies used to deliver relevant promotional content where you have consented.

You can manage cookie preferences through your browser settings and, where available, via preferences in your account. Disabling certain cookies may affect site functionality.

Sharing and disclosure

We may share personal data with third parties when necessary and under strict controls. Recipients may include:

• Service providers who perform services on our behalf (e.g. hosting, analytics, customer support and identity verification providers).
• Regulators, law enforcement or other authorities when required by law or to respond to legal requests.
• Fraud prevention and security partners to detect, prevent and investigate fraudulent or illegal activity.
• Business partners and affiliates when you opt into joint promotions or when required to fulfil a service you requested.

We require third parties that process personal data on our behalf to apply appropriate technical and organisational measures and to process data only according to our instructions.

International transfers

Your personal data may be processed or stored in countries outside the European Economic Area (EEA). When we transfer data internationally we apply safeguards such as relying on an adequacy decision, standard contractual clauses, or other lawful mechanisms to protect your privacy in line with applicable law.

Data retention

We retain your personal data only as long as necessary for the purposes set out in this policy, to provide the service, to comply with legal and regulatory obligations, and to resolve disputes. Retention periods are determined by the nature of the data and the purposes for which it was collected. When personal data is no longer required it will be securely deleted or anonymised.

Your rights

If the GDPR or similar data protection rules apply to you, you have rights regarding your personal data, including:

• The right to access the personal data we hold about you.
• The right to correct inaccurate or incomplete information.
• The right to request deletion of personal data in certain circumstances.
• The right to restrict or object to certain processing activities.
• The right to data portability where processing is based on consent or contract and is carried out by automated means.
• The right to withdraw consent at any time for processing based on consent.
• The right to lodge a complaint with a supervisory authority.

To exercise your rights, contact us via email. We may ask you to verify your identity before responding. We aim to respond to requests without undue delay and in line with applicable law.

Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse and alteration. Measures include access controls, encryption, secure infrastructure and staff training. While we strive to protect data, no system is completely secure; we will notify affected individuals and authorities in line with legal requirements if a data breach occurs that poses a risk to rights and freedoms.

KYC, verification and responsible gaming

To comply with legal requirements and to keep the service secure, we may require identity and age verification. This can include requesting documents or other evidence. We process verification data to confirm identity, to prevent fraud and underage use, and to meet regulatory obligations.

We also process gameplay and behavioural data to identify and support responsible gaming. If you need help setting limits or self-excluding, contact our support team. We will process related requests in accordance with our procedures and applicable law.

Children and minors

Our services are intended for adults only. You must be at least 18 years old (or the minimum legal age in your jurisdiction) to register. We do not knowingly collect personal data from minors. If we learn that we have collected data from a minor, we will take steps to delete it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on our website and indicate the date of the latest revision. Significant changes may be communicated through your account messages or other reasonable means.

Contact

If you have questions, requests or concerns about this Privacy Policy or our data practices, please contact us.