Data Protection & Privacy

This privacy policy sets out the manner in which Nexus Digital N.V. (hereinafter referred to as "the Company," "we," or "us"), the operator of the website casinomrpunter.me.uk, collects, processes, stores, and safeguards the personal data of individuals who access or make use of its services. The Company is incorporated under the laws of Curaçao and holds a valid gaming licence issued by Antillephone N.V. under licence number 8048/JAZ, sub-licence 8048/JAZ2020-1301. The processing of personal data by the Company is conducted in accordance with applicable data protection legislation and the regulatory requirements governing remote gambling operations. By accessing and using this website, data subjects acknowledge that their personal information may be processed in accordance with the terms set forth herein. This document constitutes the Company's formal statement of its data protection obligations and the rights afforded to individuals whose personal data is subject to processing.

Data We Collect

The following categories of personal data are collected and processed by the Company in connection with the provision of its online gambling services. Collection occurs both directly, through information voluntarily submitted by the data subject, and indirectly, through automated technical means in the course of website usage.

Identity and Contact Information: Full legal name, date of birth, nationality, residential address, postal code, telephone number, and electronic mail address are collected at the point of account registration. Copies of government-issued photographic identification documents, such as passports or driving licences, and proof of residential address, such as utility bills or bank statements, may be requested in fulfilment of Know Your Customer (KYC) obligations and Anti-Money Laundering (AML) compliance requirements.

Financial and Transactional Data: Banking details, payment card information, e-wallet identifiers, deposit and withdrawal histories, transaction records, and account balances are processed for the purposes of facilitating financial transactions on the platform. Source of funds documentation may additionally be required in accordance with responsible gambling and AML regulatory obligations.

Account and Gaming Data: Login credentials (excluding passwords in readable form), betting history, wagering activity, game participation records, bonus and promotional uptake, and responsible gambling preferences, including self-exclusion and deposit limit settings, are recorded and retained as part of the customer account record.

Technical and Usage Data: Internet Protocol (IP) addresses, browser type and version, operating system, device identifiers, session duration, pages visited, referral sources, and timestamps of access are collected automatically through the use of server logs, cookies, and similar tracking technologies. This data is gathered to ensure the secure and functional operation of the website.

Communications Data: Records of correspondence conducted between the data subject and the Company's customer support team, including electronic mail exchanges, live chat transcripts, and records of telephone communications, are retained for quality assurance, regulatory compliance, and dispute resolution purposes.

Sensitive Data: In limited circumstances, data pertaining to an individual's financial vulnerability or gambling behaviour may be processed where required to fulfil the Company's responsible gambling obligations. Such data is handled with heightened levels of care and is accessible only to authorised personnel.

Data Usage

Personal data collected by the Company is processed for specific, lawful, and legitimate purposes directly related to the provision of online gambling services and the fulfilment of applicable legal obligations. The following sets out the principal purposes for which personal data is processed.

Account Management and Service Provision: Personal data is used to establish, maintain, and administer customer accounts. This includes the processing of registrations, verification of identity and age eligibility, management of account settings, and facilitation of access to the Company's gaming platform. The lawful basis for such processing is the performance of a contract to which the data subject is a party.

Payment Processing and Financial Operations: Financial and transactional data is processed to facilitate deposits, withdrawals, currency conversions where applicable, and the reconciliation of account balances. This processing is necessary for the performance of contractual obligations and the conduct of lawful financial operations.

Regulatory Compliance and Legal Obligations: The Company is subject to obligations under Curaçao gaming regulations, AML legislation, and KYC requirements. Personal data, including identity documentation and transactional records, is processed to fulfil these mandatory legal duties. Compliance with such obligations constitutes the lawful basis for this category of processing.

Responsible Gambling: Data relating to gambling behaviour, account activity, and stated preferences is processed to support the Company's responsible gambling programme. This includes the monitoring of betting patterns for indicators of problem gambling, the implementation of player-requested limits and self-exclusion measures, and the provision of signposting to relevant support organisations. This processing is carried out in the legitimate interests of player welfare and regulatory compliance.

Fraud Prevention and Security: Technical and usage data, together with transactional records, are analysed to detect, investigate, and prevent fraudulent activity, money laundering, and other unlawful conduct. The processing of data for these purposes is grounded in the Company's legitimate interests and its legal obligations.

Customer Support: Communications data is processed to respond to enquiries, resolve complaints, and manage disputes raised by data subjects. Such processing is necessary for the performance of the contractual relationship and in the legitimate interests of the Company.

Marketing Communications: Where the data subject has provided express consent, personal data, including contact details and gaming preferences, may be used to send promotional communications relating to the Company's offers, bonuses, and services. Data subjects retain the right to withdraw consent at any time, and such withdrawal shall not affect the lawfulness of processing carried out prior to the withdrawal.

Website Analytics and Improvement: Technical and usage data is processed to analyse patterns of website usage, diagnose technical issues, and improve the functionality and user experience of the platform. This processing is conducted on the basis of the Company's legitimate interests in the effective operation and development of its services.

Data Security

The Company is committed to the implementation of appropriate technical and organisational measures to ensure a level of security commensurate with the risk presented by the processing of personal data. The safeguards described below are maintained to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure.

