Personal Data Protection Policy

Identity and contact data

To fully utilize our services, we collect information that allows user identification, such as first name, last name, email address, phone number, and date of birth. The collection of the date of birth is mandatory to verify that the user is 18 years of age or older, which is the minimum legal requirement for accessing the platform's services.

Technical and navigation data

Our computer systems automatically acquire certain data during site usage, including IP address, browser type, language settings, operating system, and details about visited pages. This data is processed to ensure the technical stability of the platform and to prevent fraudulent activities or unauthorized access.

Transaction and communication data

Should the user interact with our technical services or contact customer support, we may keep a record of transactions performed (excluding sensitive payment data which is handled by secure external gateways) and communication history to provide effective assistance and resolve any technical disputes.

We process users' personal data based on the following conditions of lawfulness:

• Performance of a contract: To provide the services requested by the user.
• Legal obligation: To comply with current regulations in Italy, including age verification.
• Legitimate interest: To improve platform security and prevent fraud.
• Consent: Where the user has explicitly expressed the willingness to receive informative or marketing communications.

The data collected by Casino Sanremo is used exclusively for:

• Managing and administering the user's account.
• Verifying identity and age (18+).
• Providing technical support and customer assistance.
• Analyzing site performance for structural optimization purposes.
• Ensuring network and information security.
• Sending regulatory updates or changes to terms of service.

Personal data is retained only for the time strictly necessary to achieve the purposes for which it was collected, or for the period required by legal obligations in Italy (e.g., for tax or public security purposes). Once the retention periods expire, the data is securely deleted or irreversibly anonymized.

Casino Sanremo does not sell or transfer personal data to third parties for commercial purposes. Data may be shared with technical service providers acting as data processors (e.g., hosting providers) who are bound by strict confidentiality agreements. Any data transfers outside the European Economic Area (EEA) will only occur to countries that ensure an adequate level of protection or on the basis of standard contractual clauses approved by the European Commission.

We adopt reasonable technical and organizational efforts to protect personal data from loss, theft, misuse, unauthorized access, or alteration. We use encryption protocols (SSL/TLS), advanced firewalls, and granular access controls. However, no internet transmission can be guaranteed 100% secure, so we invite users to protect their login credentials.

Every user residing in Italy or the EU has the right to:

• Access their data and receive a copy.
• Rectify inaccurate or incomplete data.
• Request data erasure (right to be forgotten).
• Object to processing for legitimate reasons.
• Request restriction of processing.
• Receive data in a structured and readable format (portability).

To exercise your rights or for questions related to data protection, you can contact our Data Protection Officer at: [email protected]. We will respond to every request within the terms provided by law.

We reserve the right to modify this policy to reflect changes in our practices or in data protection laws in Italy. Substantial changes will be communicated to registered users via email or notices on the digital platform.