Your Privacy at Yabby Casino
This Privacy Policy sets out what personal data we collect when you play at Yabby Casino, how we use it, who we share it with and the controls you have over it. It applies to every visitor who registers an account or browses yabbycasino.com.
Data We Collect From You
We collect only the data we need to run your account, verify your identity and meet our legal obligations. When you register, we ask for your name, email address, phone number, date of birth and residential address. Before your first withdrawal we request verification documents as part of our KYC process: a government-issued ID, proof of address and confirmation of your payment method.
- Identity and contact data: name, email, phone, date of birth, address
- Verification documents: passport, driver licence, utility bill, card or wallet confirmation
- Transaction data: deposits, withdrawals, bonuses, wagering records
- Technical data: IP address, device type, browser, operating system, approximate location
- Gameplay behaviour: games played, session times, bets placed, wins and losses
- Marketing preferences: which promotions you opt in to and how you want us to contact you
How We Use Your Data
Every use of your data maps to a specific purpose. We create and manage your account, process deposits and withdrawals, run KYC and AML checks, and prevent fraud and bonus abuse. We also monitor play patterns to support responsible gambling, send marketing only where you have consented, and comply with the obligations set by our Curaçao licence (8048/JAZ2021-195).
- Account creation, login and general account servicing
- Identity verification and anti-money-laundering checks
- Payment processing across AUD, BTC, ETH, USDT and other supported currencies
- Fraud prevention, collusion detection and bonus-abuse controls
- Responsible-gambling monitoring and intervention where warranted
- Marketing communications, only with your consent
- Compliance with regulatory, tax and law-enforcement requests
Why the Law Lets Us
Contract
We process your data to perform the contract between us: opening your account, letting you deposit and play, and paying out withdrawals. Without this data we cannot provide the service you signed up for.
Legal obligation
Our licence requires us to verify your identity, keep transaction records for at least five years and report suspicious activity. We process data for these purposes whether or not you consent, because the law demands it.
Legitimate interest
We rely on legitimate interest to keep the platform secure, detect fraud, prevent underage and excluded play, and analyse how the site performs so we can fix problems and improve it. This interest never overrides your rights to privacy.
Consent
For marketing emails, SMS and personalised offers we need your active consent. You can withdraw it at any time from your account settings or by using the unsubscribe link in any message we send.
How Long We Keep It
We do not hold your data forever. Each category has a retention period tied to its purpose, and once that period ends the data is deleted or irreversibly anonymised.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then 5 years after closure |
| KYC verification documents | 5 years from the date of verification |
| Transaction and wagering records | Minimum 5 years, as required by our licence |
| Technical and device logs | 12 months, then deletion |
| Marketing preferences | Until you withdraw consent or delete your account |
| Dispute and complaint records | 5 years after resolution |
Who We Share It With
We never sell your personal data. We share it only with parties who help us operate the casino, and each one is bound by contractual confidentiality and security obligations.
- Payment processors handling your deposits and withdrawals, including card, e-wallet and crypto networks
- KYC and AML verification providers that check your documents against sanctions and fraud databases
- The Curaçao regulator and other authorities where we are legally required to disclose
- Game providers hosting the 450 titles in our lobby, receiving only your player ID and session data
- Analytics and hosting services that keep the site running and help us diagnose faults
Your Rights Over Your Data
You are in charge of your data. Send any request to our data protection officer at [email protected] and we will respond within 30 days. We may ask you to verify your identity before acting on a request, using the same documents as our KYC process.
- Access: get a copy of the data we hold about you
- Rectification: correct anything that is inaccurate or out of date
- Erasure: ask us to delete data we no longer need
- Portability: receive your data in a machine-readable format
- Objection: object to processing based on legitimate interest
- Withdrawal of consent: stop marketing at any time
- Complaint: lodge a complaint with your local data protection authority or with the Curaçao regulator
Cookies and Tracking
We use cookies to keep you logged in, remember your preferences, measure site traffic and, where you agree, deliver marketing. You can manage or refuse non-essential cookies through the banner shown on your first visit and change your choice at any time. Full details of every cookie category, its purpose and its lifespan sit on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers is encrypted with TLS. Verification documents and other sensitive records sit in access-controlled storage, and staff can reach personal data only on a strict need-to-know basis with role-based permissions. We run regular security reviews and penetration tests on our platform.
- TLS encryption for all data in transit
- Encrypted, access-restricted storage for KYC documents
- Role-based access controls and staff confidentiality obligations
- Regular vulnerability scanning and penetration testing
- Breach notification: if a breach risks your rights, we tell you and the regulator without undue delay
Frequently asked questions
Do you share my data with advertisers?
No. We never sell or rent your personal data. Marketing partners only process data on our instructions under strict contractual controls.
How do I stop marketing messages?
Withdraw consent any time via your account settings or the unsubscribe link in every message. We stop marketing sends immediately and delete your marketing preferences at your request.
Can I get a copy of everything you hold about me?
Yes. Email [email protected] requesting access and we will provide a copy of your data within 30 days, after verifying your identity.
Why do you keep my ID documents for 5 years?
Our Curaçao licence requires us to retain KYC verification documents and transaction records for a minimum of five years. After that period we delete or anonymise them.