Rockwin Casino Privacy Policy
Who Controls Your Personal Data
Hollycorn N.V., the operator of Rockwin under Curaçao Gaming Control Board licence number OGL/2023/176/0095, is the controller responsible for the personal data described in this policy. Hollycorn N.V. is registered in Curaçao, and correspondence regarding this policy should be directed to [email protected].
How We Use Cookies and Analytics
Rockwin uses cookies in three categories: strictly necessary cookies that keep you logged in and remember your session, functional cookies that store preferences such as your chosen currency, and analytics cookies that measure how the site is used so we can identify pages that are slow to load or difficult to navigate. Strictly necessary cookies cannot be disabled without affecting core functionality such as staying signed in. Functional and analytics cookies can be declined through your browser’s cookie settings or the on-site cookie banner presented on your first visit; declining them does not affect your ability to deposit, play or withdraw.
Why We Process Your Information
We process registration and account data to create and administer your account, payment data to process deposits and withdrawals, and KYC documents to meet identity verification obligations under our Curaçao licence. Technical data and server logs are processed to detect fraud and to keep the platform secure. Marketing communications, where you have opted in, are processed on the basis of your consent, which you can withdraw at any time through your account notification settings.
How Long We Keep Your Data and Who We Share It With
Account records, including KYC documents and transaction history, are retained for five years after account closure to meet record-keeping obligations attached to our Curaçao Gaming Control Board licence. Server logs used for fraud detection are kept for a shorter period and are deleted on a rolling basis once no longer needed for that purpose. Your data is shared with parties directly involved in operating your account: payment processors handling PayID, POLi, card and cryptocurrency transactions; third-party identity verification providers who confirm the KYC documents submitted at registration; and the game providers whose titles you play, including Pragmatic Play, Evolution Gaming, Nolimit City, Play’n GO and the other studios listed on the games page, who receive the minimum account data needed to record gameplay and settle results. None of these parties are permitted to use your data for their own marketing purposes.
Data Collection, Cross-Border Transfers and Your Right to Complain
The data we collect includes the details you provide at registration (name, date of birth, email and residential address), payment information generated when you deposit or withdraw, the KYC documents submitted for verification (an Australian driver’s licence, passport or Medicare card, plus a proof of address), and technical data such as your IP address, device type and browser logs. Because Hollycorn N.V. is based in Curaçao and some payment and hosting providers operate outside Australia, your data may be transferred and processed outside the country where you are located; such transfers are limited to the processors described above and are governed by the contractual terms in place with each provider. If you believe your data has been handled incorrectly, you may lodge a complaint with the data protection supervisory authority in your own jurisdiction of residence, in addition to raising the matter with us directly.
Exercising Your Data Protection Rights
You may request access to the personal data we hold about you, ask for inaccurate details to be corrected, or request deletion of your data where it is no longer required for account administration or regulatory retention. You can also object to a specific processing activity, such as marketing communications, request that processing be restricted while a dispute is resolved, or ask for your data to be provided in a portable format. To exercise any of these rights, contact us using the details below; we may need to verify your identity before actioning certain requests, particularly deletion requests that involve records still subject to the retention period described above.
Contact for Data Requests
Send data access, correction or deletion requests to [email protected] with the email address registered to your account. Include a description of the request in the subject line so it can be routed to the correct part of the support team without delay.