Ricky Casino, operated by Dama N.V. (registration number 152125, registered at Scharlooweg 39, Willemstad, Curaçao, licence 8048/JAZ2020-013 issued by Antillephone N.V.), acts as the data controller for all personal information collected through ricky-casino.app and related services. We take our obligations under applicable data-protection legislation seriously and have implemented robust organisational and technical safeguards to ensure your information remains secure at every stage of processing.
This Privacy Policy explains what personal data we gather, why we need it, how we use and store it, with whom we may share it, and what rights you hold in relation to your information. By creating an account or continuing to use our platform, you acknowledge that you have read and understood this policy. If you do not agree with any part of these terms, we respectfully ask that you discontinue use of our services and contact our Data Protection Officer at dpo@damacasino.com to discuss your concerns.
Data We Collect
To provide you with a safe, personalised, and legally compliant gaming experience, we collect several categories of data. Personal identification data includes your full name, date of birth, residential address, email address, telephone number, and copies of identity documents submitted during verification. This information allows us to confirm your identity, verify that you meet the minimum age requirement of eighteen years, and comply with anti-money-laundering regulations.
Financial data encompasses records of your deposits and withdrawals, payment-method details (such as card type, last four digits, or cryptocurrency wallet address), transaction timestamps, and currency preferences. We use this data to process payments accurately, detect unusual transaction patterns, and fulfil our reporting obligations to regulators and payment-service providers.
Technical data is gathered automatically when you access ricky-casino.app. This includes your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and pages visited. We also collect data through cookies and similar tracking technologies, which are described in greater detail in our Cookie Policy.
Gameplay data covers your betting history, game selections, session durations, win-and-loss records, bonus usage, loyalty-programme activity, and any preferences you set within your account. We analyse this information to improve our game offering, tailor promotional content to your interests, and identify potential indicators of problem gambling so we can fulfil our responsible-gaming commitments.
How We Use Your Data
Account management is our primary purpose for processing personal data. We use your identification and contact details to create and maintain your player account, authenticate logins, deliver account-related communications, and respond to support enquiries. Without this data, we would be unable to offer you access to our platform.
Regulatory compliance is a legal necessity for any licensed gaming operator. We process personal and financial data to perform Know Your Customer (KYC) checks, fulfil Anti-Money-Laundering (AML) obligations, report suspicious activity to the relevant authorities, and meet tax-reporting requirements where applicable. These processes are mandated by our licence conditions and by the laws of the jurisdictions in which we operate.
Service improvement relies on aggregated and, where necessary, individual-level data analysis. We examine gameplay trends, site-performance metrics, and customer-feedback data to enhance game selection, refine user-interface design, optimise page-load speeds, and develop new features that genuinely benefit our players.
Marketing communications are sent only when you have provided explicit consent or where we have a legitimate interest and you have not opted out. Promotional messages may include personalised bonus offers, new game announcements, loyalty rewards, and event notifications. You can withdraw your marketing consent at any time through your account settings or by contacting support@ricky-casino.app.
Fraud prevention and security require ongoing monitoring of account activity, login attempts, and transaction patterns. Automated systems flag anomalies such as multiple accounts from a single device, rapid deposit-withdrawal cycles, or logins from high-risk locations. Flagged events are reviewed by our compliance team, and appropriate action is taken to protect both you and Ricky Casino.
Legal Basis for Processing
We rely on several legal grounds to process your personal data, depending on the specific purpose. Contract performance underpins most account-related processing: when you register and accept our Terms and Conditions, a contractual relationship is established, and we must process certain data to fulfil our obligations under that contract — for example, executing deposits, paying out winnings, and providing customer support.
Legal obligation covers processing required by gaming regulations, anti-money-laundering directives, tax legislation, and court orders. We have no discretion over these requirements; failure to comply would put our licence and your account at risk.
Legitimate interest justifies certain processing activities where we have a genuine business need that does not override your fundamental rights. Examples include fraud detection, network-security monitoring, internal analytics, and direct marketing to existing customers. We conduct balancing tests to ensure our interests remain proportionate.
Consent is the basis for processing that falls outside the categories above — most notably, the sending of promotional emails and the use of non-essential cookies. You may grant or withdraw consent freely, and doing so will not affect the lawfulness of any processing carried out before withdrawal.
Data Sharing
We share personal data only where there is a clear and lawful reason to do so. Payment processors such as card networks, e-wallet providers, and cryptocurrency payment gateways receive the minimum financial data required to execute your transactions securely. These processors operate under their own privacy policies and are subject to PCI-DSS or equivalent standards.
