What personal data we collect, why we collect it, and how it's protected.
[ ] need real values filled in.
Account data (name, date of birth, email, phone, country); identity verification documents (government ID, proof of address, source-of-funds evidence where required); payment data (deposit/withdrawal method, transaction references — we do not store full card numbers); gameplay and transaction history; and technical data (IP address, device/browser type, session logs) collected automatically for security and fraud prevention.
To create and operate your account; to verify your identity and age as required by our operating licence (KYC/AML); to process deposits and withdrawals; to detect and prevent fraud, money laundering, and underage or self-excluded access; to provide customer support; and to meet regulatory reporting obligations to our licensing body.
We process personal data on the basis of: performance of the account contract between you and us, compliance with legal/regulatory obligations (KYC, AML, responsible-gambling record-keeping), and legitimate interest in preventing fraud and securing the platform. Where marketing communications are sent, they are based on your consent, which you can withdraw at any time.
We share data only where necessary with: payment processors and banking partners to complete transactions; identity-verification providers to complete KYC; our licensing/regulatory body where legally required; and IT/hosting providers under confidentiality obligations. We do not sell personal data to third parties for their own marketing purposes.
Account and transaction records are retained for the period required by our licensing body's record-keeping rules (commonly 5+ years after account closure, depending on jurisdiction — confirm exact period with legal/compliance), after which data is deleted or anonymised unless a longer retention period is required by law.
All data in transit is protected with 256-bit SSL/TLS encryption. Payment data is handled under PCI DSS–aligned controls. Access to identity-verification documents is restricted to staff who need it for compliance purposes. No system is completely immune to risk, and we continuously review our security controls.
Depending on applicable law, you may have the right to request a copy of the personal data we hold about you, request correction of inaccurate data, request deletion where we are not legally required to retain it, and object to certain processing (such as marketing). To exercise any of these rights, email worldlymarketing@proton.me; we aim to respond within [X — pending confirmation] business days.
We use cookies and similar technologies for session management, security, and analytics. See our Cookie Policy for details and how to manage preferences.
This Site is not intended for anyone under 18. We do not knowingly collect data from minors; accounts found to belong to a minor will be closed and any deposited funds returned where legally permitted.
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision; material changes will be highlighted on this page.
For privacy questions or data requests, email worldlymarketing@proton.me.