What we hold about you, and why

GDay365 Casino is operated by GDay365 casino Entertainment Ltd. under a licence issued by the Curacao Gaming Control Board. Where this page says "we", it means that company. Where it says "you", it means anyone who opens an account, deposits, plays, or simply reads these pages.

This policy applies to gday365.org and to the account you hold with us. It does not apply to sites you reach by following a link away from ours: once you leave, the privacy policy of wherever you land takes over, and we would encourage you to read it.

Nothing on this list is bought in from a data broker or scraped from anywhere. Every item arrives because you gave it to us, or because your device produced it while you were using the site.

We never ask for your full card number in an email or a chat window, and we will never ask for your account password. If a message claiming to be from GDay365 asks for either, it is not from us — close it and tell support.

Each piece of information sits under one of four justifications, and we do not use it outside the one it was collected under.

• To run the contract you entered into. Opening the account, taking a deposit, settling a bet, paying a withdrawal, and answering you when you write in.
• Because the law and our licence require it. Age verification, source-of-funds checks, anti-money-laundering monitoring, and the records a regulator can demand to see.
• Because we have a legitimate interest. Detecting fraud and multiple accounts, keeping the platform stable, and spotting patterns of play that suggest someone is in trouble.
• Because you consented. Marketing messages and non-essential cookies, and only those. Consent is the one basis you can withdraw at any moment, without it affecting the account.

Before a first withdrawal we confirm that you are who the account says you are, that you are over eighteen, and that the money entering the account is yours. That check is not a formality we invented; it is the condition on which the licence is held.

What we normally ask for

1. A government photo ID — passport, driver licence or a national identity card — clear enough to read, corners included.
2. Proof of address dated within the last three months: a utility bill, a bank statement or a council notice.
3. Proof that the deposit method belongs to you. For a card, that is the first six and last four digits with the middle hidden; for a wallet, a screenshot of the account header.

Larger or unusual transactions can trigger a source-of-funds request on top of that. Deposits across the account run from $10 to $25,000, and activity toward the upper end of that range is more likely to be questioned — not as an accusation, but because we are obliged to ask.

We do not sell personal information, and we do not rent mailing lists. Data leaves our systems in four directions only.

• Payment providers. Whichever of the methods in the cashier you choose receives what it needs to move the money and nothing else.
• Game studios. The 90 studios supplying the 2,959 titles receive a pseudonymous session identifier so the game can run and the result can be settled. They do not receive your name.
• Verification and fraud-prevention partners. Specialists who confirm documents and flag duplicate or compromised accounts.
• Regulators, auditors and law enforcement. Where the Curacao Gaming Control Board, a court, or an applicable law requires it. We do not treat an informal request as a requirement.

Every processor works to a written contract that limits them to the task we gave them, obliges them to secure what they hold, and forbids them from using it for their own purposes.

Retention is not a matter of taste. Gambling and anti-money-laundering rules set floors we cannot go below, even when an account is closed and even when you ask.

Traffic between your device and the site is encrypted in transit. Verification documents and payment records are encrypted at rest. Access inside the company is granted by role, not by seniority: a support agent can see enough to help you and no more, and every look at a verification file is logged.

No system is perfect, and anyone claiming otherwise is selling something. What we can promise is that a breach affecting your data would be investigated immediately, contained, reported to the regulator where required, and communicated to you rather than buried.

What you can do at your end

• Use a password that exists nowhere else, and a password manager to remember it.
• Do not sign in over public wi-fi you do not control.
• Tell support the moment something in your account history looks unfamiliar.

You can exercise any of the following. Ask in live chat and we will start the process; where the law sets a deadline for our reply, we work to it.

• Access. A copy of what we hold about you, in a readable format.
• Correction. Anything inaccurate put right. This one matters more than it sounds — a mismatch between your account details and your ID will hold up a withdrawal.
• Erasure. Deletion of what we are not legally obliged to keep. The statutory records above survive; the rest goes.
• Restriction and objection. A pause on processing while a dispute is resolved, or an objection to processing based on legitimate interest.
• Portability. Your data handed over in a machine-readable form.
• Withdrawing consent. Marketing off, non-essential cookies off, immediately and without penalty.

We may need to verify your identity before acting on a request, for the obvious reason that we do not want to hand your file to somebody else.

Promotional email and SMS go only to accounts that opted in, and every message carries a working unsubscribe. Turning marketing off does not affect service messages — a withdrawal confirmation or a security alert still reaches you, because those are part of running the account rather than selling to you.

Cookies and similar technologies are covered separately, in detail, on our cookies policy. Non-essential categories stay off until you say otherwise.

If you self-exclude, marketing stops entirely and permanently for the excluded period, without you having to ask for it as well.

Rules change, processors change, and this page changes with them. The stamp at the top of the page always shows when it was last revised. Where a change materially affects how we use your information, we will tell account holders directly rather than relying on you to re-read the page.

Questions, requests and complaints about privacy all go through the same door: live chat inside your account, or the phone line, both staffed around the clock. If our answer does not satisfy you, our contact page sets out how to escalate.