Celsius Casino Privacy Policy for accounts, payments and personal data

We collect personal data to create and secure accounts, process payments, meet legal and licensing duties, prevent fraud, provide games and betting services, operate responsible gambling controls and answer support requests. This Privacy Policy explains what we collect, why we use it, who receives it and which choices are available to you. It applies when you visit our site, register, use the cashier, play games, place bets, contact support, activate a promotion or use an account-control tool.

1. Who controls your data

Celsius Holdings N.V., company registration number 157856, operates Celsius Casino under Anjouan Gaming Board licence ALSI-152406052-FI4. For the purposes described in this policy, Celsius Holdings N.V. acts as the data controller unless a payment, verification or technology provider processes data under its own legal responsibility.
Privacy enquiries can be sent to [email protected]. Written requests may also be addressed to the Data Protection Contact, Celsius Holdings N.V., Scharlooweg 39, Willemstad, Curaçao. Include the email attached to your account and enough information for us to identify the request, but never send a password, full card number, private cryptocurrency key or seed phrase.

2. Scope of this policy

This policy covers our websites, mobile browser service, player accounts, cashier, casino lobby, sportsbook, promotions, VIP programme, support channels, surveys, newsletters, security systems and responsible gambling tools. It also covers information created when you interact with our providers through our service, such as payment status, verification results and game or bet records.
External websites, game studios, payment services and support organisations may publish separate privacy notices. Their policies govern processing that takes place outside our control.

3. Personal data we collect

3.1 Registration and identity data

We collect your name, date of birth, residential address, country, email, telephone number, username, password record and account identifiers. We may record language, preferred currency and communication choices. Registration data must be accurate because it can later be compared with identity and payment documents.

3.2 Verification and compliance data

Identity checks can require a passport, national identity card, driving licence, selfie or liveness result. Address checks can require a bank statement, utility bill, government letter or equivalent record. We may collect proof of payment ownership, source of funds, source of wealth, occupation, employer information, tax residence and information needed for sanctions, politically exposed person or adverse-media screening.
Verification providers can return match scores, document-validity results, fraud indicators and risk flags. We retain the decision and enough evidence to demonstrate why a check passed, failed or required further review.

3.3 Payment and transaction data

We record deposits, withdrawals, chargebacks, reversals, failed attempts, currency, amount, date, provider, transaction ID, wallet address and network where cryptocurrency is used. Card data may be tokenised so that we receive a reference instead of the full number. We can collect bank, wallet or payment-account details needed to confirm ownership and send a withdrawal.

3.4 Gaming and betting data

We record game rounds, stakes, wins, losses, bonus contribution, session length, jackpots, Battle Room participation, sportsbook selections, odds, settlement, cancelled bets and account balance changes. These records allow us to settle play, investigate interrupted rounds, enforce bonus rules and support responsible gambling reviews.

3.5 Device, network and usage data

Technical data can include IP address, device type, operating system, browser, language, screen size, time zone, approximate location, login time, session identifier, cookie identifier, referring page and navigation events. Security systems can record device fingerprints, VPN or proxy indicators, repeated login failures and links between accounts or payment instruments.

3.6 Support and communication data

We keep emails, chat transcripts, complaint records, call notes, survey responses and documents sent to support. If you contact us through social media, we receive the information attached to that message and the public profile data the service shares.

3.7 Responsible gambling data

Deposit, loss, wager and session limits form part of the account record. We also process reality-check settings, cooling-off periods, self-exclusion, account closures, marketing blocks, safer-gambling conversations and account-risk reviews. This information can be sensitive because it relates to financial behaviour and possible gambling harm.

4. How we obtain information

Some data comes directly from you through registration, verification, payment and support forms. Other data arises automatically when you use the service, including transaction, game, bet, device and cookie records. Payment processors, verification services, fraud-prevention tools, game studios and regulatory databases can supply information needed to complete a transaction or check an account.
We may also receive information from another person where fraud, payment ownership, account security or a welfare concern is reported. We assess the reliability and relevance of such reports before taking action.

5. Why we process personal data

5.1 Contract and service delivery

We use data to register the account, authenticate logins, provide games and betting markets, maintain balances, settle rounds, process deposits and withdrawals, administer promotions, answer support queries and deliver requested account tools.

5.2 Legal and regulatory obligations

Age verification, identity checks, anti-money laundering review, sanctions screening, transaction monitoring, record retention, tax reporting, responsible gambling controls and responses to lawful authorities can require processing. We may restrict a transaction or account while a required check remains open.

5.3 Legitimate interests

We process data to secure the site, detect fraud, stop bonus abuse, investigate chargebacks, improve navigation, diagnose technical faults, defend legal claims and understand how account functions perform. We weigh those interests against the effect on players and apply access limits where the data carries greater risk.

5.4 Consent

Consent can apply to optional marketing, non-essential cookies and certain communications. You can withdraw consent through account settings, the unsubscribe link or our privacy contact. Withdrawal does not invalidate processing that took place before the change.

