Privacy Policy

Introduction

We respect your privacy and are committed to protecting your personal data when you use Smash Casino services. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, how long we keep it and the rights you have under data protection law.

Scope

This policy applies to personal data we collect when you visit our website, register an account, communicate with our support team, or otherwise use our services. By using our services you accept the practices described in this policy.

Information We Collect

We collect different types of information to provide and improve our services. The main categories are:

Account and identity data: name, date of birth, contact details (email, phone), username and password, and other details you provide when you register.
Verification data: identity documents and verification information when required to confirm identity or age.
Contact and support data: correspondence, support tickets and any information you provide when you contact us.
Technical and usage data: IP address, device and browser information, operating system, cookie identifiers, pages viewed, date/time stamps and usage patterns.
Marketing and preferences: communication preferences and consent choices for receiving promotional messages.
Location data: geolocation and country data used to enforce territorial restrictions and to comply with legal requirements.

How We Use Your Information

We use personal data for clear, limited purposes, including:

To create and manage your account and verify your identity when required.
To provide, maintain and improve our services and to investigate technical issues.
To detect, prevent and investigate fraud, abuse or other wrongdoing and to maintain security.
To comply with legal and regulatory obligations that apply to our services.
To communicate with you about your account, requests and our service changes.
For analytics and to understand how our services are used so we can improve them.
To send marketing communications where you have given consent, and to manage your marketing preferences.

Legal Bases for Processing

Where applicable, we rely on one or more of the following legal bases to process personal data:

Performance of a contract: to fulfil our contractual obligations to you and to provide our services.
Legal obligation: to comply with laws and regulatory requirements.
Legitimate interests: for fraud prevention, security, service improvement, and to operate and protect our business, subject to safeguards to protect your rights.
Consent: where you have given clear consent for a specific purpose, such as receiving marketing messages or non-essential cookies. You can withdraw consent at any time.

Registration, Verification and Account Activities

When you register, we collect the information needed to set up and manage your account. For certain account activities or to comply with legal requirements, we may request additional information or documentation to verify your identity or age. We will only request data that is necessary for these purposes.

Cookies and Tracking Technologies

We and our service providers use cookies and similar technologies to operate the website, enhance your experience and analyse usage. Cookies fall into categories such as:

Strictly necessary: required for basic site functions.
Functional: enable enhanced features and remembering preferences.
Performance and analytics: help us understand how the site is used.
Marketing and targeting: used for advertising and personalised content where permitted.

You can manage cookie preferences through our cookie controls and your browser settings. Withdrawing consent for non-essential cookies may affect certain features of the site.

Sharing and Disclosure of Personal Data

We may share your personal data with third parties where necessary and appropriate, including:

Service providers that perform functions on our behalf (for example: hosting, analytics, identity verification and customer support).
To comply with legal obligations or to respond to lawful requests from public authorities.
To prevent, detect or investigate fraud, security incidents or illegal activity.
In connection with business transfers, such as a merger, sale of assets, or acquisition, subject to confidentiality and data-protection obligations.

We require our service providers to keep your data secure and only to process it in accordance with our instructions.

International Data Transfers

Your personal data may be processed in countries outside your home jurisdiction. Where data is transferred outside the European Economic Area or other regions with data protection rules, we put in place appropriate safeguards such as standard contractual clauses or rely on other lawful transfer mechanisms to protect your data.

Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, to support our operations, to comply with legal or regulatory obligations, and to resolve disputes. When data is no longer required, we securely delete or anonymise it.

Your Rights

If you are located in the European Economic Area or otherwise covered by applicable data protection law, you have rights in relation to your personal data. These include the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of personal data where there is no lawful reason for us to keep it.
Request restriction of processing in certain circumstances.
Object to processing based on legitimate interests or for direct marketing purposes.
Request data portability for data you have provided to us in a structured, commonly used and machine-readable format.
Withdraw consent where processing is based on consent.

To exercise your rights, contact us at Casino. We may ask you to verify your identity before fulfilling requests. You also have the right to lodge a complaint with a supervisory authority.

Security

We take reasonable technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration and destruction. These measures include access controls, encryption where appropriate, monitoring and staff training. Please keep your account credentials secure and do not share them with others.

Children's Privacy

Our services are intended for adults only. We do not knowingly collect or process personal data of children under the minimum legal age for our services. If we become aware that we have collected data of a child in error, we will take steps to delete that information as soon as possible.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the website or by other appropriate means. The date of the latest revision will be posted on the policy.