Privacy Policy

This Privacy Policy explains how Jackpoty Casino, operated under the Jackpoty Casino brand at jackpotyc.com, observes, expands and reflects on the personal data of players and website visitors. It applies to visitors, registered players, affiliates and any person who interacts with jackpotyc.com. By using the site, creating an account or contacting us, you acknowledge that your personal data will be processed in accordance with this Privacy Policy and applicable law. This Privacy Policy is effective from 6 November 2025 and replaces any earlier versions applicable to Jackpoty Casino.

Who We Are

In this section we observe who is responsible for your data, expand on the group structure, and reflect clear contact routes for privacy matters.

The primary data controller for Jackpoty Casino is:

Controller: Dama N.V., a limited liability company incorporated under the laws of Curaçao
Registered / legal address: Dama N.V., Scharlooweg 39, Willemstad, Curaçao
Gambling licence: Sub-licence 8048/JAZ2020-013, issued by Antillephone N.V. under the laws of Curaçao (online casino / iGaming operation). Licence status: active as of May 2025. Licence details can be validated via the Antillephone seal at validator.antillephone.com.

For certain payment and processing services, Dama N.V. is assisted by:

Payment processing subsidiary: Friolion Limited, a limited company located in Cyprus (full registered address may be provided upon request). Friolion Limited acts primarily as a payment processing and service company for fiat transactions linked to jackpotyc.com.

Although Jackpoty Casino targets players resident in the UK, the service is provided under an offshore licence from Curaçao and is not licensed by the UK Gambling Commission. Data protection obligations are therefore assessed under UK data protection law (UK GDPR and the Data Protection Act 2018), complemented by other applicable laws based on your location (for example, Mexican data protection law for users in Mexico).

For all data protection matters, including the exercise of your rights, you may contact our data protection team:

Data Protection Officer (DPO): Data Protection Officer, Dama N.V.
Email (primary): dpo@jackpotyc.com
Email (general privacy contact): privacy@jackpotyc.com
Postal contact for privacy matters: DPO, Dama N.V., Scharlooweg 39, Willemstad, Curaçao

The editorial integrity of this Privacy Policy is overseen on behalf of Jackpoty Casino by our designated content author, Daniel Cooper, working together with the data protection team at jackpotyc.com.

What Personal Data We Collect

Here we observe the information you provide, expand on additional data generated when you use Jackpoty Casino, and reflect it in structured categories of personal data.

Identity and Contact Data

Basic identification: full name, date of birth, nationality, username, unique player ID, gender (where provided).
Contact details: email address, postal address (where provided), telephone number (where provided), preferred language.
Verification/KYC data: copies or details of identity documents (passport, identity card, driving licence), proof of address (utility bill, bank statement), selfies or video verification, and information from electronic identity verification services.

Account and Behavioural Data

Account data: registration date, account status, verification status, loyalty level, communication preferences, responsible gambling settings (deposit limits, loss limits, reality checks, self-exclusion, time-outs).
Gaming activity and behavioural data: betting and game history (including game sessions, stakes, wins/losses, jackpots), bonus history, session duration, clickstream data, in-game events and interactions with promotions on jackpotyc.com.
Communications: records of emails, live chat transcripts, internal messages, complaints, and customer support interactions.

Technical and Device Data

Device information: IP address, device identifiers, operating system, browser type and version, screen resolution, language settings, approximate location derived from IP, and device-related security attributes.
Log data: login timestamps, logout times, access logs, crash logs, error reports, and usage logs needed for security, anti-fraud and troubleshooting.

Payment and Financial Data

Payment instruments: limited card details (such as card type and masked card number), e-wallet identifiers, bank account identifiers, crypto wallet identifiers, depending on the payment method used.
Transaction data: deposits, withdrawals, chargebacks, refunds, bonuses credited, loyalty points and related financial records.
AML/KYC financial data: information used to meet anti-money laundering requirements, such as source of funds/wealth information, occupation, income range and related documents.

