Your Privacy at Duel Casino
This Privacy Policy explains what personal data we collect when you play at Duel Casino, why we collect it, how long we keep it, and what you can do about it. It applies to every visitor and registered player on our website and mobile platform.
Data We Collect From You
Categories of personal data
We only collect data we genuinely need to run your account, meet our legal obligations and keep our platform safe. Since we launched in 2023 we have kept that list deliberately short.
- Identity data: your full name, date of birth, email address, phone number and residential address
- Verification documents: passport, driver licence or utility bills submitted during KYC checks
- Transaction data: deposits, withdrawals, bonuses, wagering history and payment method details
- Technical data: IP address, device type, browser version, operating system and approximate location
- Gameplay behaviour: games played, session length, bets placed, wins, losses and self-assessment responses
- Marketing preferences: which channels you opted into, when you consented and how you withdrew consent
How We Use Your Information
Your data works for you in specific ways. We create and maintain your account, verify your identity before your first withdrawal, process deposits and payouts, and prevent fraud and underage gambling.
- Account creation, login and account administration
- KYC and anti-money-laundering verification required by our Curaçao licence (8048/JAZ2023-045)
- Payment processing across PayID, cards, e-wallets and crypto
- Fraud detection, dispute handling and player protection monitoring
- Responsible-gambling tools, including deposit limits and self-exclusion enforcement
- Marketing communications, but only where you have given consent
- Compliance with law-enforcement and regulatory requests
Our Legal Bases
Contract
We process identity, account and transaction data to perform the contract you enter when you register. Without this data we cannot open your account, take deposits or pay out winnings.
Legal obligation
Our licence obliges us to verify your identity, keep transaction records for at least 5 years and report suspicious activity. We process documents and financial data to meet those duties, and no consent is required for it.
Legitimate interest
We rely on legitimate interest for fraud prevention, security logging, aggregate analytics and resolving disputes. This interest never overrides your rights, and you may object to processing on this basis at any time.
Consent
Marketing emails, SMS and personalised bonus offers run on your consent alone. Consent is freely given, specific and revocable, and withdrawing it never affects your access to the games or your account balance.
How Long We Keep Data
Every category has a defined shelf life. We delete data as soon as its purpose expires or the retention period ends, whichever comes later.
The table below shows the retention period per category. Regulatory minimums override shorter periods where they apply.
| Data category | Retention period |
|---|---|
| Identity and account data | 5 years after account closure |
| KYC verification documents | 5 years after the last transaction |
| Transaction and wagering records | 5 years minimum, per AML rules |
| Technical and device logs | 12 months |
| Gameplay behaviour data | 5 years for auditing purposes |
| Marketing preferences | Until you withdraw consent |
| Data of non-registered visitors | 12 months from last visit |
Who We Share Data With
We never sell your personal data. Sharing is limited to providers who perform a service we cannot run ourselves, and each one is bound by a data-processing agreement.
- Payment processors handling your deposits and withdrawals, including card networks, e-wallet providers and crypto gateways
- KYC and AML verification services that check your documents against sanctions and fraud databases
- Game and platform providers supplying the slots and live tables you play
- The Curaçao licensing authority and other regulators or law-enforcement bodies when lawfully requested
- Analytics and hosting providers operating under strict data-processing terms
- Professional advisers such as auditors and lawyers, only for the purpose engaged
Transfers outside Australia
Some of the providers above process data outside Australia. Where that happens we rely on contractual safeguards such as standard contractual clauses to keep the protection level consistent.
Your Rights and Choices
You control your data, and exercising these rights costs nothing. Send your request through live chat or email [email protected] and we respond within 30 days.
- Access: get a copy of the personal data we hold about you
- Rectification: correct data that is wrong or incomplete
- Erasure: have your data deleted where no legal retention duty applies
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interest
- Withdrawal of consent: opt out of marketing at any time, one click or one email
- Complaint: escalate to the Office of the Australian Information Commissioner or, if you are in the EU, your national supervisory authority
Contacting our data protection team
For anything this Policy does not answer, write to our data protection officer at [email protected]. We treat every privacy query as priority and acknowledge receipt within two business days.
Cookies and Tracking Tools
Our site uses essential cookies for login, session security and payment integrity, plus optional analytics and marketing cookies that only load with your consent. You manage your choices through the cookie banner or your browser settings at any time.
The full list of cookies, their purposes and lifespans sits in a dedicated document. Read our Cookies Policy for the complete breakdown before you change your settings.
Security at Duel Casino
All traffic between your device and our servers runs over TLS encryption. Card and wallet details are tokenised so full payment credentials never sit in our databases.
- Role-based access controls, with staff seeing only the data their job requires
- Multi-factor authentication for every internal administrative account
- Continuous monitoring for intrusion attempts and unusual account activity
- Regular penetration testing and independent security audits
- Encrypted, access-controlled backups of all player records
If a breach happens
If a data breach risks your rights, we notify the relevant regulator without undue delay and affected players within 72 hours of confirming the breach. You hear about it from us first, not from a third party.
Frequently asked questions
Do you sell my personal data to advertisers?
No. We never sell or rent your data. Marketing partners only process it under contract on our instruction, and only if you consented to receive offers.
Can I play without giving you my ID documents?
You can register and deposit without full verification, but our licence requires KYC before your first withdrawal, so we will ask for documents at that point.
How do I stop marketing emails?
Use the unsubscribe link in any email, toggle marketing off in your account settings, or email [email protected]. Consent withdrawal takes effect immediately.
Why do you keep my transaction history for 5 years?
Anti-money-laundering rules under our Curaçao licence require us to retain transaction and wagering records for at least 5 years, even after your account closes.
What happens to my data if I close my account?
Marketing data is erased immediately. Account, KYC and transaction records are kept for the statutory 5-year period, then permanently deleted.