Privacy Policy

This Privacy Policy explains how 96 Casino, operating the online casino services available via 96cazino.com and associated brand domains, collects, uses, stores and protects your personal data. It applies to all players, account holders and website visitors from the United Kingdom and other countries who access our services, whether you browse the site, register an account, make deposits and withdrawals, place bets or otherwise interact with us.

This notice is designed to meet the requirements of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where relevant, comparable international standards. It should be read together with our Terms and Conditions, Cookies Policy and any game- or promotion-specific rules.

The policy is effective and deemed accepted by you when you first use 96cazino.com after 6 November 2025 and is kept under regular review throughout 2025 and 2026. By using our services, you acknowledge that you have read and understood this Privacy Policy.

Who We Are

For the purposes of data protection law, the primary data controller responsible for your personal data is the company that operates the online casino services available at 96cazino.com (the "Operator", "we", "us", "our"). The Operator uses the 96 Casino brand exclusively in connection with 96cazino.com.

The Operator holds an online gaming licence issued by Gaming Curaçao under Master Licence 365/JAZ, sublicense reference GLH-OCCHKTW0705302017, and is established outside the United Kingdom (typically in Curaçao or a similar offshore jurisdiction). The exact legal name, registered office address and company registration number of the Operator are always displayed in the footer of 96cazino.com, in the "About Us" or "Legal Information" section, and in your account confirmation or transactional emails. You may also request these details using the contact methods below.

For data protection matters, including questions about this Privacy Policy, exercising your privacy rights or lodging a complaint, you can contact our dedicated data protection contact point:

Email: privacy@96cazino.com (Data Protection / Privacy enquiries)
General support: via the live chat or contact form available on 96cazino.com
Postal: Data Protection Officer / Data Protection Team, 96 Casino, at the legal address indicated in the footer of 96cazino.com (please mark your envelope "Data Protection").

Where required by UK, EU or other applicable laws, the Operator may appoint local representatives (for example, a UK or EEA representative). Their details, if applicable, will be made available on 96cazino.com.

What Personal Data We Collect

Identification and Contact Data

Basic account data: full name, username, date of birth, country of residence, preferred language and currency.
Contact details: email address, telephone number, postal address and any other contact information you provide when registering or updating your profile.
Verification (KYC) data: copies or details of identity documents (passport, ID card, driving licence), proof of address (utility bill, bank statement, tax letter), and information obtained from electronic identity and age verification providers.

Technical and Device Data

Technical identifiers: IP address, device identifiers, browser type and version, operating system, device model, approximate geolocation based on IP, language settings and time zone.
Usage logs: login and logout times, pages visited, click paths, referring/exit pages, session duration, error logs and similar diagnostic data.
Security data: failed login attempts, changes to account settings, suspicious activity flags and other security-related logs.

Payment and Financial Data

Payment details: partial card details (for example, last 4 digits and card type), account identifiers for e-wallets or payment services, transaction references and status.
Transaction history: deposits, withdrawals, bets placed, wins/losses, bonuses credited and wagering progress, together with timestamps and associated payment methods.
Anti-fraud and AML data: results of checks carried out for fraud prevention, anti-money laundering (AML) and counter-terrorist financing (CTF), including sanctions screening and risk ratings derived from those checks.

Behavioural and Gameplay Data

Gameplay information: games played, bet sizes, frequency and duration of play, in-game actions, bonus usage, tournament participation and leader boards.
Behavioural patterns: device and IP patterns, play behaviour indicators relevant to responsible gambling (for example, time spent playing, rapid deposit patterns, self-set limits, cooling-off or self-exclusion requests).
Website interactions: buttons clicked, navigation paths, interaction with banners and promotional offers, and responses to surveys or feedback forms.

Communication Data

Customer support records: records of chats, emails, webforms and phone calls (including call recordings where permitted by law), together with internal notes and follow-up actions.
Marketing preferences: your choices about receiving marketing communications by email, SMS, push notifications or other channels, including time and method of consent or opt-out.