Cookies and Similar Technologies

Cookies: small text files placed on your device, including session cookies, persistent cookies and third-party cookies, used for essential site functionality, analytics and marketing.
Tracking technologies: web beacons, pixels, tags, SDKs and similar technologies that help us recognise your browser or device, analyse traffic and measure campaign performance.

We do not knowingly collect personal data of individuals under 18 years of age. If we observe that a user is underage, we will expand our checks, suspend the account and reflect this by deleting or anonymising any personal data collected, except where retention is required for legal or regulatory reasons.

Legal Basis for Processing

In this section we observe the main legal grounds available under UK GDPR and other applicable laws, expand on how they apply to Jackpoty Casino, and reflect precise examples for transparency.

Performance of a Contract

What this means: processing is necessary to enter into and perform the user agreement that allows you to use the services at jackpotyc.com.
Examples: creating and managing your player account, enabling gameplay, processing deposits and withdrawals, providing customer support, administering bonuses, and verifying your age and eligibility to play.

Compliance with Legal Obligations

What this means: processing is required to comply with laws that apply to Dama N.V. and its group, including anti-money laundering (AML), counter-terrorist financing, fraud prevention, accounting and responsible gambling legislation.
Examples: performing identity and age verification (KYC), monitoring transactions for suspicious activity, maintaining mandatory records for minimum statutory periods, and responding to requests from regulators, financial institutions or law enforcement authorities.

Legitimate Interests

What this means: we process data where necessary for the legitimate interests of Dama N.V., Friolion Limited or third parties, provided your interests and fundamental rights do not override those interests.
Examples: maintaining the security and integrity of jackpotyc.com, detecting and preventing fraud, bots and abuse; performing analytics to improve games and services; personalising content and non-intrusive offers; enforcing our terms and defending legal claims. We conduct balancing tests to reflect that our legitimate interests are compatible with your privacy expectations.

Consent

What this means: you have clearly agreed that we may process your data for a specific purpose that is not necessary for the contract or our legal obligations.
Examples: receiving marketing communications by email, SMS or push notification; accepting certain categories of non-essential cookies; participating in surveys or promotions where consent is required under UK GDPR, the Privacy and Electronic Communications Regulations (PECR) or comparable laws (for example, Mexican telemarketing rules).

Other Grounds

Vital interests: in rare cases we may process data to protect your vital interests or those of another person (for example, informing authorities where there is an immediate risk of serious harm).
Legal claims: processing may be necessary for the establishment, exercise or defence of legal claims in procedures before courts or public authorities.

Where we rely on consent, you may withdraw it at any time, and we will observe your updated choice, expand its effect to all relevant systems, and reflect the change by stopping the corresponding processing, without affecting the lawfulness of processing before withdrawal.

Purpose of Processing

This section observes why we use your data, expands the purposes into clear categories, and reflects how they relate to Jackpoty Casino.

Provision and Management of Casino Services

Account creation and operation: to register your account, verify your age and identity, allow you to log in securely and maintain your account settings.
Gameplay and transactions: to provide access to games, process bets, calculate wins and losses, credit bonuses, and handle deposits and withdrawals via our payment partners and Friolion Limited.

Compliance, Risk Management and Responsible Gambling

Legal and regulatory compliance: to comply with AML, counter-terrorist financing and other legal obligations in Curaçao and other applicable jurisdictions, and to maintain regulatory records relating to our licence 8048/JAZ2020-013.
Fraud and security: to prevent abuse, fraud, money laundering and other prohibited activities, including device fingerprinting, IP checks, behavioural monitoring and security logging.
Responsible gambling: to apply player protection measures, evaluate risk indicators, and respect your limits, self-exclusions and time-outs.

Service Improvement and Analytics

Performance and usability: to analyse how users interact with jackpotyc.com, identify technical issues, and improve site performance and game offering.
Business analytics: to compile statistics (aggregated and anonymised where possible) about player activity, market segments, and product performance, including UK grey-market usage by non-Gamstop players.

