This privacy policy applies to all personal data processed by Karhubet in the course of providing online casino services. It covers accounts opened on this platform, gameplay sessions, and all related interactions. Karhubet acts as the controller of this data and is responsible for determining the purposes and means of processing. You should read this document carefully before engaging with any of our services to understand your rights. The policy governs how we collect, use, and protect your information across all digital touchpoints.

The scope includes data collected during registration, deposit transactions, game participation, and support communications. It also covers data automatically generated by your device when accessing our website or mobile applications. We do not process data for third-party services that are not integrated into our platform. This distinction ensures that your information remains within our controlled environment unless specific legal exceptions apply. Understanding these boundaries helps you make informed decisions about sharing your personal information.

This policy may be updated to reflect changes in our practices or legal requirements. We will notify you of material changes through our website and account dashboard. The current version governs all processing activities occurring after its publication date. You will always have the opportunity to review updates before continuing to use our services. This ensures transparency and maintains trust between our organisation and our valued players.

When you register, you agree to the terms of this policy as it applies to your specific account. This agreement remains in force until you close your account or request deletion of your data. Your continued use of the platform constitutes acceptance of any updates to this document. We maintain a complete archive of all policy versions for your reference at any time.

We share personal data with trusted third parties who assist in delivering our services. Payment providers receive transaction data necessary for processing deposits and withdrawals. Identity verification services access your documents to confirm your identity against official records. These partners are contractually bound to maintain strict confidentiality and security standards. They may not use your data for any purpose other than performing their contracted services.

Personal data is never sold to third parties under any circumstances. This absolute prohibition ensures that your information remains under your control. Even in the event of a business acquisition, data sharing would only occur under strict conditions. You would be notified of any such transfer and given the opportunity to object. This policy remains a cornerstone of our commitment to data privacy and security.

We share data with regulators and law enforcement where required by law. This includes requests for information related to suspected money laundering or fraud. Game suppliers receive necessary data to ensure game integrity and fair play. Processors acting on our instructions follow our instructions for all data handling. All transfers comply with applicable data protection laws and international standards.

International transfers are only made to countries with adequate data protection safeguards. Where such safeguards are not in place, we implement additional contractual protections. These measures include standard contractual clauses approved by relevant regulatory authorities. They ensure that your data receives protection equivalent to that provided within the European Economic Area at all times.

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy. Retention periods are tied to regulatory requirements rather than operational preferences. We maintain strict schedules for data deletion once these periods expire. This approach minimises unnecessary data accumulation while ensuring legal compliance. Your data is never kept longer than absolutely required by law or business necessity.

Account data is retained for the lifetime of your account plus five years after closure. This period allows us to address any disputes that may arise retrospectively. Transaction records are kept for seven years following the last transaction. This longer period satisfies financial regulatory requirements for audit trails. Verification documents follow the same retention schedule as account data. These periods are fixed and cannot be shortened at our discretion.

Marketing consents are retained only for the duration of the consent period. Once you withdraw consent, we cease processing your data for marketing purposes. However, we may retain minimal information to ensure you are not contacted again. This respects your choice while preventing accidental re-contact. Account data deletion is irreversible once the retention period expires. You should be aware that some records may be retained for legal disputes.

We implement automated systems to identify and delete data at the end of retention periods. This reduces human error and ensures consistent application of our retention policy. Regular audits verify that deletion schedules are followed accurately. If you request early deletion, we will consider it unless legal obligations prevent it. However, we cannot guarantee immediate deletion if data is subject to legal hold procedures.

We implement technical and organisational measures to protect your personal data from unauthorised access. These measures include encryption, access controls, and regular security assessments. We maintain physical security protocols for any paper records that may be stored. Staff receive regular training on data protection and security best practices. However, no system can guarantee absolute security against all possible threats. Understanding these limitations helps set realistic expectations about data protection.

Security measures are continuously reviewed and updated to address emerging threats. We employ industry-standard protocols for data transmission and storage. Access to personal data is strictly limited to authorised personnel on a need-to-know basis. Regular penetration testing identifies vulnerabilities before they can be exploited. This proactive approach ensures our security remains robust against evolving threats.

Complaints about data processing should first be directed to our data protection officer. We investigate all complaints thoroughly and respond within the statutory timeframe. If unsatisfied with our response, you may contact the relevant supervisory authority. In the UK, this would be the Information Commissioner's Office. We always encourage direct resolution before escalating to external bodies.

We maintain a contacts page with detailed information for lodging complaints. Use this page to find our official mailing address and email addresses. All communications are handled confidentially and with due diligence. Your feedback helps us improve our data protection practices continuously. We take all complaints seriously and learn from each one we receive.