The Organisation Accountable for Your Information
Gareton B.V. runs the site. It is registered in Curaçao under number 160656, with an address at Landhuis Zuikertuin, Zuikertuintjeweg, Willemstad, and holds licence OGL/2024/165/0185 from the Curaçao Gaming Authority. Gareton B.V. determines why and how personal information is processed and is accountable for its protection under this policy. Privacy questions can be sent through the contact options listed at the end of this page.
Types of Information Collected
Three groups of information are collected. The first is the personal information you supply during sign-up and verification: email address, account currency, full name, date of birth, home address, country and copies of identity and address documents when verification takes place. These details are necessary to open the account, confirm age and identity and meet legal requirements.
The second group is financial: the payment methods you use, transaction amounts and history, and crypto wallet addresses where relevant. This information is needed to process deposits and withdrawals, confirm that methods belong to you and detect fraud. Full card numbers are normally handled by payment providers rather than kept by the casino. The third group is technical: IP address, device and browser type, language preferences, pages viewed and cookie identifiers. It keeps the site working, helps spot unusual sign-ins and improves the experience. Only the information needed for these purposes is collected, and the central rule of online casino privacy on this site is data minimisation: collecting less means there is less to protect.
Purposes of Processing
Your information is used to open and manage your account, let you sign in and keep your profile current. It also supports payments, including confirming deposits and withdrawals, applying limits and keeping transaction records. A large share of processing concerns security: information helps detect suspicious sign-ins, duplicate accounts, attempted fraud and activity connected to money laundering, and it helps the operator meet its legal duties.
Marketing and personalised offers rely on your consent or on another basis permitted by law, and you can withdraw consent at any time without losing access to the site. Information is also used for player protection: account tools and the monitoring of risky patterns help identify signs of problem gambling so that limits or breaks can be suggested. Any purpose not described here would require a new legal basis and, where necessary, fresh consent.
When Information Is Shared
Your personal information is never sold. It is shared only with providers needed to run the service, such as payment processors, identity verification services, game studios and technical partners for hosting and support. These parties act on the operator's instructions and are bound by contracts requiring confidentiality and suitable security measures.
Information may also be disclosed to authorities when the law requires it, for instance in fraud or money laundering investigations or under a court order. Otherwise, sharing happens only with your consent. The casino limits transfers to what is strictly needed and checks that each recipient provides protection consistent with this policy.
Keeping Your Information Secure
Cashy Casino data protection relies on both technical and organisational safeguards. An SSL encrypted connection protects information travelling between your device and the servers, and data encryption in online casinos like this one also extends to stored records where appropriate. Servers are guarded by access controls, and only authorised staff can view personal information, according to their role.
A Cashy secure online casino environment also depends on regular checks: internal audits, compliance testing and permission audits help find and fix weak points before they become problems. No system can be completely risk-free, but these measures are designed to protect personal information from unauthorised access, loss or misuse. Player data security is a shared responsibility, so you can help by choosing a unique password, protecting your devices and reporting suspicious activity to support immediately. A secure gaming platform is the product of the operator and its players working together.
Cookies and Similar Technologies
The site uses cookies and comparable tools. Essential cookies keep the site running, for example by maintaining your session after sign-in, remembering your language and protecting against abuse. Analytics cookies show how the site is used and help improve performance, and personalisation or marketing cookies, where present, are only switched on with your consent.
This casino cookie policy keeps you in charge. On your first visit you can accept or decline non-essential categories, and you can change that choice later in the site settings. Cookies can also be removed or blocked in your browser, bearing in mind that blocking essential cookies may prevent sign-in or stop parts of the site from working.
Your Rights Over Your Information
Players in Canada are entitled under PIPEDA to learn which personal details the operator keeps about them, to see those details and to have errors or gaps fixed. They may also pull back consent for optional uses such as promotional messages, within legal and contractual limits, and ask for an account of how their details were used and who received them. Quebec residents benefit from extra safeguards in provincial law, among them tighter consent standards and the ability to have some information de-indexed or erased.
Players from the European Economic Area also hold the rights set out in the GDPR, such as access, rectification, erasure, restriction, objection, portability and withdrawal of consent, and casino GDPR compliance means responding to these requests within the legal deadlines. Some information must be retained even after a deletion request, for example to satisfy anti-money laundering rules. To exercise any of these player privacy rights, use the contact options below. If you believe your rights have not been respected, you can complain to the Office of the Privacy Commissioner of Canada or the relevant provincial commissioner, and players in the European Economic Area can turn to their local data protection authority.
How Long Information Is Kept
Details are stored no longer than their purpose requires, plus any period the law imposes. Records about identity, money movements and play can outlive the account itself, since tax and anti-money laundering rules set minimum storage times, and they may also be needed to support or answer a legal claim.
When retention periods end, information is deleted or anonymised so it can no longer identify you. Marketing information is kept until you withdraw consent, and technical records such as access logs are kept for shorter periods linked to security. Fair and transparent casino policies on retention mean you can ask at any time how long a particular type of information will be stored.
Protecting Minors
Only adults may use the site, meaning anyone aged 19 or above in most provinces and 18 or above in Alberta, Manitoba and Quebec. Information from children is never collected on purpose, and should a profile prove to belong to someone underage, it is shut and the linked details are handled only to the extent legally necessary.
Age verification, document requests and the blocking of profiles that fail checks all serve to keep minors away from real-money play. Families can add another layer of protection with filtering software on shared devices and by never leaving cards or wallet logins within a child's reach. The site points to programs like Net Nanny and CyberPatrol for that reason.
Transfers Outside Canada
The operator is based in Curaçao, and payment and technical providers may be located in other countries. Your personal information may therefore be transferred to, stored in or accessed from places outside Canada, where privacy laws can differ and where local authorities may be able to access information under their own laws. In such cases, contracts and other safeguards are used to give your information protection comparable to that described here, and transfers are limited to what is needed to run the service.
You can ask for details of the safeguards in place by contacting the operator. Providers are assessed before any information is shared with them and must meet security standards consistent with this policy.
Revisions to This Policy
As laws, services and internal processes evolve, this policy can be revised. Major revisions are highlighted on the site or communicated by email, and the official policy states which version is current. Using the site once a revision is live means you accept it, except where fresh consent is legally required, and older versions can be supplied if you ask.
How to Reach Us
For privacy questions, to exercise a right or to report a concern about your information, contact the operator through live chat, available from every page of the site, or through the support page, naming privacy as the topic. Your request is passed to the person responsible for data protection, and you will receive a reply within the time allowed by law. To protect your account, the operator may ask you to confirm your identity with details already linked to it, but it will not request extra documents unless they are needed to verify the request.