Privacy Policy

1. Introduction

This Privacy Policy explains how Smash Casino collects, uses, stores, and protects your personal information when you use our platform. We take privacy seriously and comply with applicable data protection laws including the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada and equivalent international standards. By creating an account or using our services, you consent to the practices described in this policy.

2. Information We Collect

We collect information at several points during your relationship with us, and the specific data depends on how you use our services.

Account Registration Data. When you sign up, we collect your full name, date of birth, residential address, email address, mobile number, and chosen username and password. This information is required to confirm eligibility, prevent fraud, and meet our regulatory obligations.

Verification Documents. To meet anti-money-laundering and Know Your Customer requirements, we may request a copy of your government-issued ID, proof of address such as a utility bill, proof of payment method ownership, and in some cases source-of-funds documentation.

Financial Information. When you deposit or withdraw, we process information related to your chosen payment method. Full card numbers and banking credentials are handled by our payment partners and never stored on our servers in raw form.

Gameplay and Account Activity. We log every wager, deposit, withdrawal, bonus claim, and login event. This data supports fraud detection, responsible gaming monitoring, and compliance with our licence.

Technical and Device Data. We automatically collect IP address, device type, operating system, browser, and general location data when you visit our site. This information helps us improve performance, detect suspicious activity, and personalise your experience.

Communication Records. Any messages you send to support — whether by live chat, email, or other channels — are stored to help us resolve your queries and improve service quality.

3. How We Use Your Information

We use the information we collect for the following purposes. Operating your account, processing transactions, and delivering our services. Verifying your identity and meeting Know Your Customer, anti-money-laundering, and other regulatory requirements. Detecting and preventing fraud, collusion, multiple-accounting, and other forms of abuse. Personalising your experience, including game recommendations and tailored promotions. Sending service notifications such as transaction confirmations, security alerts, and policy updates. Sending marketing communications where you have opted in, and which you can unsubscribe from at any time. Analysing platform performance, user behaviour, and technical issues to improve our services. Complying with legal obligations including tax reporting and responses to lawful requests from regulators or law enforcement.

4. Legal Basis for Processing

We process your data on several legal grounds depending on the activity. Contractual necessity covers the data needed to operate your account and provide services. Legal obligations cover identity verification, anti-money-laundering checks, and tax reporting. Legitimate interests cover fraud prevention, platform security, and service improvement. Consent covers marketing communications and optional features such as personalised recommendations.

5. Sharing Your Information

We do not sell your personal data. We share information only when necessary to operate our service, comply with the law, or protect our players, and only with parties bound by appropriate confidentiality obligations.

Service Providers. Payment processors, identity verification specialists, customer support tools, hosting providers, and game suppliers process specific data on our behalf under contract.

Regulatory and Legal Authorities. We disclose information when required by law, court order, or regulatory request, including to our gaming licence authority, tax authorities, and law enforcement agencies.

Group Companies. We may share data with affiliated companies operating under the same group structure, where doing so supports legitimate operational purposes.

Business Transfers. If our business is acquired, merged, or restructured, your data may be transferred as part of that transaction, subject to the protections of this policy.

6. Data Security

We protect your information using industry-standard safeguards. All connections between your device and our servers use 256-bit SSL encryption. Sensitive data is encrypted at rest within our database systems. Access to player data is restricted to authorised staff with a legitimate operational need, and all access is logged and audited. We monitor our infrastructure 24/7 for unauthorised access attempts and respond immediately to any security incident. Despite these protections, no system is completely impenetrable, and you also share responsibility for keeping your account credentials secure.

7. Data Retention

We retain your personal data for as long as your account is active and for a defined period afterwards as required by law. Account and transactional records are kept for at least five years after account closure to meet anti-money-laundering and audit requirements. Verification documents are retained for the same period under our licensing obligations. Marketing preferences are kept until you opt out or your account is permanently closed. Data no longer needed is securely deleted or anonymised.

8. Your Rights

You have several rights regarding your personal information, and you can exercise them by contacting our support team.

Access. You can request a copy of the personal data we hold about you.

Correction. You can ask us to correct any information that is inaccurate or incomplete.

Deletion. You can request deletion of your data, subject to our legal obligations to retain certain records.

Restriction. You can ask us to limit how we process your data in specific circumstances.

Portability. You can request your data in a structured, machine-readable format for transfer to another service.

Objection. You can object to specific types of processing, including direct marketing.

Withdraw Consent. Where processing is based on consent, you can withdraw it at any time without affecting prior lawful processing.

We respond to verified requests within 30 days. If you’re not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

9. Cookies and Tracking

We use cookies and similar technologies to operate our platform, remember your preferences, analyse traffic, and deliver relevant promotions. Essential cookies are required for the site to function and cannot be disabled. Analytics and marketing cookies can be managed through your browser settings or our cookie preference centre. Disabling certain cookies may limit your ability to use specific features.

10. International Data Transfers

Where your data is transferred to processors located outside your country of residence, we ensure those transfers are protected by appropriate legal mechanisms including standard contractual clauses, adequacy decisions, or equivalent safeguards approved under applicable law.

11. Children’s Privacy

Our services are strictly for adults. We do not knowingly collect personal data from anyone under legal gambling age in their jurisdiction. If we discover that an underage individual has registered, we close the account immediately, void any winnings, and delete the data in accordance with our retention rules.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material updates will be communicated through email or on-site notification, and the revised policy will indicate its effective date. Continued use of our services after the effective date constitutes acceptance of the updated policy.