Privacy Policy

This Privacy Policy sets out how Vegastars collects, uses, discloses and protects personal information when you visit or use its websites, apps and related services (the Services). Creating an account or using the Services constitutes acknowledgment of this Policy.

What We Collect

Personal information is collected across several categories:

Identity and contact data: name, date of birth, residential address, phone number, nationality, and proof of identity or address.

Account and transaction data: account credentials, deposits, withdrawals, wager and gameplay history, payment details, bonuses and redemptions, and chargebacks.

KYC/AML data: verification results, due-diligence records, sanctions and PEP screening outcomes, and source of funds information where applicable.

Technical and usage data: device identifiers, IP address and approximate location, browser and operating system details, cookies, session logs, crash diagnostics and security logs.

Communications: chat records, webforms and support tickets.

Responsible gaming signals: session duration, spending patterns and responsible gaming tool usage.

Preferences: marketing and cookie choices.

Survey and feedback data: any responses you choose to provide.

Personal data from anyone below the minimum permitted age for gambling is not knowingly collected. If underage data is identified, it will be deleted and the associated account closed.

How We Use It

Personal information is used to:

Provide the Services: manage accounts, enable gameplay, process payments and withdrawals, operate bonuses and loyalty programs, and deliver support.
Verify identity and meet legal obligations: conduct KYC/AML checks, sanctions screening, fraud prevention, responsible gaming monitoring and other compliance requirements.
Secure and improve the platform: security monitoring, incident response, troubleshooting, testing and product development.
Run the business: analytics, forecasting, finance, auditing and compliance oversight.
Marketing, where consent has been given: offers and updates may be sent if you have opted in, and consent can be withdrawn at any time.

The legal bases relied upon include: contract performance (providing the Services), legal obligation (AML/CTF and gaming regulation), legitimate interests (security, fraud prevention and service improvement), and consent (for marketing or where local law requires it for certain cookies and analytics).

Cookies and Similar Tools

Cookies, SDKs and similar technologies are used to operate and improve the Services. These fall into four categories:

Essential: required for sign-in, security and core functionality.
Functional: remember preferences such as language, and help diagnose performance issues.
Analytics: measure usage and performance to inform improvements.
Advertising: measure campaigns and, where permitted, support more relevant marketing.

Non-essential cookies can be managed through browser or device controls. Blocking certain cookies may affect how parts of the site function.

Personal information is not sold or shared for commercial purposes. Limited data is disclosed to:

Service providers and processors: hosting and security providers, KYC/AML vendors, payment processors, fraud prevention services, game studios, and CRM and communications platforms, all bound by contract and appropriate safeguards.
Group companies: for consolidated operations, support and compliance on a need-to-know basis.
Regulators and public authorities: where required by law or regulation, including gaming, AML/CTF, tax or law enforcement obligations.
Business transfers: in connection with a merger, acquisition or reorganization, subject to the protections in this Policy.
With your direction or consent: where you ask us to share or publish data, such as a leaderboard nickname.

Information is only used or disclosed for the purposes for which it was provided, to operate the Services, with your consent, or where disclosure is required by law or an official investigation.

International Transfers

Personal information may be processed and stored outside your country of residence. Where international transfers occur, contractual and other safeguards are applied to provide protections comparable to those required under applicable laws.

Retention

Account, transaction and customer due diligence records are kept for as long as needed, or longer where required by law, to meet regulatory requirements, or to establish, exercise or defend legal claims.

Security

Layered technical and organizational measures are applied appropriate to the risk. These include encryption in transit, strict access controls, logging and monitoring, network segregation, vulnerability management and incident response. Access to customer information is limited to authorized personnel operating under confidentiality obligations and a need-to-know principle.

Your Rights

Subject to identity verification and any legal or regulatory limits, including AML/CTF record-keeping obligations, you may exercise the following rights:

Right to be informed: clear information about how your data is used. Prominent notice will be provided for any material changes.
Right of access: request a copy of the personal information held about you.
Right to rectification: ask for inaccurate or incomplete information to be corrected.
Right to erasure: request deletion of personal information where no overriding legal basis exists to retain it. Certain records must be kept to meet legal and regulatory obligations.
Right to restriction: ask that processing be restricted in certain circumstances, such as while accuracy or a contested objection is being reviewed.
Right to object: object to processing based on legitimate interests, including related profiling. Objections to direct marketing can be raised at any time.
Right to data portability: request certain information in a structured, machine-readable format, or ask that it be transmitted to another controller where technically feasible.
Right to withdraw consent: where processing is based on consent, such as for marketing or certain cookies, that consent may be withdrawn at any time without affecting prior processing.
Rights relating to automated decisions: where a decision with legal or similarly significant effects is made solely by automated means, you may request human review, express your view and contest the outcome where provided by law.
Right to anonymity or pseudonymity: in limited contexts a pseudonym may be permitted. For regulated gambling services, identity verification is generally required.
Right to complain: concerns can be raised at any time, and if unresolved, you may have the right to contact your local data protection authority. Competent authorities are cooperated with as required by law.

To exercise any of these rights, contact the data protection team directly. Identity will be verified and a response provided within applicable timeframes.

Automated Decision-Making

Automated tools assist with fraud prevention, AML screening, responsible gaming monitoring and, where consent has been given, marketing personalization. No decisions that produce legal or similarly significant effects are made solely by automated means. Any such outcomes involve human review and final judgment. Objections to direct marketing profiling can be made at any time.

Minimum Age

The Services are not available to anyone below the minimum permitted age for gambling. Age verification is carried out, and accounts will be closed and data deleted where underage use is identified.

Complaints

Concerns about how personal data is handled can be raised with the data protection team at any time. All complaints are investigated and responded to. You may also have the right to contact your local data protection authority. Vegastars cooperates with its gaming licensing authority and other competent authorities as required by law, including in the event of a security incident affecting personal information.

Policy Updates

This Policy may be updated from time to time. Where significant changes are made, prominent notice will be provided, such as an on-site banner, and the version and date will be logged. Continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

At sign-up, a clear notice is presented requiring acknowledgment and acceptance of the Terms and Conditions and this Privacy Policy. Electronic footprint details, such as IP address and device information, are also recorded to operate the Services securely and to meet compliance obligations.