Privacy Policy

Last updated: 14 July 2026

This Privacy Policy explains how Vavada B.V. collects, uses, shares, stores and protects personal data when you visit the Vavada official website, create an account or use our gaming and betting services.

By using the platform, you acknowledge that you have read this Policy. Your use of the services is also subject to our Terms and Conditions, including the requirements relating to age, identity verification and lawful access from your jurisdiction.

1. Who Is Responsible for Your Data?

Vavada B.V. is the company responsible for processing personal data under this Policy. The company is registered in Curaçao under registration number 143168 and has its registered address at Hanchi Snoa 19, Trias Building, Curaçao. Further information about Vavada B.V. is available on our About page.

In this Policy, “Company”, “VAVADA”, “we”, “us” and “our” refer to Vavada B.V. A “Client” is any individual who creates an account, uses the platform or otherwise interacts with the Company in connection with its services.

2. Personal Data We Collect

The information we collect depends on how you interact with the platform. It may include:

• Personal and contact data: your full name, date of birth, residential address, email address, telephone number and other account details.
• Payment and transaction data: payment-method information, deposits, withdrawals, bets, winnings and other account transactions.
• Usage data: gaming activity, session information, preferences and interactions with platform features.
• Verification data: passports, national identity cards, proof of address and other documents used for KYC, AML or source-of-funds checks.
• Technical data: IP address, device information, browser configuration, operating system and security or diagnostic information.
• Communication data: information you provide when contacting customer support or submitting a request or complaint.
• Cookie data: identifiers and information collected through cookies and similar technologies.

3. How We Collect Personal Data

We collect information directly from you when you register, complete verification, make a payment, place a bet, use account features, participate in a promotion or contact us.

Some information is collected automatically when you access the platform, including technical, session and cookie data. We may also receive verification or payment-related information from trusted service providers where this is necessary to deliver services or meet legal obligations.

4. Why We Use Personal Data

Personal data may be processed to:

• create, administer and secure your account;
• provide games, betting features and other requested services;
• process deposits, withdrawals and other transactions;
• verify identity, age, address and source of funds;
• meet AML, KYC and other legal or regulatory requirements;
• detect, investigate and prevent fraud, abuse and security incidents;
• provide customer support and resolve requests or complaints;
• administer responsible-gaming measures, including limits and self-exclusion;
• analyse and improve the platform’s performance and user experience; and
• personalise content and, where permitted, send relevant service or promotional communications.

Where applicable, we process data because it is necessary to provide our services, comply with a legal obligation, protect legitimate interests or act on your consent. If processing is based on consent, you may withdraw that consent at any time, without affecting processing completed before the withdrawal.

5. Promotions and Marketing Preferences

We may use account details, preferences and usage information to manage promotions and communicate relevant offers where this is permitted. Eligibility, wagering requirements and other offer-specific conditions are explained in the Terms for Bonuses.

You may opt out of promotional emails or messages through the available account settings, an unsubscribe option or customer support. Opting out of marketing does not prevent us from sending essential account, security, legal or service notifications.

6. Sharing Personal Data

We disclose personal data only where there is a legitimate operational, legal or regulatory reason. Recipients may include:

• payment processors and financial institutions;
• identity, age, address and source-of-funds verification providers;
• fraud-prevention, security, hosting and technical service providers;
• regulators, courts, law-enforcement agencies or other competent authorities where disclosure is lawfully required; and
• a purchaser, successor or relevant adviser in connection with a merger, acquisition, restructuring or sale of Company assets.

Service providers may process data only for the authorised purpose and are expected to apply appropriate confidentiality and security measures.

7. Data Security

We use technical, administrative and physical safeguards intended to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. These measures include encryption of sensitive information in transit and at rest, access controls, confidentiality requirements, security audits and risk assessments.

We also maintain procedures for investigating and responding to security incidents. If a data breach creates a notification obligation, affected Clients and the relevant authorities will be informed as required by applicable law. Additional information about our platform-related security commitments is available on the Guarantees page.

No security system can eliminate every risk. You should use a strong, unique password, protect your login details and notify us promptly if you suspect unauthorised access to your account.

8. How Long We Retain Data

We retain personal data only for as long as it is needed for the purposes described in this Policy and to meet contractual, legal, accounting, AML, regulatory and dispute-resolution requirements.

Account and verification records are normally retained for at least five years after account closure. A longer period may apply where required by law, a regulator, an unresolved complaint, an investigation or another legitimate legal obligation.

9. Your Privacy Rights

Depending on the laws that apply to you, you may have the right to:

• request access to personal data held about you;
• correct inaccurate or incomplete information;
• request erasure where the Company has no legal or regulatory reason to retain the data;
• request restriction of processing in certain circumstances; and
• withdraw consent where consent is the basis for processing.

A request may require identity verification before it can be completed. Some rights are not absolute, and the Company may retain or continue processing information where required by law, AML/KYC obligations, fraud prevention, dispute handling or another valid legal ground.

10. Cookies and Similar Technologies

Cookies and similar technologies help us maintain secure sessions, remember preferences, monitor performance, identify technical issues, personalise content and manage relevant advertising.

You can control cookies through your browser settings. Blocking or deleting certain cookies may affect login, account functions, preferences or the overall performance of the platform.

11. Verification and Regulatory Compliance

Identity verification is required to help the Company comply with KYC and AML obligations and protect the integrity of the platform. We may request government-issued identification, proof of address and information confirming the source of funds.

Trusted third-party providers may assist with verification. The Company may also request additional documents directly. Failure to provide required information may result in account restrictions or suspension under the applicable rules.

This Policy is governed by the laws of Curaçao. Where other data-protection laws, including the GDPR, apply to a Client, the Company will process data in accordance with those requirements. Information about the operator’s regulatory status is available on the Licence page.

12. Responsible Gaming and Self-Exclusion

Personal data may be used to provide responsible-gaming tools, process cooling-off or self-exclusion requests, identify possible attempts to bypass restrictions and prevent excluded Clients from opening or using duplicate accounts.

Information relating to responsible-gaming measures may be retained where necessary to maintain an exclusion, protect the Client and meet legal or regulatory obligations.

13. Changes to This Privacy Policy

We may update this Policy to reflect changes in law, regulation, technology or our data-processing practices. The revised version will be published on this page with an updated date.

Where required, we will provide additional notice of a material change. Continued use of the services after an updated Policy takes effect is subject to applicable law and does not limit any privacy right available to you.

14. Contact Us

If you have a question about this Policy, wish to exercise a privacy right or want to raise a concern about the processing of your data, please contact our support team or email [email protected].

Vavada Casino Online ➔ Privacy Policy