Help center
Privacy policy
1.General Information
At
This Privacy Policy applies to our website (www.korucasino.com), services, and any interaction you have with us.
This website is intended solely for individuals aged 18 and over. We do not knowingly collect personal data from anyone under this age. If we become aware that we have inadvertently collected personal data from a person under 18—particularly due to misuse of our website—we will take appropriate steps to handle such data in accordance with applicable laws.
2. About Us
The website
As the owner and operator of the website, we serve as the Data Controller. We hold this role because, within our business relationship with you, we determine how and why your data is processed, as outlined in this Policy.
To ensure that we comply with all legal requirements regarding the processing of your personal information, we have designated a Data Protection Officer (hereinafter also DPO). The DPO is available to address any questions you may have about this Privacy Policy and to assist with any concerns related to your personal data. If you have any questions, wish to exercise your legal rights, or need to file a complaint about the handling of your data, please reach out to our DPO at [email protected].
3. Types of Personal Data, Processing Purposes, Legal Basis, and Data Sources
We collect and process personal data to deliver our services, meet legal requirements, and maintain a safe and secure gaming environment. Personal data includes any information that can identify you directly or indirectly. Below, we outline the types of data we collect, why we process them, the legal basis for doing so, and the sources from which we obtain this data.
4. Categories of data we process:
- Identity Data: full name, username, date of birth, gender, nationality, and identification numbers (e.g., ID or passport).
- Contact Details: residential address, documents confirming proof of address, email address, phone number, and other available means of communication.
- Financial Data: bank account details, payment card information, documents confirming your source of funds or source of wealth (bank statements or proof of income).
- Transaction Data: details about your deposits, withdrawals, and other financial transactions.
- Gaming Data: details about the games you play on our website, login/logout times, wagering activity, bonuses claimed, and history of responsible gaming measures.
- Technical Data: IP address / location data, login information, browser type and version, time zone settings, operating system, platform, and other technology used to access our website.
- Marketing and Communication Data: your marketing preferences and communications with us.
- Google Account Data: where you choose to sign in using Google Sign-In — your email address and its verification status, display name, profile picture, and the unique identifier Google assigns to your account.
- Or other data you provide us during communication.
5. Purposes of Processing and Legal Basis:
- Service Delivery: managing accounts, processing transactions, verifying identity, responding to queries, and providing access to promotions. For this purpose, we rely on the legal basis of performance of a contract.
- Compliance with Legal Obligations: adhering to Anti-Money Laundering (AML) laws, conducting Know Your Customer (KYC) checks, enforcing responsible gaming measures, and complying with regulatory reporting. This processing is carried out under the legal obligation.
- Fraud Prevention and Risk Management: detecting and preventing fraud, bonus abuse, unauthorized activities, and maintaining high-risk customer records. We rely on legitimate interests (to protect our business and users) as the legal basis for this purpose.
- Marketing and Personalization: sending promotional offers, personalized advertisements, and marketing communications based on preferences. The legal foundation for this processing is your consent and/or legitimate interest.
- Analytics and Service Improvement: analyzing website traffic, resolving technical issues, optimizing user experience, and conducting research. We use legitimate interest as the legal basis for this specific purpose.
- AI-Assisted Customer Communications: we integrate third-party conversational AI tools into our messaging platform that are assisting us with managing conversations, quickly retrieving support tickets and customer profiles, analyzing patterns, and delivering smart, helpful responses. We rely on legitimate interest in streamlining our operations.
- Security Assurance: monitoring and enhancing platform security. For this purpose, we operate on the basis of legitimate interest and legal obligation.
6. Sources from Which We Collect Data:
We collect personal data from various sources to ensure compliance, security, and a seamless user experience. These sources include:
- Directly from you – Information you provide when registering, using our services, or communicating with us.
- Verification providers – Services that confirm your identity, age, or address.
- Financial institutions – Banks and payment service providers involved in processing transactions.
- AML and PEP databases – Databases used for anti-money laundering (AML) checks and identifying politically exposed persons (PEPs).
- Regulatory authorities and responsible gaming databases – Official sources that help us meet legal and responsible gaming obligations.
- Business partners – Affiliate networks, advertising platforms, and analytics providers that may share pseudonymous data for marketing and service optimization.
- Google LLC — where you choose to create an account or sign in using Google Sign-In, and only to the extent you authorise in the Google consent screen.
7. Disclosure of Personal Information
To provide our services, we may need to share your personal data with trusted third parties, including:
- Group Members: We may share your data within our group for fraud prevention, bonus abuse, AML, and Responsible Gaming purposes. If you consent, we may also share your data for direct marketing about other products within the group.
- Game Providers: Some of our game providers may need access to specific data (e.g., username, IP address) to offer games on our site. You can review their privacy policy on their website.
- Payment Providers: We may share your data with payment providers to process transactions. You can review their privacy notices on their sites.
- Marketing Partners: If you consent to marketing, we may share your contact details with partners who handle promotional emails, SMS, and calls.
- Regulatory Authorities: We may share data with law enforcement or regulatory bodies if required by law. We will challenge unreasonable or vague requests when appropriate.
- Third-Party Communication Software: We use third-party services to assist with email and live chat communication.