Marketing and Personalisation

Direct marketing: to send offers, bonuses and news about Jackpoty Casino to the contact details you have provided, where permitted by law and subject to your consent or our legitimate interests assessment.
Personalised content: to adapt promotions, recommendations and site content based on your previous activity and preferences, while respecting your marketing and cookie settings.

Dispute Management and Legal Defence

Customer support and complaints: to manage your inquiries, disputes and complaints and provide evidence of our communications.
Legal defence: to establish, exercise or defend legal claims and cooperate with regulators, including in the UK, Curaçao, Cyprus, the EU/EEA or Mexico where relevant.

Disclosure & Sharing

We observe which parties may receive your data, expand on the circumstances of such sharing, and reflect the safeguards we apply when Jackpoty Casino discloses information.

Group Companies and Internal Recipients

Dama N.V. and Friolion Limited: your data may be shared within the Dama N.V. group, including Friolion Limited in Cyprus, for purposes such as payment processing, risk management, compliance, reporting and internal administration.
Employees and authorised staff: access is limited to staff who need it for their role (for example, support, compliance, risk, IT), subject to confidentiality and training obligations.

Service Providers and Partners

Payment providers and banks: to process deposits, withdrawals and refunds using your chosen payment methods, including card processors, e-wallets, bank partners and crypto payment gateways.
Game providers: we may share player identifiers, game session data and technical information with game studios and platform providers, where needed to run games and investigate technical issues.
IT and security providers: companies that host servers, provide security tools, logging, analytics, email delivery and customer support tools. Many of these providers maintain internationally recognised certifications such as ISO 27001 or SOC 2.
Marketing and analytics partners: subject to your preferences and applicable laws, limited data may be shared with advertising networks, affiliates and analytics tools to measure performance and avoid showing you irrelevant or excessive ads.

Regulators, Authorities and Dispute Bodies

Regulators and auditors: data may be disclosed to our licensing authority in Curaçao (Antillephone N.V.), financial intelligence units, tax authorities or other competent authorities, as required by law.
Law enforcement and courts: we may share data when required by lawful requests, court orders or to protect our rights, the rights of players or the public.
Alternative dispute resolution (ADR): where applicable, data may be shared with ADR bodies to handle disputes or complaints.

Corporate Transactions

Business transfers: if Dama N.V. or a substantial part of its assets related to Jackpoty Casino are reorganised, merged or sold, personal data may be transferred as part of that transaction, subject to appropriate safeguards and continued respect for this Privacy Policy.

We do not sell your personal data. Where we rely on marketing or tracking cookies that involve third-party advertising networks, we will obtain your consent where required and provide tools to manage your choices. All processors are bound by contracts that reflect the requirements of UK GDPR and, where applicable, EU and Mexican data protection law.

International Transfers

Because Jackpoty Casino is operated from Curaçao with support services in other countries, we observe that your data may travel internationally, expand on the destinations involved, and reflect the safeguards required by law.

Locations of Processing

Curaçao: main operational and licensing jurisdiction for Dama N.V., where core gaming and compliance systems are located.
Cyprus: location of Friolion Limited, which supports payment processing and related services.
European Economic Area (EEA) and other countries: some IT, analytic or marketing providers may operate from, or store data in, EU/EEA member states, the United Kingdom, the United States or other jurisdictions.

Safeguards for International Transfers

UK and EU standard contractual clauses: where required, we enter into data transfer agreements based on the UK International Data Transfer Addendum (IDTA) and/or the European Commission's standard contractual clauses, as adapted for UK transfers.
Data Privacy Framework and equivalent schemes: for certain transfers to the United States, we may rely on service providers that participate in a recognised data transfer framework (for example, the EU-US Data Privacy Framework or UK extension, where applicable), while not relying on the invalidated EU-US Privacy Shield as a standalone mechanism.
Technical and organisational measures: encryption in transit and at rest, access controls, data minimisation and pseudonymisation, which help reduce risks associated with cross-border transfers.

