How We Handle Your Data

This policy sets out, in plain language, what personal information we collect when you play at Sportuna Casino, why we collect it, who we share it with, and how you can exercise control over it. It applies to every page on sportuna-aud.com.

What Data We Collect

We collect only the information needed to run your account, verify your identity, process your payments, and meet our legal obligations. Here is the full picture by category.

• Identity data: your full name, date of birth, email address, phone number and residential address.
• Verification documents: copies of your ID (passport or driver licence), proof of address, and payment method verification submitted during KYC checks.
• Transaction data: deposits, withdrawals, bonuses claimed and wagering records, including timestamps and amounts.
• Technical data: your IP address, device type, operating system, browser and approximate location derived from your IP.
• Gameplay behaviour: the games you play, session duration, bet sizes, win and loss history, and self-assessment responses related to responsible gambling.
• Marketing preferences: your choices around email, SMS and promotional communications, including whether you opted in or out and when.

How We Use Your Data

We use your data to create and run your account, verify your identity before your first withdrawal, and process deposits and withdrawals across our supported methods, from PayID to Bitcoin.

Fraud prevention and responsible-gambling monitoring are core uses. We analyse transaction and gameplay patterns to detect suspicious activity, and we use gameplay indicators to identify players who may benefit from a check-in or from our limit tools.

• Creating and maintaining your player account.
• Completing KYC verification, processed within 24 to 72 hours.
• Processing deposits and withdrawals, with limits up to 4,000 AUD per day and 11,000 AUD per week.
• Preventing fraud, money laundering and bonus abuse.
• Monitoring for signs of harmful gambling behaviour.
• Sending marketing communications, only where you have consented.
• Meeting obligations set by our regulator, the Malta Gaming Authority (licence MGA/B2C/394/2017).

Our Legal Bases

Contract. Processing your identity, transaction and gameplay data is necessary to perform our agreement with you: without it we cannot open an account, settle bets or pay out winnings.

Legal obligation. We rely on law where we must: AML and KYC rules require us to verify your identity before withdrawal, and gaming regulations oblige us to keep transaction and verification records for set periods. You cannot opt out of processing required by law.

Legitimate interest. Fraud prevention, security monitoring and aggregated statistics on how our 6,000-plus game library performs all rest on our legitimate interest in running a safe, honest casino. We weigh this interest against your rights and keep the intrusion proportionate.

Consent. Marketing emails, SMS and non-essential cookies are processed only with your consent, which you may withdraw at any time without affecting prior processing.

How Long We Keep It

We do not hold your data indefinitely. Retention depends on the category and the legal requirement attached to it. After the relevant period ends, we delete or anonymise the data.

• Identity and account data: kept while your account is open, then for 5 years after closure to satisfy regulatory record-keeping.
• Verification (KYC) documents: retained for 5 years after the last transaction, as required by anti-money-laundering law.
• Transaction data: retained for a minimum of 5 years, consistent with gaming regulation.
• Gameplay and responsible-gambling records: kept up to 5 years after account closure for compliance and dispute handling.
• Marketing preferences: kept until you withdraw consent or ask us to delete them.
• Technical and analytics data: kept for a maximum of 24 months.

Who We Share Data With

We never sell your personal data. We share it only with parties who help us operate the casino or who are entitled to it by law, and each category below operates under strict contractual confidentiality terms.

• Payment processors handling your deposits and withdrawals, including card networks, e-wallet providers and crypto payment services.
• KYC and AML verification providers who confirm your identity documents.
• The Malta Gaming Authority and other regulators or law enforcement bodies, where law requires disclosure.
• Game and platform providers who receive only the technical data needed to deliver gameplay.
• Analytics and IT service providers who help us maintain and improve sportuna-aud.com.
• Professional advisers, such as auditors and lawyers, bound by professional confidentiality.

Your Rights Over Your Data

You control your personal information, and we make exercising that control simple. Email [email protected] or message our 24/7 live chat and we will respond within the statutory timeframe. Our data protection officer can be reached at [email protected].

• Access: get a copy of the personal data we hold about you.
• Rectification: correct data that is inaccurate or incomplete.
• Erasure: ask us to delete data where no legal requirement forces retention.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: stop marketing or consent-based processing at any time.
• Complain: lodge a complaint with your local data protection authority.

Cookies and Tracking

sportuna-aud.com uses cookies to keep you logged in, remember your preferences, and understand how the site performs. Essential cookies run without consent because the site cannot function without them; analytics and marketing cookies only load after you accept them in the consent banner.

Our full cookie inventory, including each cookie's purpose and lifespan, is set out in a dedicated Cookies Policy. You can change your cookie choices there or through your browser settings at any time.

How We Protect Your Data

All traffic between your device and our servers is encrypted with TLS, and payment credentials are handled by certified payment providers rather than stored by us. Access to personal data inside our organisation follows a strict need-to-know model: only staff whose role requires it can view verification documents or transaction records, and every access is logged.

If a personal data breach occurs, we will notify the relevant supervisory authority without undue delay, and where the breach poses a high risk to your rights, we will inform you directly and tell you what steps to take. Our security practices are reviewed regularly and after any material change to our systems.

Frequently asked questions

How do I request a copy of my data from Sportuna Casino?

Email [email protected] or contact our data protection officer at [email protected]. We verify your identity and send your data in a structured format within the statutory response period.

Can I stop marketing emails and SMS?

Yes. Withdraw consent any time via the unsubscribe link in any message, your account settings, or by contacting support. Marketing lists are deleted once consent is withdrawn.

Why do you need my ID before my first withdrawal?

Anti-money-laundering law and our MGA licence conditions require identity, address and payment method verification before we release funds. Verification is typically processed within 24 to 72 hours.

Do you keep my KYC documents forever?

No. Verification documents are retained for 5 years after your last transaction, as the law requires, and are then securely deleted.

Do you sell my personal data?

Never. We share data only with payment processors, verification providers, regulators and service providers who need it to deliver our services, all under confidentiality obligations.