Your Privacy at Kaboomslots
This Privacy Policy explains what personal data we collect when you play at Kaboomslots Casino, why we collect it, who we share it with and the rights you hold over it. It applies to every visit to kaboomslotscasino.com and to every account you hold with us.
What Data We Collect
We collect only the data we need to run your account, meet our legal obligations under the Curaçao eGaming licence and keep the site safe. That breaks down into six categories, each described below.
- Identity data: your full name, date of birth, email address, phone number and residential address, provided when you register.
- Verification documents: government-issued ID, proof of address dated within the last 3 months and payment method verification, collected under our KYC requirements.
- Transaction data: deposits, withdrawals, bonuses claimed, wagering history and balances across AUD, USD, EUR, BTC, ETH, USDT and LTC.
- Technical data: IP address, device type, operating system, browser and approximate location derived from your IP.
- Gameplay behaviour: games played, session length, bet sizes, win and loss patterns, and responsible gambling indicators such as deposit and loss limits you set.
- Marketing preferences: which channels you opted into (email or SMS), the promos you received and whether you opened or acted on them.
How We Use Your Data
Your data powers the day-to-day operation of your account. We use identity and contact data to open and maintain your account, verify you are over 18 and not self-excluded, and process deposits and withdrawals through MiFinity, Jeton, crypto and bank transfer.
Beyond account operations, we use gameplay and transaction data to detect fraud and money laundering, to monitor responsible gambling behaviour, and to meet the reporting obligations attached to our licence. Where you have given consent, we also use your email address to send bonus offers, tournament news and cashback updates.
- Creating and managing your player account
- Completing KYC checks before your first withdrawal
- Processing payments and preventing payment fraud
- Detecting bonus abuse, multi-accounting and money laundering
- Monitoring play against your own deposit and loss limits
- Sending marketing messages, only with your consent
- Meeting tax, AML and gaming regulation reporting duties
Our Legal Bases
Contract. We process your identity, contact and transaction data because they are necessary to perform the player agreement you accepted at registration. Without them we cannot hold your account, take deposits or pay out winnings.
Legal obligation. Our Curaçao eGaming licence obliges us to verify your identity, screen transactions against AML requirements and keep records for set periods. KYC documents, transaction logs and audit trails fall under this basis and cannot be deleted ahead of schedule.
Legitimate interest. We rely on legitimate interest for site security, fraud prevention, aggregated analytics and keeping our games fair. These uses benefit you and every other player, and we balance them against your privacy through minimisation and access controls.
Consent. Marketing emails, SMS promotions and non-essential cookies run only on your consent. You can withdraw that consent at any time through your account settings or the unsubscribe link in every message, without affecting your access to the site.
How Long We Retain Data
We keep each category of data only as long as the purpose requires. Gaming regulation obliges us to retain transaction and KYC records for at least 5 years after account closure, so those cannot be deleted earlier even if you ask. Everything else follows the schedule below.
| Data category | Retention period |
|---|---|
| Identity and account data | While your account is open, then 5 years after closure |
| KYC verification documents | 5 years after account closure, per regulatory requirement |
| Transaction and wagering records | 5 years after account closure, per regulatory requirement |
| Technical and device logs | Up to 12 months for security and fraud analysis |
| Marketing preferences and history | Until you withdraw consent or ask us to delete them |
| Live chat and support transcripts | Up to 24 months for dispute resolution |
Who We Share Data With
We never sell your personal data. We share it only with service providers who need it to deliver a specific function, each bound by contract to process it solely on our instructions and to protect it to the same standard we apply ourselves.
Game providers receive your player ID and gameplay activity so their titles load and settle correctly. Regulators and law enforcement can request records under our licence conditions, and we comply where the request is lawful.
- Payment processors handling your deposits and withdrawals
- KYC and AML screening providers verifying your documents
- Game and platform providers powering the 5,000+ titles on site
- Analytics providers measuring aggregate site performance
- Email delivery services for messages you consented to receive
- Curaçao eGaming and other competent regulators, on lawful request
Your Rights Over Your Data
You control your data, and you can exercise any of the rights below at no cost. Email our data protection officer at [email protected] or message our 24/7 live chat, and we will respond within 30 days. If you are unhappy with our answer, you may complain to the Office of the Australian Information Commissioner (OAIC) or to the data protection authority in your country of residence.
- Access: get a copy of the personal data we hold about you
- Rectification: correct data that is wrong or out of date
- Erasure: request deletion where no legal retention duty applies
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interest
- Withdraw consent: stop marketing at any time via account settings or unsubscribe links
- Complain: escalate to the OAIC or your local data protection authority
Cookies and Tracking Tools
We use cookies and similar tools to keep you logged in, remember your currency and language settings, measure site traffic and, with your consent, personalise promotions. Essential cookies run by default; analytics and marketing cookies load only after you accept them in the cookie banner.
The full list of cookies, their purposes and their lifespans, along with instructions for changing your choices at any time, sits on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers travels over TLS encryption, and stored KYC documents sit in an encrypted vault with access limited to trained compliance staff. Our systems run behind firewalls with role-based access controls, mandatory multi-factor authentication for staff and regular penetration testing.
If a data breach occurs that risks your rights, we will notify the relevant supervisory authority within 72 hours and inform affected players directly without undue delay, including what happened and what we are doing about it.
Frequently Asked Questions
How do I get a copy of the data you hold about me?
Email [email protected] from your registered address or use the 24/7 live chat. We verify your identity and send the export within 30 days, free of charge.
Can I delete my KYC documents after verification?
Not immediately. Gaming regulation requires us to keep identity and transaction records for at least 5 years after your account closes, so deletion requests for these categories cannot be honoured ahead of that schedule.
How do I stop marketing emails?
Use the unsubscribe link in any message or switch off marketing in your account settings. Withdrawal takes effect immediately and does not affect your account or bonuses already credited.
Who can I complain to about my privacy?
Contact our data protection officer first at [email protected]. If the matter is unresolved, you can complain to the Office of the Australian Information Commissioner or your local data protection authority.