Buran Casino Privacy Policy
This policy sets out what personal data we collect when you play at burancasino-pokies.com, why we collect it, who we share it with and the rights you hold over it. It applies to every account holder and visitor, whether you browse on desktop or on our HTML5 mobile site.
Data we collect
We only collect personal data we need to run your account, meet our legal obligations and keep our platform safe. The categories below cover everything we gather, from sign-up form to withdrawal verification.
- Identity data: your full name, date of birth, email address, phone number, residential address and country of residence, submitted at registration.
- Verification documents: copies of your passport, driver licence or national ID, a recent utility bill for proof of address, and payment method evidence such as a card photo or bank statement, collected during KYC checks.
- Transaction data: deposit and withdrawal records, amounts in AUD or your chosen currency, payment method details and crypto wallet addresses processed through CoinsPaid.
- Technical data: your IP address, device type, operating system, browser fingerprint and time zone, recorded each time you connect.
- Gameplay behaviour: the pokies and table games you open, bet sizes, session duration, win and loss history and tournament entries such as Drop & Wins.
- Marketing preferences: which bonus emails or SMS offers you have opted into, and which you have declined.
How we use your data
Each use listed here maps to a specific purpose tied to your account or to a law that binds us. We do not build shadow profiles or sell your data to advertisers.
- Creating and maintaining your Buran Casino account, including login, password reset and account closure.
- Verifying your identity and age before your first withdrawal, as required under our Curaçao eGaming licence 8048/JAZ2017-042.
- Processing deposits and withdrawals and settling wagering on bonuses such as the 100% up to 800 AUD welcome package.
- Preventing fraud, bonus abuse, chargeback schemes and multiple-account collusion.
- Monitoring play patterns for signs of problem gambling so we can act on deposit limits, cooling-off requests and self-exclusion.
- Sending marketing messages, only where you have consented, and honouring your opt-out at any time.
- Meeting accounting, tax and anti-money-laundering obligations that apply to Araxio Development N.V.
Why we process your data
We rely on four legal bases. Every processing activity in this policy traces back to at least one of them.
Contract
Registering an account with us is a contract. To deliver it we must process your identity data, handle your payments and keep your gameplay records. Without this data we cannot open or operate your account.
Legal obligation
Curaçao eGaming and anti-money-laundering law oblige us to run KYC checks and retain transaction records. This basis covers verification documents, transaction histories and reports we must file with regulators.
Legitimate interest
Fraud prevention, security monitoring and aggregated analytics on how our 9,000 games perform all rest on our legitimate interest in running a safe, honest platform. This interest never overrides your fundamental rights, and we weigh it against them in every new use case.
Consent
Marketing emails, SMS offers and non-essential cookies run on your consent alone. Consent is freely given, specific and as easy to withdraw as it was to give.
How long we keep it
Retention depends on the category and the rule that governs it. Nothing is kept past the point where it serves its purpose.
| Data category | Retention period |
|---|---|
| Identity and account data | While your account is open, then 5 years after closure for regulatory audit |
| Verification documents | 5 years after your last withdrawal, then securely deleted |
| Transaction records | At least 5 years, as required under AML rules |
| Gameplay and betting history | 5 years from the date of the last bet |
| Technical and IP logs | 12 months, for security investigations |
| Marketing preferences | Until you withdraw consent or your account is closed |
Who we share data with
We share data only with parties who need it to deliver a service you use, and always under written data-processing terms. We never sell or rent your personal data.
- Payment processors handling your deposits and withdrawals, including card acquirers, e-wallet operators and CoinsPaid for BTC, ETH, LTC and USDT transactions.
- KYC and AML screening providers that verify your documents and check sanctions lists.
- Our regulator, Curaçao eGaming, when we are legally compelled to report.
- Analytics and hosting services that run our platform, bound by contract to process data only on our instructions.
- Game studios whose titles you play, in anonymised or pseudonymised form for jackpot and tournament settlement.
- Auditors and lawyers, where an audit or dispute makes disclosure necessary.
Your rights over your data
Wherever you live, we honour the same set of rights, and we answer every request within 30 days. Send requests from your registered email so we can verify ownership before acting.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is wrong or out of date.
- Erasure: ask us to delete data we no longer need to keep by law.
- Portability: receive your account and gameplay history in a machine-readable format.
- Objection: object to processing based on legitimate interest, such as analytics.
- Withdrawal of consent: opt out of marketing or optional cookies at any time, without affecting your account.
- Complaint: raise a complaint with your local data protection authority, and we will cooperate fully with any inquiry.
Contacting our DPO
Our data protection officer reads every privacy request and can be reached by email. We answer within two business days.
Cookies and tracking
We use session cookies to keep you logged in, security cookies to block fraud, and, only with your consent, analytics and marketing cookies that personalise your bonus offers. The full list of cookies, their purposes and lifespans sits on our dedicated Cookies Policy page, where you can also withdraw consent for any non-essential category with one click.
How we protect your data
All traffic between your device and our servers runs over TLS encryption. Verification documents sit in encrypted storage with access restricted to trained compliance staff on a need-to-know basis, and every access to your KYC file is logged and auditable. Passwords are hashed, never stored in plain text, and payment card data is handled entirely by certified PCI DSS processors rather than on our own systems.
If a breach happens
If a breach ever puts your data at risk, we will contain it, assess the damage and notify you and the relevant regulator within 72 hours of confirming it, in line with our legal duty. You will hear from us directly, not from the news.
Frequently asked questions
Can I play at Buran Casino without giving you my ID?
You can register, deposit and play with your basic details. We ask for ID, proof of address and payment verification before your first withdrawal, as required by our Curaçao eGaming licence.
How do I stop marketing emails and SMS?
Unsubscribe via the link in any message, or change your preferences under account settings. Opting out never affects your account, your bonuses or your withdrawals.
Do you keep my data after I close my account?
We keep transaction and verification records for 5 years after closure, because AML rules require it. Marketing data is deleted as soon as you withdraw consent.
Who do I contact about a privacy issue?
Email our data protection officer from your registered address and we will respond within two business days. You also have the right to complain to your local data protection authority.