Privacy Policy
This Privacy Policy explains how Casiku Casino collects, uses, stores and protects personal information belonging to players and website visitors in the United Kingdom. It also describes the choices and legal rights available to you when you create an account, use casino services, contact support or browse the website.
Casiku is a brand managed by White Hat Gaming Limited, a company registered in Malta under company number C73232. White Hat Gaming Limited is licensed and regulated by the Gambling Commission of Great Britain under licence number 52894 for customers in Great Britain.
For data protection purposes, White Hat Gaming Limited acts as the data controller. This means that it determines why and how personal data connected with Casiku Casino is processed. Personal information is handled in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations and applicable gambling, anti-money laundering and financial crime legislation.
Who This Policy Applies To
This Privacy Policy applies to personal data processed when you:
- visit or browse the Casiku Casino website;
- register, maintain or close a player account;
- deposit funds, place wagers or request withdrawals;
- claim or use a promotion;
- complete identity, age, affordability or source of funds checks;
- contact customer support or make a complaint;
- use responsible gambling controls;
- receive marketing communications after providing the required permission;
- participate in surveys, competitions or other Casiku activities.
Separate privacy notices may be supplied where a particular service requires additional processing. Those notices should be read together with this policy.
Personal Data We Collect
Personal data is information that identifies you directly or can be linked to you. The information collected depends on how you interact with Casiku Casino and which services you use.
Identity and account information
- Full name, username, title, date of birth and gender where requested.
- Residential address, country of residence and nationality.
- Email address, telephone number and account credentials.
- Player account number, registration details and account status.
- Identity documents, proof of address and verification results.
Financial and transactional information
- Payment method details and masked card or account information.
- Deposits, withdrawals, refunds, chargebacks and payment history.
- Casino balances, stakes, winnings, losses and bonus activity.
- Source of funds, source of wealth and financial circumstances where checks are legally or regulatorily required.
- Results supplied by payment providers, fraud prevention services or financial risk assessment providers.
Complete payment card details may be handled directly by authorised payment processors. Casiku Casino only retains the information necessary to administer transactions, maintain records and meet legal obligations.
Gaming and responsible gambling information
- Games played, session duration, wagering patterns and transaction frequency.
- Deposit, loss, wagering and session limits.
- Time-out, cooling-off and self-exclusion records.
- Safer gambling interactions and account restrictions.
- Information voluntarily disclosed about health, wellbeing or personal circumstances.
Responsible gambling information may include sensitive personal data where you disclose details about your physical or mental health. Such information is processed only where a valid legal condition applies and where it is necessary to protect players, comply with regulatory duties or respond to a request for support.
Technical and usage information
- IP address, device identifiers and approximate location.
- Browser type, operating system, language and time zone.
- Login records, page visits, clicks, errors and session activity.
- Cookie identifiers and advertising preferences.
- Information used to identify multiple accounts, unusual access or suspected misuse.
Communication information
Casiku Casino may retain emails, live chat transcripts, complaint records and other correspondence. Telephone calls may be recorded for security, staff training, service monitoring and dispute resolution. You will be informed when a call is being recorded where required.
Compliance and risk information
Casiku Casino may process information about fraud alerts, sanctions, politically exposed person status, criminal allegations, account investigations and regulatory enquiries. Criminal offence data is processed only where permitted by law and subject to appropriate safeguards.
How Personal Data Is Collected
Information may be obtained through the following channels:
- Directly from you when you register, complete forms, make payments, supply documents or contact Casiku Casino.
- Automatically through cookies, server logs, fraud monitoring systems and similar technologies when you use the website.
- From identity verification, payment, fraud prevention, credit reference and financial risk assessment providers.
- From public records, sanctions lists, electoral registers and other legally accessible sources.
- From gambling regulators, law enforcement bodies, self-exclusion schemes and alternative dispute resolution providers.
- From companies within the White Hat Gaming group where lawful and necessary.
You must provide accurate information and keep your account details current. Casiku Casino may ask you to update or verify information if it appears incomplete, inconsistent or outdated.
Why We Process Personal Data
Providing casino services
Personal data is used to create and administer your account, authenticate logins, accept deposits, process withdrawals, record gameplay, apply bonuses and provide customer support. This processing is generally necessary to perform the contract between you and Casiku Casino.
Identity, age and eligibility checks
Casiku Casino must confirm that players are at least 18 years old and eligible to gamble in Great Britain. Identity and age checks may take place before you are permitted to deposit, gamble or access free-to-play gambling games. Additional documents may be requested where electronic verification is inconclusive.
