Cactus Casino Privacy Policy
About this policy
This policy explains how personal information is handled when you use this website, register a Cactus Casino account, make transactions, play games or contact support.
- Ferzo Holding Limitada owns and runs Cactus Casino. The operator processes player information to provide gambling services and meet legal and regulatory duties.
The service is intended for adults aged 18 or over. Cactus Casino does not knowingly collect information about children.
Information collected
The information collected depends on how you use the service.
| Category | Examples |
|---|---|
| Identity | Name, username, date of birth, gender, nationality and identification number |
| Contact | Residential address, email address and telephone number |
| Verification | Identification documents, photograph, proof of address, proof of funds and source-of-wealth records |
| Financial | Bank account, payment-card and payment-account details |
| Transactions | Deposits, withdrawals, wagers and games played |
| Technical | IP address, device, browser, operating system, location and login information |
| Usage | Login times, session duration, pages visited, clicks, bonuses claimed and account limits |
| Communications | Support messages, complaints and marketing preferences |
| Safer gambling | Account limits, gambling history, questionnaire responses and risk indicators |
Information may be supplied directly by you, generated through your use of this website or received from verification providers and other authorised sources.
How information is used
Personal information may be processed to:
- create and administer your account
- accept deposits and handle withdrawals
- provide games, promotions and interactive features
- verify your identity, age, address and source of funds
- answer questions and investigate complaints
- prevent fraud, bonus misuse and money laundering
- support safer-gambling monitoring and account controls
- maintain security and investigate technical problems
- analyse and improve the operation of this website
- meet legal, regulatory, accounting and reporting duties
- send marketing where the required consent has been given.
The operator may assess account activity for fraud, anti-money-laundering and safer-gambling purposes. Some checks use profiling or risk scores, with final decisions involving human review where stated in the operator’s policy.
Marketing choices
Marketing may include information about Cactus Casino services, bonuses and promotions. Information about other services operated within the same group may be sent only where you have consented to that form of direct marketing.
You can change your marketing preferences through your player-account settings or ask support to stop marketing communications. Withdrawing consent does not make earlier consent-based processing unlawful.
Cookies and analytics
This website may use cookies and similar technologies for essential functions, saved preferences, analytics, security and relevant promotions.
Technical and usage information can include pages visited, time spent on a page, actions taken and browser or device details. Read our cookies policy for more information about cookie categories and available settings.
When information may be shared
The Cactus Casino operator may provide relevant information to selected recipients where this is necessary for the service, compliance duties or an authorised request. These recipients may include:
- payment and game providers
- identity, age, address, AML and fraud-verification services
- technical, analytics and communication providers
- professional advisers and consultants
- safer-gambling and crime-prevention databases
- courts, regulators, public authorities and law-enforcement bodies
- marketing providers where you have given the appropriate consent.
Service providers acting as data processors are expected to handle information for specified purposes and under the instructions they receive. Only information needed for their role should be disclosed.
Retention
Personal information is retained according to why it was collected, the applicable legal or regulatory requirements, its sensitivity and the risks associated with misuse or unauthorised disclosure.
The operator’s policy states that registration and player-account information covered by applicable anti-money-laundering requirements must be kept for at least five years after the last player transaction or account closure. A deletion request cannot override a legal duty to retain that information.
Anonymised information that no longer identifies a person may be retained for statistical, service-improvement or marketing analysis.
Your data rights
Depending on the law that applies, you may be able to request:
- access to personal information held about you
- correction of incomplete or inaccurate information
- deletion where there is no continuing lawful reason to retain it
- restriction of processing in specified circumstances
- objection to processing based on legitimate interests
- transfer of eligible information to another controller
- withdrawal of consent for future consent-based processing.
You may also have the right to complain to an appropriate supervisory authority.
These rights are not absolute. A request may be limited where information must be retained by law or is needed to establish, exercise or defend a legal claim. Identity evidence may be requested before information is disclosed or a request is completed.
Security and account protection
Access to personal information is limited to employees, contractors and service providers who need it for their work. Measures are used to reduce the risk of accidental loss, unauthorised access, alteration or disclosure.
You must keep your login details confidential. Contact support promptly if you believe another person has gained access to your account or registered email address.
Privacy requests and support
For questions about this policy or the use of your personal information, contact our support team at [email protected]. Include enough information to identify your account and explain the request.
A particularly complex request, or several requests submitted together, may take longer to assess. Support may ask for additional information to verify your identity.