Privacy Policy

This notice describes the personal information Kingdom Casino collects from players, the reasons we are permitted to use it, and the choices you can exercise over it. It applies to our website, mobile interface and all communications with our support team.

Information we collect

When you register we ask for your full name, date of birth, residential address, email address, mobile number and preferred currency. Regulatory obligations attached to our Anjouan gaming licence then require us to verify that information, so at some stage we will also hold a copy of a government-issued photo ID, a recent proof of address, and — where a payment method needs confirming — a partially masked card image or bank statement extract.

Financial records accumulate as you play: deposits, withdrawals, wager history, bonus credits and their wagering progress, and the outcome of each gaming round as reported by the studio supplying the title. Game results themselves are generated and stored on the software provider's infrastructure; we receive and retain the transactional record.

Technical data is gathered automatically. That includes your IP address and the country it resolves to, device type and operating system, browser fingerprint characteristics, screen dimensions, referral source, and timestamped page and session logs. We use it to secure accounts, detect duplicate registrations, and block access from jurisdictions where our licence does not permit us to accept players.

Finally, we keep the content of your correspondence with us — live chat transcripts, emails, and notes made by agents. Calls, where offered, may be recorded for training and dispute resolution, and you will be told at the start of the call if that is happening.

Why we process it

The largest share of processing exists simply to perform our contract with you: opening the account, crediting deposits, settling bets, paying out withdrawals, applying promotional terms and answering support queries. Without this data there is no service to provide.

A second category is compelled by law and by the conditions of our licence. Anti-money-laundering monitoring, sanctions and politically-exposed-person screening, source-of-funds enquiries on larger transactions, age verification and record retention are all obligations we cannot waive at a player's request, however inconvenient a document request may feel.

We also rely on legitimate interest for fraud prevention, bonus-abuse detection, collusion and arbitrage analysis, platform security, and aggregate product analytics that tell us which pages fail and which games load slowly. This analysis is performed on grouped data wherever an individual record is not strictly necessary.

Marketing is the only category built on consent. If you opt in, we may send offers by email or SMS and show you tailored promotions on site. Withdrawing that consent is a single click in any message or a toggle in your account, it takes effect within 72 hours, and it never affects your ability to play or withdraw.

Cookies and similar technologies

Strictly necessary cookies keep you logged in, remember your currency and language, balance traffic across our servers and defend against cross-site request forgery. These cannot be switched off without breaking the site, and we do not ask consent for them.

Analytics and performance cookies measure which pages are visited, where sessions end and how long game clients take to initialise. Advertising cookies, where used, allow affiliate partners to be credited for a referral and let us cap how often a given banner is shown to the same visitor. Both categories are optional and are controlled from the cookie banner shown on your first visit and from the Cookie Settings link in the footer thereafter.

Most browsers also let you refuse or delete cookies at the device level, and mobile operating systems provide an advertising identifier reset. Disabling storage entirely will prevent you from staying signed in and may stop some games from loading.

Sharing, transfers and security

We disclose personal data to game studios and aggregators supplying the content you play, to payment processors and acquiring banks executing your transactions, to identity-verification and AML screening vendors, to cloud hosting and email delivery providers, and to our professional advisers. Each acts under a written contract limiting them to instructions we give. We do not sell personal data, and we do not pass contact details to third parties for their own marketing.

Data may also be released to the Anjouan Gaming Authority, to law enforcement, or to a court where a valid legal instrument requires it. In a merger or sale of the business, player records would transfer to the acquiring entity subject to the protections set out here.

Our servers and several of our suppliers sit outside the United Kingdom and the European Economic Area, including in jurisdictions that have not received an adequacy decision. Where that is the case we put contractual safeguards in place, but you should be aware that the practical remedies available to you may be weaker than those under UK GDPR, and that Kingdom Casino is not supervised by the UK Information Commissioner's Office.

Traffic is encrypted with TLS, payment details are tokenised so that full card numbers are never stored on our systems, verification documents are held in restricted storage with access logged, and staff permissions are granted on a least-privilege basis. No system is immune to compromise; if a breach were to affect you materially, we would notify you and our regulator without undue delay.

Retention and your rights

Account, transaction and verification records are retained for a minimum of five years after your final activity, because anti-money-laundering rules require it. Support correspondence is kept for two years, marketing consent evidence for three, and general web analytics for twenty-six months. Self-exclusion records are held indefinitely — deleting them would defeat their purpose by allowing a re-registration we are supposed to prevent.

You may ask us for a copy of the data we hold on you, for corrections to anything inaccurate, for restriction or objection to certain processing, and for a portable export of the information you supplied. Requests are answered within thirty days and are free unless plainly excessive or repetitive.

Erasure is available only where no overriding obligation applies. In practice this means we can remove marketing profiles, optional profile fields and analytics identifiers, but we cannot delete the regulatory core of a verified account until its statutory retention period has run.

To exercise any of the above, or to raise a concern about how we have handled your information, contact our data protection team using the channels below. If you are dissatisfied with our response, you may escalate to the Anjouan Gaming Authority as our licensing regulator.

This notice is provided for transparency and is not a substitute for legal advice. Kingdom Casino is licensed in the Comoros by the Anjouan Gaming Authority and is not licensed by the UK Gambling Commission; the supervisory regime of the UK Information Commissioner's Office does not apply to us. Where a translated version of this notice differs from the English text, the English text governs.