Joka Casino Privacy Policy
This privacy policy explains how Joka official casino collects, uses, stores and protects personal data submitted by users who visit or interact with the website. It applies to all individuals who access casino services, create an account, make deposits, claim bonuses or contact support.
By using the platform, users acknowledge that their personal data may be processed in accordance with the terms described below. The policy covers all interactions on the desktop and mobile versions of the website operated by Gemmy Holdings Limited under a Curaçao gaming licence.
Key Definitions
Understanding the terminology used throughout this document helps users interpret how the policy applies to their own activity on the platform.
Terms and Interpretations
“Personal data” refers to any information that identifies or could identify a natural person. This includes a name, email address, device identifier or IP address provided during registration or browsing.
“Processing” covers any action taken with personal data, from collection and storage through to deletion. “User” means any individual who visits the website or holds a registered account.
Account, Device and Service
“Account” refers to the unique profile created during registration that allows access to games, payments and promotions. “Device” means any hardware used to access the website, including computers, tablets and smartphones. “Service” refers to all features, tools and content available through the casino platform.
Personal Data We Collect
Joka Casino collects personal data through two primary channels: information submitted directly by the user and data gathered automatically during website interaction.
Identity and Contact Data
When a user registers an account, the casino collects full name, date of birth, email address, residential address and phone number. This data is required to verify identity, comply with age-restriction rules (minimum age 18) and maintain account integrity.
Before a withdrawal is processed, identity documents such as passport or driver’s licence, proof of address and payment method verification may be requested. The name on these documents must match the registered account details.
Technical and Usage Data
Automatically collected data includes IP address, browser type, operating system, device identifiers and session timestamps. Usage data covers pages visited, games launched, session duration and transaction history.
This information is gathered each time a user connects to the website and is not dependent on account registration. It supports platform functionality, fraud detection and performance monitoring.
| Data Category | Examples | Collection Method |
|---|---|---|
| 🧾 Identity | Name, date of birth, ID documents | User-submitted at registration |
| 📧 Contact | Email, phone, address | User-submitted at registration |
| 🖥️ Technical | IP address, browser, device ID | Automatic during browsing |
| 📊 Usage | Pages visited, session length, games played | Automatic during browsing |
| 💳 Financial | Payment method details, transaction records | User-submitted at cashier |
How Personal Data Is Used
Personal data is processed only for defined purposes tied to the operation of the casino and compliance with applicable regulations.
Service Provision and Account Management
Data is used to create and maintain user accounts, process deposits and withdrawals, apply bonuses and verify eligibility for promotions. For example, deposit history is referenced to determine whether a welcome package has been activated or whether wagering requirements have been fulfilled.
Account data also supports responsible gambling features, including self-exclusion requests and limit settings. Without accurate identity and contact data, these functions cannot operate correctly.
Analytics, Compliance and Marketing
Usage data is analysed to improve website performance, detect irregular behaviour and meet obligations under the casino’s Curaçao licence. This includes monitoring for underage gambling and identifying suspicious transaction patterns.
Where a user has given consent, contact data may be used to send promotional communications about bonuses, tournaments and new games. Users who prefer not to receive such communications can withdraw consent at any time through account settings or by contacting support.
Legal Basis for Processing
Each category of data processing is supported by a recognised legal ground. The casino does not process personal data without an applicable basis.
Consent and Contractual Necessity
Consent forms the basis for marketing communications and optional tracking activities. By ticking the relevant boxes during registration or modifying account preferences, users choose whether to allow such processing.
Contractual necessity covers processing required to deliver the service — account creation, payment processing and bonus management all fall within this category. Without this processing, the service cannot function.
Legal Obligation and Legitimate Interests
Some processing is required to meet legal obligations, such as retaining financial records for regulatory review or responding to a formal request from a licensing authority. Legitimate interests apply where data is used for fraud prevention, security monitoring or internal reporting, provided these activities do not override user rights.
Sharing Personal Data
Personal data is not sold to third parties. Sharing occurs only in specific, limited circumstances that support the delivery of services or meet legal requirements.
Service Providers and Affiliates
Third-party processors that support payment handling, identity verification, hosting infrastructure and analytics tools may receive access to relevant user data. These providers operate under data processing agreements and are not permitted to use personal data for their own purposes.
Affiliate platforms may receive anonymised performance data related to player activity for commission calculation purposes. This data does not include personally identifiable details.
Regulatory and Legal Disclosure
Personal data may be disclosed to regulators, licensing bodies or law enforcement where required by law or as part of an investigation. This includes requests made under the terms of the Curaçao gaming licence held by Gemmy Holdings Limited through its agreement with Swervy International B.V.
Data shared for legal purposes is limited to what is strictly necessary to fulfil the request.
Data Retention
Personal data is retained only for as long as it is needed for the purpose for which it was collected, or for the period required by applicable regulation.
Retention Periods and Deletion
Account data is generally held for the duration of the account relationship and for a defined period after account closure, typically five to seven years, to satisfy financial record-keeping requirements. Transaction records may be subject to longer mandatory retention depending on jurisdiction.
Once the relevant retention period expires, data is deleted or anonymised so that it can no longer be linked to an individual. Backup systems may retain anonymised records for a further period consistent with standard data management practices.
| Data Type | Typical Retention Period | Reason |
|---|---|---|
| 🔑 Account details | Duration of account + 5–7 years | Regulatory compliance |
| 🏦 Transaction records | Up to 7 years | Financial reporting obligations |
| 📌 Marketing preferences | Until consent is withdrawn | Consent-based processing |
| 🧭 Technical logs | 12–24 months | Security and fraud monitoring |
User Rights
Registered users hold specific rights over their personal data. These rights can be exercised by contacting Joka Casino through the channels set out in the contact section of this policy.
