Crusado Casino Privacy Policy

Privacy Policy

At Crusado, protecting your personal data is something we take seriously, not as a tick-box exercise but as part of how we operate every day. This policy explains what information we collect, why we collect it, and how you can control it.

1. Nature and Scope of Personal Data Collected

When you register with Crusado, we ask for certain personal details to open and manage your account. This isn't optional padding — it's information we need to verify who you are and keep our platform compliant.

We process personal data in accordance with GDPR and the obligations attached to our Curaçao gaming licence 8048/JAZ. The categories we collect vary depending on how you use our services, but generally include the following:

Identity details such as full name, date of birth, and nationality
Contact information including postal address, phone number, and account email
Financial details linked to deposits, withdrawals, and payment verification
Technical data such as IP address, device type, and browser information
Account activity including game history, session times, and transaction records
Verification documents submitted during identity checks

2. Purposes and Objectives of Data Processing

To process your payments, verify your identity, and keep your account secure, we need to handle your data for specific, defined purposes. We don't collect information just to have it sitting around.

Our obligations under GDPR require us to have a lawful basis for every type of processing we carry out. This includes contractual necessity, legal compliance, legitimate interest, and in some cases your explicit consent. The purposes behind our data processing include:

Account creation, verification, and ongoing account management
Processing deposits, withdrawals, and other financial transactions
Meeting anti-money laundering and know-your-customer obligations
Detecting and preventing fraud or unauthorised account activity
Providing customer support and responding to enquiries
Sending account notifications and, where consented to, marketing communications
Improving our platform through analytics and performance monitoring

3. Security Measures and Technical Integrity

Under GDPR, we're required to apply appropriate technical and organisational measures to protect the personal data we hold. In practice, this means encrypted data transmission, restricted internal access controls, and regular monitoring of our systems for vulnerabilities. Our servers are protected against unauthorised access, and staff access to personal data is limited strictly to those who need it to perform their role. No system is completely immune to risk, but we work continuously to reduce exposure and respond quickly if something goes wrong.

We share certain information with external parties, but only where it's necessary to run our platform properly or to meet a legal obligation. This isn't about selling your data — it's about keeping the services you rely on functioning correctly.

Third parties we may share data with fall into a limited number of categories, each bound by data protection agreements:

Payment processors and banking partners handling deposits and withdrawals
Identity verification providers used during KYC checks
Regulatory bodies and licensing authorities where legally required
IT infrastructure and hosting providers supporting platform operations
Fraud prevention and anti-money laundering service providers
Marketing partners, only where you've given consent

We want to be clear about how cookies work on our platform, because this is an area players often have questions about. Cookies are small text files stored on your device that help our site remember your preferences and recognise you on return visits.

We use several categories of cookies. Essential cookies keep core functions like login sessions and security checks working properly, and these cannot be switched off without affecting basic site function. Performance cookies help us understand how players interact with our platform, allowing us to identify and fix issues. Preference cookies remember settings like language or display options so you don't have to reselect them every visit. Where cookies aren't strictly necessary, such as those used for targeted advertising, we only apply them with your consent.

You can manage or withdraw cookie consent at any time through your browser settings or our cookie preference tool. Turning off non-essential cookies won't prevent you from using our core services, though some personalisation features may be affected.

6. Data Retention Period

Your data doesn't stay with us indefinitely. We retain personal information only for as long as necessary to fulfil the purposes it was collected for, including meeting legal, accounting, and regulatory retention requirements tied to our Curaçao licence. Financial and verification records are typically held for a set number of years after account closure to satisfy anti-money laundering obligations, after which the data is securely deleted or anonymised.

7. User Rights Over Their Data

We want to be clear about the rights you hold over your personal data, because this is one of the most important parts of GDPR compliance. These rights exist to give you genuine control, not just a theoretical entitlement buried in legal text.

Depending on your circumstances and the processing involved, you're entitled to exercise the following rights:

Access — requesting a copy of the personal data we hold about you
Rectification — correcting inaccurate or incomplete information
Erasure — asking us to delete your data where there's no legal reason to keep it
Objection — opposing certain types of processing, including direct marketing
Portability — receiving your data in a structured, commonly used format to transfer elsewhere

To exercise any of these rights, you can get in touch with our support team directly. We'll respond within the timeframes required under GDPR and explain clearly what happens next.

8. International Data Transfers

Under UK data protection law and GDPR, transferring personal data outside the UK or European Economic Area requires additional safeguards. Because some of our service providers and infrastructure partners operate internationally, certain data may be processed outside these regions.

Where this happens, we rely on recognised legal mechanisms such as standard contractual clauses or equivalent safeguards to ensure your data receives a comparable level of protection, regardless of where it's processed. We assess our third-party partners carefully before any international transfer takes place.

9. Privacy Policy Updates

We update this policy from time to time to reflect changes in our practices, technology, or legal obligations. Where changes are significant, we'll notify you through your account or by other reasonable means. Continuing to use our platform after updates take effect means you accept the revised terms, so it's worth checking this page periodically.

10. Contact Information

To help with any questions about your data or this policy, our support team is available through the contact channels listed on our platform. Whether you want to exercise a data right, ask about our processing practices, or raise a concern, we're the right point of contact.

We're registered and licensed in Curaçao under licence number 8048/JAZ, and we handle all data protection matters in line with GDPR standards. If you're not satisfied with how we've addressed a concern, you also have the right to lodge a complaint with the relevant supervisory authority.

Responsible Gambling

Gambling should always stay enjoyable and within your control. If you feel it's becoming a problem, free and confidential support is available through GamCare on 0808 8020 133. Crusado is intended for players aged 18 and over only.