Privacy Policy
This policy explains how Voodoo Casino collects, uses, stores, and protects your personal information. By registering an account, you agree to these terms. If you disagree with any part, don't use the platform.
Last updated: November 2024. We reserve the right to modify this policy at any time. Changes take effect immediately upon posting. Continued use of the site after updates constitutes acceptance.
What Information We Collect
We collect data you provide directly and information generated through your use of the platform.
Information You Provide
- Account Registration: Email, password, name, date of birth, country of residence, currency preference
- KYC Verification: Government ID, proof of address, payment method details (card photos, e-wallet screenshots)
- Payment Information: Card numbers (encrypted), crypto wallet addresses, transaction history
- Communication Data: Live chat transcripts, email correspondence, support ticket details
- Optional Information: Phone number, marketing preferences, responsible gaming limit settings
Automatically Collected Data
- Technical Data: IP address, browser type, device ID, operating system, screen resolution
- Usage Data: Games played, bet amounts, session duration, win/loss records, bonus claims
- Cookies & Tracking: Session cookies (required for login), analytics cookies (Google Analytics), advertising pixels
- Geolocation: Approximate location based on IP (used for regulatory compliance and fraud prevention)
How We Use Your Information
Your data serves specific operational, legal, and marketing purposes.
Core Platform Functions
- Process deposits, withdrawals, and financial transactions
- Verify your identity (KYC/AML compliance)
- Maintain account security and prevent unauthorized access
- Track gameplay for VIP level progression and bonus eligibility
- Provide customer support and resolve disputes
Legal & Regulatory Compliance
- Meet Curacao eGaming licensing requirements
- Prevent fraud, money laundering, and underage gambling
- Detect and investigate duplicate accounts
- Respond to legal requests from authorities (court orders, regulatory inquiries)
- Enforce terms and conditions, including bonus abuse prevention
Marketing & Communications
- Send promotional emails about bonuses, tournaments, and new games (if you opt in)
- Display targeted ads on third-party websites (via cookies and pixels)
- Analyze user behavior to improve platform features
- Notify you of account activity (deposits, withdrawals, security alerts)
You can opt out of marketing emails via account settings or unsubscribe links. Transactional emails (withdrawals, security alerts) can't be disabled.
Who We Share Your Data With
We don't sell your data to third parties. However, operational requirements mean certain entities access your information.
Service Providers
- Payment Processors: Card networks, e-wallet providers, crypto payment gateways (they see transaction amounts, payment method details)
- Game Providers: NetEnt, Pragmatic Play, Evolution Gaming (they receive anonymized gameplay data for RNG verification)
- KYC Verification Services: Third-party identity verification platforms (Jumio, Onfido) that process your uploaded documents
- Analytics Platforms: Google Analytics, Hotjar (track site usage, don't access personally identifiable payment info)
- Email Service Providers: MailChimp, SendGrid (handle promotional email campaigns)
Legal & Regulatory Bodies
- Curacao eGaming regulators (if requested during audits or investigations)
- Law enforcement agencies (if compelled by valid legal orders)
- Financial crime units (for AML/CTF compliance reporting)
Corporate Affiliates
Voodoo Casino operates under Dama N.V., which manages multiple casino brands. Your data may be shared across Dama-operated platforms for fraud detection, VIP program coordination, and consolidated marketing. Each brand maintains separate accounts - your Voodoo balance doesn't transfer to sister casinos.
How Long We Keep Your Data
Active Accounts: Data retained indefinitely while your account remains open and active.
Closed Accounts: After account closure (temporary or permanent), we retain records for 7 years to comply with financial regulations and fraud prevention requirements. This includes:
- Transaction history
- KYC documents
- Support communications
- Gameplay logs
After 7 years, data is anonymized (personal identifiers removed) or deleted entirely. Aggregated, anonymized data (e.g., "Players from UK deposited €X in 2023") may be retained permanently for analytics.
How We Protect Your Information
We use industry-standard security measures but can't guarantee absolute protection. No system is 100% immune to breaches.
Technical Safeguards
- Encryption: 256-bit SSL for data transmission, AES-256 for database storage
- Access Controls: Role-based permissions - support staff can't access payment details, finance team can't see gameplay data
- Firewall Protection: Network-level security against DDoS attacks and intrusion attempts
- Regular Audits: Third-party penetration testing (frequency not disclosed publicly)
- Two-Factor Authentication: Optional for players, mandatory for admin accounts
Operational Safeguards
- Employee training on data protection and GDPR compliance
- Non-disclosure agreements for all staff with data access
- Incident response protocols for suspected breaches
- Regular backup systems with encrypted off-site storage
Your Responsibilities
Security also depends on you:
- Use strong, unique passwords
- Enable 2FA
- Don't share login credentials
- Log out on shared devices
- Report suspicious account activity immediately
Your Privacy Rights
Depending on your jurisdiction, you may have certain rights regarding your personal data.
GDPR Rights (EU/EEA Players)
- Access: Request a copy of all data we hold about you
- Rectification: Correct inaccurate or outdated information
- Erasure: Request deletion of your data (subject to legal retention requirements)
- Restriction: Limit how we process your data in certain circumstances
- Portability: Receive your data in machine-readable format to transfer to another service
- Objection: Opt out of marketing communications or profiling
To exercise these rights, contact [email protected] with your request. We'll respond within 30 days. May require ID verification to prevent unauthorized access.
California Privacy Rights (CCPA)
California residents can request disclosure of data categories collected, sources, business purposes, and third parties we share with. You can also request deletion (subject to exceptions) and opt out of data sales (though we don't sell data).
Other Jurisdictions
If your region has specific privacy laws (Australia's Privacy Act, Canada's PIPEDA), contact us for details on how we comply. Rights vary by location.
Underage Users
Voodoo Casino is strictly 18+. We don't knowingly collect data from minors. If we discover an underage account, it's closed immediately and all data deleted.
Parents/guardians who believe their child registered an account should contact [email protected] immediately. We'll terminate the account and refund any deposits to the payment source.
International Data Transfers
Voodoo Casino operates from Curacao but uses service providers globally (EU-based payment processors, US-based analytics platforms, Asian customer support centers). Your data may cross borders.
We rely on standard contractual clauses (SCCs) and adequacy decisions to ensure data transferred outside the EU receives equivalent protection. However, Curacao isn't GDPR-compliant by default - EU players accept this risk by using the platform.
Changes to This Policy
We update this privacy policy as needed to reflect legal changes, new features, or operational adjustments. Significant changes will be announced via email to registered users. Minor updates post directly to this page.
Check the "Last Updated" date at the top of this policy periodically. Continued use after updates means you accept the revised terms.
Privacy Questions & Requests
For data access requests, deletion inquiries, or privacy concerns, contact:
Email: [email protected]
Subject Line: Privacy Request - [Your Account Email]
Include your registered email address and specific request details. We'll verify your identity before processing. Response time: 30 days for standard requests, longer for complex inquiries.
