Privacy Policy

This Privacy Policy explains how the Blitz Casino product offered through the website blitscasino.com ("we", "us", "our") collects, uses, discloses and protects your personal data. It applies to UK-based players, other registered customers and visitors who access or use blitscasino.com, including any related pages, content and services. This document is prepared to comply with applicable UK data protection law (including the UK GDPR and the Data Protection Act 2018) and, where relevant, comparable international standards. By using blitscasino.com, you acknowledge that you have read this Privacy Policy. This version is effective from 1 January 2026.

Who We Are

The online gaming services available through blitscasino.com under the Blitz Casino product are operated by an offshore online gambling operator that holds, or typically operates under, a Curaçao e-gaming licence (including Antillephone N.V. authorisation number 8048/JAZ) and by a related Belgian entity that holds Belgian Gaming Commission licence B+3971. These licences relate to gambling regulation only and do not constitute UK Gambling Commission authorisation for UK residents.

At the time of this Privacy Policy, the precise legal name, legal form and registered office address of the international operating entity behind Blitz Casino are not publicly disclosed in a verifiable way in the source data provided to us. We therefore treat the "operator" as the data controller for the purposes of the UK GDPR and commit to updating this section with full corporate details, including registration and legal address, as soon as they are formally confirmed and published in the footer or legal sections of blitscasino.com.

For all privacy-related matters, including questions, requests to exercise data protection rights or complaints, you can contact our data protection contact point (Data Protection Officer/Data Protection Department) using the contact or support functionality made available on blitscasino.com. Please clearly mark your communication with the word "Privacy" or "Data Protection". Where we introduce a dedicated privacy email address or postal contact, we will add it to this section and highlight it in future updates.

What Personal Data We Collect

We collect and process different categories of personal data when you visit or use the Blitz Casino services via blitscasino.com:

Identity and contact data: full name, username, date of birth, country of residence, address (where requested), email address, mobile or telephone number and copies of identification documents and proof of address used for age verification and KYC (Know Your Customer) checks.
Account and behavioural data: account registration details, login history, preferences, responsible gambling settings, communication preferences, betting and gaming history, deposits and withdrawals, bonus use, interaction with promotions, clicks, visited pages and sessions.
Technical and device data: IP address, device identifiers, operating system, browser type and version, language settings, time zone, log files, approximate location derived from IP, and data generated by cookies and similar technologies.
Payment and financial data: partial payment card details (masked), payment method type, e-wallet identifiers, bank details as required by payment providers, transaction identifiers, amounts, currency, timestamps and chargeback information.
KYC/AML data: information obtained from identity verification, sanctions and politically exposed person (PEP) screening services, anti-fraud databases and other compliance checks to meet anti-money laundering (AML) and counter-terrorist financing obligations.
Communications data: copies of emails, chat messages, support tickets, call logs (where support calls are offered), complaint records and other communications between you and us.
Cookies and tracking technologies: identifiers stored on your device (such as session cookies, persistent cookies, web beacons, pixels, SDKs) used for authentication, security, analytics, fraud prevention and, where permitted, personalised marketing.

Legal Basis for Processing

We process your personal data only when we have a valid legal basis under the UK GDPR and comparable data protection frameworks where they apply. Depending on the context, we rely on the following bases:

Performance of a contract: we need to process your data to create and maintain your gaming account, verify your eligibility, provide you with games and related services, process deposits and withdrawals, credit bonuses, manage loyalty programmes, handle customer support and otherwise fulfil the terms and conditions governing your use of blitscasino.com and the Blitz Casino product.
Compliance with legal obligations: we are required to collect and retain certain information to comply with applicable laws and regulatory expectations, including anti-money laundering and counter-terrorist financing rules, customer due diligence (KYC), prevention of underage gambling, accounting and tax requirements, and legal reporting obligations to relevant supervisory and enforcement authorities. This may involve verifying your identity and monitoring transactions.
Legitimate interests: we process data where necessary for our legitimate interests or those of third parties, provided these interests are not overridden by your rights and freedoms. These interests include protecting our services and players from fraud and abuse, securing our systems, detecting suspicious behaviour, improving and optimising the performance and usability of blitscasino.com, personalising some aspects of your experience, defending legal claims and conducting internal analytics and reporting.
Consent: where required by law, we rely on your consent to carry out specific processing activities, such as sending direct electronic marketing communications not based on a prior customer relationship, using non-essential cookies for analytics or advertising, or sharing data with specific advertising networks or affiliates for personalised offers. You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Vital interests and legal claims: in rare cases, we may process data to protect your vital interests or those of others (for example, where we reasonably believe someone is at serious risk of harm), or for the establishment, exercise or defence of legal claims, including cooperation with law enforcement or regulatory bodies.

Purpose of Processing

We use the personal data described above for clear, specific and lawful purposes. These include in particular:

Providing and operating casino services: registering accounts, verifying age and identity, enabling deposits, wagers and withdrawals, operating games, resolving technical issues, providing multi-language interfaces and ensuring the Blitz Casino product functions correctly through blitscasino.com.
Account administration and customer support: communicating with you about your account, transactional notifications (such as deposit confirmations, password resets, security alerts), responding to queries and complaints, and managing responsible gambling tools such as self-exclusion or deposit limits.
Compliance, risk management and fraud prevention: carrying out KYC/AML checks, monitoring transactions and gameplay for unusual or suspicious activity, detecting misuse of bonuses or collusion, enforcing our terms and conditions and supporting investigations or audits by competent authorities.
Service improvement and analytics: analysing how visitors and players interact with blitscasino.com, games and features, running A/B tests, recording performance metrics, fixing defects and improving design, usability, speed and overall user experience.
Marketing and personalisation: subject to your choices and applicable law, sending you promotional communications, bonuses and offers; segmenting our user base; tailoring some content, games and promotions based on your preferences and historical behaviour; and working with affiliates or advertising partners to understand which campaigns are effective.
Legal and business purposes: maintaining business records, preparing financial reporting, handling disputes and claims, enforcing or defending legal rights and facilitating corporate transactions such as restructuring or potential sale of the business, where permitted by law.

Disclosure & Sharing

We share personal data only with carefully selected recipients and only where necessary for the purposes described in this Privacy Policy, subject to appropriate safeguards:

Payment service providers and banks: to process deposits, withdrawals, refunds and chargebacks, verify card or account ownership and comply with card scheme rules and anti-fraud measures.
KYC/AML and risk management providers: specialist identity verification, sanctions screening and fraud-prevention partners that help us confirm your identity, detect suspicious activity and meet our legal obligations.
Technical and operational service providers: hosting providers, IT and security vendors, analytics providers, customer support tools, email and SMS delivery services and other contractors who process data on our behalf under data processing agreements.
Affiliates and marketing partners: subject to your consent where required, we may share limited information necessary to attribute referrals, measure campaign performance or, where you agree, to personalise marketing content. We do not sell your personal data in the sense prohibited by modern privacy laws.
Regulators and public authorities: competent authorities in Curaçao, Belgium, the UK and other relevant jurisdictions (for example, law enforcement agencies, tax authorities or gaming regulators) when required by law, court order or regulatory request, or to report suspected criminal activity or serious responsible gambling concerns.
Group entities and business transferees: other companies in the same corporate group (if applicable) for internal administration or centralised services, and potential buyers or investors (and their advisors) in connection with corporate transactions, subject to confidentiality obligations and applicable law.
Other third parties with your consent: where you explicitly request or authorise us to share data, for example with an independent dispute resolution body, legal representative or third-party wallet.

All third parties that act as processors are contractually required to keep personal data confidential, use it only in accordance with our instructions and implement appropriate security measures.

International Transfers

Because the Blitz Casino product is operated by an international, offshore gambling operator and related entities, your personal data may be processed or stored outside the United Kingdom, including in Curaçao, Belgium, other European Economic Area (EEA) countries, and potentially jurisdictions such as Cyprus or other locations used by our technical or payment partners.

Whenever we transfer personal data outside the UK, we take steps to ensure that an adequate level of protection is in place as required by the UK GDPR:

Adequacy regulations: where personal data is transferred to a country that has been recognised by the UK government as providing an adequate level of data protection, we rely on that adequacy decision.
Standard contractual clauses and UK addenda: for transfers to countries without an adequacy decision, we implement appropriate safeguards such as the UK-approved International Data Transfer Addendum to the EU Standard Contractual Clauses or other approved contractual mechanisms between us and the recipient.
Technical and organisational measures: in addition to legal safeguards, we apply security controls such as encryption, access limitation, auditing of our suppliers and strict need-to-know access principles for staff located in different jurisdictions.

Further details of the international transfer mechanisms we use, including a copy of relevant contractual safeguards (with commercially sensitive information redacted), can be requested using the contact methods described in the "Complaints & Contacts" section, where such disclosure is permitted by law and does not compromise security or confidentiality.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations and to resolve disputes. Retention periods vary depending on the data category and context:

Account and identification data: core account details, identity verification records and KYC/AML documentation are typically retained for the duration of your relationship with us and, after account closure, for a period that is generally no longer than five (5) years, unless a longer period is required by anti-money laundering, tax, regulatory or limitation laws.
Transaction and gaming data: betting history, financial transactions, bonuses and game logs are retained for periods aligned with legal record-keeping and regulatory expectations (often up to five (5) years after the relevant transaction or account closure) to allow us to respond to audits, investigations, chargebacks or disputes.
Marketing data: data used for marketing is retained while you remain opted in and for a short period afterwards to document consent and its withdrawal. If you opt out, we may retain limited information on your preference so that we can respect your choice in the future.
Technical logs and security data: server logs, security alerts and fraud indicators are retained for periods necessary to ensure system integrity, investigate incidents and improve protection measures, typically not longer than necessary for those purposes.

When data is no longer needed, we will take reasonable steps to delete, anonymise or aggregate it in a secure manner. Where you submit a valid deletion request, we will respect it unless we are required or permitted by law to retain specific information (for example, for AML, tax or legal claim purposes). Criteria for determining retention periods include the nature of the data, the risks of harm, the purposes of processing and legal requirements in the UK and other relevant jurisdictions.

Your Rights

If you are located in the United Kingdom, you have a range of rights under the UK GDPR and the Data Protection Act 2018 in relation to your personal data processed in connection with blitscasino.com and the Blitz Casino product. In certain circumstances, similar rights may apply under EU or other privacy laws when you are located in those jurisdictions.

Right to information and access: you can request confirmation of whether we process your personal data and obtain a copy of that data, together with clear information about how and why it is processed.
Right to rectification: you can request correction of inaccurate or incomplete personal data. In many cases you can update basic details directly via your account settings.
Right to erasure: you can request deletion of your personal data where, for example, it is no longer needed, you have withdrawn consent (where consent was the legal basis) or you believe it has been unlawfully processed. This right may be limited where we must retain data to comply with AML, tax or other legal obligations or to establish, exercise or defend legal claims.
Right to restriction of processing: you can request that we restrict processing of your data in certain cases, such as while we verify its accuracy or assess an objection you have raised.
Right to object: you can object at any time to processing based on our legitimate interests, including profiling linked to such interests, and we will stop processing unless we demonstrate compelling legitimate grounds. You always have the right to object to direct marketing, including profiling for marketing purposes.
Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request to receive your data in a structured, commonly used and machine-readable format and have it transmitted to another controller where technically feasible.
Right not to be subject to certain automated decisions: if we use automated decision-making that produces significant effects for you (for example, certain risk or affordability assessments), you may request human review, express your point of view and contest the decision, subject to applicable legal limitations.
Right to withdraw consent: where we rely on your consent, you may withdraw it at any time, including by changing your preferences in your account or using the unsubscribe link in marketing emails. This does not affect processing carried out before withdrawal.

Procedures, timeframes and cost: you can exercise your rights free of charge by contacting us through the contact or support functionality on blitscasino.com, specifying which right you wish to exercise and providing enough information for us to verify your identity. We may request additional information where necessary to prevent unauthorised access. We aim to respond within one (1) month of receiving your request. For particularly complex or numerous requests, we may extend this period by up to two further months, in which case we will inform you of the extension and reasons. We may refuse or charge a reasonable fee for manifestly unfounded or excessive requests, in line with the UK GDPR.

Note on Mexican data protection rights: while the Blitz Casino product is intended for UK users via blitscasino.com, if you are located in Mexico and Mexican data protection law (such as the Federal Law on Protection of Personal Data Held by Private Parties) applies to our processing of your data, you may have additional or overlapping ARCO rights (access, rectification, cancellation and opposition) and rights regarding consent and data transfers. You can exercise these rights through the same contact channels described above, and we will assess and handle your request in line with any applicable Mexican requirements in addition to our UK and international obligations.

Cookies & Tracking Technologies

When you access blitscasino.com and use the Blitz Casino product, we use cookies and similar technologies to make the site work, improve its performance and, where permitted, personalise content and marketing.

Session cookies: temporary cookies that exist only while your browser is open and are deleted when you close it. They are used for essential functions such as keeping you logged in, routing requests to the correct server and maintaining your session state while you navigate the site.
Persistent cookies: cookies that remain on your device for a defined period or until you delete them. They help us remember your preferences (such as language), analyse aggregate usage patterns and measure the effectiveness of promotions or campaigns over time.
First-party cookies: cookies placed by blitscasino.com that we control directly, used for functionality, security, analytics and, where allowed, to tailor some aspects of your experience.
Third-party cookies and similar technologies: cookies, pixels or SDKs placed by external providers such as analytics services, affiliates or advertising networks. These may be used to measure traffic, prevent fraud, attribute referrals, and, where consented to, deliver or measure personalised advertising on or off our site.

