Privacy policy – Duelz Casino
Version 3.6, valid from 2026-02-05
Controller
Duelz Ltd, a Maltese company with company registration number C-74597, is the personal data controller responsible for the processing of your personal data. Duelz is part of Duelz group (“SuprNation”) and it processes your personal data in compliance with the EU General Data Protection Legislation (the “GDPR”), (Regulation 2016/679) and the Maltese Data Protection Act (Chapter 586 of the Laws of Malta) as well as the various subsidiary legislation issued under the same.
What information do we collect and why?
Information that you provide
- When you create an account: Name, gender, address, email, telephone number, date of birth, and information about your preferred currency.
- When you are contacting us: Communications with customer support and service requests.
- When you are making deposits or withdrawals: Payment methods (such as credit/debit cards), ”Know your Customer“ information (such as driver’s licence, bank account details, IP addresses, etc.)
- When you provide us with your marketing and communication preferences
Information that we collect about you
We collect your personal data through different methods, including:
- Third parties, such as providers of demographic information, money-laundering or responsible gambling checks. Such information is collected only when it is reasonably necessary for Duelz’s regulatory compliance.
- Activity on our websites (such as what games you play, what transactions you have made, if you participate in competitions, what marketing you have seen etc.)
- public sources, including government registries, databases (including tax or criminal records checks in Sweden) and social media sites (including Facebook, LinkedIn etc.)
Special Category Data
While we do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life or sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data), we acknowledge that you may inadvertently share such data with us. In such cases, the data will be immediately deleted, unless it is necessary to comply with our legal obligation.
If you fail to provide Personal Data
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide these data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, you may not be able to open an account or an existing account might need to be closed).
Why and how long we process your information
For us to be able to offer you our services, or later being able to follow up on customer support requests, we need to process your personal data. Below we describe the overall purposes, on which basis we process your personal data and how long we store such data.
| Purpose of processing | Legal basis for processing | How long do we save the information? |
|---|---|---|
| Customise your experience on the Website and improve the selection of the games and offers that you see | Legitimate interests | 1 year |
| Creating/maintaining your account | Necessary for performance of contract | Until you choose to delete your profile |
| Sending marketing communication | Consent | 2 years |
| Profiling for direct marketing | Legitimate interest | Until you choose to delete your profile or opt out of profiling |
| Verifying your identity and performing security checks | Legal obligation | 5 years |
| Perform and manage service issues | Necessary for performance of contract | 30 days |
| For troubleshooting, data analysis, statistics and to counter abuse | Legitimate interest | 1 year |
| Fraud detection, anti-money laundering or other criminal activity | Legal obligation | Up to 5 years after the account closure |
| Bookkeeping of transactions | Legal obligation | 10 years |
Who we share your information with
Regulators
As a licensed operator, we may be required to share certain personal data with regulatory authorities to comply with legal and regulatory obligations. This may include data related to your identity, account activity, transaction history, and responsible gambling measures. Such information is shared to ensure compliance with applicable gambling regulations, anti-money laundering (AML) laws, and other legal requirements. Our sharing of data with regulators is strictly limited to what is necessary and is done in accordance with data protection laws to safeguard your privacy.
Casino game providers
We use a number of different casino game providers, which are integrated to our websites. When playing these games, the service providers can access and process some of your personal data (such as your first name, last name, username, country, language, currency, IP address, contact details (phone or email) and your gender). You will be able to see the specific game provider when starting a specific game.
Payment solution service providers
We use a number of payment solution service providers. These payment solution providers will process a number of personal data, such as “Know your customer” and transaction history. The specific provider for handling of deposits or withdrawals is shown when making a withdrawal or deposit.
Marketing service providers
Third-party analytics and personalization tools to monitor user behavior, optimize game offerings, and improve the overall user experience. These services may analyze browsing patterns, game preferences, and spending habits to provide insights that inform marketing and engagement strategies.
Fraud detection and anti-money laundering service providers
To meet strict regulatory requirements, we rely on external KYC (Know Your Customer) and AML providers to verify customer identity, address, and source of funds. These providers may process personal data such as government-issued IDs, proof of address documents, and transaction details.One of such suppliers is Hooyu, providing KYC services. As Hooyu is a data controller, you can exercise your rights via Hooyu directly: .
Another is GBG for e-KYC services. As part of this service GBG and its wholly owned subsidiaries will collect and combine personal data about you to help us to onboard you safely and quickly. GBG will collect the data you provide to us and combine this with your data that you have provided to other organisations you have interacted with. This form of profiling may be used to generate risk scores or create fraud and/or identity alerts, insights and reports. More information on GBG’s processing can be found here:
Customer service and support service providers
Customer support systems used to manage customer interactions and support requests. These providers process customer data including account details, support tickets, and communications to improve service and track resolutions.
Responsible Gambling and Behavioral Monitoring Services
For compliance with responsible gambling regulations, we may work with third-party providers to monitor player behaviour, assess potential gambling risks, and take preventive action where needed. These providers may have access to data related to gameplay frequency, spending patterns, and self-exclusion status.
