Privacy Policy

Privacy and data protection

We respect the privacy of users and aim to handle personal data in a clear and responsible way. Processing may be subject to applicable privacy legislation, including the General Data Protection Regulation (GDPR), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), and other laws that apply to the relevant user or service.

This policy applies to FastPay Online Casinos and the online services connected with the website.

Age restrictions

Casino services are intended only for people who have reached the legal gambling age applicable to them. The minimum age is 18, or a higher age where required by local law.

We do not knowingly seek personal information from minors. If information belonging to an underage person is identified, appropriate steps may be taken to remove the data, restrict the account and prevent further use of the service.

1. Who controls your personal data?

The casino service is operated by SAPHIRIX SOLUTIONS SRL, registered under number 3-102-933997 in Costa Rica.

The registered location provided for the company is Provincia 01 San José, Canton 15 Montes de Oca, Distrito Uno de San Pedro, Los Yoses, Avenidas Ocho y Diez, Calle Treinta y Nueve, Segunda Oficina a Mano Derecha, LY Center.

SAPHIRIX SOLUTIONS SRL determines why and how personal information is processed and therefore acts as the relevant Data Controller where GDPR terminology applies.

Privacy and data-protection enquiries can be submitted through the contact details below.

2. Personal data we may process

The information collected depends on how a person uses the service. We aim to collect information that is reasonably required for account operation, security, payments, compliance and customer support.

We may also process other information that you voluntarily provide while communicating with us or completing an account-related request.

Where the information comes from

Information can be collected directly from you during registration, account use, casino activity, payments, verification or support communication. Relevant information may also be received from service providers involved in payments, identity checks, fraud prevention, compliance and affiliate tracking.

3. Why personal data is used

Personal information may be processed where it is necessary to operate the casino service, protect accounts or meet legal and regulatory requirements.

• creating, maintaining and securing player accounts;
• providing login and account functionality;
• processing deposits, withdrawals and other payment activity;
• carrying out identity, age, KYC and anti-money-laundering checks;
• detecting fraud, abuse or unusual account activity;
• supporting responsible-gaming controls;
• providing customer-service communication, including AI-assisted communication tools where used;
• improving website performance, user experience and technical reliability;
• maintaining records needed for legal, accounting or regulatory purposes;
• sending marketing communications where legally permitted.

4. Legal grounds for processing

Where data-protection law requires a legal basis, the basis used depends on the reason the information is being processed.

Where processing relies on consent, that consent may be withdrawn. Withdrawal does not normally affect processing that was lawful before consent was withdrawn.

5. How long information is kept

Personal information is retained for as long as reasonably necessary for the purpose for which it was collected and for any additional period required by legal or regulatory obligations.

Some records may need to remain available after an account has been closed. This can include information used for tax, accounting, dispute resolution, anti-money-laundering and regulatory compliance.

Where required by applicable rules, relevant account and compliance records may be retained for at least five years after closure of the account.

6. Your privacy rights

Depending on the law that applies to you, you may have rights concerning the way your personal information is handled.

• request access to personal information held about you;
• ask for inaccurate or incomplete information to be corrected;
• request deletion where there is no overriding legal reason to retain the information;
• ask for processing to be restricted in certain circumstances;
• request data portability where that right applies;
• object to particular processing based on legitimate interests;
• object to direct marketing;
• withdraw consent where processing is based on consent;
• submit a complaint to an appropriate data-protection authority.

We may need to verify your identity before responding to a privacy request. This helps prevent personal information from being disclosed or changed at the request of an unauthorised person.

7. When personal information may be shared

Operating an online casino can require information to be processed by other organisations that provide technical, financial, compliance or professional services.

• game and casino-content providers;
• payment gateways and payment-processing services;
• identity-verification, fraud-prevention and compliance providers;
• marketing and affiliate service providers where appropriate;
• communications and customer-service technology providers;
• AI service providers used to assist customer communication;
• professional advisers such as lawyers, auditors and consultants;
• regulators, courts or public authorities where disclosure is legally required;
• a successor organisation where the business is reorganised, sold or transferred.

Where service providers process personal data on our behalf, appropriate contractual and organisational safeguards should be used to limit processing to the relevant service purpose.

8. How personal data is protected

Technical and organisational measures are used to reduce the risk of unauthorised access, accidental loss, misuse or disclosure of personal information.

Access controls

Access to systems and facilities is restricted according to operational need. Systems may use authentication controls, passwords, unique user identifiers and secure hosting environments.

Internal data access

Employees and service providers should only have access to the information necessary for their role. Procedures may also be used for secure deletion, controlled software access and prevention of unauthorised system changes.

Organisational controls

Privacy responsibilities are supported through internal policies, staff training, data-protection oversight and other administrative controls appropriate to the service.

9. International data transfers

Some service providers or business partners may operate in a country different from the country where a user is located. This means personal information can sometimes be processed internationally.

Where required, appropriate safeguards may be used for international transfers. These can include transfers to jurisdictions recognised as providing an adequate level of protection or contractual mechanisms such as approved Standard Contractual Clauses.

10. Automated processing and AI-assisted services

Technology may be used to assist with customer communication, fraud monitoring, security, analytics and operational processes.

The policy does not provide for decisions based solely on automated processing that produce a legal or similarly significant effect on a user. If this approach changes, relevant users should be informed where required by law.

11. Changes to this Privacy Policy

This Privacy Policy may be updated when the service, technology, legal requirements or data-processing practices change.

The current version should be reviewed periodically. Where a change is significant and notification is required, reasonable steps may be taken to bring the updated policy to the attention of affected users.

12. Privacy questions

If you have a question about this policy, the personal information associated with your account, or a request concerning your privacy rights, contact the privacy team using the address below.