Your Privacy at Betrolla
This Privacy Policy explains what personal data we collect when you play at Betrolla Casino, how we use it, who we share it with, and the controls you hold over it. It applies to every visit to betrolla.uk.com and every account you hold with us.
The Data We Collect
To operate your account we collect the details you enter during registration and verification, plus data generated by your activity on the platform.
- Identity data: name, date of birth, email address, phone number, residential address
- Verification documents: passport or ID copy, proof of address, payment method evidence collected for KYC
- Transaction data: deposits, withdrawals, bonuses, wagering records across GBP and crypto
- Technical data: IP address, device type, browser, operating system, approximate location
- Gameplay behaviour: games played, stakes, session times, win and loss history
- Marketing preferences: which offers you opted into, whether via email or SMS
How We Use Your Data
We process your data for specific, stated purposes only. No processing happens without a purpose listed here.
Your identity and verification documents let us confirm you are over 18 and legally permitted to gamble, as required by our Curaçao licence (8048/JAZ2025-042). Transaction data runs your deposits and withdrawals, including the 24-hour e-wallet processing window and card payouts within 1 to 3 business days.
Behavioural data feeds our responsible-gambling monitoring: deposit limits, loss limits and session reminders depend on accurate activity records. Where you have consented, we also use your contact details to send promotions such as the weekly cashback up to 15% or the Monday 50% reload bonus. You can withdraw that consent at any time.
- Creating and maintaining your player account
- Carrying out KYC and anti-money-laundering checks before your first withdrawal
- Processing payments in GBP, EUR, USD and supported cryptocurrencies
- Detecting and preventing fraud, bonus abuse and duplicate accounts
- Monitoring play against your self-set gambling limits and GAMSTOP status
- Sending marketing messages where you have given consent
- Meeting legal, regulatory and audit obligations
Our Legal Bases
Under GDPR, every processing activity needs a legal basis. Here are the four we rely on. Contract covers everything required to deliver the service you signed up for: account creation, game access, deposits, withdrawals and customer support. Without this data we cannot perform our side of the agreement.
Legal obligation covers checks the law demands, such as identity verification, transaction monitoring and record-keeping for AML purposes. We cannot skip these even if you ask us to. Legitimate interest covers fraud prevention and security monitoring: we balance our interest in a safe platform against your rights, and we consider that balance fair. Consent applies to marketing. We send promotional messages only where you opted in, and you can opt out at any time without affecting your account.
How Long We Keep It
We do not keep data longer than the purpose requires. Retention periods follow regulatory minimums and practical expiry dates.
| Data category | Retention period |
|---|---|
| Transaction and wagering records | Minimum 5 years after account closure, per AML regulations |
| KYC verification documents | 5 years after verification, then securely deleted |
| Identity and account data | For the life of the account, then 5 years for audit purposes |
| Marketing consent and preferences | Until you withdraw consent, then up to 12 months as proof of withdrawal |
| Technical logs and IP records | Up to 12 months |
| Live chat and support tickets | Up to 3 years |
| Data of accounts never used | 12 months from registration, then erased |
Who We Share Data With
We never sell your personal data. We share it only with processors and authorities who need it for a defined purpose, under written data-processing agreements.
Payment processors handle your card, e-wallet and crypto transactions. KYC and AML verification providers check your documents against sanctions and fraud databases. Our game providers, such as Evolution and Pragmatic Play, receive the minimum data needed to credit gameplay to your account. Analytics providers measure site performance in aggregate. Gambling regulators and law-enforcement bodies may receive data where a legal request compels disclosure. Each processor acts on our instructions and cannot use your data for their own purposes.
- Payment processors and acquiring banks
- Identity verification and AML screening providers
- Game and platform providers
- Analytics and site-performance tools
- Regulators, auditors and law enforcement, where legally required
Your Rights Over Your Data
You control your data. Whatever your location, you can exercise any of the rights below by emailing our support team, and we will respond within one month.
Access: get a copy of the personal data we hold about you. Rectification: correct anything inaccurate or incomplete, such as an outdated address. Erasure: request deletion where no legal obligation requires us to keep the record. Portability: receive your account and transaction history in a machine-readable format and take it to another operator. Objection: object to processing based on legitimate interest, notably fraud screening. Withdrawal of consent: stop marketing at any time, one click or one email, with no effect on your account or bonuses.
If you believe we mishandled your data, you can complain to your national data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk).
Cookies and Tracking
We use cookies to keep you logged in, remember your preferences, and measure how the site performs. Analytics cookies and marketing cookies load only after you accept them in the consent banner; you can change your choice at any time from the cookie settings link in the footer. For a full breakdown of every cookie, its purpose and its lifespan, read our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers runs over TLS encryption. Data at rest is encrypted on our servers, and payment card details are held by PCI DSS-certified processors rather than by us directly.
Access to player data follows the principle of least privilege: only staff who need it for support, payments or compliance can see it, and every access is logged. Regular penetration testing and vulnerability scans back up these controls.
If a personal data breach affects your rights, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and we will inform you directly where the breach carries a high risk to you.
Contact Our Data Officer
Questions about this policy, a data request, or a complaint go straight to our Data Protection Officer. Write to [email protected] and we will respond within one month, extended by two further months only where the request is complex, and we will tell you if so. Our general support team is also reachable 24/7 at [email protected].
We review this Privacy Policy whenever our processing changes. The version published on this page is always the current one, and material changes will be announced on the site before they take effect.
Frequently Asked Questions
How do I stop marketing emails from Betrolla?
Use the unsubscribe link in any email or contact support. Withdrawal takes effect immediately and does not affect your account, bonuses or withdrawals.
Can I get a copy of all the data you hold on me?
Yes. Email [email protected] requesting a data access copy. We deliver your account details, verification records and transaction history in a portable format within one month.
Do you keep my ID documents forever?
No. We retain KYC documents for 5 years after verification to meet anti-money-laundering rules, then delete them securely. Marketing consent data is erased as soon as you withdraw it.
Do you sell my personal data?
Never. We share data only with payment processors, verification providers, game providers and regulators, each for a defined purpose under strict agreements.