Cookies and Similar Technologies

Cookies: small text files stored on your device, including session cookies and persistent cookies, set by 96cazino.com or by authorised third parties such as analytics and advertising partners.
Similar technologies: tracking pixels, tags, SDKs, device identifiers and local storage used for analytics, fraud prevention and marketing, as described in the "Cookies & Tracking Technologies" section.

Special Categories of Data

Sensitive information: as a general rule, we do not intentionally collect sensitive ("special category") data such as data about your health, religion or ethnicity. However, you may voluntarily disclose certain information, for example in the context of responsible gambling (e.g. information about problem gambling, mental health concerns) or when providing documents that incidentally reveal such data. In those cases, we handle the data with enhanced protection and only for the specific purpose for which it was provided and in line with applicable law.

Legal Basis for Processing

Contractual Necessity

Account creation and management: we process your personal data to create, verify and manage your player account, provide access to games and features and maintain your account settings and preferences.
Transactions and gameplay: data processing is necessary to accept deposits, process withdrawals, record bets and winnings, credit bonuses, calculate loyalty rewards and provide customer support.
Contract performance: these activities are required to perform the contract between you and the Operator when you register and use 96cazino.com.

Compliance with Legal Obligations

KYC / AML / CTF: we are legally obliged under anti-money laundering and counter-terrorist financing laws, as well as licence conditions imposed by authorities such as Gaming Curaçao, to verify your identity, age and source of funds and to monitor transactions for suspicious activity.
Responsible gambling and age restrictions: we must ensure that gambling is not offered to minors and that we take appropriate measures to promote safer gambling, which may include monitoring behaviour, managing self-exclusion and imposing limits.
Regulatory and tax reporting: we may be required to maintain records and report certain information to regulators, supervisory authorities, law enforcement bodies or tax authorities in Curaçao, the UK or other jurisdictions.
Legal claims and compliance: we process data where necessary to comply with court orders, enforce our legal rights or defend against claims.

Legitimate Interests

Service improvement and analytics: we analyse aggregated and pseudonymised usage and gameplay data to improve the performance, usability and offering of 96cazino.com, ensure stability and plan our business.
Security and fraud prevention: we process data to protect your account and our systems, detect and prevent fraud, bonus abuse, money laundering, account takeovers and other malicious or prohibited activities.
Network and information security: logs and technical data are used to maintain and improve the security of our infrastructure, including monitoring, testing and audit processes.
Marketing to existing customers: we may send you marketing about similar products and services via email or other channels where we have obtained your details in the context of a sale or service and you have not opted out, relying on our legitimate interests and subject to applicable direct marketing rules.
Business operations: we process data as necessary for internal administration, risk management, reporting and corporate transactions (for example, mergers or reorganisation), always subject to appropriate safeguards.

Consent

Optional marketing communications: where required by law (for example, for certain types of electronic direct marketing to new customers), we rely on your prior consent to send promotional emails, SMS or push notifications. You may withdraw this consent at any time via your account settings or the unsubscribe links in our messages.
Non-essential cookies and trackers: we obtain your consent, via our cookie banner or preference centre, before using analytics, advertising or personalisation cookies that are not strictly necessary for the service.
Special category data: if, in limited circumstances, we need to process sensitive data (for example, about health in the context of responsible gambling), we will do so only with your explicit consent or where another lawful basis is available under UK GDPR or other applicable laws.

Other Legal Bases

Vital interests: in rare situations, we may process data to protect your vital interests or those of another person, for example if we reasonably believe there is an imminent risk of serious harm and need to contact emergency services.
International legal requirements: where we are subject to legal obligations in other jurisdictions (for example, Curaçao licensing conditions or, where applicable, Mexican or EU data protection rules), we process data to comply with those obligations in a manner consistent with UK standards.

