Privacy Policy

Last updated: 1 May 2026.

1. Who We Are

Rollizor Casino is the data controller for personal data collected through rollizor.org. Operator: Cyprus-registered company under Curaçao gaming sub-licence. For privacy enquiries: [email protected] (subject line: ‘Privacy’).

2. What We Collect

• Account data: email, password (hashed), date of birth, country, currency.
• Identity data (KYC): government-issued ID, proof of address, proof of payment-method ownership.
• Transaction data: deposits, withdrawals, game rounds, bonus history.
• Communication data: live-chat transcripts, support emails.
• Technical data: IP address, device type, browser, login timestamps, gameplay logs.

3. Why We Collect It

• Service delivery: running your account, processing transactions, paying winnings.
• Regulatory compliance: KYC, AML monitoring, responsible-gaming tools — required by our Curaçao licence.
• Fraud prevention: detecting multiple accounts, bonus abuse, payment fraud.
• Marketing (opt-in only): personalised promotions, reload offers — you can opt out any time.

4. Legal Basis (GDPR)

We process your data under three legal bases: (a) contract — necessary to deliver the service you signed up for; (b) legal obligation — required by gaming and AML regulations; (c) consent — for marketing communications, which you can withdraw at any time without affecting your account.

5. Who We Share It With

We share data with: (a) payment providers — to process deposits and withdrawals; (b) KYC service providers — for identity verification; (c) game studios — anonymised gameplay data for tournament eligibility; (d) regulators and law enforcement — when required by law. We never sell personal data to third parties.

6. International Transfers

Some of our service providers operate outside the EEA. Where this happens, we rely on Standard Contractual Clauses approved by the European Commission to ensure your data receives equivalent protection.

7. How Long We Keep It

Account and transaction data is retained for 7 years after account closure (regulatory requirement). KYC documents are retained for 5 years. Marketing data is deleted within 30 days of consent withdrawal.

8. Your GDPR Rights

You have the right to: access your data, correct inaccurate data, delete data (subject to regulatory retention requirements), restrict processing, port data to another controller, object to processing, and withdraw consent for marketing. Email [email protected] with subject ‘GDPR Request’ — we respond within 30 days.

9. Cookies

Rollizor uses cookies to keep you logged in, remember your preferences, and measure site performance. You can manage cookie preferences from the banner on first visit or from the footer link ‘Cookie Settings’.

10. Security

We apply TLS encryption to all traffic, hash all passwords with bcrypt, store KYC documents in encrypted form, and run regular penetration tests. No method is 100% secure, but we apply industry best practice.

11. Complaints

If you are unhappy with our handling of your data, you can complain to the data-protection authority in your country of residence. We would prefer the chance to fix it first — email [email protected].