Privacy Policy

1. Introduction

BitStarz Casino (operated by Direx N.V.) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform. We operate in compliance with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable international data protection standards.

By using our platform, you consent to the data practices described in this policy. If you have questions about how we handle your data, contact our Data Protection Officer at [email protected].

2. Data We Collect

We collect the following categories of personal data when you create an account and use our services:

• Identity data: full name, date of birth, nationality
• Contact data: email address, phone number, postal address
• Financial data: payment method details, transaction history
• Identity verification documents: government ID, proof of address, selfie
• Usage data: login records, game history, session data, device information
• Communication data: support chat logs, email correspondence
• Technical data: IP address, browser type, operating system, referral source

We collect only the data necessary to provide our services and meet our legal obligations.

3. How We Use Your Data

We use your personal data for the following purposes:

• Account registration, maintenance, and authentication
• Processing deposits and withdrawals
• Identity verification (KYC) as required by our license
• Anti-money laundering (AML) and fraud prevention
• Providing customer support
• Sending transactional emails (deposit confirmations, withdrawal notifications)
• Sending marketing communications (only if you've opted in)
• Responsible gambling monitoring and intervention
• Legal and regulatory compliance

We do not use your data for automated decision-making that produces legal or similarly significant effects without human review.

4. Data Storage and Security

All personal data is stored on secure servers with 256-bit AES encryption at rest. Data in transit between your device and our servers is protected by TLS 1.3 (256-bit SSL). Access to personal data is restricted to authorised employees on a need-to-know basis. All staff with access to personal data are trained in data protection obligations.

We retain account data for 5 years after account closure to meet regulatory requirements. Financial transaction records are retained for 7 years as required by anti-money laundering regulations. You may request deletion of non-required data by contacting our support team.

5. Third-Party Sharing

We do not sell your personal data. We share data only in the following limited circumstances:

• Payment processors (to process deposits and withdrawals)
• KYC/identity verification providers (to verify your identity)
• Game providers (limited gameplay data for game functionality)
• Regulatory authorities (when legally required)
• Law enforcement (when legally required)

All third parties who process your data are bound by data processing agreements requiring GDPR-standard data protection practices.

6. Your Rights

Under PIPEDA and applicable privacy law, you have the following rights regarding your personal data:

• Right to access: request a copy of the data we hold about you
• Right to correction: request correction of inaccurate data
• Right to deletion: request erasure of non-required data
• Right to restrict processing: request limitation on how we use your data
• Right to data portability: request your data in a machine-readable format
• Right to withdraw consent: withdraw marketing consent at any time

To exercise any of these rights, contact [email protected]. We will respond within 30 days.

7. Cookies

We use cookies to maintain your session, remember your preferences, and analyse site usage. You can control cookie settings in your browser. Blocking functional cookies may affect site functionality. We use analytics cookies (such as Google Analytics) to understand how players use our platform — this data is anonymised and aggregated.

8. Contact

For privacy questions, data requests, or complaints, contact our Data Protection Officer at [email protected]. You also have the right to lodge a complaint with your provincial privacy commissioner. For more information on online privacy rights in Canada, visit the Office of the Privacy Commissioner of Canada at priv.gc.ca.