Purpose of Processing

Provision of Casino Services

Account operation: to register you as a player, authenticate your logins, manage your balance, and administer your participation in games, tournaments and promotions on 96cazino.com.
Payments: to enable deposits, process withdrawals, handle payment disputes and chargebacks and to reconcile our internal accounts.
Customer support: to respond to your enquiries, assist you with technical issues, handle complaints and provide general assistance.

Legal, Regulatory and Risk Management

Compliance and reporting: to fulfil our obligations under gambling, AML/CTF and financial regulations, as well as licence requirements from Gaming Curaçao and other authorities.
Dispute resolution: to investigate and resolve complaints, manage chargebacks and handle potential or actual legal claims.
Enforcement of terms: to enforce our Terms and Conditions, including preventing and responding to misuse of our services, fraud or prohibited behaviours.

Analytics, Personalisation and Improvements

Service improvement: to evaluate how players use our website, identify technical issues and develop new features, games and promotions.
Personalisation: to tailor the content, bonuses, offers and recommendations displayed to you based on your profile, preferences and gameplay behaviour, where permitted by law and your settings.
Statistics and reporting: to compile aggregate statistics about our player base, markets and performance, using anonymised or pseudonymised information where possible.

Marketing and Promotions

Direct marketing: to send you news, promotions and special offers related to 96cazino.com via email, SMS, push notifications or other channels, in accordance with your preferences and applicable law.
Advertising and affiliates: to measure the effectiveness of our advertising, manage affiliate relationships and avoid fraud in our marketing campaigns.

Security and Fraud Prevention

Account security: to monitor access to your account, detect suspicious activity, provide security alerts and support account recovery.
Fraud and abuse detection: to identify and prevent collusion, bonus abuse, money laundering, multiple accounts, and other fraudulent or high-risk activities, using automated tools and manual review.
System integrity: to protect our infrastructure, games and data from cyber attacks, unauthorised access and other threats.

Disclosure & Sharing

Service Providers and Business Partners

Payment processors and financial institutions: we share relevant data with banks, card schemes and payment service providers to process deposits, withdrawals, refunds and chargebacks, and to comply with AML and fraud-prevention obligations.
KYC / AML service providers: identity verification, age verification, sanctions screening and risk scoring providers receive data necessary to perform these checks on our behalf.
Game and platform providers: third-party software suppliers that provide casino games, platforms or tools may receive gameplay and technical data required to deliver the games, ensure fairness and integrity and investigate incidents.
IT and infrastructure providers: hosting, cloud storage, content delivery networks, customer support platforms, email and SMS services and security providers process data strictly under our instructions.
Analytics and marketing partners: subject to your cookie and marketing preferences, we share pseudonymised or device-level data with analytics providers and advertising networks to measure performance and deliver tailored content or adverts.

Group Companies and Corporate Transactions

Group entities: if the Operator is part of a corporate group, your data may be shared with group companies that provide centralised services (such as compliance, risk management, IT or customer support), always under appropriate safeguards.
Corporate events: in connection with mergers, acquisitions, restructurings or the transfer of business or assets, personal data may be disclosed to prospective or actual purchasers and their advisers, subject to confidentiality obligations and only to the extent necessary.

Authorities and Regulators

Regulatory and supervisory bodies: we may disclose data to gambling regulators (such as Gaming Curaçao), financial regulators, tax authorities and other competent authorities when required by law or licence conditions.
Law enforcement and courts: we may share information with police, courts and other government authorities where necessary to investigate or respond to suspected illegal activity, enforce our rights or comply with legal obligations.

Affiliates and Advertising Networks

Affiliate partners: we share limited data (for example, registration and deposit confirmations) with affiliates to verify referrals, calculate commissions and prevent fraud.
Advertising networks: with your consent where required, we may allow selected partners to set cookies or similar technologies to deliver personalised advertising and measure campaign effectiveness.

No Sale of Personal Data

Data sale: we do not sell your personal data in the sense of transferring it to third parties for their own independent marketing purposes without your consent. Any sharing with third parties occurs for the purposes described in this Privacy Policy and subject to appropriate safeguards.

