Version 1.0. In force from 16 September 2026. This notice explains how Cryptora N.V. (Cryptora), of Abraham de Veerstraat 9, Willemstad, Curaçao, registered in Curaçao under number 164302, acting as data controller, collects and processes personal data about Players and visitors to cryptora.gg. Questions and rights requests: privacy@cryptora.gg.
1. Categories of personal data we process
1.1 Identity and contact data: name, date of birth, nationality, residential address, email address, telephone number, username, and the contents of identity documents (passport, national identity card, driving licence), selfies and liveness data submitted for verification.
1.2 Financial and transaction data: deposits, withdrawals, balances, ledger entries, cryptocurrency wallet addresses, blockchain transaction identifiers, payment provider references, bank or exchange statements you submit, and source-of-funds and source-of-wealth evidence.
1.3 Gambling activity data: wagers, game rounds, outcomes, multipliers, settlements, session times, bonus claims and progress, rakeback, quests, achievements, tier status, referral activity and self-set limits.
1.4 Technical and device data: IP address, approximate location derived from it, device and browser identifiers, operating system, language, screen characteristics, referring URLs, pages viewed, timestamps, error and performance logs, and cookie or local storage identifiers.
1.5 Communications data: support chat transcripts, emails, complaint files and, where applicable, call recordings.
1.6 Compliance and risk data: screening results against sanctions, politically exposed person and adverse media lists; fraud, multi-accounting and bonus-abuse indicators; responsible gambling markers of harm; self-exclusion records; and internal risk scores and case notes.
1.7 We do not knowingly collect data from persons under 18. Where we discover that an Account belongs to an underage person we close it and delete the data except where retention is required for legal or regulatory purposes.
2. Sources
We obtain data from you directly; automatically from your use of the Service; from payment providers and blockchain records; from identity verification, fraud prevention, sanctions and adverse media data providers; from public registers and open sources; from affiliates and referral partners who introduced you; and from regulators, law enforcement and other operators where lawfully shared.
3. Purposes and legal bases
3.1 Providing the Service — creating and administering the Account, accepting wagers, settling rounds, maintaining balances, processing deposits and withdrawals, providing support. Legal basis: performance of a contract.
3.2 Age and identity verification, AML and counter-terrorist financing, sanctions screening, record keeping and regulatory reporting. Legal basis: compliance with a legal obligation; and, for special category or criminal-offence data where processed, substantial public interest in preventing fraud and money laundering.
3.3 Fraud, collusion, bot detection, bonus abuse and multi-accounting prevention; platform, network and account security. Legal basis: legitimate interests in protecting the Service, its Players and our business; and legal obligation where applicable.
3.4 Responsible gambling — operating limits, reality checks, time-outs and self-exclusion, and identifying and acting on markers of harm. Legal basis: legal obligation and legitimate interests in player protection.
3.5 Service communications — transactional, security, verification and policy-change messages. Legal basis: performance of a contract and legal obligation.
3.6 Marketing — promotional email, on-site offers and, where used, advertising audiences. Legal basis: consent, or legitimate interests where permitted by applicable electronic marketing law. You may withdraw consent or object at any time in Account settings or via the unsubscribe link.
3.7 Analytics, performance measurement and product improvement. Legal basis: consent for non-essential cookies and similar technologies; otherwise legitimate interests.
3.8 Establishing, exercising and defending legal claims; complaint handling; audit; corporate transactions. Legal basis: legitimate interests and legal obligation.
4. Automated decision-making and profiling
4.1 We use automated processing to score deposits, withdrawals, wagering patterns and device signals for fraud, bonus abuse, multi-accounting, sanctions exposure and markers of gambling harm, and to determine verification requirements, limits and eligibility for promotions.
4.2 Such processing may result in a withdrawal being held, an Account being suspended, a promotion being withheld or an Account being closed. Where a decision produces legal effects or similarly significant effects for you, it is subject to human review on request. You may contest a decision and provide additional information by writing to privacy@cryptora.gg.
5. Recipients and disclosures
5.1 We share personal data with: cloud hosting, database and content delivery providers; payment and payout providers (including the cryptocurrency payment processor used for deposits and withdrawals); identity verification, sanctions screening and fraud prevention providers; email, notification and support-chat providers; analytics and error-monitoring providers; professional advisers, auditors and insurers; regulators, tax authorities, financial intelligence units, law enforcement and courts where legally required; affiliates and referral partners, limited to the minimum needed to validate a referral; and a purchaser or successor in the event of a corporate transaction.
5.2 We do not sell personal data. Processors act on documented instructions under written contracts imposing confidentiality and security obligations.
5.3 Blockchain transactions are public and permanent. Any wallet address you use may be publicly linked to transactions with our payment provider. This is inherent to public distributed ledgers and cannot be reversed or erased by us.
6. International transfers
Personal data may be processed in countries outside your own, including outside the European Economic Area. Where such transfers occur we rely on an adequacy decision where one exists, or on standard contractual clauses together with a transfer risk assessment and supplementary technical and organisational measures. A copy of the relevant safeguards is available on request from privacy@cryptora.gg.
7. Retention
7.1 We retain Account, identity, transaction, wagering and verification records for at least 5 years after the end of the customer relationship, or longer where a longer period is required by gambling, anti-money laundering, tax or accounting law, or where records are needed for legal claims, an ongoing investigation or a regulatory request.
7.2 Self-exclusion records are retained for the duration of the exclusion and afterwards for as long as necessary to prevent the reopening of an Account. Marketing suppression records are retained indefinitely so that we can continue to honour your objection. Support transcripts are ordinarily retained for two years. Technical logs are ordinarily retained for up to twelve months.
7.3 At the end of the applicable period data is deleted or irreversibly anonymised.
8. Your rights
8.1 Subject to the conditions and exemptions in applicable law, you have the right to be informed; of access to a copy of your data; to rectification of inaccurate data; to erasure; to restriction of processing; to data portability; to object to processing carried out on the basis of legitimate interests and to direct marketing at any time; to withdraw consent; not to be subject to a decision based solely on automated processing with legal or similarly significant effects; and to lodge a complaint with your supervisory authority.
8.2 Rights are not absolute. In particular, we cannot erase or stop processing data that we are legally required to retain for anti-money laundering, gambling regulation, tax or accounting purposes, or that is needed to enforce a self-exclusion, prevent fraud or defend a legal claim.
8.3 To exercise a right, write to privacy@cryptora.gg. We will respond within one month and may extend that period by two further months for complex requests, telling you why. We may need to verify your identity before acting.
9. Security
We apply technical and organisational measures appropriate to the risk, including encryption in transit, encryption at rest for stored data, row-level access controls in our database, least-privilege access for staff, multi-factor authentication and time-limited step-up authentication for administrative actions, audit logging of privileged operations, rate limiting, monitoring and alerting, secure development practices and vendor due diligence. No system is completely secure; you are responsible for protecting your own credentials and devices.
10. Cookies and similar technologies
See the Cookie and Local Storage Notice for the categories of cookies and browser storage we use, their purposes and how to control them.
11. Changes to this notice
We may update this notice. Material changes will be notified on the Service or by email. The version and effective date above identify the current version.
12. Contact
Data protection contact: privacy@cryptora.gg. Postal: Cryptora N.V., Abraham de Veerstraat 9, Willemstad, Curaçao. You also have the right to complain to the supervisory authority in your country of residence or place of alleged infringement.