Data Protection & Privacy

Information Collection

The following categories of personal data are subject to collection and processing by SpeedAU Casino, operated under the jurisdiction of Curacao, in the course of providing gambling and entertainment services through the platform accessible at speedaucasino.co.com:

• Identification Data: Full legal name, date of birth, nationality, and government-issued identification document details, including passport numbers and national identity card information, are collected for the purposes of identity verification and regulatory compliance.
• Contact Information: Electronic mail addresses, telephone numbers, and residential addresses are recorded to facilitate account administration and service communications.
• Financial Data: Banking details, payment card information, cryptocurrency wallet addresses, and transactional records associated with deposits and withdrawals are collected and retained in accordance with applicable anti-money laundering regulations.
• Account Credentials: Usernames, encrypted passwords, and security question responses are maintained for the purpose of account access management and security enforcement.
• Technical Data: Internet Protocol addresses, browser type and version, operating system identifiers, device fingerprints, session tokens, and cookies are automatically collected upon interaction with the platform.
• Behavioral Data: Gambling activity records, game participation history, wagering patterns, session durations, and platform navigation data are systematically recorded for operational and compliance purposes.
• Communication Records: Correspondence submitted through customer support channels, including live chat transcripts, electronic mail exchanges, and telephonic communication logs, is retained for quality assurance and dispute resolution purposes.
• Verification Documentation: Copies of identity documents, proof of address documentation, and source of funds declarations submitted during Know Your Customer procedures are stored in accordance with regulatory retention obligations.

Personal data is collected directly from the data subject upon registration, during account verification processes, and throughout the ongoing use of platform services. Additionally, certain technical data is collected automatically through the deployment of cookies and similar tracking technologies. Data may also be obtained from third-party verification service providers and fraud prevention databases where lawful grounds for such collection exist.

Data Usage

Personal data collected through the platform at speedaucasino.co.com is processed exclusively for specified, explicit, and legitimate purposes. The following enumeration details the purposes for which personal data is utilized in the provision of services operated under Curacao licensing authority:

• Account Registration and Management: Personal data is processed to establish, maintain, administer, and terminate user accounts, including the verification of eligibility to participate in gambling services and the enforcement of platform terms and conditions.
• Identity Verification and Know Your Customer Compliance: Data is processed to fulfill obligations arising under applicable anti-money laundering legislation, counter-terrorism financing regulations, and Curacao gaming licensing requirements, including the verification of player identity and the assessment of source of funds.
• Financial Transaction Processing: Payment information and financial data are processed to execute deposit and withdrawal transactions, conduct fraud screening procedures, and maintain accurate financial records as required by regulatory frameworks.
• Responsible Gambling Compliance: Behavioral and account data is analyzed to identify patterns indicative of problem gambling behavior, to enforce self-exclusion requests, and to implement responsible gambling tools and limitations as mandated by applicable regulations.
• Customer Support and Dispute Resolution: Communication records and account data are processed to address inquiries submitted to customer support services, to investigate complaints, and to facilitate the resolution of disputes arising from platform use.
• Security and Fraud Prevention: Technical data and behavioral records are processed to detect, investigate, and prevent unauthorized access, fraudulent activity, collusion, bonus abuse, and other prohibited conduct in accordance with platform security policies.
• Legal and Regulatory Compliance: Personal data is processed to fulfill obligations imposed by applicable law, including the provision of information to competent regulatory authorities, tax authorities, and law enforcement agencies where legally required.
• Service Improvement and Analytics: Aggregated and pseudonymized data is analyzed to evaluate platform performance, improve service functionality, and enhance the overall user experience in a manner consistent with applicable data protection principles.
• Marketing Communications: Where explicit consent has been obtained from the data subject, contact information may be utilized to deliver promotional communications, personalized offers, and service-related notifications. Such consent may be withdrawn at any time through account settings or by contacting the data protection point of contact.

Personal data shall not be sold, rented, or otherwise transferred to third parties for their independent commercial purposes. Data is shared with third-party processors solely where such sharing is necessary for the provision of services and is governed by appropriate data processing agreements ensuring equivalent levels of data protection.