KYC and identity-verification providers receive copies of identity documents and personal details solely for the purpose of confirming your identity and detecting fraudulent documentation. Once verification is complete, the provider retains data only as long as its own regulatory obligations require.
Game providers — the studios whose software powers our casino — may receive anonymised or pseudonymised gameplay data for the purposes of game integrity, fair-play auditing, and technical troubleshooting. They do not receive your real name, address, or financial information.
Regulatory bodies and law-enforcement agencies may receive personal data when we are legally compelled to disclose it, or when disclosure is necessary to prevent serious crime or protect the safety of our users. We will comply with lawful requests from the Curaçao Gaming Control Board, Antillephone N.V., and any other competent authority.
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. Any data sharing described above is governed by written agreements that obligate the recipient to protect your information to a standard at least equivalent to our own.
Data Retention
We retain your personal data for as long as your account remains active and for a minimum period after account closure as required by applicable regulations. Under our gaming licence and anti-money-laundering obligations, most records must be preserved for at least five years from the date of your last transaction or account closure, whichever is later.
Certain categories of data may be retained for longer periods if required by specific legal proceedings, tax audits, or regulatory investigations. Once the applicable retention period has expired and no ongoing legal obligation exists, your data is securely deleted or irreversibly anonymised so that it can no longer be linked to you.
If you request account closure, we will deactivate your profile promptly and cease all non-essential processing. However, the mandatory retention period will still apply to transaction records, KYC documentation, and communication logs. We will inform you of the expected deletion date upon processing your closure request.
Your Rights
You have the right to access the personal data we hold about you. Upon receiving a verifiable request, we will provide a copy of your data in a commonly used electronic format within thirty calendar days. If the request is unusually complex, we may extend this period by a further sixty days, but we will notify you of the extension and the reasons for it.
You may request rectification of any inaccurate or incomplete data. If we have shared the corrected data with third parties, we will notify them of the update where practicable.
The right to erasure allows you to ask us to delete your personal data when it is no longer necessary for the purpose for which it was collected, when you withdraw consent, or when processing is unlawful. This right is subject to our legal-retention obligations outlined above.
You may request that we restrict the processing of your data in certain circumstances — for example, while we verify the accuracy of contested information or assess an objection you have raised.
Data portability entitles you to receive a machine-readable copy of the data you have provided to us, and to transmit that data to another controller without hindrance.
You have the right to object to processing based on legitimate interest or for direct-marketing purposes. If you object to marketing, we will cease such processing immediately. If you object on legitimate-interest grounds, we will review the matter and stop processing unless we can demonstrate compelling grounds that override your interests.
To exercise any of these rights, please contact our Data Protection Officer at dpo@damacasino.com or reach our support team at support@ricky-casino.app. We may need to verify your identity before processing your request to prevent unauthorised disclosure.
Security Measures
We protect your data using industry-standard security controls. All data transmitted between your browser and ricky-casino.app is encrypted with 256-bit SSL/TLS, ensuring that sensitive information cannot be intercepted in transit. Our servers are hosted in professionally managed data centres that employ physical access controls, redundant power supplies, and around-the-clock monitoring.
At rest, personal and financial data is stored in encrypted databases with strict access-control policies. Only authorised personnel with a legitimate business need can access customer records, and all access events are logged and audited. We conduct regular vulnerability assessments, penetration tests, and code reviews to identify and remediate potential weaknesses before they can be exploited.
Despite our best efforts, no system connected to the internet can guarantee absolute security. In the unlikely event of a data breach that poses a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, as required by applicable law.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or regulatory guidance. When we make material changes, we will notify you by posting a prominent notice on ricky-casino.app and, where we hold your email address and you have consented to communications, by sending you an email summarising the key amendments.
Each version of this policy will display an effective date at the top of the page. We encourage you to review the policy periodically. Your continued use of our services after any update constitutes acceptance of the revised terms. If you disagree with any changes, you may close your account and request deletion of your data in accordance with the rights described above.
Contact
If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please get in touch with our Data Protection Officer at dpo@damacasino.com. For general account-related enquiries, our support team is available around the clock at support@ricky-casino.app or by phone at +61 433 028 425 during Australian business hours.
Our registered postal address for formal correspondence is: Dama N.V., Scharlooweg 39, Willemstad, Curaçao. We aim to respond to all privacy-related communications within fourteen business days.
