Privacy Policy

Version: 1.0  |  Last Updated: 3 November 2026

This Privacy Policy governs the collection, use, storage, and disclosure of personal data by Jasino ("we," "us," or "our") in connection with our website at jasino-cy.com (the "Site") and all related gaming services (collectively, the "Services"). Please read this document carefully. By registering an account or using any part of our Services, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein. If you do not agree, you must discontinue use of the Site immediately. This Policy forms an integral part of our Terms & Conditions and should be read alongside our Responsible Gaming Policy.

1. Introduction

1.1. Who We Are

Jasino is an online gaming platform operating at jasino-cy.com. We are committed to protecting the personal data of every user who visits or registers on the Site. We act as the data controller for all personal information processed in connection with the Services. Where third-party service providers process data on our behalf, they act as data processors under our instruction.

1.2. Scope of This Policy

This Privacy Policy applies to all individuals who access the Site, register an account, make deposits or withdrawals, contact customer support, or otherwise interact with our Services. It covers personal data collected online via the Site, through email correspondence, through our live-chat support widget, and through any mobile-optimised version of the platform. It does not apply to third-party websites that may be linked from our pages; those sites operate under their own privacy frameworks.

1.3. Amendments

We reserve the right to update this Policy at any time. When we do, we will revise the "Last Updated" date at the top of this page and, where the changes are material, notify registered users by email or via an on-site notice. Continued use of the Services after any revision constitutes acceptance of the updated Policy.

2. Data We Collect

2.1. Data You Provide Directly

When you register, transact, or contact us, we collect the following categories of personal data:

• Identity data: full legal name, date of birth, gender, username.
• Contact data: email address, phone number, residential address, postcode.
• Identity verification documents: copies of government-issued photo ID (e.g., passport or national identity card), proof of address (e.g., utility bill or bank statement), and, where required, source-of-funds documentation.
• Financial data: payment method details (card number masked to last four digits), billing address, transaction history including deposits, withdrawals, and bonuses.
• Account preferences: chosen currency (EUR), language settings, marketing consent, and responsible gaming limits voluntarily set by you.
• Communications data: records of live-chat transcripts, email correspondence, and any attachments you send to our support team.

2.2. Data We Collect Automatically

When you access the Site, our servers and tracking technologies collect the following data automatically:

• Technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone.
• Usage data: pages visited, session duration, games played, bet amounts, wager history, click-path data, and referral source.
• Cookie and tracking data: identifiers placed by first-party and third-party cookies, pixel tags, and similar technologies. See Section 6 for full details.
• Geolocation data: approximate location derived from your IP address for compliance and geo-restriction purposes.

2.3. Data From Third Parties

We may receive personal data from third parties, including:

• Identity and fraud verification providers (e.g., KYC bureau partners) who confirm the authenticity of your documents.
• Payment processors who communicate transaction status, chargeback alerts, and risk flags.
• Affiliate and referral partners who inform us that you accessed the Site via their platform, so we can attribute your registration correctly.
• Publicly available sources, including sanctions lists, politically exposed persons (PEP) databases, and adverse media databases, used for anti-money laundering (AML) compliance.

2.4. Special Categories of Data

We do not intentionally collect sensitive personal data (e.g., health, racial origin, religious beliefs) unless you volunteer such information in a support communication. Any such data received incidentally is treated with heightened protection and deleted once the specific interaction is resolved.

3. How We Use Your Data

3.1. Core Service Delivery

We use your personal data to create and manage your account, verify your identity and age (minimum age: 18 years), process deposits and withdrawals in EUR (€), and provide access to all gaming and support features. Without this processing, we cannot operate your account or deliver the Services.

3.2. Compliance and Regulatory Obligations

We are required to process your data to fulfil legal obligations including Know Your Customer (KYC) checks, Anti-Money Laundering (AML) screening, responsible gaming monitoring, and the detection and prevention of fraud, collusion, and cheating. This includes ongoing transaction monitoring, pattern analysis, and the assessment of your gaming behaviour against responsible gaming thresholds. Data relating to compliance checks may be shared with regulatory bodies where we are legally obliged to disclose it.

