Privacy Policy

Introduction

Casino Moons combines a passion for slots with rigorous data governance. Operated by Blacknote Entertainment Group Limited and licensed under Costa Rica Gambling, we serve slots enthusiasts who expect clear, measurable privacy protections. This page explains how we collect, use and protect personal information, with practical details on verification, VIP handling and data rights.

We maintain 24/7 live chat and deploy 128-bit SSL encryption for data in transit. Our approach emphasises minimisation, transparency and measurable safeguards tailored to high-roller and VIP needs. Where possible we rely on pseudonymization and strict access controls to reduce privacy risk without compromising service quality.

What We Collect

Core account and identity data

We collect identity details required for account creation and KYC: full name, date of birth, identification documents and contact information. These data points enable age verification and compliance with payment and fraud screening. When you deposit or withdraw funds in €, we record transaction references and payment identifiers needed for reconciliations.

Gameplay, provider and telemetry data

Gameplay telemetry includes wager histories, win records, RTP-related statistics where available, megaways interactions and jackpot contributions. We log provider identifiers for each session to evaluate titles from Microgaming, Betsoft, IGT, Pragmatic Play, Habanero and others. These logs support performance analysis and fairness checks.

How We Use Your Data

Data is used to operate accounts, process payments, verify identity and deliver personalised VIP services. For VIP and high-roller clients a personal manager will access account and transaction data to provide tailored offers and service. We also use aggregated analytics to measure provider reliability, RTP consistency and jackpot dynamics, informing product decisions and provider relations.

We share limited data with payment processors and verification partners solely to complete transactions and fulfil legal obligations. Fraud detection vendors and compliance services receive the minimum data necessary to perform checks. Any marketing communication is opt-in and respects your stated preferences.

When We Share Data

Sharing occurs on a need-to-know basis: internal teams such as compliance, payments and VIP management can access required fields. Third-party recipients include payment companies, KYC vendors and anti-fraud services. We comply with lawful requests from authorities when compelled by statute or court order.

Where data is transferred internationally, we implement contractual safeguards and encryption to maintain protections consistent with GDPR principles for EU residents. We retain anonymized, aggregated datasets for long-term analytics and product improvement, ensuring individuals cannot be identified from these aggregates.

Cookies and Tracking

We use cookies and similar technologies to secure sessions, remember preferences and measure game performance. Session cookies keep you logged in securely during play. Persistent cookies store language preferences and marketing choices if you opt in. Third-party analytics tools may process anonymized usage data to help us understand provider performance and RTP trends.

You can control cookie settings via your browser and opt-out mechanisms where provided. Disabling certain cookies may reduce functionality or require repeated logins, especially for features tied to VIP recognition or personalised offers.

Security Measures

Technical safeguards include 128-bit SSL encryption for data in transit, role-based access controls, multi-factor authentication for administrative interfaces and regular security audits. Sensitive documents used for verification are stored with strict access restrictions and are encrypted at rest where practical.

Operational measures include least-privilege access rules, logging of administrative actions and continuous monitoring for suspicious activity. If a breach occurs and presents a high risk to individuals, we will notify affected people and relevant supervisory authorities as required by law.

Your Rights

Casino Moons is GDPR-aware and supports data subject rights. EU residents may request access to their data, rectification of inaccuracies, erasure where no legal retention requirement exists, restriction of processing, data portability and objection to certain processing activities. Requests are subject to identity verification to prevent unauthorised access to personal information.

We respond to requests within statutory timeframes and provide clear explanations when legal or operational constraints limit action. For urgent issues or suspected misuse, our 24/7 live chat is the fastest channel for initial contact; follow-ups are handled through secure verification workflows.

Retention and Deletion

Records are retained only as long as necessary for business, legal and regulatory purposes. KYC, transactional and anti-fraud records are typically retained to satisfy financial regulations and dispute resolution needs. Inactive account data follows a graduated retention schedule that balances legal obligations with user privacy rights.

If you ask for deletion, we will erase your personal data where no law requires retention. Some sanitized records may be preserved to prevent fraud or re-registration by banned players. We document retention periods and enforce automated archival and purge routines to maintain compliance.

For more on our company and services visit our homepage: Casino Moons.