Your Privacy at Boombet Casino
This Privacy Policy explains what personal data we collect when you play at Boombet Casino, why we collect it, how long we keep it and the choices you have. It applies to every account registered on boombet-aud.com.
Data We Collect
We collect only the data needed to run your account, meet our Curaçao eGaming licence obligations (8048/JAZ2023-055) and keep gambling safe. Here is the full picture, grouped by category.
Verification documents are collected before your first withdrawal: a photo ID, proof of address and, where applicable, proof of your payment method.
- Identity data: full name, date of birth, email address, phone number, residential address.
- Verification documents: passport or driver's licence, utility bill, card or wallet screenshots for KYC.
- Transaction data: deposits, withdrawals, bonus wagering, bet history across AUD, USD, EUR, BTC and USDT.
- Technical data: IP address, device type, browser, operating system, approximate location.
- Gameplay behaviour: games played, session duration, win/loss patterns, self-exclusion status.
- Marketing preferences: which emails and SMS offers you have opted in or out of.
How We Use Your Data
Every use of your data maps to a specific purpose. We never sell your data, and we never use it for anything outside the list below without telling you first.
- Creating and managing your player account, including login and account settings.
- Verifying your identity under KYC rules before your first withdrawal of AUD 75 or more.
- Processing deposits and withdrawals, including the weekly AUD 7,500 withdrawal cap and crypto payouts.
- Preventing fraud, bonus abuse, multi-accounting and money laundering.
- Monitoring gambling behaviour to support responsible-gambling tools such as deposit limits and self-exclusion.
- Sending you marketing (only with your consent) about weekly cashback, reload bonuses and free spins tournaments.
- Meeting legal, regulatory and audit obligations.
Our Legal Bases
Contract. When you register an account and accept our terms, we process the data needed to deliver that contract: account operation, gameplay records, deposits and withdrawals. Without this data we cannot provide the service you signed up for.
Legal obligation
Our Curaçao eGaming licence and anti-money-laundering law require us to verify your identity, monitor transactions and report suspicious activity. KYC checks, record keeping and regulatory reporting all rest on this basis, and we cannot switch them off.
Legitimate interest
Fraud prevention, site security and aggregated analytics of how our 4,000+ games perform fall under our legitimate interest in running a safe, functioning casino. This interest never overrides your privacy rights, and we weigh it against any impact on you.
Consent
Marketing emails, SMS offers and any non-essential cookies run only on your consent, given when you opt in. You can withdraw it at any time and we will stop that processing without affecting your account.
How Long We Keep It
Retention is fixed per category, not open-ended. Gambling regulation requires transaction and verification records to be kept for at least 5 years, so we cannot delete those on request, however we delete everything else as soon as its purpose ends.
| Data category | Retention period |
|---|---|
| Account and identity data | Life of the account, then 5 years for audit purposes |
| KYC verification documents | 5 years after account closure |
| Transaction and wagering records | 5 years minimum, per AML regulation |
| Device, IP and log data | Up to 12 months for security and fraud analysis |
| Marketing preferences and history | Until you withdraw consent or ask us to delete them |
| Self-exclusion records | For the duration of the exclusion plus 5 years |
Who We Share It With
We share data only with parties who need it to deliver our service, and every one of them is bound by contract to protect it. We disclose categories, not more than the task requires, and we never sell your data to advertisers.
- Payment processors handling your deposits and withdrawals via Visa, Mastercard, Skrill, MiFinity, Jeton and crypto rails.
- KYC and AML verification providers that check your documents and screen against sanctions lists.
- The Curaçao eGaming regulator and Australian authorities where reporting is legally required.
- Analytics and game providers who receive pseudonymised gameplay data to improve performance.
- Professional advisers such as auditors and lawyers, under confidentiality obligations.
- IT and hosting suppliers that store and secure our systems.
Your Rights Over Your Data
You control your data. Email [email protected] from your registered address and we respond within 30 days. There is no charge for a standard request, and identity verification applies only where the law requires it.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct anything inaccurate or out of date.
- Erasure: ask us to delete data we no longer need, subject to the 5-year regulatory minimum.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing or optional cookies at any time.
- Complain: raise a complaint with the Office of the Australian Information Commissioner (OAIC) or, in the EU, your local data protection authority.
Cookies and Tracking
We use session cookies to keep you logged in, preference cookies to remember settings such as your currency, and, with your consent, analytics cookies that help us understand which of our 4,000+ games players enjoy most. Full detail, including how to block or delete each cookie type, sits on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers runs over TLS encryption, and stored verification documents sit in encrypted storage with access limited to trained compliance staff. Payment details are handled exclusively by PCI-DSS-certified processors, so full card numbers never touch our systems.
Our internal access controls follow a least-privilege model, and we log every access to sensitive records. If a breach ever affects your personal data, we will notify you and the relevant regulator within 72 hours of confirming it, as GDPR-aligned practice requires.
Contact Our Data Team
For any privacy question, data request or complaint, write to our Data Protection Officer at [email protected]. Our 24/7 support team can also pass privacy queries to the DPO if you prefer live chat. This policy was last reviewed in 2026 and we publish any changes on this page before they take effect.
Frequently asked questions
Can I delete my KYC documents?
Regulation requires us to keep verification documents for at least 5 years, so we cannot delete them on request. Everything else tied to your account is deleted once its purpose ends.
Do you share my data with advertisers?
No. We never sell or rent your personal data. Marketing partners only send messages on our behalf, and only if you have opted in.
How do I stop marketing emails from Boombet Casino?
Use the unsubscribe link in any email or withdraw consent by writing to [email protected]. We stop marketing messages immediately; your account and gameplay are unaffected.
How quickly do you answer a data request?
We respond within 30 days, and most requests are handled faster. If we need more time, we tell you before the deadline and explain why.