Bonobo Casino Privacy Policy: What Happens to Your Data

Bonobo casino collects personal data as part of operating a licensed gambling platform. This page explains what is collected, why, how long it is kept, and what rights you have over it.

Your data matters more than most casino pages admit

Privacy policy pages are usually the last thing a new player reads before signing up. Most are written by legal teams for regulators, not for the actual person handing over their passport scan and bank details. This page takes a different approach – it translates the key points of Bonobo casino’s data handling into plain language, organised by what you actually need to know before you create an account.

The underlying framework is the Curaçao Gaming Authority (CGA) licence that Bonobo casino operates under, issued following the 2024 overhaul of the island’s gambling laws under the Landsverordening op de Kansspelen (LOK) ordinance. That licence imposes specific data protection obligations on the operator, including requirements around identity verification, anti-money laundering (AML) records and security standards. What follows is a breakdown of how those obligations translate into the data practices that affect your account.

What data Bonobo casino collects and why

When you register at Bonobo casino, a set of personal data is collected immediately, and additional data is gathered throughout the life of your account. The collection is not arbitrary – each category serves a specific operational or legal purpose, most of which are tied to the CGA licence requirements.

The table below covers the main data categories, the reason each is collected, and the legal basis under which it is processed.

Data category	What is collected	Why it is collected
Identity data	Full name, date of birth, nationality	Age verification, KYC compliance
Contact data	Email address, phone number	Account communication, support
Document data	Passport, ID card or driving licence scan	Identity verification before withdrawals
Address data	Residential address and proof	AML compliance, fraud prevention
Financial data	Payment method details, transaction history	Deposit and withdrawal processing
Gameplay data	Session times, games played, bet amounts	Responsible gambling monitoring, account records
Device data	IP address, browser type, device identifiers	Fraud detection, geolocation checks
Communication data	Support chat logs, email correspondence	Service quality, dispute resolution

Why so much data is required

The volume of personal data required to operate a casino account is higher than most digital services because gambling regulation specifically mandates it. Age verification, AML checks and responsible gambling monitoring all require real identity data to function. An operator that asks for less is either not implementing these checks properly or operating without a legitimate licence – neither of which is a reassuring alternative.

Identity verification – the KYC process in detail

Know Your Customer (KYC) verification is a legal requirement under the CGA licence and applies to every player before they can make a withdrawal. The process involves submitting a government-issued photo ID, proof of address dated within the last three months, and in some cases proof of the payment method used to deposit. Verification is reviewed by the compliance team, typically within 24 to 48 hours of document submission.

Bonobo casino requests KYC documents shortly after registration rather than at the point of first withdrawal. This front-loading approach removes the most common source of withdrawal frustration: having your first cashout held while documents are reviewed from scratch. If you submit documents during the registration window, your first withdrawal processes against an already-verified account.

What happens if verification is delayed

If document review takes longer than the standard window – which can happen during peak periods or when additional checks are required – the support team is reachable via live chat around the clock. Withdrawals are not cancelled during the review period; they are queued pending completion. Keeping a digital copy of your submission confirmation is useful if you need to reference the request with a support agent.

How your data is used day-to-day

Beyond the initial registration and verification process, your data continues to be used throughout your active account. The purposes break down into three practical areas: operating your account, meeting regulatory requirements, and communicating with you about your account or promotions.

Gameplay data – session lengths, game choices, bet sizes and deposit frequency – feeds directly into the responsible gambling monitoring system. If your activity matches patterns associated with problem gambling, the system flags the account for review. This is not an invasion of privacy; it is a licence condition designed to protect players from harm, and it uses aggregate behavioural data rather than judgements about individual choices.

Marketing communications and how to opt out

Bonobo casino may send promotional communications by email or through account notifications, but only with your consent. Consent is given during registration and can be withdrawn at any time through the account settings menu without needing to contact support. Withdrawing marketing consent does not affect transactional communications – you will still receive deposit confirmations, withdrawal updates and account security alerts regardless of your marketing preference.

Data sharing – who else sees your information

Bonobo casino does not sell personal data to third parties. Data is shared only in specific, documented circumstances, each tied to the operation of a licensed gambling platform.

Recipient category	Data shared	Purpose
Payment processors	Transaction data, payment method details	Processing deposits and withdrawals
Identity verification providers	Name, DOB, document scans	KYC and AML compliance
Fraud detection services	IP address, device data, transaction patterns	Fraud prevention
CGA regulator	Account records, transaction history	Regulatory reporting and audit
Customer support platforms	Account data, communication history	Managing support interactions
IT infrastructure providers	Encrypted account data	Hosting and security

No third party in the above list receives data for marketing or profiling purposes. Agreements with all service providers include data processing terms that restrict use to the stated purpose and require equivalent security standards to those applied by the operator itself.

