Privacy Policy
Version: 1.0 | Last Updated: 30 July 2025
This Privacy Policy describes how Energy Casino (the "Company", "we", "us" or "our"), operating the website energycasino-bonus.com (the "Website"), collects, processes, uses, discloses, and protects the personal data of our users and Players. We are committed to handling your data responsibly and in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and applicable national implementing laws.
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy.
If you have any questions or concerns about how we process your data, please contact our Data Protection Officer (DPO) at [email protected].
1. Introduction
1.1. Who We Are
Energy Casino operates the Website energycasino-bonus.com. For the purposes of applicable data protection law, the Company acts as the data controller in respect of personal data collected directly through the Website. Where we engage third-party service providers who process data on our behalf, they act as data processors under appropriate contractual agreements.
1.2. Scope
This Policy applies to all personal data collected from individuals who:
- Visit or browse the Website (including without registration);
- Register and operate an Account on the Website;
- Contact us via email, live chat, or telephone;
- Subscribe to our newsletters or marketing communications;
- Interact with our social media channels.
2. Data We Collect
2.1. Data You Provide to Us Directly
When you register, verify your identity, or interact with us, we collect the following categories of personal data:
- Identity Data: Full name, date of birth, gender, nationality, copy of government-issued identity document;
- Contact Data: Email address, telephone number, postal address;
- Financial Data: Payment method details (card number — last 4 digits only), bank account details, transaction history, source of funds documentation;
- Verification Data: Copies of identity documents, proof of address, proof of payment method, selfie photographs for liveness verification;
- Account Data: Username, password (stored in encrypted form), account preferences and settings;
- Communications Data: Records of your correspondence with our support team, including live chat logs and email exchanges.
2.2. Data We Collect Automatically
When you access the Website, we automatically collect technical and usage data, including:
- Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution;
- Usage Data: Pages visited, time spent on pages, links clicked, search queries, referring URLs, Games played, session duration, betting and wagering history;
- Cookies and Tracking Data: Data collected via cookies, pixels, web beacons, and similar technologies (see Section 6 for full details).
2.3. Data We Receive from Third Parties
We may receive personal data from:
- Identity Verification Providers: Results of identity and age verification checks;
- Payment Processors: Confirmation of payment method ownership and transaction status;
- Fraud Prevention Services: Risk scores and fraud indicators;
- Responsible Gaming Databases: Self-exclusion register matches, where applicable under relevant schemes;
- Analytics Providers: Aggregated and pseudonymised website usage statistics.
3. How We Use Your Data
3.1. Purposes of Processing
We use your personal data for the following purposes:
- Account Registration and Management: To create, verify, and manage your Account, including processing your identity verification and KYC documentation;
- Service Delivery: To provide you with access to our Games, process deposits and withdrawals, and manage your betting activity;
- Contract Performance: To fulfil our contractual obligations to you under our Terms & Conditions;
- Compliance and Legal Obligations: To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming laws and regulations, including verifying your identity and monitoring transactions;
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, Account abuse, cheating, and other illegal conduct;
- Customer Support: To respond to your queries, complaints, and requests;
- Responsible Gaming: To monitor player behaviour for signs of problem gambling and to apply player protection measures where appropriate, including self-exclusion;
- Marketing and Personalisation: Where you have given consent or where we have a legitimate interest, to send you promotional offers, newsletters, and personalised content based on your preferences and activity;
- Analytics and Improvement: To analyse how the Website is used and to improve our products, services, and user experience;
- Legal Claims: To establish, exercise, or defend legal claims.
4. Legal Bases for Processing
4.1. Applicable Legal Bases
Under the GDPR, we process your personal data on the following legal bases:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and service delivery | Performance of a Contract (Art. 6(1)(b) GDPR) |
| Identity verification (KYC) | Legal Obligation (Art. 6(1)(c) GDPR) |
| AML / CTF compliance and transaction monitoring | Legal Obligation (Art. 6(1)(c) GDPR) |
| Responsible gaming monitoring | Legitimate Interest / Legal Obligation (Art. 6(1)(c) and (f) GDPR) |
| Fraud prevention and security | Legitimate Interest (Art. 6(1)(f) GDPR) |
| Marketing communications | Consent (Art. 6(1)(a) GDPR) |
| Analytics and service improvement | Legitimate Interest (Art. 6(1)(f) GDPR) |
| Legal claims | Legitimate Interest (Art. 6(1)(f) GDPR) |
4.2. Withdrawing Consent
Where we process your data based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. You may withdraw marketing consent at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].
5. Data Sharing & Third Parties
5.1. Third Parties We Share Data With
We may share your personal data with the following categories of third parties:
- Identity Verification and KYC Providers: Third-party services that assist with verifying your identity, age, and source of funds;
- Payment Service Providers: Banks, e-wallet providers, and other payment processors necessary to facilitate deposits and withdrawals;
- Game Software Providers: Third-party game studios and platforms that power the Games available on the Website;
- Fraud Prevention and Security Services: Providers of fraud detection, risk management, and cybersecurity solutions;
- Responsible Gaming Partners: Self-exclusion scheme operators and related organisations;
- Analytics Providers: Service providers assisting us with website analytics, business intelligence, and performance tracking;
- Legal and Regulatory Authorities: Competent regulatory authorities, law enforcement agencies, tax authorities, and courts as required or permitted by applicable law;
- Professional Advisers: Lawyers, auditors, and accountants who provide professional services to the Company;
- Business Transferees: In the event of a merger, acquisition, or sale of the Company or substantially all of its assets, personal data may be transferred as part of that transaction.