Where local laws in the destination country offer a level of protection not equivalent to UK law, we carry out transfer risk assessments and implement additional safeguards as necessary to reflect the standards of UK GDPR and comparable regulations.

Data Retention

We observe how long we need your data, expand on retention periods for different categories, and reflect clear criteria for deletion or anonymisation.

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, and as required by legal, regulatory, accounting or reporting obligations. Once data is no longer needed, it is securely deleted or irreversibly anonymised.

Indicative Retention Periods

Category	Typical retention period
Account identification and contact data	For the life of your account and generally up to 5 years after account closure, unless longer retention is required for legal claims or AML rules.
KYC and AML documentation	At least 5 years after the end of the business relationship or last transaction, or longer if required by applicable AML laws.
Gaming, transaction and behavioural data	For the life of your account and typically up to 5 years after account closure for audit, dispute resolution and regulatory purposes.
Customer support communications and complaints	Up to 5 years from the resolution of the issue, or longer if related to ongoing legal proceedings.
Marketing data (including email subscription records)	Until you withdraw consent or object, plus a short period (usually up to 2 years) to document that we respected your choice.
Technical logs and security data	Normally 1-2 years from the date of collection, unless a longer period is necessary for security investigations or legal claims.
Cookies and similar technologies	From the duration of the browsing session up to several years, depending on the cookie type; specific lifetimes are described in our cookie settings panel.

When determining retention periods, we consider the volume, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes of processing, whether those purposes can be achieved by other means, and applicable legal requirements. We periodically review our retention schedules to ensure that Jackpoty Casino does not keep personal data longer than necessary.

Your Rights

Here we observe your privacy rights under UK GDPR and comparable regimes, expand on additional protections relevant for Mexican users, and reflect the procedures and timeframes for exercising those rights in relation to Jackpoty Casino.

Rights Under UK GDPR (and EU GDPR Where Applicable)

Right of access: to obtain confirmation as to whether we process your personal data and to receive a copy, along with information about how we use it.
Right to rectification: to request correction of inaccurate or incomplete personal data, such as updating your contact details or verification documents.
Right to erasure ("right to be forgotten"): to request deletion of your personal data where there is no longer a lawful basis to keep it, subject to legal and regulatory retention obligations (for example, AML laws may require us to retain certain records).
Right to restriction: to request that we limit processing of your data in specific circumstances (for example, while a dispute about accuracy or legality is being resolved).
Right to data portability: to receive certain personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller where technically feasible and lawful.
Right to object: to object at any time to processing based on our legitimate interests, including profiling. We will stop such processing unless we demonstrate compelling legitimate grounds or need the data for legal claims.
Right to withdraw consent: where processing is based on consent (for example, marketing communications or non-essential cookies), you may withdraw it at any time, and we will stop the relevant processing.
Rights related to automated decision-making: you may request human review and express your point of view regarding decisions based solely on automated processing, including profiling, that significantly affect you (for example, anti-fraud measures or bonus eligibility decisions).

Additional Rights for Mexican Users (ARCO Rights)

If you are located in Mexico, the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations may provide additional or overlapping rights, commonly known as ARCO rights:

Access: to know which personal data we hold about you, how we obtained it and the purposes of processing.
Rectification: to request correction of inaccurate or incomplete data.
Cancellation: to request that we cancel or delete your data when you consider that it is not required for the purposes described, or when it is being used unlawfully, subject to legal retention duties.
Opposition: to object to specific processing activities, particularly for marketing or profiling, when there is a legitimate reason.

We will treat ARCO requests in a manner consistent with UK GDPR standards, ensuring no lower level of protection than that required by Mexican law where it applies.

