Crusado Privacy Policy
We process personal data in accordance with the General Data Protection Regulation (GDPR) and the licensing framework under which we operate. Crusado is registered and licensed in Curaçao under license number 8048/JAZ. This policy sets out how we collect, use, store and protect information when you access our platform from the United Kingdom.
1. Nature and scope of personal data collected
When you register with us, we collect a defined set of personal data necessary to open and operate your account. We limit collection to what is required for account administration, payment processing, identity verification and regulatory reporting.
Our obligations under GDPR require us to be specific about what we gather and why. The categories below reflect data obtained directly from you, generated through your activity on our platform, and in some cases confirmed through third-party verification services. We do not collect information beyond what supports these legitimate functions.
- Identity details such as full name, date of birth and residential address
- Contact information including phone number and postal address
- Payment and transaction data linked to deposits and withdrawals
- Account credentials and security verification records
- Technical data such as IP address, device type and browser information
- Gameplay and wagering history
We ask that you keep your account details accurate and current. Outdated information can delay verification or payment processing.
2. Purposes and objectives of data processing
Our commitment is to process data only where a lawful basis exists under GDPR. This includes contractual necessity, legal obligation, legitimate interest and, where applicable, your consent.
Each piece of information we hold serves a specific operational purpose. We use transaction data to process payments correctly, identity data to meet anti-money laundering requirements, and technical data to maintain platform security. Our obligations under United Kingdom-facing regulatory expectations also require us to retain certain records for audit purposes.
- Account creation, verification and ongoing administration
- Processing deposits, withdrawals and payment disputes
- Meeting anti-money laundering and know-your-customer obligations
- Preventing fraud and unauthorised account access
- Delivering customer support and responding to enquiries
- Sending account-related and promotional communications, where consented to
3. Security measures and technical integrity
We maintain technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction. This includes encryption of sensitive data in transit, restricted internal access controls, and regular monitoring of our systems for irregular activity. Our obligations under GDPR require these safeguards to be proportionate to the risk, and we review them on an ongoing basis as our platform and threat landscape evolve.
4. Sharing information with third parties
We do not sell personal data. Information is shared only where necessary to operate our services, meet legal obligations, or deliver functions we cannot perform internally.
Our obligations under GDPR require that any third party processing data on our behalf is bound by data protection agreements consistent with our own standards. These parties are contractually restricted from using your data for purposes beyond what we authorise.
- Payment processors and banking partners
- Identity verification and anti-fraud service providers
- Regulatory bodies and law enforcement authorities, where legally required
- IT infrastructure and hosting providers
- Marketing and analytics service providers, where consent applies
5. Cookie management and similar technologies
We use cookies and similar technologies to operate our platform, remember your preferences and understand how our services are used. Some cookies are strictly necessary for core functions such as login and security, while others support analytics and personalised content.
What this means for you is control over non-essential cookies through your browser settings or our cookie preference tool. We process cookie data in accordance with applicable e-privacy rules alongside GDPR, and we do not deploy tracking technologies beyond what is disclosed in our cookie notice.
6. Data retention period
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including legal, regulatory and accounting requirements. Retention periods are not arbitrary. They are set according to the specific category of data and the obligation that governs it.
Account and transaction records are typically retained for a minimum period following account closure to satisfy anti-money laundering and financial reporting obligations under applicable law. Identity verification documents are held for a defined statutory period after your last activity with us. Where data is no longer required for these purposes, we take steps to securely delete or anonymise it. Our obligations under GDPR require that retention periods be documented, proportionate and subject to periodic review, which we carry out as part of our internal compliance processes.
Where you request erasure and no overriding legal obligation applies, we will remove your data within the timeframes required by law.
7. User rights over their data
Your data is yours, and GDPR grants you specific rights over how it is handled. We are obligated to respond to valid requests within statutory timeframes, generally within one month of receipt.
To exercise any of these rights, you can contact our support team through the channels listed in your account or on our platform. We may need to verify your identity before processing certain requests, particularly those involving erasure or data portability.
- Right of access to the personal data we hold about you
- Right to rectification of inaccurate or incomplete data
- Right to erasure, subject to legal retention obligations
- Right to object to certain processing activities
- Right to data portability, where technically feasible
8. International data transfers
Our operations and service providers are not confined to a single jurisdiction. As a result, personal data may be transferred to and processed in countries outside the United Kingdom and the European Economic Area.
Where such transfers occur, we rely on recognised legal mechanisms to ensure an adequate level of protection, including Standard Contractual Clauses approved under GDPR or equivalent safeguards where the receiving jurisdiction has not been granted an adequacy decision. Our obligations under GDPR require us to assess the data protection standards of any third country before transferring data there, and we review these arrangements periodically as part of our compliance obligations. Service providers processing data outside the UK or EEA are contractually bound to maintain protections consistent with the standards described in this policy.
Where you have questions about a specific transfer involving your data, you may request further detail through our contact channels.
9. Privacy policy updates
We may update this policy periodically to reflect changes in our practices, technology, legal requirements or regulatory guidance. Material changes will be communicated through our platform, and the revised version will indicate the date it takes effect. Continued use of our services after changes take effect constitutes acknowledgement of the updated policy.
10. Contact information
If you have questions about this policy, how your data is handled, or wish to exercise any of your rights under GDPR, you can reach our data protection team through the contact options available in your account dashboard or on our platform. We aim to respond to all privacy-related enquiries within the statutory timeframes required by applicable law.
Responsible Gambling
Gambling should always remain an enjoyable activity. If you feel your gambling is becoming a concern, free and confidential support is available through GamCare at 0808 8020 133. We encourage all players to use the account controls available on our platform, including deposit limits, time-outs and self-exclusion tools.
Our services are restricted to individuals aged 18 and over.