Privacy Policy — Cocoa Casino

At Cocoa Casino, we take your privacy seriously. This Privacy Policy describes how we collect, use, store and protect your personal data when you interact with our website and services.

We are committed to full transparency in our data handling practices and to ensuring compliance with applicable data protection regulations, including the UK GDPR.

Introduction

This Privacy Policy explains how Cocoa Casino, operated by AffDynasty Group under Curacao licence #1668/JAZ, collects, uses, stores and protects your personal data when you use our website at cocoa-casino.org.uk and related services. We are committed to safeguarding your privacy and handling your data transparently and responsibly.

By creating an account or using our services, you acknowledge that you have read and understood this Privacy Policy. We may update this policy from time to time, and the most recent version will always be available on this page. We encourage you to review it periodically.

Data We Collect

We collect personal data that you provide directly when you register an account, make transactions or contact our support team. This includes your full name, date of birth, email address, residential address, telephone number, payment details and identity verification documents.

We also collect data automatically when you interact with our platform. This includes your IP address, device type and operating system, browser type and version, pages visited, time spent on pages, referring URLs, and clickstream data. This information is gathered through cookies, log files and similar technologies.

In certain cases, we may receive data from third-party sources, including payment processors, identity verification providers and fraud prevention services. This data is used solely for the purposes described in this policy.

How We Use Your Data

We use your personal data for the following purposes: to create and manage your account, to process deposits and withdrawals, to verify your identity in compliance with KYC and anti-money laundering regulations, to communicate with you about your account and our services, and to provide customer support.

We also use your data to personalise your experience on our platform, to detect and prevent fraud and other unlawful activity, to comply with our legal and regulatory obligations, and to improve our services through analysis of usage patterns and player feedback.

Where you have provided consent, we may use your email address and other contact details to send you promotional communications about our latest offers, bonuses and events. You can withdraw your consent to marketing communications at any time by using the unsubscribe link in any email or by contacting our support team.

Legal Basis for Processing

We process your personal data on the following legal grounds: performance of a contract (to provide our gaming services to you), compliance with legal obligations (KYC, anti-money laundering, tax reporting), legitimate interests (fraud prevention, platform security, service improvement) and consent (marketing communications).

Where we rely on legitimate interests, we ensure that these do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests at any time.

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your data with trusted service providers who assist us in operating our platform, including payment processors, identity verification providers, cloud hosting services, email delivery platforms and analytics providers. These third parties are contractually obligated to protect your data and use it solely for the purposes we specify.

We may also disclose your data to regulatory authorities, law enforcement agencies or other government bodies where required by law or necessary for the prevention and detection of crime. In the event of a merger, acquisition or sale of assets, your data may be transferred to the acquiring entity.

International Data Transfers

As Cocoa Casino is operated by AffDynasty Group under a Curacao licence, your data may be transferred to and processed in countries outside the United Kingdom and the European Economic Area. Where such transfers occur, we ensure that appropriate safeguards are in place, including standard contractual clauses approved by the relevant authorities.

By using our services, you acknowledge that your data may be processed in jurisdictions with different data protection laws than your country of residence. We take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

Data Retention

We retain your personal data for as long as your account remains active and for a period thereafter as required by applicable laws and regulations. For most data, this retention period is a minimum of five years after account closure, in line with anti-money laundering and regulatory requirements.

Transaction records and identity verification documents may be retained for longer periods where required by law. When data is no longer needed for any purpose, it is securely deleted or anonymised so that it can no longer be linked to you.

Data Security

We implement robust technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include SSL/TLS encryption for all data transmitted between your browser and our servers, encrypted storage for sensitive data at rest, access controls limiting data access to authorised personnel only, and regular security audits and penetration testing.

While we take every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents that may occur.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic and personalise content. For detailed information about the types of cookies we use, their purposes and how to manage your cookie preferences, please refer to our Cookie Policy.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website and your ability to access some features.

Your Rights Under GDPR

If you are located in the United Kingdom or the European Economic Area, you have the following rights regarding your personal data: the right of access (to request a copy of the data we hold about you), the right to rectification (to correct inaccurate or incomplete data), the right to erasure (to request deletion of your data, subject to legal retention requirements), and the right to restriction of processing.

You also have the right to data portability (to receive your data in a structured, machine-readable format), the right to object to processing based on legitimate interests or for direct marketing purposes, and the right to withdraw consent where processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our data protection team at [email protected] with the subject line "Data Rights Request". We will respond to all legitimate requests within thirty (30) days. We may request additional information to verify your identity before fulfilling your request.

Children's Privacy

Cocoa Casino services are intended solely for individuals aged eighteen (18) and over. We do not knowingly collect personal data from anyone under the age of eighteen. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the associated account.

Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or our data processing practices, please contact us at [email protected]. We are committed to addressing your enquiries promptly and thoroughly.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the United Kingdom or the relevant data protection authority in your country of residence.