Privacy Policy at Cleopatra Casino

What data we collect

Categories of personal data

We collect only the data we need to run your account, process payments and meet our legal obligations. Altacore N.V., the operator of Cleopatra Casino, is the data controller for everything listed below.

• Identity data: full name, date of birth, email address, phone number, residential address
• Verification documents: passport or driver's licence scan, proof of address, payment method confirmation
• Transaction data: deposits, withdrawals, wagering records, bonus and cashback history
• Technical data: IP address, device identifiers, browser type, approximate location
• Gameplay behaviour: game sessions, bets, wins and losses, session duration
• Marketing preferences: whether you opted in to bonus emails, SMS or tournament notifications

How we use your data

Purposes of processing

We process your data to open and maintain your account, verify your identity before your first withdrawal, process deposits and withdrawals across AUD, EUR, USD and crypto currencies, and detect fraud or bonus abuse. We also monitor gameplay for responsible-gambling signals, run our 5-tier loyalty programme, and send you promotional offers when you have consented.

• Account creation, login and session management
• KYC verification and anti-money-laundering checks
• Payment processing through Visa, Mastercard, e-wallets and crypto
• Fraud prevention, chargeback handling and multi-account detection
• Responsible-gambling monitoring and self-exclusion enforcement
• Marketing communications, only with your consent

Our legal bases

Why the law lets us process

Contract: opening an account, paying out winnings and running the loyalty programme all rest on the contract between you and us. Without identity and transaction data we cannot deliver these services.

Legal obligation: Curaçao licence OGL/2023/174/0082 and anti-money-laundering rules oblige us to verify your identity, monitor transactions and keep records for set periods. Consent: marketing emails and SMS go out only if you ticked the opt-in box, and you can withdraw consent anytime. Legitimate interest: we rely on this to secure our platform, prevent fraud, and analyse aggregate gameplay to improve our 4,000-title game library. Where EU visitors are involved, we apply GDPR standards to these bases.

How long we keep records

Retention schedule

We keep each category only as long as the purpose requires. Regulatory rules for licensed casinos demand transaction and verification records for at least five years after account closure; marketing data is deleted the moment you withdraw consent or unsubscribe.

Who we share data with

Categories of recipients

We never sell your data. We share it only with processors who need it to deliver a service to you, and we bind each of them by contract to protect it.

• Payment processors handling your Visa, Mastercard, Skrill, MiFinity, Jeton, Bitcoin and Tether transactions
• KYC and AML verification providers that check your documents
• The Curaçao regulator and other authorities where the law requires disclosure
• Analytics and platform hosting providers under data-processing agreements
• Game providers receive only your player ID and wagering commands, never your identity documents

Your rights over your data

You can contact our Data Protection Officer at [email protected] or [email protected], and we will respond within 30 days. If you believe we mishandled your data, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or, if you are in the EU, with your local supervisory authority.

• Access: get a copy of the personal data we hold about you
• Rectification: fix inaccurate details such as address or phone
• Erasure: request deletion where no legal retention duty applies
• Portability: receive your data in a machine-readable format
• Objection and restriction: object to processing based on legitimate interest
• Withdraw consent: stop marketing at any time via account settings or unsubscribe links

Cookies and tracking

Short version

We use strictly necessary cookies for login and security, plus analytics and optional marketing cookies. You control non-essential cookies through the consent banner shown on your first visit. The full list, including lifetimes and third-party tags, sits on our dedicated Cookies Policy page.

How we protect your data

Technical and organisational safeguards

All traffic between you and cleopatracasino-pokies.com runs over TLS encryption, and stored verification documents sit in encrypted storage with access limited to compliance staff on a need-to-know basis. We log access to sensitive records, train our staff on data handling, and review our controls annually. If a breach is likely to cause you serious harm, we notify the relevant regulator and affected players without undue delay, in line with the Notifiable Data Breaches scheme.

Frequently asked questions

Do you share my KYC documents with game providers?

No. Game providers only receive your player ID and wagering commands. Your identity documents stay with us and our KYC verification providers.

How do I stop marketing emails from Cleopatra Casino?

Use the unsubscribe link in any promotional email, switch off notifications in your account settings, or email [email protected]. Your marketing data is deleted once consent is withdrawn.

Can I delete my account and all my data?

You can request erasure at any time. Transaction and KYC records must be kept for a minimum of five years under our Curaçao licence, after which we delete them.

Who do I contact about a privacy issue?

Write to [email protected] or our 24/7 support team at [email protected]. We respond within 30 days, usually faster.