Casumo Privacy Policy

Casumo respects the privacy of users and treats personal data as information that must be handled with care, accuracy, and legal accountability. This Privacy Policy explains what information may be collected, how it is used, stored, shared, protected, and deleted, and which rights users have in relation to their personal data. It also describes how data collection may occur through account activity, payment activity, security controls, customer support contact, cookies, and use of the services. The document is intended to help users understand data processing in plain language. Personal data is processed in accordance with applicable privacy laws, including UK data protection requirements.

Casumo uses personal data in the United Kingdom to operate accounts, process transactions, deliver online services, and meet legal duties linked with licensed gambling. Information may be used to verify identity, confirm age, support safer gambling controls, prevent fraud, and maintain platform security. Data may also help improve service performance, assess website use, respond to customer enquiries, and manage marketing preferences. Analytics may be used to understand service activity and maintain reliable digital systems. Regulatory compliance may require collection, review, retention, and disclosure of certain records.

Key uses of collected information may include:

• Creating, verifying, and maintaining user accounts;
• Processing deposits, withdrawals, refunds, and payment checks;
• Confirming identity, age, address, and eligibility to use the services;
• Supporting safer gambling controls, fraud prevention, and security reviews;
• Responding to customer support requests and service messages;
• Managing marketing preferences and sending communications where consent permits;
• Analysing website use, service performance, and technical issues;
• Personalising account settings, language choices, and service preferences;
• Meeting legal, regulatory, tax, audit, and licensing obligations;
• Detecting misuse, unauthorised access, or suspected unlawful activity.

Each processing activity has a defined purpose and must rely on an appropriate lawful basis, such as consent, contract performance, legal obligation, legitimate interests, or vital interests where relevant under UK data protection law.

Cookies and similar technologies are small files or identifiers placed on a device or browser when users access online services. They help the services recognise a device, support authentication, remember preferences, protect account access, analyse website activity, and improve user experience where applicable. Some cookies are needed for core functions, and others support analytics, security, performance, or preference management. Different cookies may be stored for different periods depending on their purpose, legal requirements, and user settings. Users can manage cookie preferences through browser or device settings where supported, although some changes may affect how certain parts of the services operate.

Casumo may share personal data with trusted third party service providers when necessary to operate, maintain, improve, or secure the services, or to comply with legal obligations. These recipients may process information only for permitted purposes and under suitable privacy, security, and confidentiality requirements.

Categories of recipients may include:

• Cloud hosting and IT infrastructure providers;
• Analytics and service performance providers;
• Payment service providers, banks, and transaction processors;
• Identity verification, age verification, and authentication providers;
• Customer support systems and communication providers;
• Fraud prevention, security, and safer gambling service providers;
• Professional advisers, auditors, and business partners where applicable;
• Regulators, law enforcement bodies, courts, or other legal authorities where required by law.

Personal data is shared only for legitimate purposes and subject to appropriate contractual or legal safeguards. Access is limited to information needed for the relevant service, legal duty, or authorised business purpose.

Personal data may be transferred to and processed in countries outside the United Kingdom when necessary to provide the services, maintain technology systems, support customer operations, or work with trusted service providers. Such transfers must use safeguards designed to protect personal information in accordance with applicable privacy laws, including UK data protection requirements.

International data transfers may occur in the following circumstances:

• A technology or cloud service provider stores or accesses data outside the United Kingdom;
• Customer support, fraud prevention, analytics, or payment partners operate in another country;
• Group companies or authorised service providers support account, security, or compliance functions;
• A transfer is covered by UK adequacy regulations, an International Data Transfer Agreement, or other approved safeguards;
• Contracts require confidentiality, access control, and data security measures;
• Transfers are reviewed to ensure that personal information receives appropriate protection.

The services may contain links to third party websites, applications, payment pages, content, or services that operate under their own privacy policies. Casumo does not control the privacy practices, content, security standards, or policies of external services. Users should review the relevant privacy information before submitting personal data outside the services.

Users should be aware that:

• External websites and apps may collect personal data under separate privacy notices;
• Cookie settings, tracking tools, and marketing preferences may differ on external services;
• Third party services may set their own account, payment, or security requirements;
• External content may change without notice to the operator;
• Links do not confirm approval of the privacy practices used by an external service;
• Users should read the applicable privacy policy before giving personal information.

Users can access, update, correct, or request deletion of personal information where these rights apply under UK data protection law. Account settings may allow some details to be reviewed or changed directly. If self service options are unavailable, users can contact Casumo to exercise privacy rights or raise a data request. Requests may require reasonable identity verification to protect personal data against unauthorised access. The operator remains committed to protecting personal information and respecting the privacy rights of users.