Log inRegister

Privacy Policy

This Privacy Policy explains what personal data we collect when you register, play or transact with us, why we collect it, how long we keep it and the rights you hold over it. Buran Casino operates under licence 8048/JAZ2017-042 issued by Curaçao eGaming (Antillephone N.V.), and we treat your data with the care that licence demands.

What Data We Collect

We collect only the data we need to run your account lawfully and safely. That spans six broad categories, from the name you register with to the device you play on.

  • Identity data: full name, date of birth, residential address, email address and phone number.
  • Verification documents: passport, driver licence or other government ID, proof of address (utility bill or bank statement) and payment-method verification, required before your first withdrawal.
  • Transaction data: deposits, withdrawals, bonuses claimed, wagering history and currency preferences (AUD, EUR, USD, GBP, CAD, BTC, ETH, USDT and others).
  • Technical data: IP address, device type, operating system, browser and approximate location derived from your IP.
  • Gameplay data: games played, session times, bet sizes, win/loss records and tournament entries.
  • Marketing preferences: which promotions you opted into, your communication channel choices and consent records with timestamps.

How We Use Your Data

Every processing activity we carry out maps to a specific purpose. We do not use your data for anything outside these listed purposes, and we never sell it.

  • Creating and maintaining your player account, including login, profile settings and VIP-level tracking.
  • Verifying your identity and age (KYC), which we complete within up to 3 days of receiving your documents.
  • Processing deposits and withdrawals, including payouts of up to 8,000 AUD per day and 32,000 AUD per month.
  • Preventing fraud, bonus abuse, multi-accounting and money laundering.
  • Monitoring play for responsible-gambling indicators and enforcing the deposit limits, loss limits and self-exclusion tools you set.
  • Sending you promotional offers and bonus news where you have consented to receive them.
  • Meeting legal, regulatory and licensing obligations, including record-keeping and reporting to our licensor.

Contract performance. We process identity, contact and transaction data because they are necessary to set up and run your account under our Terms and Conditions. Without this data we cannot offer you gambling services.

Legal obligation. Anti-money-laundering and licensing rules require us to verify your identity, monitor transactions and retain records. Our Curaçao licence obliges us to complete KYC checks before releasing your first withdrawal.

Legitimate interest. We process gameplay and device data to detect fraud, secure our platform, resolve disputes and improve our service. We weigh this interest against your privacy rights and only process what the purpose requires.

Consent. Marketing communications and non-essential cookies run on your consent alone. You may withdraw that consent at any time via your account settings or the unsubscribe link in every email, without affecting your account.

How Long We Keep It

We keep each data category only as long as its purpose lasts. Gambling regulations require transaction and KYC records to survive account closure, so those categories have fixed minimum periods.

  • Identity and KYC data: retained for at least 5 years after your last transaction or account closure, as AML rules require.
  • Transaction and wagering records: retained for a minimum of 5 years for audit and dispute purposes.
  • Account data: held while your account is open; closed accounts are purged of unnecessary fields after the regulatory window.
  • Marketing preferences and consent logs: kept until you withdraw consent or ask us to delete them, then removed promptly.
  • Technical and device logs: kept up to 12 months for security and fraud analysis, then deleted.
  • Self-exclusion records: kept for the duration of your exclusion period plus any legally required hold-over.

Who We Share Data With

We share your data only with processors and authorities who need it for a defined purpose, and always under written data-processing agreements. We never trade or sell your personal information.

Within these categories sit payment processors (including crypto providers such as CoinsPaid for BTC, ETH, LTC, USDT and DOGE transactions), KYC and AML screening providers, the Curaçao eGaming regulator when reporting is required, analytics and hosting providers that support site performance, and game providers where account validation is needed for certain tournaments or jackpots. Australian law may also compel disclosure to law-enforcement bodies where a lawful request exists.

Your Rights Over Data

You control your data. Regardless of where you sit, we honour the following requests within 30 days of receiving them via our support channels.

  • Access: obtain a copy of the personal data we hold about you.
  • Rectification: correct inaccurate details such as a changed address or phone number.
  • Erasure: request deletion where no legal retention duty applies.
  • Portability: receive your account and transaction data in a structured, machine-readable format.
  • Objection: object to processing based on legitimate interest, such as analytics.
  • Withdrawal of consent: stop marketing or optional cookies at any time.
  • Complaint: raise a complaint with our data protection officer first, then with your local data protection authority if unresolved.

Cookies and Tracking

We use essential cookies for login, session security and payment integrity, plus optional analytics cookies that only load with your consent. Full details of each cookie, its purpose and lifespan sit in our dedicated Cookies Policy, which the cookie banner links on your first visit. You can change your choices at any time from that banner or your browser settings, and blocking essential cookies will prevent you from playing at Buran Casino.

How We Protect Your Data

All traffic between your device and our servers runs over TLS encryption, and stored passwords are hashed rather than kept in readable form. Access to player data is limited to trained staff on a need-to-know basis, with each access logged and reviewed.

We monitor for suspicious activity around the clock, run regular security reviews and keep payment card data out of our systems by relying on certified payment processors. If a data breach occurs that risks your rights, we will notify you and the relevant supervisory authority without undue delay.

Contact Our Data Officer

For any privacy question, data request or complaint, contact our Data Protection Officer at [email protected] or reach our support team 24/7 via live chat and [email protected]. We answer data requests within 30 days and confirm your identity before releasing any account information.

Frequently asked questions

Does Buran Casino sell my personal data?

No. We share data only with payment processors, verification providers, our regulator and analytics services, each under a strict data-processing agreement, and never for sale or trade.

How long do you keep my KYC documents?

Anti-money-laundering rules require us to retain identity and transaction records for at least 5 years after your last transaction or account closure. After that window we delete them.

Can I stop marketing emails?

Yes. Use the unsubscribe link in any email, switch off marketing in your account settings, or ask our support team. Withdrawal takes effect immediately and does not affect your account or bonuses already earned.

What happens to my data if I self-exclude?

We keep your self-exclusion record for the exclusion period plus any required hold-over so the block stays effective, while marketing to your account stops straight away.

How do I request a copy of my data?

Email [email protected] or contact support. After we verify your identity, we deliver your account and transaction data in a machine-readable format within 30 days.