Your Privacy at Rollero Casino
This policy sets out what personal data we collect when you play at rollero-aud.com, why we collect it, who sees it and how long we keep it. We operate under licence OGL/2023/176/0095 issued in Curaçao, and we apply GDPR-aligned standards for every player, including those in Australia.
Data We Collect From You
We collect only what we need to run your account, verify your identity and meet our regulatory obligations. The categories below cover everything we hold.
- Identity data: full name, date of birth, email address, phone number, residential address.
- Verification documents: government-issued photo ID, proof of address, proof of payment method.
- Transaction data: deposits, withdrawals, wagering records, payment method details (card digits, wallet addresses, PayID references).
- Technical data: IP address, device type, operating system, browser, approximate location derived from IP.
- Gameplay behaviour: games played, bet sizes, session times, bonus usage, win and loss history.
- Marketing preferences: which channels you opted into (email, SMS) and which you declined.
How We Use Your Data
Every use of your data maps to a specific purpose. We do not profile you beyond what responsible-gambling monitoring and fraud detection require.
Payment processing depends on transaction data reaching our payment processors, and account creation requires your identity details. Neither works without the other.
- Creating and administering your player account.
- KYC verification before your first withdrawal, processed within 24 to 48 hours.
- Processing deposits and withdrawals in AUD or crypto.
- Fraud prevention and anti-money-laundering checks.
- Responsible-gambling monitoring against your deposit, loss and session limits.
- Marketing messages, only where you have given consent.
- Meeting legal and regulatory obligations, including tax and audit requests.
Our Legal Bases Explained
Contract. Your account, gameplay, bonuses and payouts are a service contract between you and us. We process identity, transaction and gameplay data to deliver that contract.
Legal obligation. Curaçao licence conditions and anti-money-laundering law require us to verify your identity, monitor transactions and report suspicious activity. You cannot opt out of processing that these laws mandate.
Legitimate interest. Fraud prevention, security logging and aggregate analytics rely on our legitimate interest in keeping the platform safe and functional. These interests never override your rights.
Consent. Marketing emails, SMS and non-essential cookies run only on your consent. You withdraw it at any time and we stop the processing the same day.
How Long We Keep Data
Retention depends on the category and the legal floor attached to it. Financial regulations require us to hold transaction and KYC records for a minimum of five years after account closure. Marketing data does not survive that long.
| Data category | Retention period |
|---|---|
| Identity and account data | Life of the account, then 5 years |
| KYC documents | 5 years after account closure |
| Transaction and wagering records | 5 years minimum, per AML rules |
| Device and IP logs | 12 months |
| Marketing consent and preferences | Until you withdraw consent, then 30 days for suppression records |
| Closed-account data | 5 years, then deleted or anonymised |
Who We Share Data With
We share data with processors that perform a job for us under written data-processing terms. They may use it only for the job, never for their own purposes.
Regulators and law-enforcement bodies receive data when a lawful request compels disclosure. Analytics providers receive pseudonymised data only.
- Payment processors handling PayID, cards, e-wallets and crypto transactions.
- KYC and AML screening providers that verify your documents.
- The Curaçao licensing authority and competent regulators.
- Analytics and platform-hosting providers, on pseudonymised data.
- Game providers receive your gameplay identifiers only, never your full identity.
Your Rights Over Our Records
You control your data, subject to the legal floors described in the retention table. Requests submitted to [email protected] receive a response within 30 days.
Where processing rests on consent, withdrawal stops future processing but does not erase records we must keep under licence conditions.
- Access: a copy of the personal data we hold about you.
- Rectification: correction of inaccurate or incomplete records.
- Erasure: deletion where no legal retention duty applies.
- Portability: your data in a machine-readable format.
- Objection: objection to processing based on legitimate interest.
- Withdrawal of consent: for marketing and optional cookies at any time.
- Complaint: the right to complain to the relevant data protection authority.
Cookies and Tracking
We use session cookies to keep you logged in, preference cookies to remember your settings, and analytics cookies to understand site performance. Marketing cookies load only after you consent through the banner shown on your first visit.
Full details, including how to refuse or delete each cookie category, sit on our dedicated Cookies Policy page.
Security Measures We Apply
All traffic between your device and our servers runs over TLS encryption. KYC documents sit in encrypted storage with access limited to trained compliance staff.
Internal access follows role-based controls, and every access to your verification records is logged and auditable. If a breach affects your personal data, we notify the relevant supervisory authority within 72 hours and inform you directly where the risk to you is high.
Contact Our Data Officer
Rollero Entertainment B.V. is the data controller. Our Data Protection Officer answers privacy questions, data requests and complaints.
Email [email protected] or write to the compliance team at our registered office. Our support desk is available 24/7 at [email protected] for anything urgent, and it will route privacy matters straight to the DPO.
Frequently asked questions
Can I close my account and have my data erased immediately?
We deactivate your account at once. KYC and transaction records stay on file for 5 years after closure because our licence and anti-money-laundering rules require it, then we delete or anonymise them.
Do you sell my personal data?
No. We never sell your data. We share it only with processors that need it to deliver payments, verification and hosting, and with regulators where the law compels us.
How do I stop marketing emails?
Use the unsubscribe link in any email or change your preferences in your account settings. We stop marketing to you the same day and keep a suppression record for 30 days so you are not contacted again.
Who can see my verification documents?
Only trained compliance staff with role-based access can open your KYC documents, and every access is logged and auditable.