Privacy Policy

This Privacy Policy describes in a transparent, detailed, and rigorous manner how Golazzo Casino (accessible via the domain golazzocasinos.co) collects, uses, stores, shares, and protects the personal data of users residing or located in the United Kingdom.

Golazzo Casino is firmly committed to ensuring the security, confidentiality, and privacy of all personal data entrusted to us. We operate in strict compliance with the legal framework applicable to data protection and the online gambling sector, notably:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation - GDPR);.
• The UK Data Protection Act 2018 and the UK GDPR;.
• The UK Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017;.
• This site operates under a Tobique licence and is not regulated by the UK Gambling Commission.

By accessing the platform, creating a user account, or using any of our gaming or betting services, the user acknowledges the terms described in this Privacy Policy.

Data Controller and Data Protection Officer

1.1 Identification of the Controller

Golazzo Casino is the entity responsible for processing personal data collected through the website golazzocasinos.co. As the data controller, we determine the purposes and means by which your personal data is processed.

1.2 Data Protection Officer (DPO)

To address any questions, clarifications, or requests to exercise rights related to privacy and the processing of personal data, the user can contact our Data Protection Officer directly via the official email:

• Support and Privacy Email: [email protected].

Fundamental Principles of Data Processing

The processing of personal data carried out by Golazzo Casino is governed by the following fundamental principles set out in Article 5 of the GDPR:

• Lawfulness, Fairness, and Transparency: Data is processed transparently in relation to the data subject, always based on a valid legal basis.
• Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
• Data Minimization: We only collect data that is adequate, relevant, and strictly necessary to achieve the stated purposes.
• Accuracy: We take all reasonable steps to ensure that inaccurate or outdated data is erased or rectified without delay.
• Storage Limitation: Data is kept only for the period strictly necessary to fulfill the purposes for which it was collected and to comply with legal obligations.
• Integrity and Confidentiality: We apply advanced technical and organizational measures to protect data against unauthorized access, alteration, loss, destruction, or improper disclosure.

Categories of Personal Data Collected

To provide our online gambling services with total security and comply with regulatory requirements, Golazzo Casino collects different types of personal data:

Purposes and Legal Bases of Processing

Each personal data processing operation carried out by Golazzo Casino is based on a legal basis expressly provided for in the GDPR. The table below specifies the processing purposes and corresponding legal bases:

4.1 Performance of a Contract (Article 6(1)(b) of the GDPR)

• Creation, activation, management, and maintenance of the user account at Golazzo Casino.
• Processing of financial transactions (deposits, bets, payout of winnings, and withdrawals) through methods available in the United Kingdom (e.g, debit cards, bank transfers, e-wallets).
• Provision of customer support and response to queries or complaints via [email protected].
• Sending essential operational notifications related to the account (transaction confirmation, terms updates, security alerts).

4.2 Compliance with Legal Obligations (Article 6(1)(c) of the GDPR)

• Mandatory verification of the user's age (ensuring that only individuals aged 18 and over access the platform).
• Identity verification procedures (Know Your Customer - KYC), prevention and detection of money laundering and terrorist financing, as required by UK anti-money laundering regulations.
• Retention of financial, tax, and accounting records for legal audits and compliance with duties before relevant UK authorities.

4.3 Legitimate Interests of the Controller (Article 6(1)(f) of the GDPR)

• Guaranteeing the security of the network, technical infrastructure, and online platform against cyberattacks, unauthorized access, and security breaches.
• Detection and prevention of gaming fraud, player collusion, illicit use of bots, or abusive bonus exploitation.
• Conducting statistical and platform performance analysis to optimize services and improve user experience.
• Management and defense of judicial or extrajudicial disputes in which Golazzo Casino is a party.

4.4 Consent of the Data Subject (Article 6(1)(a) of the GDPR)

• Sending direct marketing communications, newsletters, exclusive promotions, bonus offers, and news about new games via email or SMS.
• Use of performance, analytical, and advertising cookies not strictly necessary for the basic functioning of the website.
• Note: The user has the absolute right to withdraw consent for marketing purposes at any time, without affecting the lawfulness of processing based on consent given prior to its withdrawal.

Identity Verification (KYC) and Responsible Gambling

5.1 KYC Procedure (Know Your Customer)

By legal and regulatory imperative applicable to online gambling operators in the United Kingdom, Golazzo Casino is obliged to rigorously confirm the identity of all registered users before allowing withdrawals or processing high-value transactions.

To this end, the user may be asked to submit:

1. A valid copy of an official photo identification document (Passport, Driving Licence, or National Identity Card);.
2. Recent proof of address (dated within the last 3 months), such as an electricity, water, gas, broadband bill, or bank statement;.
3. Proof of ownership of the payment method used (for example, a credit/debit card statement or bank ownership declaration for IBAN transfers).