3.3. Financial Processing

Your financial data is used to process payment transactions via the methods available on the Site, handle bonus eligibility and wagering requirement calculations, process refunds and dispute resolutions, and generate financial records required for accounting and tax purposes.

3.4. Marketing and Personalisation

Where you have provided explicit consent, we may use your contact and usage data to send you promotional emails, push notifications, or SMS messages about bonuses, new games, and platform updates. You may withdraw marketing consent at any time by clicking "unsubscribe" in any email, adjusting your account preferences, or contacting us at [email protected]. Withdrawal of marketing consent does not affect processing carried out before that withdrawal.

3.5. Service Improvement

Aggregated and anonymised usage data helps us analyse platform performance, improve game offerings, optimise user experience, and conduct internal research and analytics. Where data is fully anonymised, it falls outside the scope of data protection law and this Policy.

3.6. Customer Support

Communications data (live-chat transcripts, emails) is used to resolve your queries, maintain a history of interactions for quality assurance, and train support staff. Calls and chats may be recorded for these purposes; you will be notified if applicable.

4. Legal Bases for Processing

Every processing activity we undertake is grounded in one or more of the following legal bases under applicable data protection law:

Where we rely on legitimate interests, we have conducted a balancing test to confirm that our interests do not override your fundamental rights and freedoms. You may request a summary of that assessment by contacting [email protected].

5. Data Sharing & Third Parties

5.1. Categories of Recipients

We do not sell, rent, or trade your personal data. We share it only with trusted third parties where necessary and only to the extent required for the specific purpose:

• Payment service providers: Visa, Mastercard, Maestro, Skrill, Neteller, PayPal, Paysafecard, MiFinity, Apple Pay, Google Pay, and bank transfer processors — to execute financial transactions securely.
• KYC and identity verification partners: accredited bureaus that verify your documents and screen against sanctions and PEP lists.
• Technology and hosting providers: cloud infrastructure, content delivery, and software vendors who host or support the Site under strict data processing agreements.
• Analytics and marketing technology providers: platforms used to measure campaign performance and personalise on-site experience, subject to your consent preferences.
• Affiliate partners: receive only the minimum data necessary to verify referrals and calculate commissions.
• Regulatory and law enforcement authorities: where we are under a legal duty to disclose information, for example in response to a court order or AML reporting obligation.
• Professional advisers: lawyers, auditors, and accountants, who are bound by professional confidentiality.

5.2. Data Processing Agreements

All third-party service providers who process personal data on our behalf are required to enter into a formal Data Processing Agreement (DPA) with us. These agreements obligate processors to apply appropriate technical and organisational security measures, process data only on our documented instructions, and assist us in meeting our obligations to data subjects.

5.3. Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, personal data held by us may be transferred to the acquiring entity. We will notify you via email or a prominent Site notice before your data becomes subject to a different privacy policy.

6. Cookies & Tracking Technologies

6.1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the Site to recognise your device on subsequent visits, remember your preferences, and collect statistical information about how users interact with the platform. Similar technologies include pixel tags, web beacons, local storage objects, and session identifiers.

6.2. Types of Cookies We Use

• Strictly necessary cookies: Essential for the Site to function — e.g., maintaining your login session, storing your cookie consent choice, and enabling secure transactions. These cannot be disabled.
• Performance/analytics cookies: Collect anonymised data on how visitors use the Site, which pages they visit most, and where errors occur. Used to improve platform stability and user experience.
• Functional cookies: Remember your language, currency (EUR), and game preferences so you do not need to re-enter them on each visit.
• Marketing and targeting cookies: Used by us and our advertising partners to deliver relevant promotions and measure the effectiveness of marketing campaigns. Only placed with your prior consent.

