Privacy Policy

Categories of information collected

During registration we record identifying details including full name, date of birth, residential address, email address and telephone number. Supporting documents such as a passport, driving licence or recent utility bill may be requested to satisfy verification obligations.

Transactional records cover deposits, withdrawals, wagers placed, bonus participation and payment instrument identifiers in truncated form. Full card numbers are not retained on CosmoBet systems.

Technical information is captured automatically and includes IP address, approximate location derived from it, device type, browser fingerprint, operating system and the pages viewed during each visit.

Lawful bases and purposes

Contractual necessity underpins account administration, payment processing and the delivery of games you request. Without this information the service cannot be provided.

Legal obligation governs age verification, anti-money-laundering checks, source-of-funds enquiries and record keeping mandated by the Curacao Gaming Control Board under licence OGL/2024/1798/1048.

Legitimate interest supports fraud detection, network security, bonus-abuse prevention and internal reporting. Consent is relied upon separately for marketing communications and for non-essential cookies, and may be withdrawn at any point.

Disclosure to third parties

Information is shared with payment service providers, game studios whose titles appear on the platform, identity verification bureaux and cloud infrastructure suppliers, each bound by written processing agreements.

Regulators, tax authorities, law enforcement agencies and courts may receive information where a valid legal instrument compels disclosure. CosmoBet does not sell personal information to advertisers or data brokers.

Where data leaves the United Kingdom or the European Economic Area, transfers are protected by adequacy decisions or by standard contractual clauses supplemented with technical safeguards.

Storage periods and security

Account and transaction records are held for a minimum of five years after the closure of an account, reflecting anti-money-laundering requirements. Self-exclusion records are kept longer to ensure the exclusion cannot be circumvented.

Marketing preferences, cookie identifiers and analytics records follow shorter schedules, typically between three and twenty-six months depending on the category.

Transport-layer encryption protects information in transit, stored documents are encrypted at rest, and access is limited to personnel whose duties require it. Suspected breaches are investigated immediately and reported to the competent authority where the applicable threshold is met.

Exercising your rights

You may request a copy of the information CosmoBet holds about you, ask for inaccuracies to be corrected, object to certain processing, or request erasure where no overriding legal duty requires retention.

Requests are answered within one calendar month. Proof of identity is required first, so that information is never released to an impersonator. If you remain dissatisfied, you may complain to the Information Commissioner's Office in the United Kingdom.