Privacy & Data Control

What Data Playfina Casino Collects

Registration and identity data

Creating an account at Playfina requires providing: full legal name, date of birth, email address, residential address, phone number, and preferred currency. This data feeds into the KYC compliance process mandated by Dama N.V.'s Curaçao licence. You cannot opt out of identity data collection while maintaining a functional account — it is a regulatory requirement. What matters for privacy is how this data is stored, who has access, and what rights you have regarding access, correction, and deletion.

🔒 Submit only what is required. Do not volunteer additional personal information beyond what is explicitly requested during registration or KYC.

Behavioural and session tracking

Playfina, like all SOFTSWISS-platform operators, collects session data: pages visited, games launched, bet sizes, session duration, device type, browser version, IP address, and payment behaviour. This data is used for responsible gambling monitoring (detecting at-risk patterns), fraud prevention, and marketing segmentation. Under applicable privacy law, you can request access to the personal data held about you — submit this request in writing to Playfina's data protection officer address listed in the privacy policy.

Document Upload and Data Protection

What to redact before submitting KYC documents

When uploading a bank statement as proof of address, redact all transaction history, account numbers, and sort codes. Only the following should be visible: your name, the bank name, your residential address, and the statement date. For card verification photos, show only the first four and last four digits — redact the middle eight digits and cover the CVV (the three-digit code on the reverse). For passport uploads, the machine-readable zone at the bottom of the data page should be visible for verification purposes but can be blurred in non-essential areas.

How Playfina stores your documents

KYC documents submitted to Playfina are stored in encrypted form under the operator's data management system. The Curaçao licence requires that these documents be retained for a minimum period (typically five to seven years) for anti-money-laundering compliance purposes. After this period, you can request deletion of documents that are no longer required for regulatory purposes. Submit a formal data deletion request via email to the privacy officer with your account details and specific document categories.

Marketing Preferences and Data Sharing

Opting out of marketing communications

Navigate to Account Settings → Communication Preferences to manage marketing opt-in status for email, SMS, and push notifications. Unchecking all marketing categories stops promotional messages. Transactional emails (withdrawal confirmations, KYC notifications, login alerts) cannot be disabled — these are operational communications, not marketing.

Third-party data sharing

Playfina shares data with payment processing partners (for transaction verification), fraud detection services, responsible gambling tool providers, and where legally required, regulatory authorities. The privacy policy should specify which categories of third parties receive your data. Review the 'Data Sharing' section of the current privacy policy before depositing if this is a concern. You can request a data processing record from the privacy officer — this outlines which specific third parties have received your data and for what purpose.

Account Closure and Data Rights

How to close your Playfina account

Account closure requests at Playfina are processed via the Responsible Gaming section (for self-exclusion) or via direct request to support for voluntary account closure. Before requesting closure: withdraw all available balance, note any active bonuses that will be forfeited on closure, and request written confirmation that no further charges will occur. The operator is required to confirm the closure in writing and specify the data retention period for your account records.

Exercising your data rights

Under applicable privacy legislation, you have the right to: access a copy of personal data held about you, request correction of inaccurate data, request deletion of data no longer required for regulatory purposes, and object to data processing for marketing purposes. Submit requests in writing to the Playfina privacy officer. The operator must respond within 30 days. If they do not respond or refuse without adequate reason, you can escalate to the Curaçao data protection authority or seek independent legal advice.

🗂️ Keep a copy of all account closure and data rights correspondence. Response timelines are legally significant — if the operator misses the 30-day response window, that is a formal compliance failure you can report.