6.3. Managing Cookies

When you first visit the Site, a cookie consent banner will appear. You may accept all cookies, accept only necessary cookies, or customise your preferences by category. You may also manage or delete cookies at any time through your browser settings; however, disabling certain cookies may affect the functionality of the Site. For more information about cookies, visit www.allaboutcookies.org.

7. Data Security

7.1. Technical Measures

We implement industry-standard technical safeguards to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These include:

• TLS/SSL encryption for all data transmitted between your browser and our servers.
• Encryption at rest for sensitive stored data, including identity documents and payment information.
• Firewalls, intrusion detection systems, and regular penetration testing.
• Multi-factor authentication (MFA) options for user accounts and mandatory MFA for administrative access.
• Access controls based on the principle of least privilege, ensuring staff access only the data required for their specific role.

7.2. Organisational Measures

Our team members who handle personal data are subject to confidentiality obligations and receive regular data protection training. We conduct periodic internal audits and data protection impact assessments (DPIAs) for high-risk processing activities. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware of the breach and inform affected individuals without undue delay where required by law.

7.3. Your Responsibility

You are responsible for keeping your account credentials confidential. Never share your password with anyone, including our support staff, who will never ask for your full password. If you suspect unauthorised access to your account, contact us immediately at [email protected].

8. Data Retention

8.1. Retention Periods

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy or as required by law. Our standard retention schedule is as follows:

• Account and transactional data: retained for a minimum of five (5) years after account closure, in line with AML and financial record-keeping obligations.
• KYC documentation: retained for five (5) years from the end of the business relationship, as required under applicable AML legislation.
• Marketing preferences and consent records: retained for the duration of your account plus three (3) years to demonstrate compliance with consent requirements.
• Support communications: retained for up to three (3) years after resolution of the relevant query.
• Technical/log data: retained for up to twelve (12) months for security and fraud investigation purposes.

8.2. Deletion and Anonymisation

At the end of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be linked to you. Where deletion is not immediately possible (e.g., data held in backup systems), we isolate and protect the data until deletion is feasible.

9. Your Rights

9.1. Overview of Your Rights

Subject to applicable law and certain exceptions, you have the following rights with respect to your personal data:

• Right of access: You may request a copy of the personal data we hold about you, together with information about how and why we process it. We will respond within 30 days of receiving a valid request.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to ask us to correct or complete it. You may update basic profile information directly in your account settings; for identity document corrections, please contact our support team.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer needed for the original purpose, where you withdraw consent (and there is no other legal basis for processing), or where you object to processing based on legitimate interests and your interests prevail. Note that this right is subject to overriding legal obligations — for example, we may be required to retain transactional records for AML compliance even after an erasure request.
• Right to restriction of processing: You may request that we restrict the processing of your data in circumstances such as when you contest its accuracy (while we verify it) or when you have objected to processing (while we assess that objection).
• Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to object: You may object at any time to processing based on our legitimate interests, including profiling for direct marketing purposes. Once you object to marketing, we will cease that processing immediately.
• Rights related to automated decision-making: Where we make decisions about you solely by automated means that produce legal or similarly significant effects, you have the right to request human review of that decision, express your point of view, and challenge the outcome.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

9.2. How to Exercise Your Rights

To exercise any of the above rights, submit a written request to [email protected]. Include your full name, registered email address, and a clear description of the right you wish to exercise. We may ask you to verify your identity before processing the request to protect against unauthorised access. We will respond within 30 calendar days; where a request is complex or we have received a high volume of requests, we may extend this period by a further 60 days, in which case we will notify you within the initial 30-day window.

9.3. Right to Lodge a Complaint

If you believe we have processed your personal data unlawfully or have not adequately addressed your rights request, you have the right to lodge a complaint with a competent data protection supervisory authority. We encourage you to contact us first at [email protected] so we have an opportunity to resolve your concern directly.

