Privacy Policy

Introduction to Our Data Practices

This privacy statement outlines how Casino Moons collects, uses and protects player data. It is written for slots enthusiasts interested in providers, RTP, megaways and jackpots, and for anyone engaging with our massive live casino and game-show selection. Operated by Blacknote Entertainment Group Limited and licensed under Costa Rica Gambling, our approach balances player experience with compliance and security.

We recognize that players value transparency. This document explains categories of data we handle, the reasons for processing, where data may go, and the rights you can exercise. For direct requests, contact [email protected].

What We Collect

We collect identity and contact information at registration, such as full name, date of birth, and email address. Verification documents submitted for account validation are collected when needed. Transactional data records deposits, wagers, wins and withdrawals. Gameplay metadata includes game IDs, provider identifiers and session logs, which are important for auditing RTP and progressive jackpot settlements.

Technical data is captured to secure accounts and enhance the mobile experience: IP addresses, device type, browser, and session timestamps. Cookies and similar technologies capture interaction data to remember preferences, measure engagement with game-show features and optimize load times for mobile casino users.

Behavioral and Preference Data

We collect behavioral signals such as favourite providers, session length, bet sizes and outcomes to personalize recommendations and VIP program offers. This enables targeted communication that matches interests in specific providers like Microgaming (Games Global), Pragmatic Play or IGT, and in features such as megaways or progressive jackpots.

How We Use Personal Data

Data supports core functions: account management, payment processing, game operation and regulatory compliance. Transactional and gameplay data ensure correct balance management, award payouts and maintain the integrity of jackpots. Operational analytics inform which providers and titles perform best so we can prioritize content from Betsoft, Habanero, Rival and others.

We use data to prevent fraud, detect collusion and monitor for bonus abuse. Signals from device data and play patterns are analyzed to identify irregular activity. We also use aggregated, anonymized data for product improvement and to drive decisions about new live casino and game-show content.

What We Share and Why

We share necessary data with trusted service partners who provide identity verification, payments and fraud analytics. Providers listed earlier receive limited technical and play-related data to run games or to deliver live-casino streams. These partners are bound by contract to keep your data secure and to process it only as instructed.

We may disclose data to comply with legal obligations, enforce policies, respond to lawful requests and protect the rights or safety of players. When transfers outside Costa Rica occur, we implement reasonable safeguards consistent with applicable law and our licence requirements.

Third-Party Game Providers

Game suppliers such as Microgaming (Games Global), Betsoft, IGT, Pragmatic Play, Habanero and Rival receive play data necessary to operate and audit games. This includes game ID, bet amounts and round results. These disclosures are narrowly tailored to support game functionality, jackpot attribution and RTP calculations.

Security Measures and Data Retention

We apply administrative and technical controls to protect personal data. Access is limited on a need-to-know basis. Sensitive documents and financial records are stored securely and deleted or anonymized after retention periods expire. Regular monitoring and risk assessments help maintain defenses.

Retention periods are purpose-driven: we keep data as long as required to deliver services, comply with obligations and resolve disputes. Where possible, we anonymize historical datasets used for analytics so individual players cannot be identified.

Your Rights and Controls

If you are an EU resident or otherwise entitled to GDPR protections, you have rights such as access, rectification, erasure and portability. You can object to certain processing activities and withdraw consent for marketing. To exercise rights, contact [email protected] and provide proof of identity for verification.

We aim to respond to verified requests promptly and in line with legal timeframes. Some requests may be subject to limitations where retention is necessary for legal compliance, fraud prevention or contract performance.

Contact and Updates

To ask about processing practices, make a rights request or raise a security concern, email [email protected]. For general navigation or account access you can also visit our home page.

We periodically update this privacy statement to reflect changes in practice or law. Material changes affecting your rights will be communicated through available channels. Regular reviews ensure our practices remain aligned with player expectations and regulatory requirements.