Failure to comply or refusal to provide truthful KYC information may result in temporary account suspension and limitation of financial operations until the situation is fully clarified.

5.2 Commitment to Responsible Gambling

Golazzo Casino recognizes the importance of promoting a safe and healthy gambling environment. We process specific personal data to monitor risk behaviors, implement self-exclusions, and manage limits set by users.

We provide UK-based users with several self-help tools:

• Setting daily, weekly, and monthly limits for deposits and bets;.
• Temporary pause options (cool-off periods);.
• Temporary or indefinite self-exclusion registration.

If you require specialized support regarding gambling addiction in the UK, you can contact GamCare via the National Gambling Helpline on 0808 8020 133 or visit GamStop for self-exclusion services, as well as consult official mental health and support entities such as BeGambleAware. Note that this scheme does not cover this site: registering with it does not block an account here.

Sharing and Disclosure of Personal Data

Golazzo Casino does not sell, rent, or trade users' personal data to third parties. However, to ensure the efficient provision of our services and comply with legal duties, we may share data with the following recipients:

6.1 Subcontractors and Service Providers

We work with trusted service providers who process data on our behalf, strictly in accordance with our instructions and through Data Processing Agreements (DPAs) that comply with Article 28 of the GDPR:

• Payment Processors and Financial Institutions: Partner entities responsible for secure payment processing in the UK (including debit/credit card operators and digital wallets);.
• Software and Game Providers: Online casino and slot game platforms that require session technical data processing to enable gameplay;.
• KYC and Anti-Fraud Verification Service Providers: Specialized companies in automated document verification and prevention of bank fraud or identity theft;.
• Technological Service Providers: Cloud hosting providers, cybersecurity services, DDoS protection, and operational email dispatch tools.

6.2 Regulatory Entities and Public Authorities

We may disclose personal data to third parties whenever required by law or in response to valid legal subpoenas:

• Information Commissioner's Office (ICO): Within the scope of fulfilling data breach notification obligations or audits;.
• Judicial and Police Authorities: Police forces and competent courts in the event of criminal investigations relating to fraud, money laundering, or cybercrime;.
• HM Revenue & Customs (HMRC): For compliance with applicable tax obligations and financial statements.

International Data Transfers

As a general rule, personal data collected by Golazzo Casino is stored and processed on servers located within the European Economic Area (EEA) and the United Kingdom.

If it is strictly necessary to transfer personal data to service providers located in third countries outside the UK/EEA that do not offer an equivalent level of data protection, Golazzo Casino ensures the prior implementation of adequate safeguards under Chapter V of the GDPR and UK data protection laws, notably:

• Transfers to countries with adequacy regulations adopted by the UK Government or European Commission;.
• Signing of Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA), accompanied by transfer impact assessments (TIAs) and supplementary technical security measures (such as end-to-end encryption).

Data Retention Period

Personal data will be kept only for the period necessary to fulfill the purposes for which it was collected, plus the applicable statutory limitation and expiry periods under UK legislation.

The retention periods at Golazzo Casino are structured as follows:

End of applicable retention period, data will be irreversibly deleted or anonymized for exclusively statistical purposes, preventing the re-identification of data subjects.

Rights of Data Subjects

As a data subject, the user enjoys the following fundamental rights provided under Articles 15 to 22 of the GDPR and the UK GDPR:

9.1 Right of Access (Article 15 of the GDPR)

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed and, where that is the case, access your data and detailed information about the processing.

9.2 Right to Rectification (Article 16 of the GDPR)

You have the right to request the immediate rectification of inaccurate or outdated personal data, as well as the completion of incomplete data.

9.3 Right to Erasure / "Right to be Forgotten" (Article 17 of the GDPR)

You have the right to obtain the erasure of your personal data when one of the following grounds applies:

• The data is no longer necessary for the purpose for which it was collected;.
• You withdrew consent on which the processing was based and there is no other legal ground;.
• You object to the processing and there are no overriding legitimate interests;.
• The data has been unlawfully processed.

Attention: The right to erasure is not absolute and may be refused if data retention is necessary to comply with legal obligations (such as the statutory archiving of financial transactions and KYC data for 5 to 7 years) or for the establishment, exercise, or defense of legal claims.

9.4 Right to Restriction of Processing (Article 18 of the GDPR)

You have the right to request the suspension of the processing of your data while contesting its accuracy, when the processing is unlawful and you oppose erasure, or when Golazzo Casino no longer needs the data for processing but it is required by the user for establishing, exercising, or defending legal claims.

9.5 Right to Data Portability (Article 20 of the GDPR)

You have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller, when processing is based on consent or contract execution and is carried out by automated means.

9.6 Right to Object (Article 21 of the GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data based on our legitimate interests. You also have the unconditional right to object to the processing of your data for direct marketing purposes at any time.