International Transfers

Because 96cazino.com is operated by an offshore-licensed entity and uses international service providers, your personal data may be transferred to, stored in and processed in countries outside the United Kingdom, including but not limited to Curaçao, the European Economic Area (EEA), Switzerland, the British Virgin Islands and other jurisdictions where our group companies, partners or service providers are located.

Safeguards for Cross-Border Transfers

Adequacy decisions: where we transfer data to countries that the UK Government (or, where relevant, the European Commission) has determined provide an adequate level of data protection, we rely on that decision.
Standard Contractual Clauses (SCCs): for transfers to countries without an adequacy decision, we generally use contracts based on UK-approved or EU-approved standard contractual clauses, supplemented by additional technical and organisational measures where necessary.
Data Privacy Framework and similar schemes: where applicable, we may rely on recognised international transfer frameworks for specific service providers that are certified under such schemes.
Derogations: in limited circumstances, we may rely on specific derogations under data protection law, such as where a transfer is necessary for the performance of our contract with you (for example, processing an international payment) or for the establishment, exercise or defence of legal claims.

Regulator and Licensing Transfers

Gaming Curaçao: as our primary gaming regulator, Gaming Curaçao and related bodies in Curaçao may receive data in connection with licensing, audits, compliance reviews or investigations.

While laws in some of these countries may not provide the same level of protection as UK data protection law, we take steps to ensure that your data receives an essentially equivalent level of protection, consistent with UK GDPR requirements.

Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected, including satisfying any legal, regulatory, accounting or reporting requirements.

Typical Retention Periods

Account and identification data: normally retained for the duration of your account and for up to five (5) years after account closure, to comply with AML/CTF and gambling regulations and to handle potential legal claims. In some cases, we may need to retain data for longer where required by law or where there is an ongoing dispute.
Transaction and gameplay records: usually kept for the lifetime of your account and for up to five (5) years after closure, to comply with legal obligations, resolve disputes, and provide audit trails.
Customer support and complaints: correspondence and complaint files are generally retained for up to seven (7) years after resolution, depending on the nature of the issue and applicable limitation periods.
Marketing data: information about your marketing preferences and interaction with campaigns is kept while you remain subscribed and for a limited period (for example, up to two (2) years) after you last interact with us, unless you withdraw consent earlier.
Technical logs: security and system logs are usually retained for between six (6) and twenty-four (24) months, depending on their purpose, unless a longer period is necessary for security investigations or legal reasons.
Cookies: cookie lifetimes vary by type and purpose, from session-only to several months or years for persistent cookies, as described in our cookie settings panel.

Deletion and Anonymisation

Irreversible anonymisation: where we no longer need personal data in identifiable form, we may convert it into anonymised data for statistical, research or analytical purposes.
Secure deletion: when data is no longer required and no longer needs to be retained, we will delete or irreversibly anonymise it in line with our data retention and deletion policies.
Backups and archives: data may persist in backup copies for a limited period after the end of the primary retention period, but will be removed in accordance with our backup rotation schedules.

Your Rights

Under UK GDPR and other applicable laws, you have a number of rights in relation to your personal data. These rights may be subject to certain limitations or conditions defined by law, particularly where we must retain data to comply with legal obligations or protect our legitimate interests.

Core Data Protection Rights (UK / EU)

