Privacy Policy at Boho Casino
This policy explains what personal data we collect when you play at Boho Casino, why we collect it, who we share it with and how long we keep it. It applies to every visitor and registered player on bohocasino-aud.com.
Data We Collect From You
We collect only the personal data we need to run your account, meet our regulatory obligations and keep the site secure. When you register, we ask for your full name, date of birth, residential address, email address and phone number. Before your first withdrawal we request verification documents under our KYC process: a government-issued ID, proof of address and payment method verification, reviewed within 48 hours.
- Identity data: name, date of birth, address, email, phone number
- Verification documents: ID, proof of address, payment method evidence
- Transaction data: deposits, withdrawals, wagering records, bonus history
- Technical data: IP address, device identifiers, browser type, session logs
- Gameplay behaviour: games played, bets placed, win and loss records
- Marketing preferences: bonus opt-ins, communication channel choices
How We Use Your Data
We use your data to create and manage your account, verify your identity under KYC rules, process deposits and withdrawals in AUD or crypto, and detect fraud and bonus abuse. We also monitor play patterns to support responsible gambling, for example flagging behaviour that suggests deposit or loss limits are being exceeded, and we send you marketing messages only where you have consented.
- Account creation, login and account management
- KYC verification before your first withdrawal
- Payment processing for deposits and withdrawals up to 6,500 AUD per day
- Fraud prevention, anti-money-laundering checks and bonus abuse detection
- Responsible gambling monitoring and self-exclusion enforcement
- Marketing communications where you have given consent
- Compliance with our Curaçao licence obligations (8048/JAZ2019-000)
Why the Law Lets Us
Contract: we process your data to perform the agreement between you and us, covering account operation, gameplay and payments. Without this data we cannot let you play or pay out winnings.
Legal obligation: our licence requires us to verify your identity, keep transaction records for at least five years and report suspicious activity, so some processing is not optional for either of us.
Legitimate interest: we rely on legitimate interest for fraud prevention, security monitoring and service improvement, always balanced against your rights. Consent: we rely on your consent for marketing emails, SMS and bonus offers, and you can withdraw it at any time.
How Long We Keep It
R
e
t
e
n
t
i
o
n
d
e
p
e
n
d
s
o
n
t
h
e
t
y
p
e
o
f
d
a
t
a
.
T
r
a
n
s
a
c
t
i
o
n
a
n
d
v
e
r
i
f
i
c
a
t
i
o
n
r
e
c
o
r
d
s
t
i
e
d
t
o
o
u
r
l
i
c
e
n
c
e
m
u
s
t
b
e
k
e
p
t
f
o
r
a
m
i
n
i
m
u
m
o
f
5
y
e
a
r
s
a
f
t
e
r
y
o
u
r
l
a
s
t
a
c
t
i
v
i
t
y
,
e
v
e
n
i
f
y
o
u
r
a
c
c
o
u
n
t
i
s
c
l
o
s
e
d
.
D
a
t
a
u
s
e
d
o
n
l
y
f
o
r
m
a
r
k
e
t
i
n
g
i
s
d
e
l
e
t
e
d
a
s
s
o
o
n
a
s
y
o
u
w
i
t
h
d
r
a
w
c
o
n
s
e
n
t
o
r
a
s
k
u
s
t
o
d
e
l
e
t
e
i
t
.
| Data category | Retention period |
|---|---|
| Identity and account data | 5 years after account closure |
| KYC verification documents | 5 years after last transaction |
| Transaction and wagering records | 5 years, regulatory minimum |
| Device and IP logs | 12 months for security purposes |
| Marketing preferences | Until consent is withdrawn or account deleted |
Who We Share Data With
We never sell your personal data. We share it only with parties who help us operate the casino, and each one is bound by data protection commitments.
- Payment processors handling Visa, Mastercard, Skrill, MiFinity, Jeton, Bitcoin, Ethereum and Tether transactions
- KYC and AML verification providers checking your ID documents
- The Curaçao regulator, when reporting is legally required
- Analytics and hosting providers supporting site performance
- Game providers delivering content to your account, strictly what is needed to record play
Your Rights Over Your Data
Y
o
u
c
o
n
t
r
o
l
y
o
u
r
d
a
t
a
.
Y
o
u
c
a
n
a
s
k
u
s
a
t
a
n
y
t
i
m
e
t
o
a
c
c
e
s
s
,
c
o
r
r
e
c
t
,
d
e
l
e
t
e
o
r
e
x
p
o
r
t
i
t
,
o
b
j
e
c
t
t
o
p
r
o
c
e
s
s
i
n
g
b
a
s
e
d
o
n
l
e
g
i
t
i
m
a
t
e
i
n
t
e
r
e
s
t
,
o
r
w
i
t
h
d
r
a
w
c
o
n
s
e
n
t
f
o
r
m
a
r
k
e
t
i
n
g
.
W
e
r
e
s
p
o
n
d
t
o
r
e
q
u
e
s
t
s
w
i
t
h
i
n
3
0
d
a
y
s
a
n
d
m
a
y
a
s
k
f
o
r
I
D
t
o
c
o
n
f
i
r
m
y
o
u
o
w
n
t
h
e
a
c
c
o
u
n
t
.
