Your Privacy at Casigood Casino
This policy explains what personal data we collect when you play with us, why we hold it, how long we keep it and what rights you have over it. It applies to every visit to casigood.uk.com and to every account you open with us.
The Data We Collect
We collect only the data we need to run your account lawfully. That splits into six categories, and you can request a full copy of everything we hold under each of them at any time.
- Identity data: your name, date of birth, email address, phone number and residential address.
- Verification documents: copies of your ID, proof of address and payment method, collected under our KYC obligations before your first withdrawal.
- Transaction data: deposits, withdrawals, bonus usage and wagering history, including payment method details.
- Technical data: IP address, device type, browser, operating system and session timestamps.
- Gameplay behaviour: games played, bets placed, win and loss patterns, and session duration.
- Marketing preferences: which communications you have opted into or out of, and how you set those choices.
How We Use Your Data
Your data drives seven core purposes. Without identity data we cannot open your account; without transaction data we cannot process your £10 minimum deposit or release withdrawals to your Visa Debit, PayPal or Trustly account.
We also monitor gameplay for responsible-gambling signals, because we are required to intervene when patterns suggest harm, and we run marketing only where you have given consent. Every use maps to a legal basis set out in the next section.
- Creating and maintaining your player account.
- Verifying your identity and age under KYC rules.
- Processing deposits, withdrawals and bonus payments.
- Detecting fraud, bonus abuse and duplicate accounts.
- Monitoring play against responsible-gambling markers.
- Sending marketing messages where you have consented.
- Meeting legal, licensing and tax obligations.
Our Legal Bases
Contract
We process identity, transaction and account data because they are necessary to perform the contract you form with us when you register. If you did not share this data, we could not hold funds for you, apply the 35x wagering terms of your welcome bonus or pay out winnings.
Legal obligation
Our Malta Gaming Authority licence (MGA/B2C/394/2023) obliges us to verify your age, screen transactions against money-laundering rules and retain gambling records. We cannot switch this processing off, and refusing it means we must close your account.
Legitimate interest
Fraud prevention, duplicate-account detection, security logging and aggregate statistics on how our 2,400+ games perform all rest on our legitimate interest in running a safe, viable casino. We weigh this interest against your privacy rights, and you may object to it as described below.
Consent
Marketing emails, SMS and promotional push notices depend on your active consent. You gave or withheld it at sign-up, and you can withdraw it at any time through your account settings or the unsubscribe link in every message. Withdrawal never affects the lawfulness of messages sent before it.
How Long We Keep It
Nothing is held indefinitely. Each category has a defined clock, and once it runs out the data is deleted or anonymised so it can no longer point to you.
One hard floor applies: anti-money-laundering and licensing rules require us to keep transaction and verification records for at least 5 years after your last activity, and we apply that period in full. Marketing data is the shortest-lived; it goes as soon as you ask.
| Data category | Retention period |
|---|---|
| Identity and account data | Life of the account plus 5 years after closure |
| KYC verification documents | 5 years after account closure |
| Transaction and wagering records | 5 years minimum, per regulatory requirement |
| Technical and IP logs | Up to 12 months, then deletion |
| Marketing preferences and history | Until consent is withdrawn or account deleted |
| Self-exclusion and GAMSTOP records | Duration of the exclusion, plus the statutory retention period |
Who We Share Data With
We never sell your personal data. Sharing happens only with processors and authorities who need it for a defined job, bound by contract to use it for that job alone.
Game and payment providers receive the minimum needed to settle your play, typically an account token rather than your full identity. We act as controller; our providers act as processors and cannot repurpose your data.
- Payment processors serving your deposit and withdrawal methods, including card schemes, PayPal, Trustly and e-wallet operators.
- KYC and AML verification providers that check your ID and address documents.
- Game providers delivering our slots, live tables and jackpots.
- Analytics services measuring site performance in aggregate.
- Regulators and law-enforcement bodies, where a lawful demand is made.
- GAMSTOP, where you register for self-exclusion.
- Professional advisers such as auditors and lawyers, under confidentiality duties.
Your Rights Over Your Data
UK and EU data protection law gives you seven enforceable rights against us. We answer requests within one month, and we never charge for the first copy of your data. Where we refuse a request, for example an erasure claim that clashes with our 5-year transaction-retention duty, we tell you why and how to challenge it.
You also have the right to complain to a data protection authority. UK players can contact the Information Commissioner's Office; players in EU member states can contact their national supervisory authority.
- Access: a copy of the personal data we hold about you.
- Rectification: correction of inaccurate or incomplete records.
- Erasure: deletion where no overriding legal duty applies.
- Portability: your account and transaction data in a machine-readable format.
- Objection: an objection to processing based on legitimate interest.
- Withdrawal of consent: for marketing, at any time, via one click.
- Complaint: to the ICO or your national data protection authority.
Cookies and Similar Technologies
We use session cookies to keep you logged in, preference cookies to remember settings such as your currency, and, subject to your consent, analytics and marketing cookies that measure how the site performs and tailor offers. Our cookie banner lets you accept or reject non-essential categories before any of them load, and you can change your choices at any time. Full details, including the complete list of cookies and their lifespans, sit on our dedicated Cookies Policy page.
Security and Contacting Our DPO
How we protect your data
All traffic to casigood.uk.com runs over TLS encryption, and your KYC documents and payment records are encrypted at rest. Access to personal data is role-based: only staff who need it for support, payments or compliance can see it, and every access is logged and auditable. We back up data securely and destroy it on schedule rather than leaving it idle.
If a breach ever affects your personal data and creates a risk to you, we will notify the relevant supervisory authority within 72 hours and tell you directly without undue delay, including what happened, what data was involved and what we are doing about it.
Contacting our Data Protection Officer
For any privacy question, data subject request or complaint, write to our Data Protection Officer at [email protected] or to Casigood Ltd, using the registered address shown in your account's legal page. We treat every request as a formal one and log it from the day it arrives. This policy was last reviewed in 2026 and we will update this page whenever our practices change, with the revised date shown at the top.
Frequently Asked Questions
How do I get a copy of all data you hold about me?
Email [email protected] or contact our 24/7 live chat and ask for a data subject access request. We send your complete data set within one month, free of charge.
Can I delete my account and all my data?
Yes, you can close your account at any time. Identity and transaction records are then kept for 5 years, because our MGA licence and anti-money-laundering duties require it. Marketing data is erased immediately.
Do you share my data with advertisers?
No. We never sell personal data. Marketing partners process your contact details only where you have consented, and only to deliver the messages you asked for.
Why do you need my ID and proof of address?
Licensing law requires us to verify your age and identity before your first withdrawal. Checks are typically processed within 48 hours and the documents are then retained for the statutory 5-year period.
How do I stop marketing emails?
Use the unsubscribe link in any message, or switch off communications in your account settings. Consent withdrawal takes effect immediately and applies to email, SMS and push notices alike.