Right of access: you can request confirmation as to whether we process your personal data and obtain a copy of the data, together with information about how we process it.
Right to rectification: you can ask us to correct inaccurate or incomplete personal data. In many cases, you can update your details directly in your 96cazino.com account.
Right to erasure ("right to be forgotten"): you can request that we delete your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other legal ground for processing. This right is not absolute and does not apply where continued retention is required by law (for example, AML obligations) or for the establishment, exercise or defence of legal claims.
Right to restriction of processing: you may request that we restrict processing of your data under certain conditions, such as while we verify its accuracy or when you object to processing and we are considering your request.
Right to object: you can object to processing that is based on our legitimate interests, including profiling, on grounds relating to your particular situation. You have an absolute right to object at any time to the processing of your data for direct marketing, including profiling related to such marketing.
Right to data portability: for data that you have provided to us and that we process by automated means based on your consent or on a contract, you can request to receive it in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted directly to another controller.
Right not to be subject solely to automated decisions: where we make decisions with legal effects or similarly significant effects based solely on automated processing (for example, certain fraud or risk assessments), you have the right to obtain human review, to express your point of view and to contest the decision, subject to legal limitations.
Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before it was withdrawn.

Additional Rights for Mexican Residents

Although this Privacy Policy is primarily designed to comply with UK GDPR, we also seek to align with the principles of the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) where it applies, for example when Mexican residents access our services.

ARCO rights: if you are in Mexico, you may have specific rights of Access, Rectification, Cancellation and Opposition (ARCO) over your personal data, broadly corresponding to the rights described above.
Consent and revocation: you may revoke consent granted for processing your data in accordance with Mexican law, subject to legal and contractual limitations.

How to Exercise Your Rights

Submitting a request: you can exercise your rights by contacting us at privacy@96cazino.com or via the "Privacy" or "Contact Us" sections of 96cazino.com. Please specify which right you wish to exercise and provide sufficient information to verify your identity and locate your data.
Verification: to protect your privacy, we may ask you to provide additional information or documentation to confirm your identity before acting on your request, especially where the request concerns sensitive or financial data.
Response times: we aim to respond to all valid requests within one (1) month of receipt. This period may be extended by up to two (2) further months if the request is complex or if you have made multiple requests, in which case we will inform you of the extension and explain the reasons.
Fees: we will handle your requests free of charge, unless they are manifestly unfounded or excessive (for example, repeated requests). In such cases, we may charge a reasonable fee or refuse to act, in accordance with the law.

Cookies & Tracking Technologies

Types of Cookies We Use

Strictly necessary cookies: essential for the operation of 96cazino.com, enabling functions such as logging in, maintaining sessions, processing payments and providing core security features. These cookies cannot be switched off in our systems, although you may be able to block them in your browser (which may prevent the site from working properly).
Functional cookies: used to remember your preferences (such as language, currency and region) and personalise your experience.
Analytics and performance cookies: help us understand how visitors use the website, which pages are most popular, and whether users encounter errors, enabling us to improve performance and usability.
Advertising and targeting cookies: used, with your consent where required, to deliver relevant adverts, limit the number of times you see an ad and measure the effectiveness of advertising campaigns. These may be set by us or by third-party advertising networks.
Session vs persistent cookies: session cookies are deleted when you close your browser, while persistent cookies remain on your device for a defined period or until you delete them.

Other Tracking Technologies

Web beacons and pixels: small graphical files used in conjunction with cookies to count users, track open rates of emails and measure the effectiveness of campaigns.
SDKs and device identifiers: for mobile apps or certain devices, we may use SDKs and device identifiers for analytics, security and personalisation, in line with your preferences.

Managing Cookies

Cookie banner and settings: when you first visit 96cazino.com, you will see a cookie banner explaining our use of cookies and giving you options to accept all, reject non-essential cookies or customise your preferences. You can change your choices at any time via the cookie settings link in the footer.
Browser controls: most browsers allow you to block or delete cookies through their settings. Doing so may affect the functionality and performance of 96cazino.com.
Third-party opt-outs: for some analytics or advertising cookies, you may also opt out directly with the provider, as described in their privacy notices.

Data Security

Technical and Organisational Measures

Encryption: data transmitted between your device and 96cazino.com is protected using transport layer security (TLS 1.2 or higher). We also use encryption or pseudonymisation for certain data at rest, where appropriate.
Access controls: access to personal data is limited to authorised personnel and service providers who need it to perform their duties, subject to role-based access controls and confidentiality obligations.
Network and system security: we deploy firewalls, intrusion detection and prevention systems, anti-malware tools and other security technologies to protect our infrastructure.
Secure development and testing: we follow secure coding practices and conduct regular testing, code reviews and vulnerability management activities.

