Our Privacy Commitment
At Tortuga Casino, your personal and financial information is handled with the utmost care. We believe that trust is the foundation of any lasting relationship between a player and a casino, and we take our responsibility to protect your data seriously. This privacy policy explains, in plain terms, what information we collect, why we collect it, and how we keep it secure. If you ever have questions about how your data is handled, we encourage you to reach out to our team directly.
The Information We Collect
We collect personal information at several points during your time with us — starting from the moment you create an account. The type of data we gather depends on what stage of the process you're at and what you're trying to do.
During account registration, we collect basic identifying details such as your full name, date of birth, email address, and residential address. This information is necessary to open your account and ensure you meet eligibility requirements to play.
For identity verification (KYC), we are required under applicable regulations to confirm who you are before processing withdrawals or when flagged by our compliance systems. This may involve requesting supporting documentation to verify your identity, address, or source of funds. This is a standard step across regulated online casinos and is there to protect you as much as it protects the integrity of the platform.
When it comes to payment processing, we collect the financial details associated with your chosen method. We support a range of options including bank transfer, Mastercard, and cryptocurrency. Depending on which method you use, relevant transaction data is recorded to process your deposits and withdrawals accurately and securely.
We also collect technical data automatically — such as your IP address, device type, and browsing behaviour on our platform — to help us maintain site performance and detect unusual activity.
How We Use Your Data
The data we collect is used for specific, defined purposes. We do not use your information beyond what is described below, and we do not treat it as a commodity.
- Account management: Your personal details allow us to maintain your account, process your chosen bonus options, and provide you with a consistent experience across sessions.
- Payment processing: Financial data is used exclusively to handle deposits, withdrawals, and to reconcile transactions. This applies across all supported payment methods, including bank transfer, Mastercard, and crypto.
- Fraud prevention and compliance: We analyse account behaviour and transaction patterns to detect and prevent fraudulent activity, money laundering, and any other conduct that would violate our terms or applicable law. This is both a legal obligation and a safeguard for all players on our platform.
- Legal obligations: We are required to retain and process certain data in accordance with Anti-Money Laundering (AML) regulations and other applicable laws. Compliance is non-negotiable, and we take it seriously.
- Marketing communications: If you have opted in, we may occasionally send you relevant promotions or updates. You can withdraw your consent and opt out of marketing communications at any time through your account settings — no questions asked.
We process your data only on lawful grounds, which include the performance of a contract, legitimate interest, legal obligation, or your explicit consent where required.
Data Sharing and Third Parties
We want to be completely transparent on this point: we do not sell your personal data to any third party, ever. Your information is not a product, and it will not be treated as one.
That said, operating a licensed online casino requires working with a number of trusted service providers. In those cases, we share only the minimum data necessary, and only with partners who meet our data protection standards. These include:
- Game providers: Certain technical data may be shared with the software providers behind our casino games in order to deliver a stable, fair gaming experience. We work with established providers — noting that Microgaming is not part of our current provider lineup.
- Payment processors: To complete transactions via bank transfer, Mastercard, or cryptocurrency, relevant financial data is passed to the appropriate processing partners in a secure manner.
- Regulatory and legal authorities: Where required by law or by the regulatory body that oversees our licence, we may be obligated to disclose certain account or transaction data. We comply fully with any such lawful requests.
- Fraud prevention services: We may use third-party tools to help identify and prevent fraudulent activity on the platform.
All third parties we work with are contractually bound to handle your data responsibly and in line with applicable data protection legislation.
Data Security and Retention
Keeping your data secure is a technical and organizational priority for us. We use SSL (Secure Socket Layer) encryption across our platform to protect the transmission of personal and financial information between your device and our servers. Our systems are hosted on secure infrastructure, with access controls in place to ensure that only authorized personnel can access sensitive data.
We also conduct regular internal reviews of our security practices and update our safeguards in line with industry standards. No system can guarantee absolute security, but we invest meaningfully in minimizing risk.
With respect to data retention, we do not hold your information any longer than necessary. Once your account is closed or becomes inactive, we retain certain records only for as long as required to meet our legal and regulatory obligations — including those related to AML compliance, which typically mandate a defined minimum retention period following the end of a customer relationship.
When data is no longer required, it is securely deleted or anonymized so that it can no longer be associated with you as an individual. We do not archive personal data indefinitely.
Your Privacy Rights and How to Reach Us
As a player on our platform, you have rights over your personal data. Depending on the privacy laws applicable to your jurisdiction, these may include:
- The right to access the personal data we hold about you
- The right to correct inaccurate or outdated information
- The right to request deletion of your data, subject to any legal retention requirements we must comply with
- The right to withdraw consent for any processing based on your consent, including marketing
- The right to object to or restrict certain types of data processing
Please note that some requests may be subject to limitations where we are legally required to retain certain information — for example, to meet AML obligations. In those cases, we will explain the reason clearly.
To exercise any of these rights, or if you have a question or concern about how we handle your data, you are welcome to contact our support team through the channels available on our platform. Our team will direct your inquiry to the appropriate person and respond within a reasonable timeframe.
You can also manage certain preferences directly through your account settings, including opting out of marketing communications. Visit your account settings at any time to review and update your choices.
This policy may be updated periodically to reflect changes in our practices or applicable law. When we make material changes, we will notify you through the platform.