Law Enforcement and Legal Advisors
In cases involving suspected criminal activity, legal disputes, or regulatory investigations, personal data may be shared with law enforcement or legal advisors. This sharing is generally on a case-by-case basis and only as required by law or to protect the operator’s legal interests.
Auditors and Compliance Assessors
To fulfill regulatory requirements, we often engage third-party auditors to conduct regular compliance checks, including data protection audits. These auditors may review customer records, financial transactions, and AML/KYC processes to ensure compliance.
Technical Support and IT Infrastructure Providers
Hosting and IT support providers manage and secure the technical infrastructure required to operate gambling websites. They may access backend user data and system logs to provide maintenance, troubleshooting, and cybersecurity services.
Transfers to third countries
Some of our service providers are located in countries outside of the European Union. In such cases, we will always ensure that there are adequate safeguards in place to protect your personal data that comply with our legal obligations. Adequate safeguards include using service providers located in countries which are deemed by the European Commission to hold an adequate level of data protection legislation . In the absence of an Adequacy Decision, we will ensure that the recipients of your personal data are bound by issued by the EU Commission, as well as any additional measures as may be required.
Your rights
Since we process your personal data, it is important that you know what rights you have as a customer. Below you’ll find information about what rights you have and how they relate to the information that we process.
- Right to withdraw consent. If we rely on consent, you can withdraw your consent at any time and at no cost. Processed data based on consent will be removed, unless there is another legal basis requiring us to continue processing such data. You can withdraw your consent by changing your preferences in your profile or by contacting us.
- Right of access. You are entitled to request a copy of your personal data we have about you, and you are entitled to receive it free of charge. You can send a request for access to your information to our customer support teams or to
- Right to rectification. If we have incorrect or incomplete information about you then you are entitled to request that we correct it at any time.
- Right to erasure. You have the right to request that your information be deleted. Please note, this is not an absolute right, and we may wait with the deletion until the retention period fully expired.
- Right to object. When we process your information on the basis of legitimate interests, you have the right to object to this processing. If you object to such processing, we must either show compelling legitimate reasons that overrides the reasons you stated, or stop the processing of your data. In the case of profiling for marketing purposes, you have the right to object to this profiling, but we will still advertise on third party platforms like Facebook and Google, so you will still see our advertising, but it will not be customised according to what we think is the most interesting for you.
- Right to lodge complaints with the supervisory authority. If you are not satisfied with how we treat your personal data, we hope you tell us so that we can better manage your trust. Regardless, you always have the right to file a complaint to our Supervisory Authority, the Office of the Information and Data Protection Commissioner in Malta () or your local data protection authority.
- Right to Data Portability. You have the right to move your data from the Controller and/or any entity of SuprNation to another organisation of your choice or to download your data. Please email if you wish to exercise this right.
Security of your information
We put your personal integrity in first place and we are working actively so that your personal data is processed with utmost care. We take the measures that are needed to make sure that your personal data is handled safely and in accordance with this Notice and the General Data Protection Regulation and other applicable laws.
Children
Our services are not directed at any one under 18 years of age. We do not consciously collect personal data from people under the age of 18. If you are a parent of a child and become aware that your child has provided personal information to us, please contact us so that you may request to exercise your right of access, rectification, erasure, and / or objection.
Cookies
When you visit our web site we use certain technologies which allow us to process information about you and how you use our website. Some of this information is to enable you to our offered games or to allow you to view the web sites in different languages. These types of technologies are considered as strictly necessary for us to be able to provide the service you have requested. Other technologies such as tools which allow us to see how you interact with our web site are not considered as strictly necessary to deliver the service you have requested and as such we must obtain your consent for us to use these technologies. You can find more information about these specific technologies in our Web Site Cookie Notice, .
Automated Processing
Automated Processing for Responsible Gaming Purposes
On the basis of applicable laws and licence conditions, the Controller is legally obliged to monitor its players in order to identify people who may be experiencing, or at risk of developing, problems with their gambling, and interact with them to offer help or support. To this end, and to fulfil this obligation, by using historical data describing behaviour of players, in particular certain Responsible Gaming Data, Transaction and Usage Data, and Other Communication Data (in particular notably sentiment used in message). Decisions, on the basis of the prediction, are not taken automatically without human intervention.
Automated Processing for Anti-Money Laundering Purposes
On the basis of the applicable laws and licence conditions, the Controller is legally obliged to monitor its players in order to identify potentially suspicious activities regarding AML/CFT. Based on data describing the behaviour of players, in particular Transaction and Usage Data, the algorithm suggests a risk profile. Decisions, on the basis of the prediction, are not taken automatically and require human intervention.
Updates to the Privacy Notice
We will notify you about any changes to this Privacy Notice and ask for your acceptance of the new terms before we start the new processing.
Contact details
If you would like to exercise any of your data subject access rights or have any other questions relating to this notice; or our activities, please contact our customer service through chat or email on the website, or contact our Data Protection Officer, directly using the following email address: .
Alternatively, if you are based in the UK, you can opt for an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data) via our UK representative – Prighter. If you want to contact us or make use of your data subject rights via our UK representative, Prighter.
