Your Privacy at Blockdag Casino

This policy sets out what personal data we collect when you play at blockdag-au.com, why we hold it, who sees it, and what you can do about it. We operate under licence OGL/2015/4519/613 issued in Curaçao, and since we launched in 2017 we have applied GDPR-grade standards to every player account, including yours.

Data We Collect

We collect only what we need to run your account, verify your identity, process your payments and meet our legal obligations. That split also drives how long we keep each category, which we cover further down this page.

• Identity data: full name, date of birth, email address, phone number, residential address.
• Verification documents: passport, driver licence or utility bill copies submitted for KYC.
• Transaction data: deposits, withdrawals, wagers, winnings, bonus history, wallet addresses for crypto transfers.
• Technical data: IP address, device type, browser language, approximate location derived from IP.
• Gameplay data: games played, session times, bet patterns, self-exclusion and limit settings.
• Marketing preferences: which promotions you opted into, promo codes redeemed, communication channels you accepted.

How We Use Your Data

Your data works for you, not around you. Each purpose below maps to a legal basis, and we never repurpose data silently: if a use changes, we tell you before it takes effect.

• Creating and maintaining your account, including login and authentication.
• Verifying your identity under KYC rules before your first withdrawal and on large wins.
• Processing deposits and withdrawals, including blockchain checks on crypto transfers.
• Preventing fraud, bonus abuse, chargeback abuse and account takeover.
• Monitoring play for responsible-gambling indicators, with session reminders and limit enforcement.
• Sending you promotions and bonus offers, only where you consented.
• Meeting legal, tax and regulatory obligations tied to our licence.

Legal Bases We Rely On

Contract. Running your account, paying your winnings and honouring the terms you accepted all rest on the contract between us. Without this data we simply cannot provide the service you signed up for.

Legal obligation. Anti-money-laundering rules and our licence conditions require KYC checks, transaction monitoring and record keeping. You cannot opt out of these, and neither can we.

Legitimate interest. Fraud prevention, security logging and aggregate analytics that keep the platform safe fall under our legitimate interest. This basis never overrides your rights, and we weigh it against your expectations each time we rely on it.

Consent. Marketing emails, SMS offers and non-essential cookies run only on your consent. You withdraw it at any time through your account settings or the unsubscribe link, at no cost and with no effect on your gameplay.

How Long We Keep Data

Retention follows two forces: regulatory minimums and your choices. Transaction and KYC records must survive at least 5 years after the relevant transaction or account closure, and we hold them for 5 years in line with that rule. Everything else gets deleted on shorter clocks.

• Identity and account data: while your account is active, then 12 months after closure unless law requires longer.
• KYC documents: 5 years after account closure.
• Transaction and wagering records: 5 years minimum, per regulatory requirement.
• Verification selfies and biometric checks: deleted within 30 days of a completed check.
• Technical logs and IP records: 12 months for security purposes.
• Marketing data: until you withdraw consent or ask us to delete it, whichever comes first.

Who We Share Data With

We share the minimum each category needs, under contracts that bind recipients to the same protection level. We never sell your data, full stop.

• Payment processors handling your deposits and withdrawals, including crypto node operators.
• KYC and AML verification providers checking your documents against sanction and PEP lists.
• The Curaçao licensing authority and other regulators with lawful jurisdiction over our operations.
• Analytics and platform hosting providers working on our instructions only.
• Game studios whose titles you play, receiving your account ID and wagering data needed to settle gameplay.
• Law enforcement or courts, only on valid legal request.

Your Rights Over Data

You hold the full set of GDPR-style rights with us, whether you play from Australia or the EU. Send any request to [email protected] and we answer within 30 days. Requests are free, and identity checks before we release data stay proportionate to the risk.

If you believe we mishandled your data, you may complain to your local data protection authority. In Australia that is the OAIC; in the EU, your national DPA. We would rather fix the problem directly, but the complaint route is always yours to use.

• Access: get a copy of the personal data we hold about you.
• Rectification: correct anything inaccurate or incomplete.
• Erasure: delete your data where no legal retention duty blocks it.
• Portability: receive your data in a machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: stop marketing and optional cookies at any time.
• Complain: escalate to the relevant data protection authority.

Cookies and Tracking

We use strictly necessary cookies for login, session security and payment flows, plus optional analytics and marketing cookies that load only after your consent on the cookie banner. You change your choices any time from the cookie settings link in the page footer.

The full inventory, including every cookie name, its purpose and its lifetime, lives on our dedicated Cookies Policy page. This document covers the data side only, so head there for the granular detail.

Security We Apply

All traffic between you and blockdag-au.com runs over TLS encryption, and stored payment data sits encrypted at rest with keys held separately from the database. Role-based access controls mean our support staff see only what your ticket needs, and every access to your KYC file is logged and auditable.

If a personal data breach occurs, we notify the relevant supervisory authority within 72 hours of confirming it, and we tell you directly without undue delay whenever the breach risks your rights. Our 24/7 support team at [email protected] takes security reports around the clock, and we treat every report as live until proven otherwise.

Frequently Asked Questions

Do you sell my data to anyone?

No. We share data only with the categories listed above, such as payment processors and KYC providers, and only as far as their function requires. No data broker ever receives your information from us.

How do I delete my account data?

Email [email protected] from your registered address with a deletion request. We remove everything not held under a legal retention duty, and we confirm what was deleted and what was retained within 30 days.

Why do you need my ID before withdrawal?

Our licence conditions and anti-money-laundering rules require identity verification before your first withdrawal and on large wins. It protects your funds as much as our operation.

Can I stop marketing messages but keep playing?

Yes. Withdraw marketing consent through your account settings or any unsubscribe link. Your gameplay, bonuses and account status stay untouched.