Privacy Policy

CandyLand Online Casino

Effective Date and Introduction

This Privacy Policy sets out the manner in which CandyLand (“we”, “us”, “our”, or “the Company”) collects, processes, stores, shares, and protects personal data belonging to users (“you”, “your”, or “the User”) who access and use our online casino platform and related services. CandyLand is operated under a licence issued by the Government of Curaçao, and we are committed to ensuring that all personal data handled by the Company is processed in a lawful, fair, and transparent manner consistent with applicable data protection standards and iGaming regulatory obligations. This Privacy Policy applies to all visitors, registered account holders, and any individuals who interact with our platform, whether through desktop browsers, mobile applications, or any other digital access point. By accessing our website or creating an account with CandyLand, you acknowledge that you have read, understood, and agreed to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, you should cease using our services immediately and contact our support team to discuss any concerns you may have.

1. Who We Are and Our Regulatory Standing

CandyLand is an online casino brand offering a range of digital gambling services including but not limited to slot games, live dealer casino games, table games, and promotional activities. The Company holds a valid gaming licence issued under the authority of the Curaçao gaming regulatory framework, which governs the conduct of our operations and imposes obligations relating to responsible gambling, anti-money laundering compliance, and the protection of player data. As a licensed operator serving users in the United Kingdom, the Company also recognises the standards set by the UK Information Commissioner’s Office in relation to personal data handling and applies principles consistent with modern data protection law, including purpose limitation, data minimisation, storage limitation, and accountability. Our commitment to regulatory compliance forms the foundation of this Privacy Policy and guides every aspect of our data processing activities.

2. Personal Data We Collect

CandyLand collects a range of personal data from users in order to deliver our services effectively and meet our legal and regulatory obligations. The categories of personal data we collect include the following:

• Registration data, including full legal name, date of birth, residential address, email address, username, and account password
• Identity verification documents such as government-issued identification, passports, utility bills, and bank statements submitted during Know Your Customer procedures
• Payment details including bank account information, credit and debit card numbers, e-wallet identifiers, and transaction histories
• Technical data such as IP addresses, device identifiers, browser types, operating system information, and session timestamps
• Behavioural data including gameplay history, wagering patterns, bonus usage, and platform interaction logs
• Communication data including records of correspondence between the user and our customer support team, whether conducted via live chat, email, or telephone
• Responsible gambling data including self-exclusion requests, deposit limits, and any information provided in connection with player protection measures
• Marketing preferences and consent records relating to the receipt of promotional communications

The collection of the above data categories is necessary for the performance of our contractual obligations to you, for compliance with legal requirements, and for the legitimate interests pursued by the Company in operating a secure and compliant online gambling platform.

3. Purposes for Which We Use Your Personal Data

CandyLand processes personal data for a number of clearly defined and lawful purposes. These include:

• Account creation and management, including verifying your identity at registration and throughout the lifecycle of your account
• Processing deposits, withdrawals, and other financial transactions in a secure and accurate manner
• Conducting Know Your Customer procedures to verify the identity and age of all registered users in accordance with our licensing obligations
• Performing anti-money laundering checks and ongoing transaction monitoring to detect and prevent financial crime in accordance with applicable AML regulations
• Carrying out anti-fraud assessments to identify and prevent unauthorised access, account takeover, and fraudulent activity on the platform
• Communicating with you in relation to your account, including notifications regarding security, terms updates, and transactional confirmations
• Sending marketing communications, including promotional offers, bonus notifications, and product updates, where you have provided your consent or where we have a legitimate interest in doing so
• Complying with legal and regulatory obligations imposed by our licensing authority, law enforcement agencies, and other competent authorities
• Administering responsible gambling tools and monitoring player behaviour for signs of problem gambling in accordance with our duty of care obligations
• Improving our platform through analysis of aggregated and anonymised user data, technical performance monitoring, and user experience research
• Resolving disputes, enforcing our Terms and Conditions, and defending legal claims where necessary

4. Legal Bases for Processing

The processing of your personal data by CandyLand is grounded in one or more of the following legal bases depending on the nature of the processing activity:

