Privacy Policy

Categories of Information We Handle

When you register, we collect identity attributes such as full legal name, date of birth, residential address, email, and phone number. These items are mandatory for license compliance under our Anjouan Gaming authorization (ALSI-202510007-FI1).

Transactional records covering deposits, withdrawals, wagering history, and payment method metadata are stored to fulfill anti-money-laundering obligations and to assist in resolving billing inquiries.

Technical signals including IP address, device fingerprint, browser version, and approximate geolocation are captured automatically to safeguard the platform against unauthorized access attempts.

Purposes of Processing

Casibom Casino uses personal information primarily to deliver the gaming service: opening accounts, processing financial movements, and resolving disputes. Without this baseline data, the platform cannot legally provide its products.

Secondary purposes include detecting suspicious behavior, preventing collusion or bonus abuse, and meeting reporting duties imposed by our regulator. Statistical models built on anonymized aggregates help refine the gameplay experience.

Marketing communications are dispatched only when you have explicitly consented. Withdrawal of consent is straightforward through the preference panel and does not affect access to the core service.

Sharing With Third Parties

Selected service providers receive limited datasets to perform tasks such as payment authorization, KYC verification, fraud scoring, and cloud hosting. Each provider operates under a written contract that imposes confidentiality and security duties equivalent to ours.

Regulatory bodies and law enforcement authorities may receive information when a lawful request is presented. We carefully assess every demand and challenge overbroad requests where feasible.

Retention, Security, and Your Rights

Records are kept for as long as the account remains active and for a further period mandated by gambling regulation, typically five years after closure. Beyond this horizon, datasets are either anonymized or securely destroyed.

We deploy encryption in transit and at rest, role-based access restrictions, intrusion monitoring, and periodic security audits. No safeguard is absolute, and we recommend strong, unique passwords combined with two-factor authentication.

Subject to applicable law, you may request a copy of your data, ask for corrections, demand erasure, restrict processing, or port records to another operator. Requests are addressed within thirty calendar days once identity has been confirmed.