Privacy Policy

A Privacy Policy explains how a company collects, uses, and protects personal information. It helps users understand what happens to their data and why certain details are required. It also ensures that businesses follow legal regulations and maintain transparency. Without clear guidelines, personal information could be misused or accessed without permission.

This document, along with the General Terms and Conditions on the website, explains how personal data is collected and processed. Customers should review this information carefully to understand how personal details are handled. By registering an account, players confirm agreement with this Privacy Policy. Those who do not agree with the terms or refuse to share required information may have limited access to certain services.

This Privacy Policy forms a legal agreement between customers and the company. Updates may take place from time to time. Efforts will be made to inform users of significant changes, but it is recommended to check the policy regularly. Continued use of the website means acceptance of any updates.

Our website values privacy and handles personal data with transparency and fairness. This policy, together with the Terms & Conditions and Cookie Policy, explains how data is collected, stored, and used. The company follows Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016, which sets rules for data processing and protection.

Access to the website is restricted to individuals over 18 years old. If data from a person under this age is collected by mistake, it will be managed according to legal requirements.

Personal data of King Billy users are protected and regulated by the Privacy Policy.

About the Company

The website (“Casino”, “Website”, “Company”, “We”, “Us”, “Our”) is operated by Dama N.V., a company registered in Curaçao. The company operates under license number OGL/2023/174/0082, issued by the Curaçao Gaming Control Board. As a data controller, personal information must be processed in line with gambling regulations to allow participation in games and related services.

References in this policy to “Company”, “Group”, “We”, “Us”, or “Our” mean Dama N.V.

A data protection officer (“DPO”) has been appointed to ensure compliance with legal requirements. This officer is available for any questions about data handling or privacy rights. Customers who have concerns or wish to exercise their rights can contact the DPO at [email protected].

Definitions

This section explains important terms used in this Privacy Policy. Understanding these definitions helps customers know how data is handled.
Personal Data – Any information related to an individual who can be identified, either directly or indirectly, through details such as name, ID number, location, or online identifier.
Processing – Actions performed on personal data, including collection, recording, organization, storage, retrieval, or deletion.
Profiling – Automated processing of data to analyze or predict aspects of an individual’s behavior, preferences, or interests.
Controller – The entity that decides how and why personal data is processed.
Processor – A person or organization that processes personal data on behalf of the controller.
Recipient – A person, company, or authority that receives personal data. Public authorities receiving data as part of an inquiry do not fall under this category.
Third Party – Any person or organization other than the data subject, controller, or processor that is authorized to handle personal data.
Consent of the Data Subject – A clear and voluntary agreement allowing data processing.
Personal Data Breach – A security incident leading to unauthorized access, loss, or alteration of personal data.
Group of Undertakings – A controlling entity and its subsidiaries.
Supervisory Authority – An independent public body established by a Member State under Article 51 of the GDPR.

Contact Information

Customers can reach out regarding this Privacy Policy to:

  • Check if personal details are correct;
  • Ask how personal data is used;
  • Stop data use for direct marketing;
  • Get a copy of stored personal information.

If promotional messages were accepted during registration, personal details like email and phone number may be used for marketing about products, services, and promotions. Business partners, such as casino game providers, may also share information. Marketing settings can be changed in the personal account.

Customers can update or correct details. Proof may be needed. False information is illegal. It is the player’s responsibility to keep personal data correct.

Requests about personal data can be sent through:

Emails may not reach the recipient due to technical reasons or spam filters. If there is no response within 10 days, another contact method is recommended.

The Data Protection Officer at [email protected] is available if:

  • A privacy violation is suspected;
  • A request for data copies was not processed on time;
  • Privacy policy details need clarification;
  • A copy of personal data under all Dama N.V. licenses is needed.

All valid requests are answered within one month. If a request is complex or multiple requests were sent, more time may be required. Updates will be provided if delays occur.

Data Collection, Storage, and Use

Different types of information help improve services and keep accounts secure. All data remains protected and serves operational, security, and marketing purposes.

The platform gathers various types of data to maintain security, improve services, and comply with regulations.

  • Personal Details – Name, address, date of birth, and verification documents from account registration and transactions;
  • Technical Data – IP address, browser type, device details, and cookie data for security and performance;
  • Gameplay and Activity – Game history, time spent on the platform, and betting patterns;
  • Behavioral and Analytical Data – Website interactions help detect fraud and improve functionality;
  • Third-Party Information – Affiliates, regulatory bodies, and service providers may share data for compliance and fraud detection.

Also, the platform collects different types of data to maintain security, comply with legal obligations, and enhance services.

  • Identity Details – Full name, email, date of birth, gender, and username;
  • Contact Information – Phone number, address, and other communication details;
  • Financial Records – Salary information, sources of funds, and banking details for verification;
  • Transaction History – Deposits, withdrawals, and betting records;
  • Technical Information – Login times, IP addresses, browser specifications, and device details;
  • Usage Statistics – Session duration, login/logout times, and responsible gambling preferences;
  • Marketing Preferences – Communication choices related to promotions and personalized content;
  • Sensitive Data – Responsible gambling records, including self-exclusion, and information from verification documents.

