1. Who we are
The data controller is REPLACE WITH LEGAL OPERATOR NAME N.V., registered at REPLACE WITH REGISTERED ADDRESS, Curaçao. Contact the Data Protection Officer at dpo@spaceclover.com.
2. What we collect
- Account data — email, name, date of birth, country, currency, language.
- KYC data — government ID, proof of address, and any supporting documents you upload. Stored encrypted.
- Financial data — deposits, withdrawals, wagers, wins, losses. Retained for at least five years under anti-money-laundering law.
- Device data — IP address, device user-agent, approximate country from GeoIP, session IDs.
- Behavioural data — game plays, bonus use, responsible-gambling limit changes, self-exclusion.
3. Lawful basis
We process personal data under the following lawful bases (GDPR Art. 6):
- Contract — to run your account, process payments, and operate games.
- Legal obligation — KYC, anti-money-laundering, regulatory reporting, responsible gambling.
- Consent — marketing emails and non-essential cookies. You can withdraw consent at any time.
- Legitimate interest — fraud prevention, service improvement, security monitoring.
4. Who we share with
Payment processors, KYC providers, game suppliers, cloud infrastructure providers, and regulators. We never sell your data.
5. Your rights
You have the right to access, correct, delete, port, restrict, or object to the processing of your personal data, and to withdraw marketing consent. Some rights are limited by our legal retention obligations.
6. Retention
Account and transaction data is retained for at least five years after account closure, as required by anti-money- laundering law. KYC documents are retained for the same period.
7. Cookies
See the separate Cookie Policy.
8. Complaints
You can contact the Curaçao data protection authority if you believe we are not handling your data lawfully.