Data Security

SpeedAU Casino implements a comprehensive framework of technical and organizational measures designed to ensure the security, integrity, confidentiality, and availability of personal data processed through the platform at speedaucasino.co.com. The following security measures are maintained in accordance with industry standards and applicable regulatory requirements:

• Encryption Protocols: All data transmitted between the data subject's device and the platform infrastructure is encrypted using Transport Layer Security protocols. Sensitive data, including financial information and identity documentation, is encrypted at rest using industry-standard encryption algorithms.
• Access Control Mechanisms: Access to personal data is restricted on a strict need-to-know basis. Role-based access control systems are implemented to ensure that personnel are granted access only to the categories of data necessary for the performance of their designated functions.
• Authentication Systems: Multi-factor authentication mechanisms are deployed for administrative access to systems containing personal data. User account security is enforced through password complexity requirements and session management controls.
• Network Security Infrastructure: Firewalls, intrusion detection systems, and intrusion prevention systems are deployed to monitor and protect the platform infrastructure from unauthorized access and external threats.
• Vulnerability Management: Regular security assessments, penetration testing exercises, and vulnerability scanning procedures are conducted to identify and remediate security weaknesses within the platform infrastructure and application layers.
• Data Minimization and Retention Controls: Personal data is retained only for the period necessary to fulfill the purposes for which it was collected, subject to applicable regulatory retention requirements. Data that is no longer required is securely deleted or anonymized in accordance with established data retention schedules.
• Incident Response Procedures: Formal data breach response procedures are maintained, including protocols for the containment of security incidents, notification of competent authorities where legally required, and communication with affected data subjects in circumstances where a risk to their rights and freedoms is identified.
• Third-Party Due Diligence: Third-party service providers engaged in the processing of personal data on behalf of the operator are subject to contractual data processing agreements and periodic security assessments to ensure compliance with applicable data protection standards.
• Staff Training and Awareness: Personnel with access to personal data are required to complete data protection and information security training to ensure awareness of applicable obligations and the proper handling of personal information.

Notwithstanding the measures described herein, no data transmission or storage system can be guaranteed to be completely secure. In the event that a data security incident is identified that presents a material risk to the rights and freedoms of data subjects, affected individuals shall be notified in accordance with applicable legal requirements.

Your Rights

Data subjects whose personal information is processed by SpeedAU Casino through the platform at speedaucasino.co.com are entitled to exercise the following rights with respect to their personal data, subject to applicable legal limitations and regulatory obligations:

• Right of Access: Data subjects are entitled to request confirmation as to whether personal data concerning them is being processed and, where such processing is confirmed, to receive a copy of the personal data held, together with information regarding the purposes of processing, the categories of data concerned, and the recipients to whom data has been or may be disclosed.
• Right to Rectification: Where personal data held by the operator is found to be inaccurate or incomplete, data subjects are entitled to request the correction or completion of such data without undue delay. Requests for rectification shall be assessed and acted upon within the timeframes established by applicable data protection frameworks.
• Right to Erasure: Data subjects may request the deletion of personal data concerning them where such data is no longer necessary for the purposes for which it was collected, where consent upon which processing was based has been withdrawn, or where processing is determined to be unlawful. It is noted that the right to erasure is subject to limitations where retention of data is required for compliance with legal obligations, including regulatory record-keeping requirements imposed by Curacao gaming authorities and anti-money laundering legislation.
• Right to Data Portability: Where processing is carried out by automated means on the basis of consent or contractual necessity, data subjects are entitled to receive personal data concerning them in a structured, commonly used, and machine-readable format, and to request the transmission of such data to another controller where technically feasible.
• Right to Restriction of Processing: Data subjects are entitled to request the restriction of processing of their personal data in circumstances where the accuracy of the data is contested, where processing is unlawful but erasure is not requested, where data is no longer required by the operator but is needed by the data subject for the establishment, exercise, or defense of legal claims, or where an objection to processing has been submitted and is pending verification.
• Right to Object: Data subjects are entitled to object to the processing of personal data on grounds relating to their particular situation where processing is based on legitimate interests. Additionally, where personal data is processed for direct marketing purposes, data subjects hold an unconditional right to object to such processing at any time.
• Right to Withdraw Consent: Where processing is based upon the data subject's consent, such consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent may be effected through account settings or by submitting a written request to the data protection contact address.

Requests to exercise any of the rights enumerated above shall be submitted in writing to the contact address specified herein. The identity of the requesting individual will be verified prior to the processing of any rights request. Responses to verified requests shall be provided within the timeframes prescribed by applicable data protection legislation. Where a request is refused in whole or in part, the data subject shall be informed of the grounds for refusal and of their right to lodge a complaint with the competent supervisory authority.

Contact

All inquiries, requests, and correspondence relating to the processing of personal data, the exercise of data subject rights, or any matter pertaining to this Data Protection and Privacy policy shall be directed to the designated data protection point of contact through the following electronic correspondence address:

Electronic Correspondence: [email protected]

All communications submitted to the above address shall be acknowledged upon receipt and processed in accordance with applicable data protection obligations. Data subjects are requested to provide sufficient identifying information in their correspondence to enable accurate identification and efficient processing of their inquiry or request. The operator undertakes to respond to all legitimate data protection inquiries within the applicable statutory timeframes prescribed under relevant data protection legislation governing operations conducted under Curacao licensing jurisdiction.