5.2. Data Processing Agreements
All third-party data processors are required to enter into Data Processing Agreements (DPAs) with us, ensuring they process personal data only for the purposes specified and in accordance with the GDPR. We conduct appropriate due diligence on our data processors.
5.3. No Selling of Personal Data
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
6. Cookies & Tracking Technologies
6.1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They allow us to recognise your browser, remember your preferences, and improve your experience on the Website. Similar technologies include web beacons, pixels, and local storage objects.
6.2. Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Enable core website functionality, session management, and security | Session |
| Performance / Analytics | Track website usage, page performance, and user navigation patterns | Up to 2 years |
| Functional | Remember your language preferences, login status, and personalisation settings | Up to 1 year |
| Marketing / Targeting | Deliver relevant advertisements and track campaign performance | Up to 1 year |
6.3. Cookie Consent
When you first visit the Website, you will be presented with a cookie consent banner. Strictly necessary cookies are deployed without requiring your consent (as they are essential for the Website to function). For all other cookies, we request your explicit consent prior to placement. You may update your cookie preferences at any time via the cookie settings panel accessible from the Website footer.
6.4. Disabling Cookies
You may configure your browser to decline all or certain cookies. Please note that disabling strictly necessary cookies may impair your ability to use the Website and access your Account. Instructions for managing cookies are available in your browser's help documentation.
7. Data Security
7.1. Security Measures
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:
- Industry-standard SSL/TLS encryption for all data transmitted between your browser and our servers;
- Encryption at rest for sensitive data stored in our systems;
- Access controls ensuring that only authorised personnel can access your personal data, on a need-to-know basis;
- Regular security assessments and penetration testing;
- Two-factor authentication options for Account access;
- Internal data protection policies and staff training programmes.
7.2. Data Breaches
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware of the breach, where required by the GDPR. We will notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
8. Data Retention
8.1. Retention Periods
We retain your personal data for only as long as necessary for the purposes for which it was collected, subject to applicable legal retention obligations. The following default retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and Identity Data | 5 years after Account closure |
| Transaction and Financial Records | 5 years after the transaction date (AML obligation) |
| KYC Documentation | 5 years after Account closure |
| Responsible Gaming Records (Self-Exclusion, etc.) | Duration of exclusion + 5 years |
| Customer Support Communications | 3 years after resolution |
| Marketing Consent Records | Until consent withdrawn + 3 years |
| Website Log Data | 12 months |
| Cookie Data | As per cookie duration (see Section 6) |
Where we are required by law to retain data for longer periods, those legal requirements will override the above schedules.
9. Your Rights
9.1. GDPR Rights
Under the GDPR and applicable national data protection law, you have the following rights in relation to your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you;
- Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data;
- Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data in certain circumstances, subject to our overriding legal obligations (e.g., AML retention requirements);
- Right to Restriction of Processing: You have the right to request that we restrict the processing of your data in certain circumstances;
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible;
- Right to Object: You have the right to object to processing based on legitimate interests, including profiling for direct marketing purposes;
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw at any time (see Section 4.2);
- Right to Lodge a Complaint: You have the right to lodge a complaint with the competent data protection supervisory authority.
9.2. Exercising Your Rights
To exercise any of the above rights, please submit a request in writing to [email protected]. We will respond to valid requests within 30 days. We may ask you to provide proof of identity before processing your request. In complex cases, we may extend the response period by a further 60 days, in which case we will notify you within the initial 30-day period.
9.3. Supervisory Authority
If you are located in Hungary, you have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) at: www.naih.hu. We encourage you to contact us first so that we may address your concerns directly.
10. International Data Transfers
10.1. Transfers Outside the EEA
In some cases, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) that may not offer the same level of data protection as within the EEA. Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:
- Transfers to countries recognised by the European Commission as providing an adequate level of protection;
- Use of the European Commission's approved Standard Contractual Clauses (SCCs);
- Where applicable, reliance on other approved transfer mechanisms under the GDPR.
You may request details of the transfer mechanisms we rely upon by contacting [email protected].
11. Minors
11.1. Age Restriction
The Website is intended solely for individuals aged 18 years or older. We do not knowingly collect personal data from persons under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the relevant Account.
11.2. Parental Controls
Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling websites. If you suspect that a minor has registered an Account, please notify us immediately at [email protected].
12. Changes to This Policy
12.1. Policy Updates
We reserve the right to update or amend this Privacy Policy at any time. We will notify you of material changes by posting a prominent notice on the Website and, where appropriate, by sending a notification to your registered email address. The date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Website following the publication of any changes constitutes your acceptance of those changes.
13. Contact Information
13.1. How to Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, you may contact us as follows:
- General Privacy Enquiries & Data Subject Requests: [email protected]
- General Customer Support: [email protected]
- Website: energycasino-bonus.com
Our Data Protection Officer (DPO) is reachable at [email protected] and will endeavour to respond to all data protection enquiries within 30 days of receipt.