Updated
Bitstarz Privacy Policy
Who we are and who holds your data
This page explains what happens to the personal information you hand us when you open an account at Bitstarz. We have been operating since 2014. The site is owned and run by Gareton B.V., and that company is the data controller for everything described below. We hold a Curaçao licence issued under the Curaçao Gaming Authority, number OGL/2024/165/0185.
We wrote this policy for players in Canada, and you must be 19 or older to register. If you are younger, do not create an account or send us any details. Should we learn that someone under age has registered, we will close the account and delete what we can lawfully delete.
Reading this is part of using the site. By registering you confirm you have seen it, and the rules of play sit alongside it in our Terms and Conditions.
How long we keep it and how we protect it
We keep account and transaction records for as long as your account is open, and afterwards for the period gambling, tax and anti-money-laundering rules require. Verification files and support logs are held only as long as they serve those purposes. When a retention period ends, we delete the data or strip it of anything that identifies you.
Protection is layered: encrypted connections, restricted staff access, monitoring for suspicious logins and regular reviews of our systems. No online service is risk-free, though. Choose a strong, unique password and tell us right away if you suspect someone else has used your account.
Cookies, marketing and staying in control of play
We use cookies and similar tools to keep you logged in, remember preferences, measure traffic and, with your consent, tailor offers. Essential cookies cannot be switched off because the site breaks without them; the rest are yours to accept or decline in your browser or cookie settings. Marketing messages always include an unsubscribe route.
Gambling should stay entertainment. If it stops feeling that way, free confidential help is available in Canada through ConnexOntario on 1-866-531-2600, and further resources are listed at responsiblegambling.org. Tools such as limits and self-exclusion are described in our responsible gambling section.
We may revise this policy as our services or the law change. When we make material changes we will update the page and, where appropriate, tell you directly.
Our reasons for processing it
Every use of your data needs a lawful footing. We rely on the following:
- Contract: running your account, taking deposits, paying out winnings and delivering the games and promotions you opt into.
- Legal obligation: age and identity checks, anti-money-laundering controls, and record keeping demanded by our licence and by law.
- Legitimate interests: preventing fraud and bonus abuse, securing our systems, improving the site and handling complaints.
- Consent: marketing emails and non-essential cookies. You can say no, and you can change your mind at any time without affecting the rest of your account.
Your rights and how to use them
You control more of this than you might expect. You can ask us to:
- show you the personal data we hold about you (access);
- correct anything inaccurate or incomplete (rectification);
- delete your data where we have no legal reason to keep it (erasure);
- give you a portable copy of data you provided (portability);
- stop or limit certain processing, including direct marketing (objection and restriction);
- withdraw consent you previously gave.
To make a request, write to our support team through live chat, which runs 24/7, or by email. VIP members can use VIP@bitstarz.com. We may ask you to prove who you are first; that protects you from someone impersonating you. Some data cannot be erased on request because licensing and financial-crime rules oblige us to retain it, and we will explain this if it applies.
If you are unhappy with our answer, you may complain to the relevant data-protection authority. Because we are licensed in Curaçao, matters concerning our licence fall under the Curaçao Gaming Authority, and as a Canadian resident you can also contact the privacy regulator in your own province or federally. See our contact page for ways to reach us first.
Who else sees your information
We do not sell personal data. We do share it with a limited set of outside parties, and only to the extent each one needs.
- Payment processors, banks and crypto payment providers that move your money.
- Identity and verification services that check your documents.
- Game studios and live-casino suppliers, such as Evolution, Pragmatic Play, NetEnt and others on our lobby, who receive only what is required to run a session.
- Analytics, security and customer-support tooling providers working under our instructions.
- Regulators, courts, law-enforcement bodies and professional advisers when the law compels us or a legitimate request is made.
Some of these providers sit outside Canada, so your data may be processed in other countries. Where that happens we require contractual and technical safeguards that protect it to a comparable standard.
What we collect, and why we need it
We only ask for data we can justify. Some of it comes from you directly; some is generated as you play.
- Identity and contact details: name, date of birth, email address, country of residence and, where relevant, phone number. We use these to create and secure your account and to confirm you are of legal age.
- Verification documents: photo ID, proof of address or proof of payment method. We may request these at our discretion, and they can be requested before a withdrawal tied to a no-deposit bonus.
- Financial and transaction data: deposits, withdrawals, bonus activity and the payment method used, including card, e-wallet, bank or crypto wallet references. We never see your full card security code.
- Gameplay records: which games you open, stakes, results and session times. These let us settle bets, run tournaments and detect abuse.
- Technical data: IP address, device type, browser, language and approximate location, used to protect your login and to block prohibited access.
- Communications: live chat transcripts and emails you send to support, kept so we can resolve disputes accurately.
Crypto players should know that blockchain transactions are public by design. We cannot alter or erase anything recorded on a public ledger.