How Casinok Handles Personal Data and Privacy Choices

Last updated: 20 August 2026

This policy explains how Ryker B.V. processes personal data when you create or use a Casinok account, contact support, make a payment, complete verification, use casino or sportsbook products, set safety controls or receive marketing. It should be read with the Terms and Conditions and Cookie Policy.

1. The controller and scope of processing

Ryker B.V., company registration 154186, is the operator responsible for the core account data described here. Questions about privacy can be submitted through 24/7 account chat or [email protected]. This policy covers the website, mobile web experience, installed web app, cashier, support channels and connected casino and sportsbook services.

2. Data categories created during an account lifecycle

We process registration data such as name, date of birth, address, email, mobile number, username, account currency and security credentials. Verification can add identity documents, proof of address, payment ownership, facial or liveness checks and source-of-funds or source-of-wealth evidence.

Transaction records include deposits, withdrawals, payment method, wallet address, blockchain transaction identifier, bank or card references, balances, currency conversions, chargebacks and risk decisions. Product records include bets, game rounds, stakes, wins, losses, bonus activity, Boss Club points, session history and limit settings. Technical records may contain IP address, device type, operating system, browser, identifiers, login events, security logs and cookie choices.

We use account and transaction data to provide the contracted gambling service, settle bets, maintain balances, administer bonuses, process withdrawals and answer support requests. We process verification and monitoring data to meet legal duties concerning age, identity, anti-money laundering, fraud prevention and safer gambling. Security analytics, service improvement and legal-claim management rely on legitimate interests where those interests do not override player rights. Marketing is based on consent or another lawful permission applicable to the communication.

4. Automated controls and human review

Automated systems can flag unusual logins, payment patterns, account links, bonus abuse, fraud indicators and gambling-risk signals. A flag can lead to additional authentication, document requests, payment review, temporary controls or human investigation. Where a decision has a significant effect, you may ask support for meaningful information and human review where applicable law provides that right.

5. Who can receive personal data

Data may be shared with payment processors, banks, blockchain service providers, identity-verification vendors, game and sportsbook suppliers, hosting and security providers, communication platforms, auditors, professional advisers, regulators and law-enforcement bodies. Each recipient receives only the information required for its function, legal duty or documented instruction. We do not sell verification documents or payment histories as consumer lists.

6. International transfers

Service providers can process information outside the country in which you live. When a transfer requires safeguards, we use contractual protections, adequacy mechanisms or another lawful transfer basis. Technical and regulatory access is limited according to role and necessity.

7. Retention and deletion logic

Account information is retained while the relationship remains active. Gambling, payment, verification, fraud-prevention, self-exclusion and complaint records can be retained after closure when law, licence rules, limitation periods or financial-control obligations require it. Data is then deleted, anonymised or securely isolated when no lawful purpose remains. A deletion request cannot override a mandatory retention duty.

8. Your privacy choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent. You can also change marketing preferences and complain to a competent data-protection authority. We may verify identity before releasing or changing account data to prevent disclosure to another person.

9. Cookies and device storage

Essential cookies maintain login state, security, language and transaction continuity. Analytics and personalisation technologies help measure performance and remember preferences. Marketing technologies are used according to consent settings. Blocking essential storage can interrupt account or cashier functions; optional categories can be managed through the cookie controls.

10. Security and incident response

We use encrypted transport, access controls, monitoring, logging, segregation of duties and provider oversight. No online system eliminates all risk. Use a unique password, secure your email and device, and contact support immediately after an unfamiliar login or payment. If a personal-data incident creates a reportable risk, we notify the relevant authority and affected individuals as required.

11. Children and age controls

The service is not intended for minors. We verify age and can request documents at any stage. A parent or guardian who suspects use by a minor should contact support with enough information for a confidential investigation.

12. Policy changes

We may revise this policy when products, providers, legal duties or processing methods change. The updated date identifies the current text. Material changes may also be communicated through the account or registered email.