Your privacy at Leonbet

This policy explains what personal data we collect when you play at Leonbet Casino, why we collect it, who we share it with, and how you can control it.

Data we collect from you

We collect only the data needed to run your account, verify your identity and meet our legal obligations. You give most of it directly when you register, deposit or claim a bonus.

Below is every category we handle, with examples of each.

• Identity data: full name, date of birth, email address, phone number, residential address.
• Verification documents: ID, proof of address and payment method records collected under our KYC process.
• Transaction data: deposits, withdrawals, wagers, winnings and bonus activity across AUD, USD, EUR, BTC, ETH and USDT.
• Technical data: IP address, device and browser details, operating system, session logs.
• Gameplay behaviour: games played, session length, betting patterns and responsible-gambling indicators.
• Marketing preferences: which promotions you opted into, such as our Friday reload or monthly prize draws.

How we use your data

We process your data for specific purposes only, never for anything outside those listed here.

Each purpose ties back to a legal basis, which we set out in the next section.

• Creating and running your Leonbet Casino account.
• Verifying your identity before your first withdrawal, with review taking up to 72 hours.
• Processing deposits and withdrawals through methods including PayID, Neosurf, Skrill and crypto.
• Preventing fraud, money laundering and bonus abuse.
• Monitoring play for responsible-gambling purposes, including deposit and loss limits.
• Sending you marketing and bonus offers where you have consented.
• Meeting obligations under our Curaçao licence 8048/JAZ2021-042.

Our legal bases explained

Contract

We process identity, transaction and account data to perform our contract with you. Without it we cannot open an account, take a deposit or pay out winnings, so these processing activities are required, not optional.

Legal obligation

Anti-money-laundering and KYC rules oblige us to verify who you are and to keep transaction records for at least five years. We cannot waive or shorten these requirements, even at your request.

Legitimate interest

Fraud prevention, security monitoring and service improvement rely on our legitimate interest in keeping Leonbet Casino safe and functional. We weigh this interest against your rights and keep the data involved to a minimum.

Consent

Marketing emails, SMS offers and non-essential cookies run on your consent. You can withdraw it at any time through your account settings or by emailing [email protected], and withdrawal takes effect immediately for future messages.

How long we keep it

We hold each category of data only as long as the purpose requires, then delete or anonymise it. The table below shows the periods we apply.

Who we share data with

We never sell your personal data. We share it only with parties who need it to deliver our services, and always under written data-processing agreements.

The categories we work with are listed below.

• Payment processors handling your deposits and withdrawals.
• KYC and AML verification providers.
• The Curaçao regulator where disclosure is legally required.
• Analytics and hosting providers supporting site performance.
• Game providers whose titles you play, limited to the data needed to run the session.
• Professional advisers such as auditors and lawyers, under confidentiality.

Rights you can exercise

You control your data. Whatever the legal basis, you can ask us to act on any of the rights below by writing to [email protected], and we will respond within 30 days.

You also have the right to complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your information.

• Access: get a copy of the personal data we hold about you.
• Rectification: correct anything inaccurate or out of date.
• Erasure: ask us to delete data we no longer need to keep.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdrawal of consent: stop marketing processing at any time.
• Complaint: raise concerns with the relevant data protection authority.

Cookies and tracking

We use session cookies to keep you logged in, preference cookies to remember your settings, and, with your consent, analytics cookies that show us how the site performs. Our cookie banner lets you accept or reject non-essential categories before they load, and you can change your choices at any time on our dedicated cookies page.

Security we apply daily

All traffic between your device and our servers runs over TLS encryption. We store passwords using one-way hashing, restrict access to personal data to staff who need it for their role, and log every access to sensitive records.

If a data breach occurs that is likely to cause you serious harm, we will notify you and the relevant authority as soon as practicable, in line with Australian breach-notification rules.

Contact our data team

Questions about this policy, a specific processing activity or a data request go to our data protection officer at [email protected]. Our 24/7 live chat team can also log your query and route it to the right people. We review this policy whenever our practices change and publish the updated version with a new effective date, marked 2026.

Frequently Asked Questions

Do I have to give you my ID documents?

Yes. Our Curaçao licence and anti-money-laundering rules require ID, proof of address and payment verification before your first withdrawal. Reviews take up to 72 hours.

Can I stop marketing messages from you?

Yes. Withdraw consent in your account settings or email [email protected], and we will stop immediately. Transactional messages, such as withdrawal confirmations, still continue.

How long do you keep my transaction history?

We keep transaction records for a minimum of 5 years after the transaction, as required by regulation, then delete or anonymise them.

Do you sell my data to anyone?

No. We share data only with processors, providers and regulators who need it to deliver the service, and never for sale.