9.7 Right Not to Be Subject to Automated Decisions (Article 22 of the GDPR)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

9.8 How to Exercise Your Rights

To exercise any of your rights, send a written request addressed to our Data Protection Officer by email:

• Email: [email protected].

For security and identity verification reasons, Golazzo Casino may request that you attach a copy or proof of identification to validate the legitimacy of the request before providing access or making changes to the data.

We will respond to all legitimate requests within a maximum period of 1 (one) month from the date of receipt. In situations of high complexity or volume of requests, this period may be extended by a further two months, and the user will be duly informed of the reasons for the delay within the initial 30-day period.

9.9 Right to Lodge a Complaint with the Supervisory Authority

If you consider that the processing of your personal data violates the GDPR or UK data protection legislation, you have the right to lodge a complaint directly with the competent supervisory authority in the United Kingdom:

• Information Commissioner's Office (ICO).
• Helpline: 0303 123 1113.
• Website Official: ico.org.uk.

Cookies and Tracking Technologies

The website golazzocasinos.co uses cookies and similar tracking technologies (such as web beacons and pixels) to improve platform performance, personalize the browsing experience, and collect aggregate statistics.

10.1 Types of Cookies Used

1. Strictly Necessary Cookies: Essential to enable website operation, user account authentication, secure browsing, and transaction processing. They cannot be disabled in our systems.
2. Functionality Cookies: Allow remembering user preferences (such as language, time zone, or display settings) to provide a personalized experience.
3. Analytical and Performance Cookies: Collect anonymous information about how visitors use the website, which pages are most visited, and any error messages, allowing us to optimize platform operation.
4. Advertising and Targeting Cookies: Used to display relevant ads to the user and measure the effectiveness of advertising campaigns, subject to prior and explicit user consent.

10.2 Cookie Management

Upon your first visit to the website golazzocasinos.co, a cookie consent management banner will be presented, allowing you to accept, reject, or individually configure your preferences regarding non-essential cookies.

You can also change your web browser settings at any time to block or alert you to the presence of cookies. However, blocking strictly necessary cookies may affect the proper functioning of certain online casino features.

Information Security and Data Protection

Golazzo Casino adopts high-standard technical, physical, and organizational security measures to protect the integrity, confidentiality, and availability of users' personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure.

Our security safeguards include:

• Data Encryption: Use of advanced 256-bit SSL/TLS (Secure Sockets Layer / Transport Layer Security) encryption protocols to protect all communications and financial transactions carried out on the golazzocasinos.co website;.
• Rigorous Access Control: Access to personal data by our staff and subcontractors is restricted and granted based on the "need-to-know" principle, via strong authentication and individual credentials;.
• Infrastructure Protection: Continuous network monitoring through advanced firewalls, intrusion detection and prevention systems (IDS/IPS), and periodic penetration testing to identify potential vulnerabilities;.
• Incident Response Plans: Implementation of clear internal procedures to contain and manage potential personal data breaches.

11.1 Data Breach Notification

In the event of a personal data security breach that poses a high risk to users' rights and freedoms, Golazzo Casino will notify the ICO within the legal timeframe of 72 hours after becoming aware of the incident, and communicate the fact directly to affected users without undue delay, pursuant to Articles 33 and 34 of the GDPR.

Protection of Minors

Access to the services provided at Golazzo Casino and the registration of accounts on the website golazzocasinos.co are strictly prohibited to minors under 18 years of age (or the legal age of majority applicable in the user's territory of residence).

We use automated and manual age verification procedures at registration and account verification (KYC) to prevent minors from using our platform.

If we identify that an account was created by a minor or with falsified data:

• The account will be immediately suspended and blocked;.
• All pending transactions will be cancelled;.
• Any winnings obtained will be forfeited and remaining funds managed in accordance with applicable UK regulatory and legal determinations;.
• The minor's personal data will be deleted from our system, unless retention is necessary to comply with legal reporting obligations to law enforcement or judicial authorities.

We ask parents, guardians, and legal tutors to use parental control software and internet content filtering programs to prevent minors from accessing betting and gambling websites.

Changes to This Privacy Policy

Golazzo Casino reserves the right to update or modify this Privacy Policy at any time, in order to reflect legislative, jurisprudential, regulatory changes, or developments in our operational and technological practices.

Whenever substantial changes are introduced that affect how we process your personal data or your rights:

• We will publish the updated version on this page indicating the most recent revision date;.
• We will notify registered users via the email address associated with their account or via a prominent notice on the platform during their next access.

We recommend that you periodically review this Privacy Policy to stay informed about how we protect your information.

Contacts and Additional Information

If you have questions, comments, or concerns about this Privacy Policy or Golazzo Casino's personal data processing practices, please contact us through our official communication channel dedicated to privacy and data protection:

• Email Address: [email protected].
• Domain: golazzocasinos.co.
• Territorial Scope of Application: United Kingdom /.