• Performance of a contract, where processing is necessary to fulfil our obligations to you as a registered user of our platform
• Compliance with a legal obligation, where processing is required by law, including AML legislation, licensing conditions, and data retention mandates
• Legitimate interests pursued by the Company, including fraud prevention, platform security, and business analytics, provided such interests are not overridden by your rights and freedoms
• Your consent, where you have freely and unambiguously provided agreement to specific processing activities such as receiving marketing communications

5. Data Sharing and Third-Party Disclosure

CandyLand does not sell your personal data to third parties. However, we may share your personal data with selected third parties where such sharing is necessary for the delivery of our services or required by law. The categories of recipients with whom we may share your data include:

• Payment service providers and financial institutions responsible for processing deposits and withdrawals on our platform
• Identity verification and KYC partners who assist in confirming the identity and age of our users
• Anti-fraud and AML compliance service providers who analyse transaction patterns and flag suspicious activity
• Technology and hosting providers who maintain the infrastructure on which our platform operates
• Regulatory authorities, law enforcement agencies, and licensing bodies where we are legally obligated to disclose information
• Legal and professional advisors including solicitors, accountants, and auditors engaged by the Company
• Third-party analytics providers who assist us in understanding platform usage and improving user experience on an aggregated and anonymised basis

All third parties with whom we share personal data are required to handle such data in accordance with applicable data protection standards and are contractually bound to implement appropriate security measures.

6. Data Retention

CandyLand retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. In general, account data and transaction records are retained for a minimum period of five years following the closure of an account to comply with AML and licensing obligations. Where data is no longer required for any lawful purpose, it is securely deleted or anonymised in accordance with our data retention schedule.

7. Your Rights as a Data Subject

As a user of CandyLand and a data subject, you are entitled to exercise the following rights in relation to your personal data:

• The right to access your personal data and obtain a copy of the information we hold about you
• The right to rectification of inaccurate or incomplete personal data
• The right to erasure, also known as the right to be forgotten, subject to overriding legal obligations that require us to retain certain data
• The right to restrict the processing of your personal data in certain circumstances
• The right to data portability, allowing you to receive your personal data in a structured and machine-readable format
• The right to object to processing carried out on the basis of legitimate interests or for direct marketing purposes
• The right to withdraw consent at any time where processing is based on your consent, without affecting the lawfulness of processing carried out prior to withdrawal
• The right to lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been violated

To exercise any of the above rights, please contact our Data Protection team using the contact details provided in the designated section of our website. We will respond to all valid requests within the timeframes prescribed by applicable data protection law.

8. Cookie Policy

CandyLand uses cookies and similar tracking technologies on our website to enhance platform functionality, analyse usage patterns, and deliver a personalised user experience. The types of cookies we use include the following:

• Essential cookies, which are strictly necessary for the operation of our platform and cannot be disabled without affecting core functionality such as login sessions, game loading, and account security features
• Analytical cookies, which collect anonymised information about how users interact with our platform, including pages visited, time spent on site, and error messages encountered, for the purpose of performance tracking and platform improvement
• Preference cookies, which remember your settings and choices to provide a more personalised experience upon return visits
• Marketing cookies, which may be used to deliver relevant promotional content and track the effectiveness of advertising campaigns, subject to your consent

You may manage your cookie preferences through the cookie consent tool available on our website. Please note that disabling certain cookies may affect the functionality of the platform. For further information about the specific cookies we use, please refer to our Cookie Preferences Centre.

9. Data Security

CandyLand implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include encryption of data in transit and at rest, access controls limiting internal data access to authorised personnel only, regular security assessments and penetration testing, and incident response procedures to address any data breaches in a timely and effective manner.

10. International Data Transfers

Where personal data is transferred to recipients located outside the jurisdiction in which it was collected, the Company ensures that appropriate safeguards are in place to protect such data, including the use of standard contractual clauses or other legally recognised transfer mechanisms.

11. Changes to This Privacy Policy

CandyLand reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, or our business practices. Any material changes will be communicated to registered users through our platform or by email notification. Continued use of our services following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

12. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection team through the contact details provided on the CandyLand website. We are committed to addressing all enquiries promptly and in accordance with our legal obligations.