Data retention – how long your information is kept

Data is not kept indefinitely. Each category has a defined retention period tied to the purpose for which it was collected. Identity and financial records are kept for longer periods because AML and gambling regulation require operators to maintain audit trails for a minimum number of years after account closure.

Data type	Retention period	Reason
Identity and document data	5 years after account closure	AML regulatory requirement
Financial transaction records	5 years after account closure	Tax and AML audit obligation
Gameplay and session records	3 years after account closure	Responsible gambling monitoring
Communication records	2 years after last contact	Dispute resolution reference
Device and IP logs	12 months from collection	Fraud detection and security
Marketing preferences	Until consent withdrawn or account closed	Consent management

After the applicable retention period, data is deleted or anonymised in a way that makes it impossible to link back to an individual. Anonymised aggregate data – such as overall game popularity or deposit volume statistics – may be retained indefinitely for operational analysis, but this data cannot identify any individual player.

Your rights over your personal data

Operating under the CGA licence framework, Bonobo casino recognises a set of player rights over personal data. These rights can be exercised by contacting the privacy team through the email address listed in the account help section.

Your rights include the following:

• Right to access – request a copy of all personal data held about you, typically fulfilled within 30 days
• Right to correction – request correction of inaccurate data, such as a misspelled name or incorrect address
• Right to deletion – request deletion of data where there is no legal obligation to retain it; note that AML and regulatory records are exempt from deletion requests
• Right to restrict processing – request that data use is limited while a dispute or correction is being resolved
• Right to object – object to processing based on legitimate interest, including certain types of profiling
• Right to data portability – receive a copy of your data in a structured, machine-readable format

Exercising your rights in practice

Submitting a request is straightforward: email the privacy team with your account details and a clear description of the right you want to exercise. Identity verification may be required before the request is processed, to confirm the request is coming from the actual account holder rather than a third party. Responses are required within 30 days under standard data handling obligations.

Cookies and tracking technologies

Bonobo casino uses cookies and similar tracking technologies on the platform to manage sessions, prevent fraud and measure site performance. A cookie consent tool appears on first visit and allows you to accept all cookies, decline non-essential tracking, or customise by category.

Cookie type	Purpose	Can be declined?
Strictly necessary	Session management, security, login state	No – required for the platform to function
Functional	Language preferences, display settings	Yes
Analytical	Site performance, error tracking	Yes
Marketing	Promotional targeting, ad measurement	Yes

Declining marketing and analytical cookies does not affect your ability to use the platform or access your account. It does reduce the operator’s ability to personalise promotional content to your activity, which some players consider a benefit rather than a limitation.

What third-party tracking tools are used

Performance and fraud-detection tools integrated into the platform may set their own cookies as part of the service they provide. The full list of third-party tools used on the platform is available in the cookie settings panel accessible from the site footer. This panel is updated when new tools are added or existing ones are removed.

Security measures protecting your data

Bonobo casino applies SSL encryption across all connections between your browser and the platform, which prevents data from being intercepted in transit. Account data at rest is stored using industry-standard encryption on infrastructure maintained by certified hosting providers. Access to player data within the company is restricted to staff who require it for their specific operational role.

Security measures in place on the platform include:

• SSL/TLS encryption on all data in transit
• Encrypted storage for sensitive account and financial data
• Two-factor authentication available for player accounts
• Automated fraud detection on all deposit and withdrawal transactions
• Restricted internal access controls with audit logging
• Regular security reviews and penetration testing by third-party specialists

No security system is completely immune to breach, and Bonobo casino’s privacy documentation acknowledges this. In the event of a data breach affecting personal data, the operator is required to notify the relevant regulatory authority within the timeframes specified under the CGA licence, and affected players are notified directly where the breach creates a risk to their rights.

Account closure and what happens to your data after

Closing your account does not result in immediate deletion of all your data. As detailed in the retention table above, certain records – particularly identity documents and financial transaction history – must be retained for five years after closure to satisfy AML and regulatory audit requirements. You will not be able to request deletion of these records during the retention period.

What account closure does remove immediately is your ability to log in, access gameplay history through the account interface, or receive marketing communications. Your data moves from active processing to archived status, meaning it is no longer used for any purpose other than complying with the legal retention obligations described above. After the retention period expires, it is deleted entirely.

Changes to this privacy policy

Bonobo casino may update its privacy practices in response to regulatory changes, new services or revised data handling procedures. When a material change is made to data collection, use or sharing practices, registered players are notified by email ahead of the change taking effect. Continuing to use the platform after notification constitutes acceptance of the revised terms.

The date of the most recent update to this document is displayed at the top of the official privacy policy page on the Bonobo casino website. If the version you are reading there is different from the summary on this page, the official document takes precedence. This page is intended as a plain-language companion, not a legal substitute.