Access, Correction and Erasure
Users may request a copy of the personal data held about them, ask for inaccurate information to be corrected, or request that data be deleted where there is no longer a legal or operational basis for holding it. Deletion requests are assessed against retention obligations before being carried out.
Correction requests are processed when a user identifies an error in their account details, such as a misspelled name or outdated address. Corrections that affect identity verification may require additional documentation.
Restriction, Portability and Objection
Users can ask for processing to be restricted while a complaint or accuracy dispute is under review. Data portability allows users to receive a structured copy of their data in a commonly used format. Objection rights apply where processing is based on legitimate interests, and the user believes those interests are outweighed by their own rights.
The casino will respond to rights requests within a reasonable timeframe. Where a request cannot be fulfilled, an explanation will be provided.
User rights at a glance:
- 🎯 Access: request a copy of data held on file
- 🔄 Rectification: correct inaccurate or incomplete records
- 🗑️ Erasure: request deletion where no legal basis applies
- ⏸️ Restriction: pause processing during a dispute
- 📤 Portability: receive data in a transferable format
- 🚫 Objection: challenge processing based on legitimate interests
Data Security
The casino applies technical and organisational measures to reduce the risk of unauthorised access, loss or misuse of personal data.
Encryption and Access Controls
Data in transit between the user’s browser and casino servers is encrypted using standard secure socket layer technology. Stored data is protected through access controls that limit availability to authorised personnel only.
Internal access to personal data is restricted based on role. Staff who process data as part of their duties operate under confidentiality obligations. Account credentials are not stored in plain text.
Fraud Prevention and Limitations
Transaction monitoring systems flag unusual activity for review. Identity verification checks at withdrawal stage provide an additional layer of protection against account misuse.
No security system is entirely free from risk. Users are encouraged to protect their login credentials and report any suspected unauthorised access to support promptly.
Security measures applied:
- 🔒 SSL encryption on data in transit
- 🛡️ Role-based internal access restrictions
- 🕵️ Automated fraud detection and transaction monitoring
- 📁 Secure document storage for identity verification files
- 🧩 Confidentiality obligations for all staff with data access
Cookie Policy
Cookies are small text files placed on a user’s device when they visit the website. They allow the platform to recognise returning visitors, maintain session continuity and gather usage data.
Types of Cookies Used
Essential cookies are required for the website to function and cannot be deactivated without affecting core features such as login sessions and the cashier. Functional cookies remember user preferences, such as language selection. Analytics cookies collect aggregated statistics about how users navigate the site, while marketing cookies support targeted advertising where consent has been given.
Third-party providers, including analytics and advertising partners, may also place cookies on the user’s device. These providers have their own privacy and cookie policies.
Managing Cookie Preferences
Users can control cookie storage through browser settings. Most browsers allow cookies to be viewed, blocked or deleted. Deactivation of non-essential cookies does not affect the user’s ability to access their account, but may reduce the personalisation of the experience.
Where cookie consent is required, a notice is displayed on first visit. Preferences can be updated at any time.
Cookie categories:
- 🍪 Essential: session management, login, cashier functionality
- ⚙️ Functional: language, display preferences
- 📈 Analytics: aggregated traffic and behaviour statistics
- 📣 Marketing: interest-based content (consent required)
Third-Party Links
The casino website may contain links to external websites operated by third parties, including game providers and affiliate platforms. These sites are not controlled by Joka Casino.
External Sites Disclaimer
When a user follows a link to an external website, the privacy policy of that site applies. Joka Casino is not responsible for the data practices, content or security of third-party platforms. Users should review the privacy notice of any external website they visit before submitting personal data.
Game providers who supply titles to the catalogue may collect limited technical data directly when a game session is initiated. Players are encouraged to review provider documentation where this is relevant.
Children and Minors
The casino platform is intended exclusively for users aged 18 and over. Registration is not permitted for individuals below this age.
Age Restriction and Data Removal
Joka Casino does not knowingly collect personal data from individuals under 18. Where an account is identified as having been created by a minor, it will be closed and any associated data will be deleted without delay.
Age verification is part of the standard registration and withdrawal review process. If a parent or guardian believes their child has submitted personal data to the platform, they should contact the casino using the details in the contact section so that appropriate action can be taken.
Policy Updates
This privacy policy may be revised to reflect changes in law, technology or the services offered by the casino. The effective date at the top of the document will be updated each time a revision is made.
Notification of Changes
Material changes to the policy will be communicated to registered users through email notification or a prominent notice on the website. For changes that require renewed consent, users will be prompted to review and accept the updated terms before continuing to use the service.
Reviewing the policy periodically is recommended, particularly after receiving a notification. Continued use of the platform following an update constitutes acknowledgment of the revised terms.
Contact and Privacy Requests
Users who have questions about this policy, wish to exercise their data rights or need to report a privacy concern can contact Joka Casino through the following channels.
How to Reach the Privacy Team
General support and account queries can be directed to the live chat function available on the website or by email at connect@jokacasino.com. For formal privacy requests, including access, correction or deletion requests, users should use the same contact address and clearly state the nature of their request.
Gambling-related disputes can be submitted to jokadisputes@jokacasino.com. This channel is separate from data protection inquiries but can be used where a privacy concern overlaps with a service complaint.
The casino aims to respond to data rights requests promptly. Where additional time is required to process a request, the user will be informed of the reason and an expected timeframe.
Contact options for privacy matters:
- 📩 General support email: connect@jokacasino.com
- ⚖️ Disputes email: jokadisputes@jokacasino.com
- 💬 Live chat: available through the website interface
- 📮 Postal address: Gemmy Holdings Limited, British Virgin Islands (for formal written requests)