Personal data at BlackFin Casino
Rather than list data categories in the abstract, this notice describes what is collected at each point a player interacts with the platform, and what becomes of it.
The moment of signing up
A name, an email address, a date of birth and a country of residence are collected. All four are necessary to provide the service requested: to open the account, confirm eligibility and apply the correct currency, routes and terms.
The moment documents are submitted
Identity and address documents are collected to confirm age, identity and residence, and payment ownership evidence to confirm that a route belongs to the account holder. This processing exists to meet legal obligations applying to licensed gaming operators.
Documents travel through the encrypted upload route in the BlackFin Casino account area rather than by message, and internal access is limited to the roles that need it.
During ordinary play
Activity data — sessions, games opened, bonuses claimed — is processed to operate the account and apply promotional terms. Technical data such as device type, browser and connection details is processed on the basis of a legitimate interest in keeping the platform secure and available.
During a deposit or payout
Transaction data covering deposits, withdrawals and payment routes is processed to move money and to meet record-keeping duties. It reaches payment providers to the extent needed to complete a transaction and verification providers to confirm identity.
BlackFin Casino states that it does not sell personal data and does not pass it to third parties for their own marketing purposes. Sharing occurs where operating the platform requires it, or where a legal obligation applies.
After a message to support
Messages are kept so that a case can be handled and referred back to later. Marketing communications are sent only where consent has been given, and consent can be withdrawn at any time from the account area without affecting anything else.
Once an account is closed
Verification and transaction records are retained for the period required of licensed operators, because that obligation outlives the account itself. Technical logs are kept for a shorter period appropriate to security monitoring, and marketing preferences end with consent [insert retention periods].
Rights available at any point
- Access to a copy of the personal data held
- Correction of anything inaccurate
- Deletion of data not legally required to be retained
- Restriction of processing while an issue is resolved
- Objection to processing based on legitimate interest
- Portability of data the player provided
A request goes to support from the registered email address. Receipt is confirmed, identity may be verified first, and a response follows inside the period the applicable law allows [insert data protection contact].
This notice describes personal data handling at BlackFin Casino. Available to players aged 18 and over. Gamble responsibly.