Deuces gehört und wird von betrieben Cupertino Entertainment Ltd. Registrierungsnummer 27073 v. Chr. 2024, registriert in Suite 305, Griffith Corporate Centre, Kingstown, St. Vincent und die Grenadinen.Wir sind von der Regierung der Autonomen Insel Anjouan, Union der Komoren, lizenziert und reguliert und arbeiten gemäß der Lizenz Nr. Act 007 von 2005.Kontaktieren Sie uns unter [email protected].
We collect personal data to operate the platform, comply with regulation, and protect you and us from fraud — never sold, only shared with vetted processors.
01Identity
02Transactions
03Activity Logs
Zum Abschnitt springen
1.
Policy Overview
Deuces Casino ("Deuces", "we", "us") is committed to protecting and respecting your privacy. This policy — read alongside our Terms & Conditions and KYC Policy — explains what personal data we collect from you, why we collect it, how we use it, and the rights you have over it.
Deuces is the data controller for the personal data processed under this policy. Where we engage third parties (payment processors, KYC providers, analytics) to process data on our behalf, those parties act as processors bound by contractual data-protection obligations.
We process personal data lawfully under one of the legal bases recognised by the EU GDPR and UK GDPR — namely contract, legal obligation, legitimate interests, or your consent. Each category in Section 2 is mapped to its specific basis.
2.
Data We Collect
We only collect what we genuinely need. Categories below describe the type of data, what it includes, and the legal basis on which we process it.
Identity
Identity & Verification
Name, date of birth, nationality, government-issued ID, selfie, proof of address — collected at registration and KYC.
Legal obligation · Contract
Contact
Contact Details
Email, phone number, country of residence — used to communicate, send confirmations, and recover accounts.
Contract · Legitimate interest
Financial
Transactions & Wallet
Deposit and withdrawal records, wallet addresses, payment-method metadata, transaction amounts and timestamps.
Contract · Legal obligation
Activity
Gameplay & Behaviour
Bets placed, sessions, game history, bonus usage, responsible-gaming limits and self-exclusions.
Contract · Legal obligation
Technical
Device & Network
IP address, device type, browser, operating system, language, approximate geolocation, cookies, and login timestamps.
Legitimate interest · Consent
We do not ask for or knowingly process special-category data (race, religion, health, etc.). If we ever need to, we will request your explicit consent first.
3.
How We Use Your Data
Every use of your data falls into one of the purposes below. We do not repurpose data outside these without notifying you.
a.Operating the platform — creating and maintaining your account, processing deposits, withdrawals, bets, and payouts.
b.Compliance & AML — verifying identity, screening sanctions and PEP lists, monitoring for suspicious activity, and reporting to regulators.
d.Responsible gaming — enforcing deposit, loss, and session limits and self-exclusion requests.
e.Customer support — answering tickets, investigating disputes, and improving service quality.
f.Marketing & promotions — sending offers, VIP rewards, and product updates. You can opt out at any time from account settings.
g.Analytics & product improvement — understanding usage patterns to improve UX and game offerings (aggregated where possible).
We do not use automated decision-making that produces legal effects on you without human review. Risk-scoring used for fraud and AML is reviewed by our compliance team before any restrictive action.
4.
Who We Share Data With
We share personal data only when necessary, and only with parties bound by confidentiality and data-protection obligations. We do not sell your personal data.
KYC
Identity-Verification Providers
For document checks, biometric matching, sanctions and PEP screening.
PSPs
Payment & Crypto Processors
To process deposits and withdrawals and meet payment-network and AML rules.
Studios
Game Providers
Limited identifiers passed to studios so games can be served and outcomes recorded.
Tech
Cloud, Email & Analytics
Infrastructure, transactional email, and aggregated product-analytics services.
Legal
Regulators & Authorities
Where we have a legal duty — including the Anjouan Gaming Authority and law-enforcement requests under valid orders.
In the event of a corporate transaction (sale, merger, restructuring), personal data may transfer to the acquiring entity under the same protections as this policy.
5.
Cookies & Tracking
We use cookies and similar technologies to keep you logged in, remember your preferences, secure your session, and understand how the site is used. You can manage non-essential cookies from the consent banner or your browser settings.
TypePurposeLifespan
Essential
Session & Auth
Login, CSRF, security
Session
Functional
Preferences
Language, currency, odds format
12 mo
Analytics
Product Usage
Aggregated page & feature stats
13 mo
Marketing
Attribution
Affiliate & campaign tracking
90 days
Refusing Cookies
If you refuse essential cookies, parts of Deuces — including login, deposits, and gameplay — will not function. Analytics and marketing cookies are always optional.
6.
Storage & Security
All personal data is stored on access-controlled servers operated within the EU and EEA. Backups are encrypted and held in geographically separate facilities.
Security controls in place include:
TLS 1.3 encryption in transit and AES-256 encryption at rest for sensitive fields.
Role-based access — staff see only the data needed for their role, with full audit logging.
2FA on all internal admin systems and on user accounts when enabled.
Annual penetration testing by an independent third party and continuous vulnerability monitoring.
72-hour breach notification to regulators and affected users where required by law.
No system is perfectly secure. While we apply industry-standard safeguards, transmission over the internet is undertaken at your own risk; protect your password and never share account credentials.
7.
How Long We Keep Data
We keep personal data only for as long as needed to deliver the service or meet a legal obligation, then it is deleted or fully anonymised. Standard retention periods:
KYC & Identity Documents
After account closure (AML statute)
5
Years
Transaction & Wallet Records
From transaction date
7
Years
Gameplay & Bet History
From bet settlement
5
Years
Self-Exclusion Records
From end of exclusion period
5
Years
Marketing Preferences
Or until consent withdrawn
24
Months
Support Tickets
From ticket close
36
Months
When a retention period expires, data is securely deleted or irreversibly anonymised. Aggregated, non-identifying analytics may be retained indefinitely for trend reporting.
8.
Your Rights
Under GDPR and similar laws, you have meaningful control over your personal data. Exercising any right is free and we'll respond within 30 days.
01
Access
Request a copy of the data we hold on you.
02
Rectify
Correct inaccurate or incomplete information.
03
Erase
Delete data, subject to legal retention rules.
04
Restrict
Pause processing while a dispute is resolved.
05
Portability
Receive your data in a portable format.
06
Object
Object to processing based on legitimate interest.
07
Withdraw Consent
Revoke any consent at any time.
08
Complain
Lodge a complaint with your data-protection authority.
To exercise any right, email our DPO at [email protected]. We may need to verify your identity before responding.
9.
International Transfers
Some of our processors operate outside the European Economic Area. Where we transfer personal data to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (SCCs) together with supplementary technical and organisational measures.
A list of our sub-processors and the safeguards in place is available on request from our DPO.
10.
Children & Minors
Deuces is strictly an 18+ service. We do not knowingly collect personal data from anyone under 18. If we learn that data has been collected from a minor, we will delete the account and all associated data without delay.
If you suspect a minor is using Deuces or has provided us with their data, please contact [email protected] immediately.
11.
Contact & Updates
We may update this policy from time to time. Material changes will be notified to you by email or in-app at least 14 days before they take effect. The "Updated" date at the top of this page always reflects the current version.
Questions, requests, or complaints? Reach our Data Protection Officer below.
Datenschutzbeauftragter
Our DPO oversees data-protection compliance and is your primary point of contact for all privacy questions, subject-access requests, and complaints.
