Privacy Policy

This Privacy Policy describes how Carletta N.V. ("we," "us," or "the platform") collects, uses, stores, and protects personal data of users of Pin-Up Casino. By using our services, you consent to the practices described in this policy.

Data Controller: Carletta N.V., registration number 142346, Dr. Henri Fergusonweg 1, Curacao.

2. Data We Collect

Account Registration Data

  • Full name, date of birth, gender
  • Email address, phone number, country of residence
  • Preferred currency and language

Verification Data (KYC)

  • Government-issued ID (passport or NID) — image
  • Proof of address (utility bill or bank statement) — if requested

Transaction Data

  • Deposit and withdrawal history
  • Payment method details (bKash number, card last 4 digits)

Usage Data

  • Games played, bet amounts, session duration
  • Device type, OS, browser, IP address, approximate location

3. How We Use Your Data

  • Account Management: Creating, maintaining, and verifying your account
  • Transaction Processing: Processing deposits, withdrawals, and bonus credits
  • Legal Compliance: Meeting KYC/AML requirements under Curacao gaming regulations
  • Security: Detecting and preventing fraud, unauthorized access, and abuse
  • Communications: Sending account notifications and support responses

4. Legal Basis for Processing

  • Contractual necessity: To provide our services as agreed in the Terms and Conditions
  • Legal obligation: To comply with Curacao gaming regulations, KYC/AML requirements
  • Legitimate interest: Platform security, fraud prevention, service improvement
  • Consent: For marketing communications (which you can withdraw at any time)

5. Data Sharing

We may share your data with payment processors (bKash, Nagad, Rocket, Visa, Mastercard), payment agents (B.W.I Black-Wood Limited and Carletta Limited, Cyprus), software providers for RNG auditing, and regulatory/legal authorities when required. We do not sell personal data to third parties for marketing purposes.

6. Data Security

  • SSL 256-bit encryption on all data transmissions
  • Encrypted storage for sensitive personal and financial data
  • Access controls limiting employee access on a need-to-know basis
  • Regular security audits of our systems and processes
  • Two-Factor Authentication (2FA) available for all user accounts

7. Data Retention

  • Active accounts: Data retained for the duration of account activity
  • Closed accounts: Data retained for minimum 5 years after closure
  • Transaction records: Retained for minimum 5 years per regulatory requirements

8. Your Rights

You have the right to access, correct, delete, restrict, or object to processing of your personal data, and to withdraw consent for marketing. Contact us at [email protected] or via live chat.

9. Cookies

The platform uses essential cookies (session, authentication), functional cookies (language, display settings), and analytics cookies (usage patterns). You can manage cookie preferences through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or on-site notification.

11. Contact

  • Live Chat: Available 24/7
  • Address: Carletta N.V., Dr. Henri Fergusonweg 1, Curacao

Last updated: March 2026