Volcano Casino (hereinafter referred to as “we”, “us”, “our”, “Volcano Play”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your data when you visit our website, use our services, register an account, play games, make deposits or withdrawals, or interact with us in any way.
We operate in full compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679, as well as other applicable data protection laws in the jurisdictions where we provide services.
By using Volcano Casino services you agree to the practices described in this Privacy Policy.
1. Who We Are – Data Controller
The data controller responsible for your personal data is:
Volcano Entertainment N.V. Registration number: [to be specified in real policy] Registered address: [to be specified – e.g. Scharlooweg 39, Willemstad, Curaçao] Gaming license: issued by the Curaçao Gaming Control Board (license number [to be specified])
For data protection inquiries, you may contact our Data Protection Officer (DPO) at: Email: privacy@volcanocasino.com
2. What Personal Data We Collect
We collect the following categories of personal data:
A. Data you provide directly
- Identification data: full name, date of birth, gender
- Contact data: email address, phone number, country of residence
- Account data: username, password (hashed), security questions
- Payment data: billing address, payment method details (we do not store full card numbers – only last 4 digits)
- Verification (KYC) documents: copy of passport/ID, proof of address, selfie with ID, source of funds documentation (when required)
- Communication data: messages sent via live chat, email, or support tickets
B. Data we collect automatically
- Technical data: IP address, device type, browser type & version, operating system, screen resolution
- Usage data: login times, pages visited, games played, bets placed, time spent, referring URL
- Marketing & cookies data: preferences, consent records, advertising IDs
C. Data from third parties
- Payment providers (verification of transactions)
- Identity verification services (Sumsub, Onfido, etc.)
- Fraud prevention & AML services
- Social login providers (Google, Facebook – if you choose this option)
3. Why We Process Your Personal Data – Legal Basis
We process your data for the following purposes and legal bases:
| Purpose | Legal Basis (GDPR) | Examples |
|---|---|---|
| Account creation & management | Contract (Art. 6(1)(b)) | Registration, login, profile updates |
| Provision of gambling services | Contract (Art. 6(1)(b)) | Playing games, placing bets, game history |
| Age & identity verification (KYC) | Legal obligation (Art. 6(1)(c)) | Compliance with AML/CTF, responsible gambling |
| Payment processing & anti-fraud | Legal obligation + legitimate interest | Preventing chargebacks, fraud detection |
| Responsible gambling tools | Legal obligation + legitimate interest | Self-exclusion, deposit limits, reality checks |
| Marketing communications (if consented) | Consent (Art. 6(1)(a)) | Bonus offers, newsletters, personalized ads |
| Analytics & service improvement | Legitimate interest (Art. 6(1)(f)) | Website optimization, game recommendations |
| Compliance with regulatory requests | Legal obligation (Art. 6(1)(c)) | Reporting to licensing authorities |
4. Cookies & Similar Technologies
We use cookies, pixels, and similar tracking technologies to:
- Make the website work (essential cookies – no consent required)
- Remember your preferences & login (functional)
- Analyze usage & improve services (analytics)
- Show relevant advertisements (marketing – consent required)
You can manage cookies via our Cookie Banner or browser settings. For details see our Cookie Policy [link].
5. Who We Share Your Data With
We share your data only when necessary and always under strict confidentiality:
- Payment service providers (Skrill, Neteller, Visa, etc.)
- Identity & fraud prevention providers (Sumsub, LexisNexis Risk Solutions, etc.)
- Gaming & RNG auditors
- Cloud hosting & IT service providers (AWS, Cloudflare, etc.)
- Legal & regulatory authorities (upon lawful request)
- Group companies (if applicable)
We never sell your personal data to third parties for marketing purposes.
All third-party processors are bound by GDPR-compliant data processing agreements.
6. International Data Transfers
Some of our service providers are located outside the EEA (e.g. Curaçao, USA). When we transfer data outside the EEA, we ensure appropriate safeguards:
- Adequacy decision (if applicable)
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules
- Explicit consent (in rare cases)
7. How Long We Keep Your Data
We retain your data only as long as necessary:
- Active account: duration of relationship + 5 years after closure (legal & tax obligations)
- Closed/self-excluded accounts: 5–10 years (depending on jurisdiction & AML rules)
- Marketing data: until you withdraw consent
- Logs & technical data: up to 12 months
After retention period ends, data is irreversibly anonymized or securely deleted.
8. Your Rights Under GDPR
As a data subject you have the following rights:
- Right to access your data
- Right to rectification
- Right to erasure (“right to be forgotten” – subject to legal retention obligations)
- Right to restrict processing
- Right to data portability
- Right to object (especially to direct marketing)
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority (in Poland: UODO – www.uodo.gov.pl)
To exercise your rights, contact us at privacy@volcanocasino.com. We respond within 30 days (extendable under GDPR rules).
9. Security of Your Data
We implement appropriate technical and organizational measures to protect your data, including:
- 256-bit SSL/TLS encryption
- Regular security audits & penetration testing
- Access control & role-based permissions
- Data minimization principle
- Incident response plan
Despite our efforts, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
10. Responsible Gambling
We are committed to promoting responsible gaming. We may process special categories of data (health-related) when you use responsible gambling tools or when required by law.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Effective Date”. Significant changes will be notified via email or in-site banner.
We encourage you to review this policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact:
Email: privacy@volcanocasino.com Live Chat: 24/7 support (select “Privacy” topic)
Thank you for trusting Volcano Casino with your data. Play responsibly and enjoy Volcano Play!