Privacy Policy
Last reviewed
This notice sets out what personal information Jackpot City Casino gathers, the reasons we are permitted to hold it, and the choices available to you at any point. It applies to our website, mobile experience and every support channel we operate.
Information we gather
When you register we record identity details such as full name, date of birth, residential address, email address and telephone number, together with the currency and jurisdiction you select. These fields exist because anti-money-laundering rules issued by our regulators require a verified identity behind every account.
Transaction records — deposits, withdrawals, wagers, balances and payment instrument identifiers — are stored for the periods our licences prescribe. We retain masked card numbers and settlement references rather than full card data, which stays with our payment processors.
Technical information reaches us automatically: IP address, approximate location derived from it, device model, operating system, browser fingerprint characteristics, session duration and referring page. Verification documents such as passport scans, utility bills or bank statements are stored separately with restricted internal access.
Lawful bases and purposes
Contractual necessity covers account creation, game delivery, payment processing and customer service — without this information there is no service to provide.
Legal obligation covers age verification, sanctions screening, source-of-funds review and the reporting duties owed to the Malta Gaming Authority, the Kahnawake Gaming Commission, the Alderney Gambling Control Commission and our North American regulators.
Legitimate interest covers fraud detection, bonus abuse investigation, platform security, aggregated performance analysis and the internal monitoring that supports our player protection programme. Consent, which you may withdraw at any time, covers optional marketing email, SMS and push messaging.
Sharing, transfers and safeguards
We disclose information to game studios that supply the titles on our lobby, to payment institutions handling your transactions, to identity verification vendors, to cloud infrastructure providers, and to regulators or law enforcement where a valid legal request exists. Jackpot City Casino does not sell personal information to advertising networks.
Some of these partners operate outside your country of residence. Transfers rely on adequacy decisions, standard contractual clauses or comparable safeguards, and every processor is bound by written terms limiting use of the data to the instructions we give.
On the technical side we apply TLS encryption in transit, encryption at rest for verification files, network segmentation, role-based internal permissions and independent penetration testing. No system can be described as impenetrable, so we also maintain a documented breach procedure with regulator notification timelines.
Retention periods
Account and transaction records are held for a minimum of five years after your last activity, or longer where a specific licence condition, investigation or court order demands it. This period is imposed on us and cannot be shortened by a deletion request.
Self-exclusion records are kept for the full duration of the exclusion and afterwards, because deleting them would allow an excluded player to re-register — the outcome the exclusion exists to prevent.
Marketing preferences, analytics data and support transcripts follow shorter schedules, generally between twelve and thirty-six months, after which they are erased or irreversibly anonymised.
Your rights and cookie controls
Depending on where you live you may request a copy of your data, correct inaccurate entries, ask for erasure, object to certain processing, request portability in a machine-readable format, or complain to your national data protection authority. New Zealand residents may raise concerns with the Office of the Privacy Commissioner.
Requests are answered within one month, extendable once for genuinely complex cases. We verify identity before releasing anything, since an unverified data request is one of the most common account-takeover techniques.
Strictly necessary cookies keep you logged in and protect the session; they cannot be switched off without breaking the site. Analytics and preference cookies are optional and manageable through the consent banner or your browser settings at any time.
Where to get help
- Data Protection Officer — contactable through the privacy request form linked in the site footer
- Jackpot City Casino customer support — live chat and email, available seven days a week for account and access queries