Dolly Casino Privacy Notice
Why we process your data
We use personal data to open, operate and support your account, provide our services, answer requests and resolve disputes. Processing also helps us keep our services functioning, protect our systems and investigate activity that may threaten their integrity.
Safety and legal checks are another part of the work. We use data to verify age and identity, determine location, prevent and detect fraud, meet anti-money-laundering obligations, and respond to valid legal processes. We may analyse activity to manage risk, identify potentially harmful behaviour and support responsible gaming.
We also use information to test, troubleshoot, research and improve our products and services. Depending on the activity, our legal basis may be performance of our contract with you, a legal obligation, our legitimate interests, or your consent. Where we rely on legitimate interests, your rights, freedoms and interests are considered against ours or those of a third party.
With your consent, we may send direct marketing by email, text message, phone call, or notifications in our services. Consent may also cover personalised offers, targeted advertising, assessment of marketing effectiveness, and taking part in our tournaments, competitions, loyalty and reward programmes and other promotional activity. You can withdraw consent at any time, without changing the lawfulness of processing that took place before withdrawal.
Data you give us
To open an account we ask for your full name, a username, your email and phone number, your date of birth and gender, your country and postal code, and a social security number. When you register, we also receive your IP address and location data automatically.
Identity and due-diligence checks may involve the number of your passport or other identity document, a document showing where you live, a social security number, bank identification, information about your source of wealth or funds, and financial statements or details. We collect this material for age and identity verification, know-your-customer checks, anti-money-laundering work and other legal requirements.
To handle deposits and withdrawals, we may collect bank identification, national personal identifiers, an international bank account number and payment-system details. The same financial information may be used for identity and anti-money-laundering checks.
Data from devices and play
When you use our services, we automatically receive technical information such as your IP address, operating-system version, device identifiers and general location. Our logs can record when a session starts, how long it lasts, the pages you view, links used, searches, content viewed, advertisements clicked and sharing activity.
Cookies and similar technologies help collect some of this information. We may also infer interests and game preferences from the pages you view and games you play. Other information may come from public sources and government databases, social media, banks and credit bodies, agencies that work against fraud, and public authorities. We use such sources to verify details, personalise services and investigate suspicious activity.
Who may receive your data
Access inside our business is limited to authorised employees and may extend to contractors, agents, joint controllers, affiliates, subsidiaries and brands within the same operator or business group. Group companies may receive data where it is needed for the purposes described here.
Payment providers and financial institutions receive information needed to process deposits and withdrawals. This can include your name, date of birth, email address, postal address, country, phone number, alias and identity-check documents. Those documents may also help a payment provider meet its own legal and anti-money-laundering duties.
We may share data with providers that support customer service, email, text and voice communications, technology, cloud hosting, games, analytics and market research. Marketing partners, data aggregators and fraud-prevention agencies may also receive relevant information.
Law-enforcement bodies, regulatory authorities and other public authorities may receive data when required. If you submit a complaint, review or query to an outside platform, we may respond to that platform with the personal data necessary and proportionate to identify your account and address what you raised. We do not initiate that disclosure unless you or someone acting for you has made the submission or public allegation.
If the business, or part of it, is sold, merged, financed, restructured or wound up, data may be shared while that change is prepared and carried out. A new owner or controlling entity may use it under this notice unless you explicitly consent to a different use.
Transfers outside the EU and EEA
Your personal data may be processed outside the EU or EEA. Before sending it to an affiliate or third party in another country, we put appropriate safeguards in place to maintain a high standard of protection.
Those safeguards may include transfer to a country that the European Commission recognises as providing adequate protection. Otherwise we rely on standard contract terms that the European Commission has approved, or on another legally recognised safeguard.
Retention and security
We keep personal data while you maintain an account and for as long as needed for the purposes described here. A longer retention period may apply when legal duties require it, including anti-money-laundering or other regulatory obligations.
After account closure, and when no legal or business reason for retention remains, we delete the data or anonymise it so that it can no longer be linked to you.
Administrative, technical and physical measures are used to reduce the risk of unauthorised access, disclosure, alteration, loss, theft, misuse or destruction. No system is completely secure, and internet transmission or storage cannot be guaranteed to be absolutely secure. We continue to assess and improve our practices.
Your rights
Depending on the circumstances, you may ask to access the personal data we hold and learn how it is processed. You may ask us to correct incomplete or inaccurate data, erase data that we no longer have a strong legal or business need to keep, or restrict processing.
You may ask us to send your data to another organisation in a common format that a computer can read. You may also object when processing is based on legitimate interests or used for direct marketing, and you may withdraw consent at any time.
You have the right to complain to a supervisory authority in the EU member state where you live, where you work, or where the alleged infringement took place.
To exercise a privacy right or ask about our data practices, email [email protected]. We may need to process information about your request so that we can respond and meet our data-protection obligations.