I
f
y
o
u
b
e
l
i
e
v
e
w
e
h
a
v
e
m
i
s
h
a
n
d
l
e
d
y
o
u
r
d
a
t
a
,
y
o
u
h
a
v
e
t
h
e
r
i
g
h
t
t
o
l
o
d
g
e
a
c
o
m
p
l
a
i
n
t
w
i
t
h
t
h
e
O
f
f
i
c
e
o
f
t
h
e
A
u
s
t
r
a
l
i
a
n
I
n
f
o
r
m
a
t
i
o
n
C
o
m
m
i
s
s
i
o
n
e
r
(
O
A
I
C
)
o
r
w
i
t
h
a
s
u
p
e
r
v
i
s
o
r
y
a
u
t
h
o
r
i
t
y
i
n
y
o
u
r
j
u
r
i
s
d
i
c
t
i
o
n
.
- Access a copy of the data we hold about you
- Rectify inaccurate or out-of-date details
- Erase your data where no legal retention duty applies
- Data portability in a machine-readable format
- Object to legitimate interest processing
- Withdraw marketing consent at any time
- Complain to the OAIC or your local data protection authority
Cookies and Tracking
We use essential cookies to keep you logged in and your session secure, analytics cookies to understand how the site performs, and marketing cookies only with your consent. You can manage cookies through your browser settings or our cookie banner. Full details, including the categories we use and how to disable them, are set out on our dedicated Cookies Policy page.
How We Protect Your Data
A
l
l
t
r
a
f
f
i
c
b
e
t
w
e
e
n
y
o
u
r
d
e
v
i
c
e
a
n
d
o
u
r
s
e
r
v
e
r
s
r
u
n
s
o
v
e
r
T
L
S
e
n
c
r
y
p
t
i
o
n
.
A
c
c
e
s
s
t
o
p
e
r
s
o
n
a
l
d
a
t
a
i
s
l
i
m
i
t
e
d
t
o
t
r
a
i
n
e
d
s
t
a
f
f
o
n
a
n
e
e
d
-
t
o
-
k
n
o
w
b
a
s
i
s
,
w
i
t
h
r
o
l
e
-
b
a
s
e
d
p
e
r
m
i
s
s
i
o
n
s
a
n
d
l
o
g
g
e
d
a
c
c
e
s
s
r
e
v
i
e
w
s
.
V
e
r
i
f
i
c
a
t
i
o
n
d
o
c
u
m
e
n
t
s
a
r
e
s
t
o
r
e
d
i
n
e
n
c
r
y
p
t
e
d
f
o
r
m
s
e
p
a
r
a
t
e
f
r
o
m
g
e
n
e
r
a
l
a
c
c
o
u
n
t
r
e
c
o
r
d
s
.
I
f
a
d
a
t
a
b
r
e
a
c
h
o
c
c
u
r
s
t
h
a
t
r
i
s
k
s
y
o
u
r
r
i
g
h
t
s
,
w
e
n
o
t
i
f
y
t
h
e
r
e
l
e
v
a
n
t
s
u
p
e
r
v
i
s
o
r
y
a
u
t
h
o
r
i
t
y
w
i
t
h
o
u
t
u
n
d
u
e
d
e
l
a
y
a
n
d
i
n
f
o
r
m
a
f
f
e
c
t
e
d
p
l
a
y
e
r
s
d
i
r
e
c
t
l
y
w
h
e
r
e
r
e
q
u
i
r
e
d
b
y
l
a
w
.
Contact Our Data Officer
Q
u
e
s
t
i
o
n
s
a
b
o
u
t
t
h
i
s
p
o
l
i
c
y
,
y
o
u
r
d
a
t
a
o
r
a
r
i
g
h
t
s
r
e
q
u
e
s
t
?
E
m
a
i
l
o
u
r
D
a
t
a
P
r
o
t
e
c
t
i
o
n
O
f
f
i
c
e
r
a
t
d
p
o
@
b
o
h
o
c
a
s
i
n
o
.
c
o
m
o
r
c
o
n
t
a
c
t
s
u
p
p
o
r
t
a
t
s
u
p
p
o
r
t
@
b
o
h
o
c
a
s
i
n
o
.
c
o
m
,
a
v
a
i
l
a
b
l
e
2
4
/
7
v
i
a
l
i
v
e
c
h
a
t
.
W
e
a
n
s
w
e
r
p
r
i
v
a
c
y
r
e
q
u
e
s
t
s
w
i
t
h
i
n
3
0
d
a
y
s
a
n
d
t
r
e
a
t
e
v
e
r
y
c
o
m
p
l
a
i
n
t
s
e
r
i
o
u
s
l
y
.
Frequently asked questions
Does Boho Casino sell my personal data?
No. We share data only with processors who help run the casino, such as payment providers and KYC verification services, and each is contractually bound to protect it.
Why do you need my ID before withdrawing?
Our Curaçao licence requires identity verification before your first withdrawal. We check your ID, proof of address and payment method within 48 hours, then keep the records for at least 5 years.
How do I stop marketing emails?
Withdraw consent any time via the unsubscribe link in any email, your account settings, or by emailing [email protected]. We stop marketing immediately and delete your preferences.
Can I get a copy of my data?
Yes. Send an access request to [email protected] and we provide a copy of the personal data we hold within 30 days, in a machine-readable format where possible.