9.4. Responsible Gaming and Data

As part of our commitment to player protection, we monitor account behaviour and process gaming data to identify signs of problematic gambling. This processing is in your vital interest and is also a legal obligation. If you require assistance with gambling-related concerns, please visit our Responsible Gaming page or contact the following support organisations available in Cyprus:

• Cyprus National Addictions Authority (NAAC) — Helpline: 1402 | www.naac.org.cy
• Safer Gambling Cyprus (NBA) — Helplines: 1454 / 1456 | safergambling.gov.cy
• Pharos Centre (Helpline 1422) — Free, anonymous, daily 9 AM–7 PM | pharoscenter.org
• Helpline 1480 — Digital technology and online gambling support | helpline1480.cy
• GambleAware — International responsible gambling resources | www.gambleaware.org
• Gamblers Anonymous — Peer support network | www.gamblersanonymous.org
• GamCare — Counselling and information services | www.gamcare.org.uk

10. International Data Transfers

10.1. Transfers Outside Your Country

Some of our third-party service providers are located in countries outside the European Economic Area (EEA) or your country of residence. Where personal data is transferred internationally, we take steps to ensure that adequate protection is in place. The mechanisms we rely on include:

• Adequacy decisions: transfers to countries that have been formally recognised as providing an adequate level of data protection.
• Standard Contractual Clauses (SCCs): contractual obligations approved by relevant data protection authorities, binding the recipient to provide protections equivalent to those available in the EEA.
• Binding Corporate Rules (BCRs): where applicable within multi-national group structures.
• Derogations: in limited circumstances, transfers may be based on your explicit consent or the necessity of performing or defending legal claims.

10.2. Requesting Information

You may request further information about the specific safeguards applied to any given international transfer by contacting us at [email protected]. We will provide details of the applicable transfer mechanism and, where permitted, copies of the relevant documentation.

11. Minors

11.1. Age Restriction

Our Services are strictly intended for individuals aged 18 years or older. We do not knowingly collect, process, or store personal data belonging to persons under the age of 18. During registration, you are required to confirm that you meet the minimum age requirement, and we perform age verification as part of our KYC process. If we become aware that a minor has registered an account or provided personal data without parental consent, we will immediately suspend the account, delete the data, and refund any deposited funds in accordance with our Terms & Conditions.

11.2. Reporting Underage Usage

If you have reason to believe that a person under 18 is using the Site, please notify us immediately at [email protected]. We treat all such reports seriously and will investigate promptly.

12. Changes to This Policy

12.1. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our Services, applicable law, or industry best practices. The current version number and the "Last Updated" date are displayed at the top of this page. Minor clarifications or wording changes may be made without prior notice. Material changes — such as new processing purposes, new categories of data, or new third-party recipients — will be communicated to registered users at least 14 days before they take effect via email to the address registered on your account or via a prominent notice on the Site.

12.2. Archived Versions

Previous versions of this Policy are available upon request by contacting [email protected]. If you wish to review the version in force at the time of a specific transaction or interaction, include the relevant date in your request and we will provide the applicable document.

13. Contact Information

13.1. General Support

For any general questions, account-related queries, or to exercise your rights as described in Section 9, you may contact our customer support team through the following channel:

• Email: [email protected]
• Live Chat: Available directly on the Site, accessible via the chat icon in the bottom-right corner of every page.

13.2. Privacy and Data Protection Enquiries

For all matters specifically related to this Privacy Policy, data subject rights requests, or data protection concerns, please direct your correspondence to our designated privacy contact:

• Privacy Email: [email protected]
• Subject line: Please use "Data Subject Request" or "Privacy Enquiry" to ensure your message is routed to the correct team without delay.

13.3. Response Commitment

We aim to acknowledge all privacy-related enquiries within 48 hours (on business days) and to provide a substantive response within the timeframes described in Section 9.2. If your matter is urgent — for example, you suspect a data breach affecting your account — please mark your email as urgent and include a brief description of the issue. This Privacy Policy was last reviewed on 3 November 2026 and is effective from that date.