Privacy Policy
Who is responsible for your data
Novatrix SRL, the Costa Rica company that owns and operates our casino, is the data controller for your personal data. A Data Protection Officer handles questions about this policy and requests about your data. We follow applicable privacy laws, including PIPEDA and the GDPR. Our services are only for adults aged 18 or over, and we do not knowingly collect data from younger people.
What we collect
We collect identity details such as your full name and username, your birth date, your gender and nationality, and the number of your passport or ID card. We also collect your contact details and proof of address, financial details such as card or bank information and proof of the source of your funds, the history of your deposits and withdrawals, your gaming activity and bonuses, technical data such as your IP address, browser and device, and your marketing preferences.
Why we use it
We use your data to run your account, process payments, verify your identity and answer your questions. We also use it to meet anti-money-laundering, KYC and responsible gaming duties, to stop fraud and bonus abuse, to send offers you agreed to receive, to improve our site and to keep it secure. Conversational AI tools help our team manage support messages.
Where it comes from
Most of the data comes from you. We also receive data from identity verification services, banks and payment providers, AML and PEP databases, regulators and responsible gaming registers, and from affiliate, advertising and analytics partners that may share pseudonymous data.
Who we share it with
We may share data within our group to fight fraud and bonus abuse and for AML and responsible gaming. Game providers and payment providers receive only what they need to run games and payments. Marketing partners receive your contact details only if you agreed to marketing. Communication tools for email and live chat, AI service providers acting as data processors, KYC tools, our advisers and the authorities when the law requires it may also receive data. If the business is merged or sold, your data may move with it and we will tell you first.
Transfers and storage
When data leaves the European Economic Area, we protect it with standard contractual clauses or send it only to countries with an adequate level of protection. Because of anti-money-laundering rules, we keep your data for at least five years after your account is closed, so a request to erase it earlier cannot be carried out.
Your rights
You can withdraw your consent, see and correct your data, ask for it to be deleted, limit or object to its use, take it with you, turn off marketing and complain to a data protection authority. We do not usually make fully automated decisions about you, and we will tell you if we ever do.
Keeping it safe
Your account is protected by your own ID and password, and you can turn on two-factor authentication. We use technical, physical and administrative safeguards, and only people who need your data for their work can see it. Keep your login details to yourself. We may update this policy as laws and technology change.