Privacy Policy

Privacy Policy
Last updated: 04.22.26

Definitions

Personal Data refers to any information relating to an identified or identifiable individual (“data subject”). An identifiable person is someone who can be recognized directly or indirectly, particularly through identifiers such as a name, identification number, location data, online identifier, or factors relating to their physical, physiological, genetic, mental, economic, cultural, or social identity.

Processing means any operation performed on personal data, whether automated or not. This includes collection, recording, organization, structuring, storage, modification, retrieval, consultation, use, disclosure, dissemination, alignment, restriction, erasure, or destruction.

Profiling refers to automated processing of personal data used to evaluate personal aspects of an individual, such as work performance, financial status, health, preferences, interests, reliability, behavior, location, or movements.

Controller is the entity that determines the purposes and methods of processing personal data.

Processor is any entity that processes personal data on behalf of the controller.

Recipient means any entity to which personal data is disclosed, excluding authorities acting under legal obligations.

Third party refers to any entity other than the data subject, controller, processor, or authorized persons.

Consent means a freely given, informed, and explicit indication of agreement by the data subject to process their personal data.

Personal data breach refers to a security incident resulting in loss, alteration, unauthorized access, or disclosure of personal data.

Group of undertakings refers to a parent company and its subsidiaries.

Supervisory authority is an independent public body responsible for monitoring data protection compliance.

General

This Privacy Policy, together with our Terms and Conditions, explains how we collect, use, and protect your personal data. By registering an account, you agree to this policy. If you do not accept it, access to certain services may be restricted.

This policy may be updated periodically. We encourage you to review it regularly. Continued use of the website indicates acceptance of any changes.

We are committed to handling your personal data lawfully, transparently, and fairly, in accordance with applicable data protection laws, including the GDPR.

Our services are intended only for individuals aged 18 and above. We do not knowingly collect data from minors.

About Us

The website www.rollero.com is operated by Hollycorn N.V., registered in Curaçao under number 144359, with its registered address at Scharlooweg 39, Willemstad. The company is licensed by the Curaçao Gaming Control Board.

As a data controller, we are legally required to process personal data to provide gaming services.

We have appointed a Data Protection Officer (DPO) responsible for overseeing compliance. You may contact the DPO at:
[email protected]

Contact Us

You may contact us to:

Verify your personal data
Understand how your data is used
Restrict marketing communications
Request a copy of your data
Update or correct your information

You can reach us via:

Email: [email protected]
Live Chat
DPO: [email protected]

If you do not receive a response within 10 days, please follow up through another method.

We aim to respond within one month, though complex requests may take longer.

Information We Collect

Information you provide:
Includes data submitted during registration, transactions, communications, and verification processes. This may include:

Name, address, date of birth
Email and phone number
Financial details
Identification documents
Proof of funds and photographs

Technical data:
Includes IP address, browser type, device information, and usage details.

Gameplay data:
Includes games played, duration, and interactions.

Analytics data:
Includes activity logs, timestamps, and usage behavior.

Third-party data:
Includes data from partners, advertisers, verification services, and analytics providers.

Categories of Personal Data

We process the following categories:

Identity Data: name, username, date of birth, gender
Contact Data: address, email, phone number
Financial Data: income, payment details, bank information
Transaction Data: deposits, withdrawals, gameplay activity
Technical Data: IP address, device and browser details
Usage Data: interaction with the website and services
Marketing Data: preferences for communications
Special Data: responsible gaming data, and potentially ethnicity data from documents

How We Use Your Data

We use your data to:

Provide and manage services
Process transactions
Verify identity and prevent fraud
Comply with legal obligations (AML, regulatory requirements)
Improve website functionality
Deliver marketing (with consent)
Analyze user behavior and create profiles

Profiling may be used for fraud detection, responsible gaming, and AML compliance, but final decisions involve human review.

Legal Basis for Processing

We process data based on:

Contractual necessity
Legal obligations
Legitimate interests
Consent (for marketing and certain profiling activities)

Data Sharing

We may share your data with:

Group companies
Employees (authorized personnel only)
Game providers
Payment processors
Marketing partners (with consent)
Regulators and authorities
Verification and fraud prevention services
Professional advisors

All third parties are required to process data securely and only for specified purposes.

International Transfers

Your data may be transferred outside the EU/EEA. We ensure appropriate safeguards, such as standard contractual clauses, to protect your data.

Data Retention

We retain your data only as long as necessary, including:

Legal and regulatory requirements
AML obligations (minimum 5 years after account closure)

Data may be retained longer if required for legal investigations.

Your Rights

You have the right to:

Access your data
Correct inaccurate data
Request deletion (subject to legal limits)
Object to processing
Restrict processing
Request data portability
Withdraw consent
File a complaint with a supervisory authority

We may require identity verification before fulfilling requests.

Automated Decision-Making

We generally do not rely solely on automated decisions. If we do, you will be informed where required.

Data Security

We implement strong security measures to protect your data from unauthorized access, loss, or misuse.

Access is limited to authorized personnel. All staff are bound by confidentiality agreements.

Accounts are protected by login credentials, and we recommend enabling two-factor authentication (2FA). You are responsible for keeping your login details secure.