Anti-money laundering and fraud prevention
Account and transaction information is examined to prevent money laundering, terrorist financing, fraud, collusion, chargeback abuse and other unlawful activity. Casiku Casino may verify the origin of funds, investigate unusual transactions, suspend activity or report relevant information to competent authorities when required by law.
Player protection
Gameplay, deposits, losses, session duration, account contacts and other behavioural indicators may be assessed to identify signs of gambling-related harm. This information allows Casiku Casino to issue safer gambling messages, conduct customer interactions, recommend controls or restrict an account where intervention is appropriate.
Security and service improvement
Technical information is used to protect accounts, detect cyber threats, diagnose errors, monitor website performance and improve navigation. Where this processing relies on legitimate interests, Casiku Casino assesses whether those interests are compatible with your rights and reasonable expectations.
Legal claims and regulatory reporting
Information may be retained and disclosed where necessary to respond to complaints, establish or defend legal claims, comply with court orders, assist law enforcement or submit required information to the Gambling Commission and other competent authorities.
Marketing
Casiku Casino may send promotional emails, text messages or other direct marketing only where there is a valid legal basis under UK data protection and electronic communications rules. You may withdraw marketing consent at any time through your account settings, an unsubscribe option in a message or customer support.
Opting out of marketing does not prevent Casiku Casino from sending essential service communications concerning account security, verification, transactions, responsible gambling controls or changes affecting your use of the service.
Legal Bases for Processing
Depending on the purpose, Casiku Casino relies on one or more of the following legal bases:
- Performance of a contract: processing required to open and operate your account or provide requested casino services.
- Legal obligation: processing required under gambling, anti-money laundering, taxation, consumer protection and data protection law.
- Legitimate interests: protecting the business and players, preventing fraud, improving services and resolving disputes, provided those interests do not override your rights.
- Consent: processing based on a freely given choice, including certain marketing and non-essential cookie activities.
- Substantial public interest: processing certain sensitive or criminal offence information for safeguarding, fraud prevention or regulatory compliance where permitted by law.
- Legal claims: processing needed to establish, exercise or defend a legal claim.
Where processing is based on consent, you may withdraw that consent without affecting processing that took place before the withdrawal.
Automated Checks and Profiling
Casiku Casino may use automated systems to assess account security, fraud risk, payment activity, player protection indicators, bonus eligibility and regulatory compliance. These systems may analyse identity details, transaction history, device data and gambling behaviour.
Some automated checks may result in a transaction being delayed, a promotion being withheld, additional documents being requested or an account being referred for manual review. Where a decision has a legal or similarly significant effect and is based solely on automated processing, you may request human intervention, express your point of view and challenge the decision, subject to applicable legal exceptions.
Who May Receive Personal Data
Personal information is shared only where there is a lawful and necessary reason. Recipients may include:
- companies within the White Hat Gaming group;
- payment processors, banks and card schemes;
- identity, age and document verification providers;
- fraud prevention, cybersecurity and financial risk assessment services;
- game suppliers, platform providers and technical support companies;
- cloud hosting, analytics and communication providers;
- professional advisers, auditors and insurers;
- self-exclusion and responsible gambling organisations;
- the Gambling Commission, tax authorities, law enforcement agencies and courts;
- alternative dispute resolution providers where a complaint is referred;
- a purchaser or successor if the business is reorganised, transferred or sold.
Service providers acting as processors may use personal data only on documented instructions and must apply appropriate confidentiality and security measures. Certain recipients, such as banks, regulators and fraud prevention agencies, may act as independent controllers for their own legal purposes.
Casiku Casino does not sell personal data to third parties.
International Data Transfers
White Hat Gaming Limited is established in Malta and works with service providers in several jurisdictions. Your personal data may therefore be transferred outside the United Kingdom.
Where information is sent to a country that does not benefit from UK adequacy regulations, Casiku Casino uses safeguards recognised by UK law. These may include the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, binding corporate arrangements or another permitted transfer mechanism. Additional technical and organisational protections are applied where the circumstances require them.
You may contact the Data Protection Officer for further information about the safeguards used for a particular transfer.
How Long Information Is Retained
Personal data is retained only for as long as necessary for the purpose for which it was collected. The applicable period depends on the type of information, regulatory requirements, limitation periods and whether an investigation or dispute remains open.
