Log inSign up

Privacy Policy at Emu Casino

This policy explains what personal data we collect when you play at Emu Casino, why we hold it, who sees it, and how you can control it. We operate under licence MGA/B2C/394/2017 and apply Australian Privacy Principles together with GDPR-aligned standards where applicable.

Data We Collect

We collect personal data only where we need it to run your account, meet our licence obligations under the Malta Gaming Authority, and keep gambling safe. Here is the full picture.

  • Identity data: full name, date of birth, email address, phone number, residential address.
  • Verification documents: government ID, proof of address, and payment method verification required before your first withdrawal.
  • Transaction data: deposits and withdrawals via PayID, cards, e-wallets or crypto, including amounts, timestamps and payment references.
  • Technical data: IP address, device type, browser, operating system and approximate location derived from your IP.
  • Gameplay behaviour: games played, stakes, wins and losses, session times and bonus usage.
  • Marketing preferences: which promotions you opt into, your communication channels and consent records.

How We Use Your Data

Every use of your data maps to a purpose listed here, and nothing else. We create and manage your account, verify your identity for KYC, process deposits and withdrawals, and detect fraud through pattern analysis of your transaction and gameplay history.

We also monitor play for responsible-gambling signals, so we can offer deposit limits, loss limits, session reminders and self-exclusion where they help. Where you have consented, we send promotional material about bonuses such as Monday Free Spins or the Weekend Reload 50%. Finally, we meet legal obligations set by our regulator, including anti-money-laundering reporting.

Contract

We process your identity, account and transaction data to enter into and perform our player contract with you. Without this data we cannot open an account, hold your balance or pay out winnings.

Legal obligation

KYC verification, anti-money-laundering checks and regulatory record-keeping are required by our MGA licence. We cannot offer you the choice to opt out of these checks, because they are the law.

Legitimate interest

Fraud prevention, security monitoring and aggregate analytics on how our 400 games perform rest on our legitimate interest in running a safe casino. These uses are balanced against your rights, and we keep the data involved to a minimum.

Consent

Marketing emails, SMS and personalised offers run only on your consent. You can withdraw it at any time through your account settings or the unsubscribe link in every message, and we stop sending promotions until you opt back in.

How Long We Keep It

We hold each category of data only as long as its purpose requires, or as long as gambling regulation demands, whichever is longer. Transaction and KYC records are kept for at least 5 years after account closure to satisfy MGA and AML rules. After that, we delete or anonymise them.

  • Identity and verification documents: 5 years after account closure.
  • Transaction data: minimum 5 years, per regulatory retention rules.
  • Gameplay history: 5 years for audit and dispute resolution.
  • Marketing preferences and consent logs: until you withdraw consent, then deleted promptly.
  • Technical logs and analytics: up to 12 months, then anonymised.

Who We Share It With

We never sell your data. We share it only with processors and authorities who need it to deliver a specific service, and each one is bound by a data processing agreement.

Recipients fall into four categories: payment processors handling your deposits and withdrawals, KYC and AML verification providers, the Malta Gaming Authority and other regulators where reporting is legally required, and analytics services that help us improve the site in aggregate form.

Your Rights Over Your Data

You control your data, and you can exercise any of these rights free of charge by emailing [email protected]. We respond within 30 days.

  • Access: get a copy of the personal data we hold about you.
  • Rectification: correct anything inaccurate or incomplete.
  • Erasure: request deletion where no legal retention duty applies.
  • Portability: receive your data in a machine-readable format.
  • Objection: object to processing based on legitimate interest.
  • Withdraw consent: stop marketing at any time.
  • Complain: escalate to the relevant data protection authority, or Gambling Help Online on 1800 858 858 for gambling-related concerns.

Cookies and Tracking

We use session cookies to keep you logged in, preference cookies to remember your settings, and analytics cookies to understand site usage in aggregate. Marketing cookies fire only with your consent, which we request through the banner shown on your first visit. Full details, including how to disable each category, sit on our separate Cookies Policy page.

Security We Apply

All traffic between your device and our servers is encrypted with TLS, and stored payment and identity records are encrypted at rest. Access to personal data is role-based: only staff who need it for support, payments or compliance can see it, and every access is logged.

If a data breach affects your personal data, we notify the relevant regulator within 72 hours and inform affected players directly where the risk to you is high, together with steps you can take to protect yourself.

Contact Our Data Team

Questions about this policy or your data go to [email protected], available 24/7 via live chat and email. For data protection matters specifically, our Data Protection Officer answers within 5 business days at [email protected]. Emu Gaming Ltd., the operator of Emu Casino, holds licence MGA/B2C/394/2017 from the Malta Gaming Authority.

Frequently Asked Questions

Do you sell my personal data to advertisers?

No. We never sell your data. We share it only with payment processors, verification providers, regulators and analytics services under strict data processing agreements.

How long do you keep my ID documents?

Verification documents are retained for 5 years after your account closes, as required by our MGA licence and anti-money-laundering rules. After that we delete or anonymise them.

Can I stop marketing emails and still keep my account?

Yes. Withdraw your marketing consent any time via account settings or the unsubscribe link. Your account, bonuses and gameplay stay untouched.

How do I get a copy of my data?

Email [email protected] requesting access. We verify your identity and send a full copy of the personal data we hold within 30 days.