How to Exercise Your Rights

Submission channels: you may submit a rights request at any time by emailing dpo@jackpotyc.com or privacy@jackpotyc.com, stating that your request concerns Jackpoty Casino.
Information to include: your full name, country of residence, registered email address, a clear description of the right you wish to exercise and any relevant details to help us locate your data. For security, we may ask you to provide additional information to verify your identity.
Response timeframe: we aim to respond without undue delay and in any case within one month (30 calendar days) of receiving a valid request. For complex or multiple requests, this period may be extended by up to two further months; if so, we will inform you within the initial 30 days.
Fees: exercising your rights is generally free of charge. We may charge a reasonable fee or refuse to act only where a request is manifestly unfounded or excessive, in line with applicable law.

We observe every rights request seriously, expand our internal review to all relevant systems, and reflect the outcome to you in a clear and documented way.

Cookies & Tracking Technologies

This section observes how cookies and similar tools operate on Jackpoty Casino, expands on their types and purposes, and reflects how you can manage or disable them.

Types of Cookies We Use

Session cookies: temporary cookies that exist only while your browser is open and are deleted when you close it. They are used to keep you logged in, maintain your session and enable core site functions.
Persistent cookies: cookies that remain on your device for a defined period or until you delete them, used for remembering preferences, login settings and analytics.
First-party cookies: cookies set directly by jackpotyc.com to support functionality and security.
Third-party cookies: cookies set by service providers (such as analytics or advertising partners) when you visit our site, used for measuring traffic, preventing fraud, and, where permitted, tailoring marketing.

Purposes of Cookies

Strictly necessary / functional: required for the operation of the site and provision of services, including security features, account login, language selection and session management.
Analytics and performance: to collect anonymous or pseudonymous statistics about how users interact with jackpotyc.com, helping us improve user experience and performance.
Advertising and personalisation: to measure the effectiveness of campaigns and show relevant offers, including for UK non-Gamstop players, subject to your consent where required by law.

Managing Cookies and Tracking

Browser controls: most browsers allow you to block or delete cookies through settings. Doing so may affect some functionality, including access to certain features or staying logged in.
Internal cookie panel: where available on jackpotyc.com, you can manage non-essential cookie preferences through an internal consent panel, enabling or disabling specific categories.
Opt-out mechanisms: some third-party tools may offer opt-outs from targeted advertising or certain analytics. Links or instructions may be provided in our cookie interface or support pages.

We will honour your cookie and tracking preferences, observe changes promptly, expand them across our systems, and reflect them in how Jackpoty Casino uses your data for analytics and marketing.

Data Security

We observe the risks to your data, expand a multi-layered security framework, and reflect international standards in protecting information processed in connection with Jackpoty Casino.

Technical Measures

Encryption in transit and at rest: data transmitted between your browser and our servers is protected using TLS 1.2 or higher. Sensitive data is encrypted or pseudonymised at rest where technically feasible.
Access controls and authentication: access to systems containing personal data is restricted to authorised staff and service accounts, protected by strong authentication and, where appropriate, multi-factor authentication.
Network and application security: firewalls, intrusion detection and prevention systems, anti-malware tools and secure coding practices are used to mitigate common threats.

Organisational Measures

Policies and training: employees and contractors handling personal data must follow internal policies and receive regular training on data protection, security and responsible gambling obligations.
Vendor due diligence: we assess key service providers for their security posture and data protection compliance. Many critical providers hold recognised certifications such as ISO 27001 or SOC 2, which we take into account when selecting and monitoring them.
Data minimisation: we limit the data we collect to what is necessary, restrict access to those who need it, and apply retention limits as described earlier.

Monitoring and Incident Response

Logging and audits: security-relevant events are logged and periodically reviewed to detect suspicious activity and ensure compliance with policies.
Incident handling: dedicated processes exist for investigating, managing and documenting security incidents. Where a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, when required, affected individuals in accordance with applicable law.