Account, identity, payment and transaction records may normally need to be retained for at least five years after the business relationship ends or a relevant transaction is completed to meet anti-money laundering and gambling compliance obligations. Self-exclusion and responsible gambling records may be kept for longer where this is necessary to enforce restrictions, protect players or demonstrate regulatory compliance.
Information connected with a complaint, suspected fraud, legal claim or regulatory investigation may be retained until the matter and any relevant limitation period have ended. Data that no longer needs to identify an individual may be deleted or converted into anonymous statistical information.
Data Security
Casiku Casino applies technical and organisational safeguards designed to prevent unauthorised access, disclosure, alteration, loss or destruction of personal information. Measures include encrypted transmission, access controls, authentication procedures, security monitoring, staff confidentiality duties, supplier assessments and incident response processes.
Access to personal data is restricted to employees, contractors and service providers who require it for an authorised purpose. Payment and identity information receives controls proportionate to its sensitivity.
No internet service can be guaranteed to be completely secure. Players should use a unique password, keep login details confidential, sign out of shared devices and contact Casiku Casino promptly if unauthorised account activity is suspected.
Your Data Protection Rights
Under UK data protection law, you may have the right to:
- request confirmation that your personal data is being processed;
- receive a copy of personal data held about you;
- correct inaccurate or incomplete information;
- request deletion where there is no lawful reason to retain the information;
- request restriction of processing in specified circumstances;
- object to processing based on legitimate interests;
- object to direct marketing at any time;
- receive certain information in a structured, commonly used and machine-readable format;
- request the transfer of eligible information to another controller;
- withdraw consent where processing relies on consent;
- challenge qualifying decisions made solely through automated processing.
These rights are not absolute. Casiku Casino may retain or continue processing information where this is necessary to comply with gambling, anti-money laundering, fraud prevention or other legal obligations. If a request cannot be fulfilled in full, the reason will be explained unless the law restricts that explanation.
A request is normally handled without charge and within one month. The response period may be extended where a request is particularly complex or several requests are made. Casiku Casino may ask for proof of identity before disclosing or changing account information. A reasonable fee may be charged, or a request may be refused, if it is manifestly unfounded or excessive.
Cookies and Similar Technologies
Casiku Casino uses cookies and similar technologies to maintain secure sessions, remember preferences, measure website performance and, where permitted, personalise advertising. Strictly necessary cookies may operate without consent because they are required for security or core website functions.
Analytics, personalisation and advertising cookies are placed only after the required permission has been obtained. You can review or change your choices through the website’s cookie controls. Withdrawing consent does not affect the lawfulness of processing carried out before the preference was changed.
Blocking certain cookies may prevent account login, payment processing or other essential features from working correctly.
Children and Age Restrictions
Casiku Casino services are restricted to people aged 18 or over. The website is not intended for children, and personal data relating to a person under 18 must not be submitted for gambling purposes.
If Casiku Casino identifies an underage account, it may suspend access, conduct verification and process the relevant information to comply with legal and safeguarding obligations. A parent or guardian who believes that a child has supplied personal information should contact customer support immediately.
Third-Party Websites
The Casiku Casino website may contain links to independent websites, payment services or game providers. Those organisations may process personal data under their own privacy policies. Casiku Casino is not responsible for the privacy practices of an external service that it does not control. You should review the relevant notice before providing information to a third party.
Changes to This Privacy Policy
This Privacy Policy may be revised when Casiku Casino changes its services, introduces new processing activities or responds to legal and regulatory developments. The current version will be published on the website. Where a change materially affects how personal data is used, an appropriate notice may also be provided through the player account or a registered communication channel.
Contact the Data Protection Officer
Questions about this Privacy Policy, the handling of personal data or a data protection rights request may be sent to the appointed Data Protection Officer:
Data controller: White Hat Gaming Limited
Company number: C73232
Registered address: 85 St John Street, Valletta, VLT 1165, Malta
Email: datacompliance@whitehatgaming.com
Casino support: Casiku Casino Contact Us
Please include enough information to identify your account and explain the request, but do not send passwords or complete payment card details by email.
Making a Data Protection Complaint
Casiku Casino encourages you to contact the Data Protection Officer first so that the concern can be investigated. This does not limit your right to complain to the Information Commissioner’s Office, the United Kingdom supervisory authority for data protection.
Information Commissioner’s Office: https://ico.org.uk/make-a-complaint/
As White Hat Gaming Limited is established in Malta, you may also contact the Office of the Information and Data Protection Commissioner:
Office of the Information and Data Protection Commissioner: https://idpc.org.mt/en/Pages/contact/complaints.aspx