Log inSign up

Your Privacy at Goldenpanda Casino

This Privacy Policy explains what personal data we collect when you play at Goldenpanda Casino, why we collect it, who we share it with and how long we keep it. We operate under licence OGL/2024/1567/0923 issued in Curaçao and handle your data in line with UK GDPR standards. Our support team is available 24/7 at [email protected] if anything here needs clarification.

Data We Collect From You

We collect several categories of personal data, each tied to a specific purpose. You give some of it directly when you register or contact us; the rest is generated automatically as you use the site.

  • Identity data: full name, date of birth, email address, phone number and residential address.
  • Verification documents: copies of your ID, proof of address and payment method evidence for KYC checks.
  • Transaction data: deposits, withdrawals, bet history, bonus activity and payment method details.
  • Technical data: IP address, device type, operating system, browser and approximate location.
  • Gameplay behaviour: games played, session duration, stakes and win/loss patterns.
  • Marketing preferences: which promotions you opted into, communication channels and consent records.

How We Use Your Data

Every use of your data maps to a concrete operational need. We do not process your information for anything beyond the purposes listed below.

Fraud prevention and responsible-gambling monitoring run continuously in the background: behavioural patterns help us flag suspicious activity and identify players who may need deposit limits, session reminders or self-exclusion support through GamCare, BeGambleAware and GAMSTOP.

  • Creating and maintaining your player account.
  • Verifying your identity and age before your first withdrawal (processed within 24-48 hours).
  • Processing deposits and withdrawals across Visa Debit, Mastercard, Trustly, e-wallets and crypto.
  • Preventing fraud, money laundering and multiple-account abuse.
  • Monitoring play for responsible-gambling purposes.
  • Sending marketing messages where you have consented.
  • Meeting legal and regulatory obligations.

Contract. When you register and play, we process your data to perform our agreement with you: running your account, settling bets and paying withdrawals. Without this processing we cannot offer the service.

Legal obligation. Gambling and anti-money-laundering law requires us to verify your identity, keep transaction records for at least five years and report suspicious activity to the relevant authorities. We cannot waive these duties.

Legitimate interest. We rely on legitimate interest for fraud detection, security monitoring, dispute resolution and improving our site, provided your rights are not overridden.

Consent. Marketing emails, SMS and personalised offers are sent only where you have opted in. You can withdraw consent at any time without affecting your access to the games.

How Long We Keep Records

We do not hold your data indefinitely. Retention depends on the category and the legal minimum that applies to it. When a period expires we delete or anonymise the data.

  • Transaction and account records: a minimum of 5 years after account closure, as required by AML regulations.
  • KYC documents: kept for 5 years after the last transaction, then securely destroyed.
  • Marketing preferences and consent logs: until you withdraw consent or ask us to delete them.
  • Technical and gameplay logs: up to 24 months for security and dispute purposes.
  • Support correspondence: up to 3 years after your last message.

Who We Share Data With

We never sell your personal data. Sharing is limited to service providers who need it to perform a specific function, and each one is bound by a data-processing agreement.

Recipients fall into a small number of categories: payment processors handling your deposits and withdrawals, KYC and AML verification providers, regulators and law-enforcement bodies where legally required, analytics services that help us understand site performance, and IT infrastructure providers hosting our platform. Where data leaves these categories we tell you first.

Your Rights Over Your Data

You control your personal data. Submit any request to [email protected] and we respond within one month, extending to three months only for complex cases, and we will tell you if we do.

If you believe we have mishandled your data, you have the right to complain to the Information Commissioner's Office (ICO), the UK data protection authority.

  • Access: get a copy of the personal data we hold about you.
  • Rectification: correct inaccurate or incomplete details.
  • Erasure: request deletion where no legal retention duty applies.
  • Portability: receive your data in a machine-readable format.
  • Objection: object to processing based on legitimate interest.
  • Withdraw consent: stop marketing communications at any time.
  • Complain: escalate to the ICO at ico.org.uk.

Cookies and Similar Technologies

Our site uses essential cookies to keep you logged in and secure your session, plus optional analytics and marketing cookies that activate only with your consent, managed through the banner shown on your first visit. Full details, including how to change your preferences or clear cookies in your browser, are set out in our separate Cookies Policy page.

How We Protect Your Information

All traffic between your device and our servers is encrypted with TLS. Data at rest is encrypted, access to production systems follows a strict least-privilege model, and every access attempt is logged and auditable.

If a personal data breach occurs that poses a risk to your rights, we notify the relevant supervisory authority within 72 hours and inform affected players directly where the risk is high. Our 24/7 support team also handles any security concerns you raise.

Contact Our Data Protection Officer

Questions about this policy, a data request or a privacy concern go straight to our Data Protection Officer at [email protected]. We aim to acknowledge every message within two business days. This policy was last reviewed in 2026; material changes will be announced on this page before they take effect.

Frequently asked questions

Does Goldenpanda Casino sell my personal data?

No. We share data only with the service providers listed in this policy, such as payment processors and verification providers, each bound by contractual data-protection terms.

How do I stop marketing emails?

Use the unsubscribe link in any message or withdraw consent via [email protected]. Marketing stops immediately; your account and gameplay are unaffected.

Can I delete my account data completely?

We delete marketing data on request, but transaction and KYC records must be kept for a minimum of 5 years after account closure under anti-money-laundering law. After that period we delete or anonymise them.

Do you use my data for credit checks?

No. Verification checks confirm your identity, age and payment method for KYC purposes only.