There are several ways the collected information is used, including to fulfill obligations, provide requested services, and manage transactions.

  • Account registration, access, and gaming services depend on stored information;
  • Deposits, withdrawals, and promotional transactions require financial and identity details;
  • Fraud prevention, risk assessment, and AML checks rely on account activity;
  • Responsible gambling regulations require tracking gaming behavior;
  • Customer support resolves issues using stored account details;
  • Marketing communication depends on user preferences;
  • Security measures, system monitoring, and website improvements rely on technical data;
  • Internal research and analysis use anonymous activity data for better service;
  • Bonus abuse and fraudulent actions get identified through transaction monitoring;
  • Regulatory obligations require compliance with reporting and verification rules.

This approach helps maintain a secure and fair gaming environment while improving platform efficiency.

Sharing of Data

We may need to share your personal data with trusted third parties to process your information as described in this Privacy Policy. These third parties include:

  • Group Members: Any group member may need access to your personal information to fulfill your service requests. This data may also be shared within the group for fraud prevention, bonus abuse checks, anti-money laundering (AML), and responsible gaming purposes;
  • Employees: Certain staff members, like the Data Protection Officer, Anti-Fraud analysts, Customer Support, VIP Managers, and others, may access your data to do their jobs. All employees with access to personal information are required to sign confidentiality agreements (NDAs);
  • Game Providers: Some game providers may need access to specific data such as your username and IP address to offer games. Each game provider has its own privacy policy, which can be found on their website;
  • Payment Providers: Personal data may be shared with payment providers you use for transactions on our website. You can check their privacy policies on their websites;
  • Marketing Partners: With your consent, your contact details may be shared with marketing partners who handle the distribution of promotional material such as emails, SMS, and direct mail;
  • Government or Regulatory Authorities: We may need to share personal data with law enforcement or regulatory bodies if the law requires it;
  • Client Communication Software: We use third-party software to send you emails and chat with you when you have questions;
  • AML and Fraud Verification Tools: Third-party software may also be used to check for fraud and ensure compliance with anti-money laundering laws;
  • New Business Transactions: If our company is sold or merged with another, your personal data may be transferred as part of the business change;
  • Legal Advisors: Lawyers and consultants may access your personal data to manage legal matters or resolve disputes.

We ensure all third parties who handle your personal data comply with our privacy rules. They may only use your data for the tasks they were hired to do. We also make sure to limit the amount of data shared, sharing only what is needed.

Transfers of Personal Data Outside of the EEA

Sometimes, your personal data may need to be transferred outside the European Economic Area (EEA) to countries that are not covered by the same data protection laws. In these cases, we take steps to protect your data during these transfers, such as using legal agreements approved by the European Commission.

By using our services, you agree to the transfer of your personal data outside the EEA, with these safety measures in place. If you have questions about these transfers, please contact us.

Data Retention

We will keep your personal data for as long as necessary to fulfill the reasons it was collected. These reasons can include legal requirements, accounting, or reporting needs. When deciding how long to keep data, we consider factors like legal obligations and the risks of unauthorized access to the data.

If you close your account, we will keep your personal data as required by law, especially for anti-money laundering purposes. We may also keep anonymized data to help improve our content and marketing. However, personal data related to your transactions must be kept for at least five years after your last transaction or account closure, in line with EU laws.

Requests to delete personal data before this five-year period cannot be accepted due to legal requirements.

Your Rights, Data Protection, and Security

Data protection laws give customers certain rights regarding their personal data. These rights include:

  • Request access to personal data: Customers can ask for a free copy of the personal data the company holds about them;
  • Request correction of personal data: If any information is incorrect or incomplete, customers can ask to have it corrected. Supporting documents, such as ID or proof of address, may be needed. The request may be declined if it goes against legal obligations;
  • Request erasure of personal data: If there is no legal reason to keep the data, customers can request its deletion. This right may not apply if the company must keep the data for legal reasons;
  • Object to data processing: If the company processes data based on legitimate interests and customers believe it impacts their rights, they can object. In some cases, the company may have strong reasons to keep processing the data;
  • Request data processing restrictions: Customers can ask for temporary suspension of data processing if they need to verify the data’s accuracy, if data use is unlawful, or if they need it for legal purposes;
  • Request data transfer (data portability): Customers can ask to transfer their data to another controller if the data was collected with consent or for a contract;
  • Withdraw consent: If the company processes data with consent, customers can withdraw their consent at any time through account settings;
  • Lodge a complaint: If customers believe their data is being mishandled, they can file a complaint with a supervisory authority.

To exercise these rights, the company may ask for additional information to confirm the identity of the customer. The company will try to respond within one month, though some requests may take longer. In such cases, the company will inform customers of the delay.

Most of the time, the company does not use fully automated decision-making. If this happens in specific cases, customers will be informed as required by law.

The company is committed to protecting personal data in line with privacy laws and best practices. It takes all necessary steps to keep the data safe and prevent unauthorized access, loss, or misuse.

To protect data, the company has security measures in place and limits access to those who need it for business purposes. Player accounts can only be accessed with a unique ID and password. Two-factor authentication (2FA) is also recommended for extra security.

Customers are responsible for keeping their login information safe and ensuring that no one else can access their account.

Updated: