Your Privacy at Freshbet Casino

This Privacy Policy explains what personal data we collect when you play at Freshbet Casino, why we hold it, how long we keep it, and the controls you have over it. We are the data controller for this site, operated by Fresh Gaming Ltd (Malta) under licence MGA/B2C/482/2020, and this page applies to every visitor and registered player on our platform.

Data We Collect From You

We collect only the data we need to run your account, meet our licence obligations and keep the site safe. That data falls into six categories, and you will recognise most of it from the moment you register.

• Identity data: your full name, date of birth, email address, telephone number and residential address.
• Verification documents: copies of your ID, proof of address and proof of payment method, submitted for KYC checks before your first withdrawal.
• Transaction data: deposits, withdrawals, bets placed, winnings, bonuses claimed and payment method details (Visa Debit, Mastercard Debit, Skrill, Neteller, crypto wallet addresses and others).
• Technical data: IP address, device type, operating system, browser, time zone and language settings.
• Gameplay behaviour: games you open, session duration, betting patterns, bonus usage and results, which feed our responsible-gambling monitoring.
• Marketing preferences: which channels you agreed to hear from us on, and which promotions or newsletters you chose to receive.

How We Use Your Data

Every use of your data maps back to a specific purpose. We create and manage your player account with your identity data; we verify who you are before releasing funds; we process deposits and withdrawals through your chosen payment method; and we screen transactions for fraud and money laundering under our MGA licence conditions.

Gameplay and transaction data also drive our responsible-gambling tools. Deposit limits, loss limits and session reminders cannot work unless we track the activity they measure. Where you have opted in, we use your email address and marketing preferences to send bonus news such as our weekly 15% cashback or Tuesday free spins, and we stop the moment you withdraw consent.

• Creating, maintaining and securing your account.
• KYC and AML verification before your first withdrawal.
• Processing payments and confirming source of funds where required.
• Fraud prevention, dispute resolution and chargeback handling.
• Monitoring play against deposit and loss limits you set yourself.
• Marketing you have consented to, and honouring your opt-outs.
• Meeting record-keeping and reporting duties owed to the regulator.

Our Legal Bases

Contract. Processing your identity and transaction data is necessary to perform the agreement you enter when you register. Without it we cannot open an account, settle bets or pay out winnings, so this basis covers most day-to-day processing.

Legal obligation. Our MGA licence, together with anti-money-laundering law, obliges us to verify your identity, retain transaction records for at least five years and report suspicious activity. These duties are non-negotiable and sit outside your consent.

Legitimate interest. We rely on legitimate interest to keep the platform secure, detect fraud and multiple accounts, analyse de-identified play patterns and improve our 4,000-plus game library. This interest never overrides your rights, and you may object at any time.

Consent. Marketing messages, non-essential cookies and any disclosure to third-party advertisers run on your consent only. You give it through clear opt-ins and can withdraw it through your account settings or a single click in any email, without affecting your ability to play.

How Long We Keep It

Retention follows the strictest of three tests: what our licence requires, what tax and AML law demands, and what the purpose of the data needs. Once all three expire, the data is deleted or irreversibly anonymised. The table below sets out the periods we apply in practice.

Who We Share Data With

We never sell your personal data. We share it only with processors and authorities who need it for a defined job, under written agreements that bind them to the same standards we hold ourselves to.

• Payment processors handling Visa Debit, Mastercard Debit, Trustly, Skrill, Neteller and crypto transactions, receiving only what is needed to move your funds.
• KYC and AML verification providers that check your documents and screen against sanctions lists.
• The Malta Gaming Authority and other regulators or law-enforcement bodies, where a lawful request or reporting duty requires disclosure.
• Game and platform providers supplying the 4,000+ titles on our site, receiving your account ID so play and balances stay in sync.
• Analytics and site-performance services, working on aggregated or pseudonymised data under consent where required.
• Professional advisers such as auditors and lawyers, on a strict need-to-know basis.

Your Rights Over Your Data

You control your data, and exercising any of the rights below never affects your access to fair play. Requests go to our Data Protection Officer at [email protected] and we answer within one month, extended by two further months only for genuinely complex cases, with an explanation if we do.

Where we rely on consent, you can withdraw it at any time. If you believe we have mishandled your data, you also have the right to complain to your national data protection authority, or to the Malta Data Protection Commissioner as our supervisory authority.

• Access: a copy of the personal data we hold about you.
• Rectification: correction of inaccurate or incomplete records.
• Erasure: deletion where no legal retention duty applies.
• Portability: your data in a structured, machine-readable format.
• Objection: stopping processing based on legitimate interest.
• Withdrawal of consent: ending marketing and consent-based processing at any time.
• Complaint: escalation to the relevant data protection authority.

Cookies and Tracking

Our site uses strictly necessary cookies to keep your session, login and balance working, plus optional analytics and marketing cookies that load only after you accept them in the consent banner. You can change your choices at any time through the cookie settings link in the footer.

The full inventory of cookies, their purposes and lifespans is set out on our dedicated Cookies Policy page, which forms part of this document.

How We Protect Your Data

All traffic between your device and our servers runs over TLS encryption, and sensitive records such as KYC documents are encrypted at rest and stored separately from the platform that runs the games. Access to personal data is role-based: support agents see what they need to help you, payment staff see payment data, and nobody reaches verification documents without a logged, auditable reason.

We test these controls regularly and train our staff on data handling. If a breach ever occurs that risks your rights, we will notify the supervisory authority within 72 hours and tell affected players directly without undue delay, in line with GDPR Article 33 and 34. Cryptocurrency withdrawals processed within an hour follow the same security checks as every other method on our site.

Frequently asked questions

How do I request a copy of my data?

Email [email protected] from your registered address with the subject line 'Data Access Request'. We verify your identity and send your data within one month.

Can I delete my account and all my data?

You can close your account through support or self-exclusion via GAMSTOP at any time. Identity and transaction records must be kept for 5 years after closure to satisfy our MGA and AML obligations; everything else is deleted.

Does Freshbet Casino sell my data to advertisers?

No. We never sell personal data. Advertising partners work only with consent-based cookies, which you can decline or withdraw in the cookie banner.

Why do you need my ID before a withdrawal?

Our MGA licence and anti-money-laundering rules require us to verify every player before releasing funds. KYC checks take up to 48 hours and your documents are encrypted and deleted after the statutory retention period.