5.5 Player protection

We analyse deposit, loss, wager, session and account-contact patterns to identify behaviour that may require a safer-gambling interaction. Depending on the risk, we can send a reminder, request a conversation, apply a temporary restriction or direct the player to account controls.

6. Cookies and similar technology

Essential cookies maintain login state, security, language, currency and cashier functions. Preference cookies remember choices. Analytics cookies measure visits, errors and feature use. Marketing or attribution technology can record which campaign led to a registration or deposit, subject to consent rules that apply in the relevant market.
Local storage, software development kits, pixels and device identifiers can perform related functions. You can control optional categories through the cookie panel and browser settings. Blocking essential cookies can prevent login, payment authentication or account security from working correctly.

7. Automated checks and account decisions

Fraud, verification and transaction systems can assign risk indicators by comparing identity, device, location, payment and behavioural data. These checks help us identify duplicate accounts, stolen payment instruments, document tampering, sanctions matches and unusual transaction patterns.
An automated alert does not always produce a final account decision. Where the effect is significant, trained staff can review the underlying information. You may ask us to explain a decision, provide further evidence or request human review where applicable law gives that right.

8. Who receives personal data

We share only what the recipient needs for its function. Recipients can include:

• payment processors, banks, card networks and cryptocurrency services;
• identity, age, address and source-of-funds verification providers;
• hosting, security, analytics, customer-support and communication vendors;
• game studios, sportsbook technology providers and data suppliers;
• fraud-prevention, sanctions and transaction-monitoring services;
• professional advisers, auditors, insurers and dispute handlers;
• regulators, courts, law-enforcement bodies, tax authorities and other public authorities where disclosure is lawful;
• a purchaser or successor if our business or relevant assets are reorganised or transferred.

Our contracts require service providers to protect the data, restrict their use and notify us of relevant security incidents. A provider acting as an independent controller follows its own privacy notice and legal duties.

9. International transfers

Our company, players and service providers can be located in different countries. A transfer may therefore take personal data outside your home country or the European Economic Area. Where required, we use contractual safeguards, transfer assessments, recognised adequacy decisions or another lawful transfer mechanism. We also limit access and apply encryption or pseudonymisation where practical.

10. Data retention

We retain data for as long as the account remains active and afterwards for the period required by gambling, anti-money laundering, tax, payment, fraud-prevention and legal-claim rules. The exact period depends on the record.
Identity and transaction records can require longer retention than marketing preferences or ordinary analytics. Complaint, chargeback, self-exclusion and security records can remain necessary after account closure. When a record no longer serves a legal, contractual, security or dispute purpose, we delete or anonymise it according to our retention schedule.

11. Security controls

We use encrypted connections, controlled administrative access, secure hosting, password protection, monitoring, payment tokenisation, backup procedures and fraud controls. Staff access follows job responsibility and receives periodic review. Suppliers undergo security and contract checks before receiving account data.
No online system can remove every risk. Protect your password, keep devices updated, enable available authentication controls and contact support immediately if a login or transaction is unfamiliar. We will never ask for your full password, card security code, private key or seed phrase.

12. Your privacy rights

Depending on the law that applies, you may request:

• access to personal data and information about its use;
• correction of inaccurate or incomplete information;
• deletion where no legal retention duty applies;
• restriction while accuracy or legal grounds are checked;
• objection to processing based on legitimate interests;
• a portable copy of eligible information;
• withdrawal of consent;
• human review of certain automated decisions;
• an end to direct marketing;
• a complaint to the relevant data protection authority.

Send a request to [email protected]. We may ask for identity confirmation so that one person cannot obtain another player’s data. We respond within the period required by applicable law and explain any lawful limitation or extension.

13. Marketing choices

Account settings and unsubscribe links allow you to stop email, SMS or push marketing. You can also contact support. Service messages about security, verification, payments, legal changes or responsible gambling can continue because they do not promote an offer.
Self-exclusion triggers marketing suppression under our responsible gambling procedures. Allow reasonable processing time across connected communication systems, and tell us promptly if a promotional message arrives after exclusion.

14. Children and legal gambling age

Our service is not intended for minors or anyone below the legal gambling age in their location. We conduct age checks and can suspend an account while evidence is reviewed. If a parent or guardian believes a minor has supplied personal data, contact [email protected] and [email protected] so we can investigate and restrict access.
Parents can use device controls, password protection, payment alerts and blocking software to reduce unauthorised gambling access.

15. Third-party links

Our site can link to payment providers, game studios, support organisations and other external services. We do not control their privacy practices once you leave our service. Read the notice displayed by the recipient before submitting personal data.

16. Changes to this policy

We revise this policy when data uses, providers, account functions or legal duties change. The Last Updated date shows the latest revision. Material changes can also appear through an account notice, email or site message where required.

17. Privacy contact

Email: [email protected]
Postal address: Data Protection Contact, Celsius Holdings N.V., Scharlooweg 39, Willemstad, Curaçao
General support: [email protected]
Telephone: +599 9 788 2140