Palm Casino Privacy Policy

Palm Casino places great importance on the privacy of visitors and players. This policy describes the data we collect, how we use it and the rights you have over your personal information. By using our site, you accept the processing described here.

This policy applies to the palmcassino.nl site and associated services. For any question, contact us via the help page.

We respect the core principles of modern privacy law: transparency, data minimisation, purpose limitation and appropriate security. This document is written in plain language because a privacy policy shouldn't be reserved for lawyers. If you're responsible for minors sharing a device, please note: the platform is strictly limited to those aged 24 and over.

Changes are flagged at the top of the page. You can consult the current version at any time. In case of a major change affecting processing, we inform active users by email.

At registration we ask for name, date of birth, email, phone and address. For verification, that's followed by ID documents, proof of address and confirmation of your payment method. During use, we record transactions, gambling activity and technical session data.

We also use cookies and similar technologies. See our cookie policy for details.

By technical data we mean IP, browser, OS, resolution, language, referring page and timestamp. Needed for fraud detection, anti-money-laundering checks and cross-device functionality. They aren't used to track you on other sites.

Communications (support chats, emails, call notes) are kept for service continuity. If you speak to a second agent on the same topic, they can see what was said previously without you having to repeat everything.

Data is used to deliver the service, process payments, comply with legal obligations (anti-money-laundering, age verification), protect players from problem gambling and improve the platform via anonymised analytics.

For responsible gambling, we monitor patterns that may signal a loss of control. Sharp deposit increases, very long sessions or attempts to bypass limits can trigger contact. With respect for your autonomy and without judgement; the goal is only to point out the available tools, including the helplines listed on the responsible gambling page.

Marketing communications only go out after explicit consent. You can withdraw it at any time via the unsubscribe link or your account preferences. Service emails (account, transactions, policy updates) aren't marketing and stay active for as long as your account exists.

Our processing relies on several bases. Performance of contract is the basis for account opening and management, deposits/withdrawals and providing the games. Legal obligation is the basis for identity verification, anti-money-laundering reporting and retention of certain transactions.

Legitimate interest is used for fraud detection, security and improvement analytics, insofar as it doesn't override your privacy interests. Consent is the basis for marketing and non-essential cookies. You can withdraw consent at any time with no consequence for prior processing.

Data is neither sold nor rented. We only share with payment, identity verification, hosting and analytics providers, all bound contractually to confidentiality. Exceptionally, we share where the law requires it, for example at the request of a regulator.

With each partner we sign an agreement aligned with the standards. We require appropriate security measures, limit access to what's strictly necessary and require prompt incident notification.

Some partners are based outside the EEA/UK. In that case, we put safeguards in place via standard contractual clauses or an equivalent mechanism recognised by the authorities. Your data benefits from an equivalent level of protection, whatever the country. A list of countries where our main partners are based is available on request via support.

We use SSL encryption for all communications. Personal data is encrypted at rest. Access is limited to authorised personnel and is logged. The infrastructure is subject to periodic security audits.

Beyond the technical, organisational measures exist: signed confidentiality undertakings, annual training, role-based access. At the end of an employment contract, all access is blocked immediately.

In the event of a breach involving personal data, we notify the competent authority within the legal deadlines and, if it's in your interest, you personally. A breach can occur despite the measures, and transparency takes priority then.

Under the legislation, you have rights of access, rectification, deletion, restriction, objection and portability. Requests go via support. We respond within 30 days.

Access lets you obtain a copy of the data concerning you. Rectification lets you correct inaccurate data. Deletion applies insofar as the law doesn't oblige us to retain, for example for tax or anti-money-laundering. Portability lets you receive your data in a structured format or have it transmitted to another party.

In case of dissatisfaction, you can at any time file a complaint with the national data protection authority — for UK residents, the Information Commissioner's Office (ICO).

Data retained legally (transaction history, verification documents) stays for five to seven years in archive. Marketing data is deleted as soon as you unsubscribe or close the account. Logs are deleted automatically after 90 days.

By category, we apply the legal minimum where possible. Support exchanges are kept for two years for complaints and quality, then anonymised. Cookies have their own duration, indicated in the cookie policy.

We use limited segmentation to offer relevant deals. A player who mostly plays live blackjack will more likely receive a message about a blackjack bonus than a slots tournament. We don't use automated decisions with legal consequences; in case of doubt on verification or responsible gambling, an agent always intervenes before any action.

For all your privacy-related questions, requests and complaints, contact us via the help page. Indicate clearly that it's a privacy request so it's handled by the right team. For formal requests, additional identity verification may be required.

We reserve the right to adjust this policy. Changes are published here. The latest revision is from April 2026.