Encryption: All data transmitted between the data subject's device and the Company's servers is encrypted using industry-standard Transport Layer Security (TLS) protocol. Sensitive data stored within the Company's systems, including financial information and identity documentation, is subject to encryption at rest using appropriate cryptographic standards.

Access Controls: Access to personal data is restricted on a strictly need-to-know basis. Role-based access controls are implemented to ensure that only authorised personnel whose duties require access to specific categories of personal data are permitted to process such information. Access rights are reviewed periodically and revoked upon cessation of relevant duties.

Data Minimisation: The Company processes only such personal data as is necessary for the purposes identified in this policy. Data collected is limited to that which is adequate, relevant, and not excessive in relation to the purposes for which it is processed.

Retention and Deletion: Personal data is retained only for such period as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Data subject to regulatory retention requirements, including transactional and identity records required under AML legislation, is retained for the minimum period stipulated by the relevant regulatory framework. Upon expiry of the applicable retention period, data is securely deleted or anonymised.

Third-Party Processors: Where personal data is shared with third-party service providers acting as data processors, including payment processors, identity verification providers, and technical infrastructure suppliers, such sharing is governed by formal data processing agreements that impose equivalent data protection obligations on the processor. The Company exercises due diligence in the selection of third-party processors and monitors their compliance with applicable data protection standards.

Incident Management: The Company maintains documented procedures for the detection, investigation, and reporting of personal data breaches. In the event of a breach presenting a risk to the rights and freedoms of data subjects, notification will be provided to the relevant supervisory authority and, where required, to affected data subjects, in accordance with applicable legal requirements.

Staff Training: Personnel engaged in the processing of personal data are required to complete data protection training and are bound by contractual confidentiality obligations. Ongoing awareness programmes are maintained to ensure that data protection standards are upheld across the organisation.

Privacy Rights

Data subjects whose personal data is processed by the Company are afforded a range of rights in respect of that data. These rights may be exercised by submitting a written request to the Company using the contact details provided below. The Company will endeavour to respond to all requests within one calendar month of receipt, subject to any extensions permitted under applicable law in cases of complexity or volume.

Right of Access: Data subjects are entitled to request confirmation as to whether their personal data is being processed by the Company and, where such processing is confirmed, to obtain a copy of the personal data held, together with information regarding the purposes of processing, the categories of data concerned, and the recipients to whom data has been or may be disclosed.

Right to Rectification: Where personal data held by the Company is inaccurate or incomplete, data subjects may request that such data be corrected or supplemented without undue delay. Requests for rectification will be assessed and, where substantiated, the relevant records will be amended accordingly.

Right to Erasure: Data subjects may request the deletion of their personal data in circumstances where the data is no longer necessary for the purposes for which it was collected, where consent has been withdrawn and no other lawful basis for processing exists, or where the data has been unlawfully processed. The right to erasure is subject to limitations where retention is required to comply with a legal obligation or for the establishment, exercise, or defence of legal claims.

Right to Restriction of Processing: Data subjects may request that the processing of their personal data be restricted in specified circumstances, including where the accuracy of the data is contested, where processing is unlawful and erasure is not preferred, or where the data is no longer required by the Company but is needed by the data subject for legal proceedings.

Right to Data Portability: Where processing is based on the data subject's consent or on the performance of a contract, and where processing is carried out by automated means, data subjects are entitled to receive a copy of the personal data they have provided to the Company in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.

Right to Object: Data subjects may object to the processing of their personal data where such processing is carried out on the basis of the Company's legitimate interests or for the purposes of direct marketing. Where an objection is raised in respect of direct marketing, processing for that purpose shall cease without delay. Objections to processing on other grounds will be assessed on their individual merits.

Rights in Relation to Automated Decision-Making: Where the Company employs automated decision-making processes, including profiling, that produce legal or similarly significant effects in respect of a data subject, the data subject is entitled to request human review of such decisions, to express their point of view, and to contest the outcome.

Right to Lodge a Complaint: Data subjects who consider that the processing of their personal data by the Company is not in accordance with applicable data protection law are entitled to lodge a complaint with the competent supervisory authority in the jurisdiction in which they are habitually resident.

The exercise of the above rights shall not affect the lawfulness of any processing carried out prior to the receipt of the relevant request. The Company reserves the right to verify the identity of a data subject prior to acting upon any request to ensure that personal data is not disclosed or altered in response to fraudulent or unauthorised requests.

Reach Out

Data subjects wishing to exercise any of the rights described in this policy, or who have enquiries or concerns regarding the processing of their personal data by Nexus Digital N.V., are invited to direct all correspondence to the Company's designated data protection contact. All requests and enquiries will be acknowledged and addressed in accordance with the timescales stipulated under applicable data protection legislation.

Electronic correspondence may be addressed to: [email protected]

The Company is committed to addressing all data protection enquiries in a thorough and timely manner and will endeavour to resolve concerns raised by data subjects prior to any recourse to supervisory authorities. Where a data subject remains dissatisfied following the Company's response, the right to escalate the matter to the relevant competent authority is fully preserved.