Smokos Casino › Privacy policy
Privacy policy
This policy explains what personal information Smokos Casino collects about you, what we do with it and what control you have. It covers this website and any account you hold with us.
1. What we collect
- Registration details: name, date of birth, email address, phone number, residential address and chosen currency.
- Verification documents: photo identification, proof of address and proof of ownership of your payment method. Held because our licence and anti-money-laundering obligations require it.
- Financial records: deposits, withdrawals, the payment methods used and the balance history of your account.
- Play history: the games you open, stakes, outcomes, session lengths and the limits you have set.
- Technical data: your IP address and the rough location it implies, which device and browser you are on, and which of our pages you opened.
- Contact records: chat transcripts and emails between you and our support team.
2. Why we hold it
To run your account and pay you. To confirm you are who you say you are and old enough to play. To meet anti-money-laundering and licensing obligations. To detect fraud, bonus abuse and account takeover. To respond when you contact us. To spot patterns that suggest gambling harm, and to act on them.
Marketing is separate and optional. We only send it if you have opted in, and every message carries a one-click unsubscribe. Withdrawing consent stops the marketing without affecting your account.
3. Who we share it with
We do not sell personal information. It is shared only where the service cannot run without it:
- Payment providers and banks, to move money in and out.
- Identity verification services, to check documents against independent records.
- Game suppliers, which need a session identifier to run a round. They do not receive your name or contact details.
- Our licensing authority and law enforcement, where a lawful request is made or a suspicious transaction must be reported.
- Technology providers that host the platform and run our live chat, under contracts that restrict what they may do with the data.
4. Where it is stored, and for how long
Data is held on servers in the jurisdiction of our licence and in the European Economic Area, protected by encryption in transit and at rest. Access inside the company is limited to staff who need it for their role.
Account and transaction records are kept for the period our anti-money-laundering obligations require after an account closes, normally five years, and then deleted or irreversibly anonymised. Marketing preferences are deleted as soon as you withdraw consent. Self-exclusion records are kept for the length of the exclusion and afterwards, because a request to return early has to be checked against them.
5. Your rights
- Access a copy of the personal information we hold about you.
- Correct anything that is wrong or out of date.
- Erase data we no longer have a legal reason to keep. Records we are required to retain cannot be deleted on request, and we will tell you which those are.
- Object to processing for marketing, at any time and with no consequence for your account.
- Portability — receive the data you gave us in a machine-readable format.
- Complain to the data protection authority in the jurisdiction of our licence if you are not satisfied with our answer.
Send requests through live chat or to our privacy team from the contact page. We respond within thirty days and may ask you to verify your identity first — releasing account data to the wrong person is the worse outcome.
6. Cookies and tracking
Cookies are covered separately in our cookie policy, including how to change your choice after you have made it.
7. Children
This service is strictly for adults and we do not knowingly collect information about anyone under 18. Where an underage registration is found the account is closed, deposits are returned to source and the data is deleted except what we must keep as a record of the incident.
8. Changes to this policy
This document follows our practices and our obligations, so it changes when they do; the stamp at the head of it tells you which version you are reading. Where a change materially affects how we use your information, you hear about it inside your account first.
9. The legal ground under each use
Every use of your data rests on one of four grounds, and it is worth knowing which is which, because your options differ.
- Performing the contract. Running the account, settling rounds, moving money. Without this there is no service, so it cannot be objected to while the account is open.
- Legal obligation. Age and identity checks, anti-money-laundering records, reports to a financial intelligence unit. These we cannot switch off, and they outlive the account by the retention period.
- Legitimate interests. Fraud detection, account-takeover prevention, spotting patterns that suggest gambling harm, keeping the platform stable. Each one is balanced against your interests before it runs, and you can object.
- Consent. Marketing and optional cookies only. Consent is freely given, recorded, and withdrawable at any moment without touching your account.
10. Automated checks and profiling
Some decisions start automatically. Deposits and withdrawals pass through rules that flag unusual patterns; a flagged transaction is held for a person to look at. Identity documents are compared against independent records by software before a reviewer confirms. Play patterns are scored for signs of harm, which can trigger a message, a suggested limit or, rarely, a restriction.
No account is permanently closed and no payout is refused by software alone. A human reviews the file before any decision that affects your money, and you can ask for that decision to be explained and reconsidered.
11. Sending data abroad
Our platform, payment partners and identity providers are not all in one country. Where information leaves the jurisdiction it was collected in, it travels under standard contractual clauses or an equivalent safeguard, and the receiving party is bound to protect it to the same standard.
We do not sell data, we do not hand it to advertising brokers, and we do not pass it to anyone without either a contract that limits what they may do or a lawful request we are obliged to answer.
12. How the data is protected
- Encrypted in transit and at rest, with verification documents held in separate storage from the platform.
- Access granted by role and reviewed regularly; a support agent cannot open your identity documents.
- Administrative access needs two factors, and every access to a customer file is logged.
- Backups are encrypted and restore procedures are tested rather than assumed.
- Penetration testing and code review run on a schedule, not only after an incident.
13. If something goes wrong with your data
If a breach happens and it is likely to put your rights at risk, we tell you directly and without delay, and we tell the supervisory authority within the window the law sets. The message will say what happened, what was affected, what we have done and what you should do.
We would rather tell you about something that turns out to be minor than leave you to hear about it elsewhere.
14. Who to write to
Privacy requests go to our privacy team, reachable from the contact page. Put the account email in the message and say plainly what you want: a copy, a correction, an erasure, an objection. We answer within thirty days and, if a request is genuinely complex, we tell you before that deadline rather than after it.
If our answer does not satisfy you, you can take the matter to the data protection authority in the jurisdiction of our licence. Doing so costs you nothing and does not affect your account.