VegaStars Casino is committed to protecting the privacy and personal data of every member. This Privacy Policy explains what information we collect through vegastars.me, how we use it, how we protect it, and what rights you have regarding your data.
Controller
VegaStars Casino, operated by Vegastar Entertainment N.V., is the data controller for personal information collected through vegastars.me. This Privacy Policy applies to all services provided through our platform, including account registration, gameplay, financial transactions, customer support interactions and promotional communications.
For questions about this policy or to exercise your data rights, contact our data protection team at support@vegastars.me with the subject line 'Privacy Request'. We will acknowledge receipt within 48 hours and respond substantively within 30 calendar days.
Collection
We collect personal identification data (full name, date of birth, residential address, email address, phone number), financial transaction data (deposit and withdrawal records, payment method details stored in tokenised form by PCI DSS-compliant processors), gameplay data (betting history, game preferences, session durations, bonus redemptions), and technical data (IP address, device type, operating system, browser version, screen resolution, referring URLs).
We also collect information you provide voluntarily through support interactions (chat transcripts, emails), identity verification submissions (copies of identification documents, proof of address, payment method verification), and promotional preferences (newsletter opt-ins, communication channel choices). Cookies and similar technologies collect browsing data as described in our Cookie Policy.
Usage
Your data is processed for: account management (creating, maintaining and verifying your account), transaction processing (completing deposits and withdrawals through our payment partners), fraud prevention (analysing patterns to detect fraudulent activity, money laundering, bonus abuse and underage gambling), regulatory compliance (meeting our obligations under Curaçao Gaming Control Board regulations), and marketing communications (with your explicit consent only).
We analyse transaction patterns, login locations, device fingerprints and gameplay behaviour to detect and prevent fraudulent activity. This processing is necessary for compliance with our legal obligations. Marketing communications can be withdrawn at any time by clicking the unsubscribe link in any email, adjusting preferences in account settings, or contacting support@vegastars.me.
Legal Basis
Contract performance: processing necessary to provide our gaming services, manage your account and process financial transactions. Legal obligation: compliance with anti-money-laundering regulations, licensing requirements, responsible gambling obligations and tax reporting. Legitimate interest: fraud prevention, security monitoring, platform improvement and service optimisation.
Consent: marketing communications and non-essential cookies require your explicit opt-in. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal. We balance our legitimate interests against your rights and freedoms, ensuring processing is proportionate and transparent.
Sharing
We share data with: payment processors (for transaction completion), game providers (for gameplay delivery), regulatory authorities (upon lawful request), professional advisors (legal, audit, accounting — bound by confidentiality), and cloud infrastructure providers (data storage and processing, under strict data protection agreements).
We do not sell, rent or trade your personal data to third parties for marketing purposes. All data sharing is limited to what is necessary for the stated purposes and governed by contractual data protection clauses requiring equivalent security standards.
Transfers
Your data may be transferred to, stored in, and processed in jurisdictions outside your country of residence. When transferring data internationally, we ensure appropriate safeguards through contractual clauses requiring equivalent data protection standards and selecting providers with recognised security certifications (ISO 27001, SOC 2 Type II).
We do not transfer your personal data to any country or organisation unless adequate protection measures are verified, documented and contractually enforceable.
Retention
Account data and transaction records are retained for a minimum of five years after account closure as required by anti-money-laundering regulations. Identity verification documents are retained for the same period and then securely deleted using industry-standard data destruction methods. Gameplay data is anonymised after the retention period for analytical purposes only.
You may request deletion of your data subject to our legal retention obligations. Data that must be retained for regulatory compliance cannot be deleted until the mandatory retention period expires, but it will be restricted from active processing.
Rights
You have the right to: access your personal data (free copy within 30 days), rectify inaccurate or incomplete data, request erasure (subject to legal retention obligations), restrict processing to storage only during disputes, receive your data in a portable machine-readable format, withdraw consent for marketing at any time, and lodge a complaint with your local data protection authority.
To exercise any right, email support@vegastars.me with the subject 'Privacy Request' and a clear description of the right you wish to exercise. We may verify your identity before processing requests to prevent unauthorised access to personal data.
Security
All data is protected by 256-bit SSL encryption during transit. Sensitive data at rest is stored on encrypted servers with strict role-based access controls — only authorised personnel with a documented business need can access personal data, and all access is logged and auditable. Our payment processing partners maintain PCI DSS certification for card data handling.
We conduct regular security assessments, vulnerability scanning and penetration testing to identify and remediate potential weaknesses. Incident response procedures are maintained for prompt detection, containment and notification in the event of a data breach affecting personal data.
Cookies
We use essential cookies for site functionality, analytics cookies for platform improvement (aggregate, non-identifying data), and marketing cookies (with your explicit consent only) for personalised promotional content. Full details including cookie categories, lifespans, third-party services and management options are provided in our Cookie Policy.
You can manage cookie preferences through your browser settings. Essential cookies cannot be disabled without impacting core site functionality including login, Cashier and game loading.
Third Party Links
Our platform contains links to external websites including responsible gambling organisations, payment provider portals, game developer pages and regulatory authority resources. These links are provided for informational purposes only. VegaStars Casino does not control, endorse or assume responsibility for the content, privacy practices or availability of external websites.
We recommend reviewing the privacy policies and terms of service of any external website you visit through links on our platform.
Children
VegaStars Casino does not knowingly collect or solicit personal data from anyone under the age of 18. Our services are not directed at children. If we learn that we have collected personal data from a person under 18, we will delete that information promptly and close the associated account.
Parents and guardians: if you believe your child has provided personal data to VegaStars Casino without your consent, contact us immediately at support@vegastars.me with the subject 'Minor Account Report'. We will investigate and take appropriate action within 48 hours.
Changes
We may update this Privacy Policy to reflect changes in our data processing practices, applicable laws or regulatory requirements. Material changes will be notified via email to registered members and posted on this page with a revised effective date.
Continued use of VegaStars Casino services after the posting of a revised Privacy Policy constitutes acceptance of the changes. If you disagree, discontinue use and contact support@vegastars.me to exercise your data rights.
