Your Privacy at Legionbet Casino
This Privacy Policy explains what personal data we collect when you use legionbet-gb.com, why we collect it, how long we keep it and the control you have over it. We operate under licence OGL/2023/1567/0098 issued in Curaçao and apply GDPR-aligned standards for all our players.
Data We Collect From You
We gather only the personal data we need to run your account, meet our legal duties and keep the platform safe. When you register we ask for your name, email address, date of birth, phone number and residential address. Before your first withdrawal we request verification documents under our KYC process: a photo ID, proof of address and, where applicable, proof of payment method.
- Identity and contact data: name, date of birth, email, phone, address
- Verification documents: passport, driving licence, utility bill, card images
- Transaction data: deposits, withdrawals, bonuses, wagering history
- Technical data: IP address, device type, browser, operating system
- Gameplay behaviour: bets placed, games played, session duration
- Marketing preferences: which channels you opted into and when
How We Use Your Data
Each use of your data maps to a specific purpose. We create and manage your account, verify your identity before withdrawals, process deposits and withdrawals, and monitor play for signs of problem gambling. We also detect fraud and bonus abuse, send marketing only where you consent, and answer your requests through 24/7 support.
- Account creation, login and account management
- KYC verification processed within 72 hours of document submission
- Payment processing for the 12 deposit and 8 withdrawal methods we offer
- Responsible-gambling monitoring, including deposit-limit and self-exclusion enforcement
- Fraud prevention, anti-money-laundering checks and dispute handling
- Marketing emails, SMS and on-site offers, strictly with your consent
Why the Law Lets Us
Contract
We process your identity, contact and transaction data to set up and run your account, because our Terms and Conditions form a contract with you. Without this data we cannot open an account or pay out winnings.
Legal obligation
Curaçao licence conditions and anti-money-laundering rules oblige us to verify your identity and retain transaction records. KYC document checks and suspicious-activity reporting rest on this basis, and you cannot opt out of them while you hold an account.
Legitimate interest
Fraud detection, security monitoring, aggregate game analytics and improvements to our 15,000-title casino and sportsbook rely on our legitimate interest in operating a safe platform. These uses affect you minimally and never involve selling your data.
Consent
Marketing messages and non-essential cookies run only on your consent. You withdraw consent at any time via account settings, the unsubscribe link or by emailing [email protected], and withdrawal takes effect immediately.
How Long We Keep It
Retention depends on the type of data and the rules that apply to it. Transaction and KYC records stay for at least 5 years after account closure to satisfy regulatory and tax obligations, after which we delete or anonymise them. Verification documents are deleted once checks conclude, unless law requires longer storage.
| Data category | Retention period |
|---|---|
| Identity and account data | Duration of account plus 5 years |
| KYC verification documents | Deleted after verification, unless a longer statutory period applies |
| Transaction records | Minimum 5 years after account closure |
| Support correspondence | 2 years after final exchange |
| Marketing preferences | Until you withdraw consent or delete your account |
| Technical logs and security records | 12 months |
Who We Share Data With
We never sell your personal data. We share it only with partners who perform services we cannot run ourselves, under contracts that require confidentiality and secure handling. Payment processors handle your card, e-wallet and crypto transactions; KYC and AAML screening providers verify your documents; the Curaçao regulator receives reports where required; analytics providers help us measure site performance in aggregate.
- Payment processors and acquiring banks
- Identity verification and AML screening providers
- The Curaçao licensing authority and law enforcement on lawful request
- Analytics and site-performance services, using anonymised or pseudonymised data
- Service providers hosting and securing the platform
Your Rights Over Your Data
You control your personal data. Submit any request through [email protected] or the account settings panel and we respond within one month. Where a request is complex, we may extend this by two further months and will tell you first.
- Access: obtain a copy of the data we hold about you
- Rectification: correct inaccurate or incomplete data
- Erasure: delete your data where no legal retention duty applies
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interest
- Withdraw consent: stop marketing and optional cookies at any time
- Complain: escalate to your national data protection authority
Cookies and Tracking
We use essential cookies to keep you logged in and to maintain session security, plus optional analytics and marketing cookies that load only after you consent through the cookie banner. You change your choices at any time from the cookie settings link in the footer. Full details of every cookie, its purpose and its lifetime sit on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers runs over TLS encryption, and stored data is encrypted at rest. Access to personal data is limited to trained staff on a need-to-know basis, with logging of every access. Withdrawal verification and payment flows sit behind segregated systems with multi-factor authentication for our employees.
If a personal data breach occurs that risks your rights, we notify the competent supervisory authority within 72 hours and inform you directly where the risk is high. Our data protection officer coordinates incident response, available at [email protected] for questions on this policy or any data request.
Frequently asked questions
How do I request a copy of my data?
Email [email protected] from your registered address asking for a data access request. We verify your identity and send the complete copy within one month.
Can I stop marketing emails but keep playing?
Yes. Marketing is separate from account services. Use the unsubscribe link or switch off marketing in your account settings, and your account stays fully active.
Why do you need my ID before withdrawal?
Our Curaçao licence and anti-money-laundering rules require us to verify every player before the first withdrawal. We process documents within 72 hours and delete them once checks finish.
Do you keep my data forever?
No. We delete or anonymise data at the end of its retention period, normally 5 years after account closure for transaction records, sooner for everything else.