PrivacyPolicyGDPR
We collect personal data to operate the platform, comply with regulation, and protect you and us from fraud — never sold, only shared with vetted processors.
Policy Overview
Deuces Casino ("Deuces", "we", "us") is committed to protecting and respecting your privacy. This policy — read alongside our Terms & Conditions and KYC Policy — explains what personal data we collect from you, why we collect it, how we use it, and the rights you have over it.
Deuces is the data controller for the personal data processed under this policy. Where we engage third parties (payment processors, KYC providers, analytics) to process data on our behalf, those parties act as processors bound by contractual data-protection obligations.
We process personal data lawfully under one of the legal bases recognised by the EU GDPR and UK GDPR — namely contract, legal obligation, legitimate interests, or your consent. Each category in Section 2 is mapped to its specific basis.
Data We Collect
We only collect what we genuinely need. Categories below describe the type of data, what it includes, and the legal basis on which we process it.
We do not ask for or knowingly process special-category data (race, religion, health, etc.). If we ever need to, we will request your explicit consent first.
How We Use Your Data
Every use of your data falls into one of the purposes below. We do not repurpose data outside these without notifying you.
- a.Operating the platform — creating and maintaining your account, processing deposits, withdrawals, bets, and payouts.
- b.Compliance & AML — verifying identity, screening sanctions and PEP lists, monitoring for suspicious activity, and reporting to regulators.
- c.Fraud prevention — detecting multi-accounting, bonus abuse, payment fraud, and unauthorised access.
- d.Responsible gaming — enforcing deposit, loss, and session limits and self-exclusion requests.
- e.Customer support — answering tickets, investigating disputes, and improving service quality.
- f.Marketing & promotions — sending offers, VIP rewards, and product updates. You can opt out at any time from account settings.
- g.Analytics & product improvement — understanding usage patterns to improve UX and game offerings (aggregated where possible).
We do not use automated decision-making that produces legal effects on you without human review. Risk-scoring used for fraud and AML is reviewed by our compliance team before any restrictive action.
Who We Share Data With
We share personal data only when necessary, and only with parties bound by confidentiality and data-protection obligations. We do not sell your personal data.
In the event of a corporate transaction (sale, merger, restructuring), personal data may transfer to the acquiring entity under the same protections as this policy.
Cookies & Tracking
We use cookies and similar technologies to keep you logged in, remember your preferences, secure your session, and understand how the site is used. You can manage non-essential cookies from the consent banner or your browser settings.
Storage & Security
All personal data is stored on access-controlled servers operated within the EU and EEA. Backups are encrypted and held in geographically separate facilities.
Security controls in place include:
- TLS 1.3 encryption in transit and AES-256 encryption at rest for sensitive fields.
- Role-based access — staff see only the data needed for their role, with full audit logging.
- 2FA on all internal admin systems and on user accounts when enabled.
- Annual penetration testing by an independent third party and continuous vulnerability monitoring.
- 72-hour breach notification to regulators and affected users where required by law.
No system is perfectly secure. While we apply industry-standard safeguards, transmission over the internet is undertaken at your own risk; protect your password and never share account credentials.
How Long We Keep Data
We keep personal data only for as long as needed to deliver the service or meet a legal obligation, then it is deleted or fully anonymised. Standard retention periods:
When a retention period expires, data is securely deleted or irreversibly anonymised. Aggregated, non-identifying analytics may be retained indefinitely for trend reporting.
Your Rights
Under GDPR and similar laws, you have meaningful control over your personal data. Exercising any right is free and we'll respond within 30 days.
To exercise any right, email our DPO at [email protected]. We may need to verify your identity before responding.
International Transfers
Some of our processors operate outside the European Economic Area. Where we transfer personal data to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (SCCs) together with supplementary technical and organisational measures.
A list of our sub-processors and the safeguards in place is available on request from our DPO.
Children & Minors
Deuces is strictly an 18+ service. We do not knowingly collect personal data from anyone under 18. If we learn that data has been collected from a minor, we will delete the account and all associated data without delay.
If you suspect a minor is using Deuces or has provided us with their data, please contact [email protected] immediately.
Contact & Updates
We may update this policy from time to time. Material changes will be notified to you by email or in-app at least 14 days before they take effect. The "Updated" date at the top of this page always reflects the current version.
Questions, requests, or complaints? Reach our Data Protection Officer below.
Deuces dimiliki dan dioperasikan oleh Cupertino Entertainment Ltd. nomor registrasi 27073 BC 2024, terdaftar di Suite 305, Griffith Corporate Centre, Kingstown, Saint Vincent dan Grenadines.Kami berlisensi dan diregulasi oleh Pemerintah Pulau Otonom Anjouan, Uni Komoro, dan beroperasi di bawah Lisensi No. Act 007 of 2005.Hubungi kami di [email protected].