Operational Security and Governance

Security audits and assessments: we carry out periodic security reviews and may engage independent specialists to test and assess our controls. Where we use third-party data centres or cloud providers, we prefer providers who hold recognised certifications such as ISO 27001 or SOC 2, where applicable.
Vendor due diligence: we assess the security and privacy practices of key service providers and include data protection obligations in our contracts.
Training and awareness: staff with access to personal data receive training on data protection, security and responsible handling of player information.

Incident Response

Detection and response: we maintain procedures to detect, investigate and respond to potential personal data breaches or security incidents.
Notification: where a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority in accordance with legal requirements (for example, the UK Information Commissioner's Office typically within 72 hours where required). If the risk to you is high, we will also inform you without undue delay, providing information on the nature of the breach and recommended protective steps.

Complaints & Contacts

Contacting Us

Primary contact: for questions about this Privacy Policy, data protection queries or to exercise your rights, please contact our Data Protection Officer / Data Protection Team at privacy@96cazino.com.
Support channels: you can also contact customer support via live chat or the "Contact Us" form on 96cazino.com, who will route your request to the appropriate team.
Postal address: you may send written requests or complaints to the legal address of the Operator shown in the footer of 96cazino.com, marked for the attention of the Data Protection Officer.

Complaint Procedure

Step 1 - Contact support: raise your concern with our customer support team, providing as much detail as possible. Many issues can be resolved quickly at this stage.
Step 2 - Escalation to Data Protection team: if your issue is not resolved, or if it relates specifically to privacy or data protection, ask for it to be escalated to our Data Protection Officer / Data Protection Team. You may be asked to provide additional information or documentation.
Step 3 - Our response: we aim to respond to privacy complaints and rights requests within one (1) month. Where this is not possible due to complexity or volume, we will inform you of the delay and respond as soon as reasonably practicable, and in any event within the time limits required by law.

Supervisory Authorities

United Kingdom: if you are in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), without prejudice to any other administrative or judicial remedy. More information is available at www.ico.org.uk.
European Economic Area: if you are located in the EEA, you may have the right to complain to your local data protection authority. Details are usually available on the authority's official website.
Mexico: if Mexican data protection law applies to you, you may complain to the National Institute for Transparency, Access to Information and Personal Data Protection (INAI), whose information is available at www.inai.org.mx.

Please note that Gaming Curaçao, as our gaming regulator, primarily handles issues related to gambling regulation and licensing rather than data protection. Contact details for Gaming Curaçao can be found at http://gaming-curacao.com, but this does not replace your right to contact a data protection authority about privacy matters.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, regulatory guidance or technical developments.

How We Will Inform You

On-site notifications: we will post the updated Privacy Policy on 96cazino.com and update the "Last updated" date at the bottom of the policy.
Email and in-account messages: where changes are material, we will also notify you by email and/or by an in-account message or notification.
Banners and notices: for significant changes, we may display prominent banners or pop-up notices requiring you to review the updated policy and, where appropriate, confirm your acceptance.

Effective Date and Your Options

Last updated: this version of the Privacy Policy was last updated on 6 November 2025.
Advance notice: where we make material changes that significantly affect how we process your data (for example, new categories of data, new purposes, or new international transfers), we will, where practicable, provide you with at least 30 days' notice before the changes become effective, unless immediate implementation is required by law or for security reasons.
Your continued use: by continuing to use 96cazino.com after the effective date of any updated Privacy Policy, you are deemed to have accepted the changes. If you do not agree with the updated terms, you should stop using the site and may request closure of your account.
Data already collected: changes will not generally apply retrospectively to data already collected, unless required by law. However, we may apply new safeguards or rights to existing data where this offers you enhanced protection.