While no system can be guaranteed as perfectly secure, Jackpoty Casino applies layered controls designed to reduce risk and reflect industry best practices for online gaming services.

Complaints & Contacts

In this section we observe how you can contact us or raise concerns, expand on our internal complaints procedure, and reflect your right to escalate matters to supervisory authorities in the UK, Mexico and other jurisdictions where applicable.

How to Contact Us

Privacy and data protection enquiries: dpo@jackpotyc.com or privacy@jackpotyc.com
Postal address: Data Protection Officer, Dama N.V., Scharlooweg 39, Willemstad, Curaçao
Website: information about our terms, bonus rules, responsible gaming and this Privacy Policy is available at https://jackpotyc.com (including specific pages such as /terms-and-conditions, /bonus-terms and /responsible-gaming).

A dedicated contact form for privacy issues may be introduced on jackpotyc.com in the future. If so, using that form will help us process your request more efficiently.

Internal Complaint Procedure

Step 1 - Contact our support or DPO: send your concern, clearly marked as a "Privacy complaint - Jackpoty Casino", to customer support or directly to the DPO email addresses above.
Step 2 - Acknowledgement: we will acknowledge receipt of your complaint as soon as possible and typically within 7 days.
Step 3 - Investigation: we will review your complaint, gather relevant information and, where necessary, consult internal experts (for example, security, compliance, legal).
Step 4 - Response: we will provide a reasoned written response, usually within 30 days from receiving your complete complaint. If we cannot respond within this timeframe due to complexity, we will inform you of the delay and expected resolution date.
Step 5 - Further steps: if you remain dissatisfied, you may escalate the matter to a competent supervisory authority as described below.

Supervisory Authorities

United Kingdom - Information Commissioner's Office (ICO): if you are in the UK, you have the right to lodge a complaint with the ICO about our handling of your personal data. Contact details and complaint forms are available at www.ico.org.uk.
Mexico - INAI: if you are in Mexico and believe your ARCO rights have not been respected, you may lodge a complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI). Information about procedures is available via INAI's official channels.
EU/EEA residents: if you are located in the EU/EEA, you may lodge a complaint with your local data protection authority. Details are available on the websites of the respective national authorities.

We encourage you to contact us first so that we can observe your concerns, expand our internal review and reflect an appropriate solution before you approach a supervisory authority. However, you may contact an authority at any time without first contacting us.

Updates

This section observes that privacy and regulatory requirements evolve, expands on how we communicate changes, and reflects our commitment to transparency for Jackpoty Casino users.

Changes to This Privacy Policy

Versioning: this Privacy Policy is identified as the "Jackpoty Casino Privacy Policy - Version 4.0".
Last updated: 6 November 2025.
Effective date of current version: 6 November 2025, unless a later effective date is explicitly communicated.

Notification of Updates

Material changes: where we make significant changes to how we process your data (for example, new categories of data, new purposes or major changes to sharing practices), we will notify you in advance by appropriate means, such as email, on-site banners and/or account dashboard alerts.
Advance notice: for material changes, we will normally provide at least 30 days' notice before the new terms take effect, unless immediate changes are required by law or security reasons.
Minor updates: non-material changes (such as clarifications or reorganisation of text) may take effect immediately and will be reflected by updating the "Last updated" date.

Your Options When the Policy Changes

Review and acceptance: continued use of jackpotyc.com after the effective date of an updated Privacy Policy will normally be treated as acceptance of the changes, to the extent permitted by law.
Right to object: if you disagree with material changes that affect processing based on legitimate interests or consent, you may object or withdraw consent, as described in the "Your Rights" section.
Account closure: if you do not wish to accept updated terms, you may request account closure via customer support. We will then observe your request, expand our actions to include closure and residual retention in line with legal obligations, and reflect these changes in our systems.

We recommend that you review this Privacy Policy periodically to stay informed about how Jackpoty Casino, operated through jackpotyc.com, protects and processes your personal data.