We categorise these technologies broadly as functional (essential for using the site and services), performance/analytics (helping us understand and improve performance), and advertising/targeting (used to personalise marketing). In many cases you can manage your cookie preferences through a cookie banner or settings tool on blitscasino.com, as well as through your browser settings (for example, by blocking or deleting cookies). Please note that restricting essential cookies may severely affect or prevent your ability to use some parts of the site, including secure access to your account.

Data Security

We take the security of your personal data seriously and apply technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction or damage, taking into account the nature of the data and the risks of online gambling services.

Encryption in transit and at rest: we use modern cryptographic protocols such as TLS 1.2 or higher to secure data transmitted between your browser and blitscasino.com, and we employ encryption or pseudonymisation, where appropriate, for sensitive data stored on our systems or those of trusted providers.
Access controls and authentication: access to systems and databases is restricted to authorised personnel who need it for their roles, based on the principle of least privilege. We implement authentication controls, multi-factor authentication where appropriate, and detailed logging of access and administrative actions.
Infrastructure and application security: we use firewalls, intrusion detection and prevention systems, malware protection, segmentation, regular patching and vulnerability management processes to reduce exploitable weaknesses in our infrastructure and applications.
Monitoring, audits and testing: we conduct ongoing monitoring of systems, review logs for suspicious activity and may perform internal and external security assessments and audits. Where appropriate, we engage specialist providers to test and enhance our defences.
Staff training and confidentiality: employees and contractors with access to personal data are subject to confidentiality obligations and receive training on data protection, information security and responsible handling of customer information.
Incident response: we maintain procedures for detecting, assessing and responding to personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, inform you without undue delay, in accordance with applicable law.

We aim to align our security practices with recognised industry standards and frameworks (such as ISO/IEC 27001 or comparable controls) even where we do not currently hold formal certification. However, no online system can be guaranteed to be 100% secure, and you also play an important role by keeping your login credentials confidential, using strong passwords and informing us immediately if you suspect any unauthorised use of your account.

Complaints & Contacts

If you have questions, concerns or complaints about how we handle your personal data in connection with blitscasino.com and the Blitz Casino product, or if you wish to exercise any of your data protection rights, you should contact us first so we can attempt to resolve the issue directly.

Primary contact channel: please use the contact or support functionality available on blitscasino.com and clearly indicate that your request concerns "Privacy" or "Data Protection". This ensures that your message is routed to our data protection contact point (Data Protection Officer or equivalent team).
Content of your request: include your name, registered username, country of residence, a clear description of your request or concern and any relevant supporting information. For security reasons, we may ask you for additional details to verify your identity before acting on your request.
Response times: we aim to acknowledge receipt of privacy-related complaints or rights requests promptly and to provide a substantive response within one (1) month, extendable as permitted by law for complex matters. We will keep you informed of progress if additional time is required.

Escalation to supervisory authorities:

United Kingdom: if you are located in the UK and are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). Further information is available on the ICO's website at www.ico.org.uk.
European Economic Area (EEA): if EU data protection law applies to our processing of your personal data, you may raise a complaint with your local data protection authority in the EEA. Contact details for supervisory authorities can generally be found on the European Data Protection Board (EDPB) website.
Mexico: where Mexican data protection law applies, you may also have the right to complain to the Mexican data protection authority, the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). You may contact INAI using the channels it publishes for individuals seeking to exercise privacy rights.

Lodging a complaint with a supervisory authority does not affect any other administrative or judicial remedies you may have. We encourage you, however, to first give us the opportunity to address your concerns directly.

Updates

We may amend this Privacy Policy from time to time to reflect changes in our services, how we process personal data, legal or regulatory developments, or improvements in our practices. When we make changes, we will update the "Last updated" date shown below and, where appropriate, provide more prominent notice.

Notification methods: for material changes, we may notify you via email (where we hold your email address), display banners or pop-up notices on blitscasino.com, and/or provide alerts in your account area explaining the key updates.
Advance notice for significant changes: where a change materially affects your rights or how we use your data, we will, where reasonably practicable, provide at least 30 days' advance notice before the new terms take effect for existing customers. During this period you may review the updated policy, ask questions or exercise your rights.
User options: if you do not agree with a material change to this Privacy Policy, you may choose to stop using the Blitz Casino product on blitscasino.com and request account closure, subject to any outstanding obligations (for example, regulatory or AML requirements). Continued use of the services after the effective date of an updated policy will constitute your acknowledgement of the changes, to the extent permitted by law.
Version control and changelog: we may maintain internal versioning of this Privacy Policy and, for significant updates, summarise the main changes (for example, new purposes of processing or new categories of recipients) in a dedicated notice or changelog.

Last updated: January 2026.