Privacy Policy

The controller of personal data collected through Kingdom Casino is Dama N.V., a company registered under number 152125 and licensed by Antillephone N.V. under licence 8048/JAZ2020-013. Correspondence about data handling should be sent through the support channels published in the account area, marked for the attention of the data protection contact.

Because we hold a single offshore gaming licence and no New Zealand domestic authorisation exists for casinos of this type, the primary obligations governing our processing arise from that licence and from applicable Curaçao law. Where the New Zealand Privacy Act 2020 confers rights on a resident player, we honour requests made under it as a matter of policy.

Registration produces the core record: name, date of birth, residential address, email, telephone number, chosen currency and the credentials protecting your login. Verification adds documentary evidence — a passport or driver licence, a recent utility bill or bank statement, and in some cases a selfie taken alongside the document.

Playing generates a second layer: deposits and withdrawals, payment instrument identifiers in truncated form, game rounds and stakes, bonus claims, session start and end times, and any limits you have configured. This record is created automatically and cannot be switched off, as it underpins both your balance and our regulatory reporting.

A third layer is technical. Our servers log IP address, approximate location derived from it, device type, operating system, browser build, screen dimensions and referring page. Cookies and comparable storage keep you signed in, remember display preferences and, subject to the choices you make in the cookie banner, measure how sections of the site perform.

We also receive information from third parties: payment processors confirm or decline transactions, identity bureaus return match results on the documents you submit, and anti-fraud providers supply risk scores based on device and behavioural signals. We do not buy personal data for marketing purposes.

The largest part of our processing exists to perform the contract you enter when you open an account: crediting deposits, settling bets, paying withdrawals, applying bonus terms and answering your support tickets. Without this information the service cannot be provided at all.

A second body of processing satisfies legal and licensing obligations — age verification, anti-money-laundering checks, sanctions screening, the retention of transaction records for audit, and the reporting of activity where the law requires it. These duties override account closure requests in respect of the records concerned.

We rely on legitimate interests for platform security, fraud detection, bonus-abuse investigation, debugging and aggregate performance analysis. Marketing by email, SMS or push notification is sent only where you have opted in, and every message carries a working unsubscribe route that takes effect within a few days at most.

Your information reaches game studios that supply the titles in our lobby, payment institutions that move your funds, verification and anti-fraud vendors, cloud hosting providers, and the platform partners that operate our support desk. Each acts under written terms confining them to the purposes we specify.

Disclosure also occurs where our licensing authority, an auditor, a court or a competent law enforcement body makes a valid request. We do not sell personal information, and we do not share it with advertisers for their own independent use.

Data is stored on servers within the European Economic Area and in Curaçao, and some vendors process it elsewhere. Transfers rely on contractual protections modelled on standard clauses. Access inside our organisation is role-limited, connections are encrypted in transit, credentials are stored as salted hashes, and privileged actions are logged.

Identity documents, financial records and gameplay history are retained for at least five years after your last transaction, in line with anti-money-laundering rules, and longer where a dispute, investigation or self-exclusion undertaking remains live. Support correspondence is generally held for two years, and marketing consent records for as long as the consent stands plus a short evidential period.

You may ask us for a copy of the data we hold, correct anything inaccurate, withdraw marketing consent, object to processing founded on legitimate interests, or request deletion of material we are not obliged to retain. We reply within thirty days and may ask you to verify your identity before we act, so that no third party can obtain your record by impersonation.

Non-essential cookies can be refused at first visit and changed later through the preferences link in the site footer. Refusing them does not restrict your ability to play, though certain conveniences such as remembered layout settings will no longer persist between visits.