Privacy Policy

Running a licensed casino means holding data that players would rather not see leak: identity documents, payment references, play history. This policy describes exactly what National Casino collects through this site, what each piece is for, and what control remains in the player's hands. The short version is that data is collected for three reasons only, operating the account, meeting licence obligations and preventing fraud, and is never sold.

1. What We Collect

Registration creates the base record: e-mail address, name, date of birth, country and chosen currency. Verification adds copies of a government photo ID and a proof of address, required by the licence before any withdrawal. The cashier generates transaction records, method, amount, timestamp, but never stores full card numbers, which remain with the payment processor. Finally, standard technical data arrives with every visit: IP address, device and browser type, and the pages opened.

2. What Each Piece Is For

Account data operates the account: logins, balance, bonus eligibility, support history. Verification documents satisfy the know-your-customer duties attached to the Curaçao licence and confirm that a withdrawal goes to the person who deposited. Transaction and technical data feed fraud and multi-account detection, which protects honest players as much as the casino. Marketing messages, bonus offers by e-mail or SMS, are sent only with consent, and every message carries an unsubscribe route that works with one click.

3. Cookies

The site sets a session cookie that keeps a login alive between pages, preference cookies that remember language and display choices, and analytics cookies that count visits in aggregate. None of them read anything else on the device. A browser set to refuse cookies still opens the site, though logged-in play requires at least the session cookie to function.

4. Who Sees It

Three categories of recipient exist, and no others. Payment providers receive what a transaction needs to complete. Identity verification services process documents during KYC review. The licensing regulator can inspect records as a condition of the licence. Data is not sold, rented or traded to advertisers or data brokers, and a government request outside the licence framework is met with the minimum the law compels.

5. Storage and Protection

All traffic between the device and the platform runs over TLS encryption, and stored documents are encrypted at rest with access limited to the verification and compliance staff who need them. Records are kept while the account exists and for the retention period the licence requires afterward, then deleted. No storage promise is absolute anywhere on the internet, which is why the collection principle above is minimisation: what is never collected can never leak.

6. Your Rights

Any account holder can request a copy of the data held about them, correction of anything inaccurate, deletion of the account and its data once legal retention periods expire, and an end to marketing at any moment. Requests go through live chat or the contact form, are verified against the account e-mail, and are answered within the timeframes good practice expects, typically days rather than weeks.

7. Where the Data Lives

The platform operates under a Curaçao licence, and account data is processed on infrastructure outside Australia. The safeguards described in this policy, encryption, access control, retention limits, apply regardless of geography, and using the site from Australia constitutes acceptance of that processing arrangement.

8. Changes to This Policy

When this policy changes, the new version replaces this page and the date below moves. Changes that expand what is collected or shared are announced in the account before they apply, so continued play is always an informed choice. Questions about anything here reach a human through the contact page.

Last updated: July 2026.