Our Privacy Policy
This Privacy Policy explains what personal data Bloodyslots Casino, operated by Bloody Entertainment N.V., collects when you play at bloodyslots.co, why we collect it, how long we keep it and what rights you have over it. We launched in 2023 and this policy applies from 2026 onwards.
The Data We Collect
We collect personal data in several categories. Each category serves a specific purpose set out in the next section, and we never gather more than the task requires.
- Identity data: your name, date of birth, email address, telephone number and residential address.
- Verification documents: government-issued ID, proof of address dated within the last 3 months and proof of payment method, required before your first withdrawal.
- Transaction data: deposits and withdrawals, payment method details, amounts, currencies (including crypto transactions) and bonus wagering history.
- Technical data: IP address, device type, browser, operating system and approximate location derived from your IP.
- Gameplay behaviour: games played, stakes, wins and losses, session duration, loyalty points and tournament entries.
- Marketing preferences: which communications you opted into, the promo codes you used (such as BLOODY200) and how you respond to offers.
How We Use Your Data
Your data powers the day-to-day running of your account. We use identity data to create and maintain your account, verification documents to complete KYC checks (usually processed within 48 hours), and transaction data to execute deposits and withdrawals, which take 24 to 48 hours and carry no fees.
We also analyse gameplay behaviour for fraud prevention and responsible-gambling monitoring. When you set deposit limits, loss limits or session reminders, we use your data to enforce those tools. Marketing communications are sent only where you have consented, covering items such as the Monday reload bonus of 50% up to £300 and our weekly 15% cashback up to £500.
Finally, we process data to meet legal obligations, including anti-money-laundering reporting to the Curaçao authority that issued our licence 8048/JAZ2021-455, tax reporting and responding to lawful requests from regulators.
Our Legal Bases
Contract. We process identity, transaction and gameplay data because they are necessary to perform our agreement with you: opening your account, processing payments up to £5,000 per day in withdrawals and paying out winnings.
Legal obligation. KYC verification, AML checks, transaction record-keeping and reporting duties under our Curaçao licence and applicable gambling law require us to process certain data whether or not you ask us to.
Legitimate interest. Fraud detection, site security, aggregated analytics and enforcement of our responsible-gambling tools rely on our legitimate interest in running a safe, compliant casino. We weigh this interest against your rights and only process what is needed.
Consent. Marketing emails, SMS offers and non-essential cookies run on your consent. You can withdraw it at any time without affecting the lawfulness of earlier processing.
How Long We Keep It
Retention follows the purpose. Once a period expires, we delete or anonymise the data; we do not stockpile it in case it becomes useful later.
| Data category | Retention period |
|---|---|
| Identity and account data | Life of the account plus 5 years |
| KYC verification documents | 5 years after account closure |
| Transaction and wagering records | 5 years, as required by gambling and AML regulations |
| Fraud-prevention records | 5 years after the last suspicious event |
| Marketing consent and preferences | Until you withdraw consent or request deletion |
| Technical and analytics data | Up to 24 months, then anonymised |
Who We Share It With
We never sell your personal data. Sharing is limited to providers who need it to deliver a service you use, and each one is bound by a data-processing agreement.
- Payment processors handling your Visa Debit, Mastercard, PayPal, Skrill, Neteller, Trustly and crypto transactions.
- KYC and AML verification providers who check your documents and screen against sanctions lists.
- Game providers such as Evolution, Pragmatic Play and Play'n GO, who receive only your player ID and session data needed to run the games you open.
- The Curaçao regulator and other authorities, where reporting is required by law.
- Analytics and IT infrastructure providers who help us maintain and improve bloodyslots.co.
- Professional advisers such as auditors and lawyers, under confidentiality obligations.
Your Rights Over Data
You control your data. We respond to every request within one month, and we will never restrict your account for exercising a privacy right.
- Access: obtain a copy of the personal data we hold about you.
- Rectification: correct inaccurate details, such as a new address after a house move.
- Erasure: request deletion where no legal retention duty applies. Note that transaction records must legally be kept for 5 years.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest, including profiling.
- Withdraw consent: opt out of marketing at any time via your account settings or any email's unsubscribe link.
- Complain: raise a complaint with your national data protection authority if you believe we have mishandled your data.
Cookies and Tracking
We use cookies to keep you logged in, remember your preferences, measure site performance and, with your consent, support marketing. Essential cookies work without consent; analytics and marketing cookies activate only after you accept them in the consent banner shown on your first visit. You can change your cookie choices at any time from the link in the site footer. Full details, including the specific cookies we set and their lifespans, are set out on our dedicated Cookies Policy page.
Security and Contacting Us
How we protect your data
All traffic to bloodyslots.co is encrypted with TLS, and stored verification documents sit in access-controlled storage. Staff access is limited by role: payment agents see transaction data, KYC agents see documents, and no single role can view everything. We log access, audit it regularly and run penetration tests on our systems.
If a personal data breach ever occurs, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and we will inform you directly where the breach poses a high risk to your rights.
Contacting our DPO
Our Data Protection Officer handles all privacy requests, complaints and questions. Email [email protected] and we will reply within one month. You can also reach our support team at [email protected], available 24/7 via live chat.
Frequently asked questions
Will you delete my KYC documents straight away if I ask?
No. Gambling and anti-money-laundering law requires us to keep verification documents and transaction records for 5 years after your account closes. After that period we delete them automatically. All other data with no retention duty is deleted on request.
Can I play without giving my ID?
You can register and play, but we must verify your identity before your first withdrawal. We ask for government-issued ID, proof of address dated within the last 3 months and proof of your payment method, processed within 48 hours.
How do I stop marketing emails?
Use the unsubscribe link in any email or switch off marketing in your account settings. Withdrawal takes effect immediately, and it never affects your eligibility for bonuses or your VIP tier.
Do you share my data with game providers?
Only the minimum needed to run the games you open, typically your player ID and session details. Providers never receive your full payment details or your verification documents.