Privacy Policy

This Privacy Policy outlines how Boomerang Casino Ireland along with its affiliated entities and subsidiaries (referred to as "we", "us", "our", or "the Company") collects, uses, and protects your personal information.

This policy is applicable to all individuals who register as users ("Players") on our platform, as well as visitors browsing our website.

Our Identity and Contact Information

As the website operator, we act as the Data Controller for your personal information. This means we determine the purposes and methods of processing your data as described throughout this policy. Working alongside our joint controllers, we ensure the protection and proper management of all personal data entrusted to us.

For inquiries regarding this Privacy Policy or to exercise your data protection rights, please reach out to our Data Protection Officer at: [email protected]

Categories of Personal Information We Collect

Information You Directly Provide

Depending on your interaction with our services, we may collect the following types of personal data:

Account Registration Information: When setting up your account, we require certain details including your email address, full name, date of birth, country of residence, telephone number, gender, social security number, postal code, and chosen username. Additionally, we automatically capture your IP address and location data during registration.

Verification and Compliance Data: To meet our regulatory requirements for Know Your Customer (KYC) procedures, age verification, anti-money laundering compliance, and license obligations, we collect identification documents such as passport numbers, driver's license details, identity card information, proof of residence, social security numbers, source of funds documentation, Bank ID verification, and financial statements.

Payment and Banking Details: We gather financial data including Bank ID, CPR numbers, CPF numbers, IBAN codes, and payment method information to process your deposits and withdrawals. This data also supports our KYC and AML compliance efforts.

Automatically Collected Information

Device and Technical Data: We automatically receive information about your device, including IP addresses, operating system versions, and unique device identifiers when you access our platform.

Activity Logs and Usage Patterns: Our servers maintain automatic logs of your interactions with our services to help us understand usage patterns and improve our offerings. This encompasses your browsing activities, content views, advertisement clicks, search queries, social media sharing activities, session timestamps, page navigation, links accessed, and session duration. Some of this data is collected through cookies and similar tracking technologies.

Geographic Information: We may collect or determine your approximate location when you use our services.

Information From External Sources

To deliver personalized services and fulfill legal requirements, we may obtain your personal information from external sources, including:

  • Public records, government databases, internet sources, social media platforms, and published media
  • Commercial databases, financial institutions, credit agencies, fraud prevention services, and public authorities for identity verification and fraud prevention purposes
  • Derived information and inferences based on collected data, such as gaming preferences and interests determined by your browsing patterns and gameplay
  • Publicly available information from social media accounts (Facebook, Google, LinkedIn) and other digital platforms

Purpose of Data Collection

We utilize your personal information for the following purposes:

  • Delivering and maintaining our gaming services
  • Addressing your inquiries and support requests
  • Conducting testing, research, troubleshooting, and data analysis for service enhancement
  • Preventing, identifying, and managing risks related to fraud, harmful conduct, and illegal activities
  • Distributing marketing materials, newsletters, and personalized promotional content
  • Resolving disputes and cooperating with law enforcement or regulatory investigations
  • Meeting regulatory compliance and legal requirements
  • Ensuring platform security, technical functionality, system protection, and safeguarding intellectual property against unauthorized access

Legal Grounds for Processing Personal Data

In accordance with GDPR and applicable data protection regulations, we process your personal information only when we have a valid legal basis. Multiple legal grounds may apply to certain processing activities. Our legal bases include:

Contractual Necessity

We process personal data to fulfill or establish a contractual relationship with you, including account creation, account maintenance, communication regarding our terms and conditions, and service provision.

Compliance with Legal Requirements

Processing may be necessary to satisfy legal obligations, including:

  • Age and identity verification as part of KYC and AML requirements
  • Location determination and applicable jurisdiction assessment using IP data
  • Risk management, problem gambling prevention, and responsible gaming promotion
  • Network and information security maintenance
  • Compliance with legal processes including warrants, subpoenas, and court orders
  • Prevention of money laundering, terrorist financing, fraud, and cybercrime
  • Mandatory reporting to meet regulatory, financial, technical, and legal standards
  • Processing requests related to your data protection rights

Legitimate Business Interests

When necessary, we process your personal data to protect legitimate interests of our company or third parties, provided your rights and freedoms are not compromised. Examples include:

  • Initiating legal proceedings and preparing legal defense strategies
  • Implementing IT security measures for crime prevention, asset protection, intellectual property safeguarding, and ensuring technical availability and proper website functioning
  • Managing business operations and enhancing our products and services
  • Performing analytics, data aggregation, and research for service improvement and marketing purposes
  • Customer segmentation for risk management, harmful behavior identification, and responsible gaming enforcement
  • Analyzing gaming patterns using machine learning to recommend suitable games and features
  • Detecting and preventing fraudulent activities, unauthorized software usage, abnormal patterns, and cheating

Your Consent

With your explicit consent, we engage in the following activities:

  • Sending direct marketing communications via email, SMS, phone calls, website notifications, or app alerts
  • Customizing offers and promotions based on your gaming history and preferences
  • Utilizing behavioral data to display targeted advertisements aligned with your interests
  • Personalizing marketing campaigns and evaluating their effectiveness
  • Managing your participation in competitions, tournaments, reward programs, loyalty schemes, and promotional events

Data Sharing Practices

We may share your personal information with the following categories of recipients:

  • Internal parties including authorized employees, brands within our corporate structure, contractors, agents, joint controllers, affiliates, and subsidiary companies within our business group
  • Payment processors and financial institutions. We share personal data such as first name, last name, date of birth, email, address, postal code, city, country, phone number, and aliases with trusted third-party payment providers. KYC documents may also be shared to enable their legal and AML compliance
  • Third-party service providers essential for service delivery, management, and improvement, including customer support providers, email and SMS delivery services, voice call providers, technology vendors, and cloud hosting platforms
  • Marketing partners
  • Fraud prevention agencies
  • Third parties involved in corporate transactions such as mergers, financing arrangements, acquisitions, bankruptcy proceedings, asset transfers, divestitures, or sales
  • Game providers
  • Data aggregators and analytics providers for market research, data analysis, and service enhancement
  • Law enforcement agencies, regulatory bodies, and licensing authorities

If you submit complaints, reviews, or queries about our services to third-party platforms (casino review sites, gambling forums, or dispute resolution services), we may need to respond directly to these platforms. In such cases, we will disclose only the personal data strictly necessary to identify your account and provide an appropriate response. These disclosures are based on our legitimate interest in protecting our reputation and resolving external disputes transparently and responsibly. We do not initiate such disclosures unless you or someone on your behalf has made a submission or public allegation, and any shared data will be proportionate and necessary for providing factual clarity.

Data Retention Period

We retain your personal information for as long as you maintain an active account with us and for the duration necessary to fulfill the purposes outlined in this policy.

We may extend the retention period as required by applicable legal obligations, including anti-money laundering regulations and other regulatory mandates.

Once your account is closed and there is no longer a legal or business justification for retention, your personal data will be either permanently deleted or anonymized to prevent identification.

Your Privacy Rights

You possess the following rights regarding your personal data:

  • Access: Request access to your personal data and information about how we process it
  • Rectification: Correct any inaccurate or incomplete personal information
  • Erasure: Request deletion of your personal data when there is no compelling legal or business justification for continued processing
  • Restriction: Limit the processing of your personal data under certain conditions
  • Data Portability: Request transfer of your personal data to another party in a structured, commonly-used, machine-readable format
  • Objection: Object to the processing of your personal data, particularly when based on legitimate interests or for direct marketing
  • Consent Withdrawal: Withdraw your consent at any time without affecting the lawfulness of prior processing based on that consent
  • Complaint: Lodge a complaint with a supervisory authority in your EU member state of residence, workplace, or where the alleged infringement occurred

To exercise these rights, contact our Customer Support at [email protected] or our Data Protection Officer at [email protected]

Cookies and Tracking Technologies

We utilize cookies, tags, pixels, web beacons, and similar technologies to optimize your experience on our website and applications. During your first visit, we will request your consent for non-essential cookies. Strictly necessary cookies required for website operation do not require consent. For detailed information about the specific cookies we use, their purposes, and preference management, please consult our Cookie Notice.

Contact Details

For questions about this Privacy Policy or our data handling practices, please contact us at [email protected] or [email protected]