- Conversational AI Service Providers (OpenAI, Google Gemini, Anthropic): These providers act as Data Processors. They are granted restricted access to our customer messaging data to support, automate, and optimize our marketing and customer service workflows.
- AML and KYC Verification Tools: To comply with legal obligations, we may share data with third-party tools for age, identity, and fraud checks.
- Business Transfers: In the event of a merger, acquisition, or sale, your personal data may be transferred, and we will inform you before such a change occurs.
- Data Processors: We may also share data with our lawyers, consultants, and regulatory bodies under strict data processing agreements to ensure your data’s protection.
We ensure all third parties process your personal data lawfully and securely, only for specific purposes, and in accordance with our privacy policy. We do not allow third parties to use your data for their own purposes. We also minimize the data shared to what is necessary for their role.
8. Signing in with your Google Account
Signing in with your Google Account. You may choose to create an account or sign in using Google Sign-In. If you do, Google asks for your permission before sharing any information with us, and we receive only the data covered by the permissions you grant. Using Google Sign-In is optional: you can always register and sign in with an email address and password instead.
What we receive. When you sign in with Google, we receive from your Google Account: your email address, whether that address has been verified by Google, your display name, your profile picture, and the unique identifier Google assigns to your account. We do not receive your Google password, and we do not request access to your Gmail messages, Google Drive files, Google Calendar, Google Contacts, or any other Google service.
How we use it. We use this data solely to create and authenticate your account, to recognise you when you return, to contact you about your account, and to meet our legal and regulatory obligations as a licensed operator, including age and identity verification and anti-money-laundering checks. Signing in with Google does not by itself complete account verification: we may still ask you for the identity documents described elsewhere in this Policy. Where we send you marketing communications, we do so on the basis of your separate consent, which you may withdraw at any time in your account settings.
How we store and share it. Data obtained from your Google Account is stored on the same basis and for the same retention periods as the equivalent data you provide to us directly, as described in the data retention section of this Policy. We share it only with the recipients listed in this Policy, and only where necessary for the purposes set out above.
Limited use of Google user data. Our use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not:
- use data obtained from your Google Account for serving advertisements, including personalised, retargeted or interest-based advertising;
- sell, rent or licence data obtained from your Google Account to any third party;
- transfer data obtained from your Google Account to third parties, except as necessary to provide and secure the service, to comply with applicable law or a lawful request, or in connection with a merger or acquisition with prior notice to you;
- use or transfer data obtained from your Google Account to develop, train or improve artificial intelligence or machine learning models, including the conversational AI tools described elsewhere in this Policy;
- allow humans to read such data, except with your explicit consent for specific messages, where necessary for security purposes such as investigating abuse, to comply with applicable law, or where the data has been aggregated and anonymised.
Disconnecting your Google Account. You may unlink your Google Account at any time in your account settings, after which you can continue to sign in with an email address and password. You may also revoke our access directly in your Google Account at myaccount.google.com/permissions. Disconnecting stops any further sharing of data by Google, but does not by itself delete data we have already received. To request deletion, see the section of this Policy describing your rights, bearing in mind the minimum retention periods imposed on us by anti-money-laundering law.
9. International Data Transfers
If your personal data is transferred outside of the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Transfers to countries deemed to have adequate data protection standard
10. Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected.
When determining retention periods, we consider factors like the purpose of data collection, applicable laws, the nature of the data, and the potential risks of unauthorized use or disclosure.
Due to anti-money laundering regulations, we are required to keep your personal data for a minimum of five years from your account closure. Requests for data erasure before this period cannot be processed.
We may also retain anonymized data for improving our services and marketing communications, without involving automated decision-making.
11. Consent and Your Rights
By using our services, you consent to the collection, use, and disclosure of your personal information as described in this Policy. Under GDPR and PIPEDA, you have the right to:
- Withdraw consent at any time, subject to legal or contractual restrictions.
- Access, correct, or request deletion of your personal information.
- Restrict or object to data processing.
- Request data portability.
- Opt-out of marketing communications.
- Lodge a complaint with a data protection authority if you believe your rights have been violated.
- Right to disconnect a linked account: if you signed in using Google, you may unlink your Google Account at any time in your account settings, or revoke our access in your Google Account at myaccount.google.com/permissions.
12. Automated Decision Making
We generally do not rely on fully automated decision-making in our business processes. However, if we do use such processes in specific cases, we will inform you separately, where required by law.
13. Data Security
When managing your Player Account, we adhere to strict legal requirements for personal data protection.
We maintain reasonable technical, physical and administrative security safeguards to protect your personal data against loss and any form of unlawful processing (such as theft and unauthorized access). Any Personal Information you provide to us is exchanged on a secure server. Access to your personal data is limited to employees, agents, contractors, and third parties who require it for business purposes.
Your Player Account can only be accessed using your unique ID and password. You can also enable two-factor authentication (2FA) for added protection. It’s important that you keep your login details confidential and ensure they are not accessible to anyone else.
14. Changes to This Privacy Policy
We may update, modify, or revise our Privacy Policy as technology advances and legal requirements change. We encourage you to review it periodically to stay informed of how we are protecting your information.
15. Contact Information
If you have any questions about this Privacy Policy or your personal information, please contact our DPO at [email protected]. You can also contact our support teams via [email protected] and livechat.
