Privacy Policy

Version: 1.0  |  Last updated: November 11, 2026

1. Introduction

NV Casino (hereinafter "we", "us" or "the Company"), operated via the website nvcasino-apps.de, takes the protection of your personal data very seriously. This Privacy Policy explains which personal data we collect, for what purposes we process it, how we protect it, and which rights you have under the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

By using our platform, you confirm that you have read and understood this policy. This Privacy Policy forms part of our legal documentation and is supplemented by our Terms and Conditions and our Responsible Gaming Policy. Please read all three documents carefully.

2. Data We Collect

We only collect personal data to the extent necessary to provide our services, following the principle of data minimization under Art. 5 (1) (c) GDPR. Depending on how you interact with our platform, the following categories of data may be affected:

2.1 Registration and Account Data

• Full name and date of birth
• Email address and phone number
• Home address (street, postcode, city, country)
• Username and password (stored in encrypted form)
• Preferred communication language

2.2 Identity and Verification Data

• Copy of an official photo ID (ID card, passport)
• Proof of address (e.g. utility bill, bank statement)
• Age verification data in line with regulatory requirements
• Documents collected for anti-money laundering (AML) purposes, where required by law

2.3 Financial Data

• Payment method and related identifiers (e.g. masked card number, partial IBAN)
• Transaction history: deposits, withdrawals, bonus usage
• Currency and amount information

We never store full payment data (e.g. complete card numbers, CVV); this data is processed exclusively by certified payment service providers.

2.4 Usage and Player Data

• Game history, bets, wins and losses
• Session duration and login times
• Preferences for game categories and features used
• Communication history with customer support

2.5 Technical Data

• IP address and geolocation data
• Device identifier (device ID), operating system and browser type
• Cookie data and similar tracking technologies (see Section 6)
• Referral URL and navigation paths on the website

2.6 Communication Data

• Content of messages you send us via live chat, email or forms
• Recordings of phone calls with customer support (where legally permitted and you have been informed)
• Marketing consents and communication preferences

3. How We Use Your Data

We process your personal data only for clearly defined and legitimate purposes. The table below gives you a structured overview:

We do not process your data for any purposes other than those stated above, unless we inform you beforehand and, where required, obtain your consent.

4. Legal Bases for Processing

All processing of personal data is based on at least one of the following legal bases under Art. 6 GDPR:

4.1 Contract Performance (Art. 6 (1) (b) GDPR)

Processing is necessary to fulfill the contractual obligations between you and us, in particular providing our games, processing payments and offering customer support.

4.2 Legal Obligation (Art. 6 (1) (c) GDPR)

We are legally required to process and retain certain data, for example to comply with rules on combating money laundering and terrorist financing (GwG), tax reporting and age verification.

4.3 Legitimate Interests (Art. 6 (1) (f) GDPR)

Where your interests do not override ours, we process data on the basis of legitimate interests, e.g. for fraud prevention, IT security, improving our services and maintaining the proper operation of the platform.

4.4 Consent (Art. 6 (1) (a) GDPR)

For certain processing activities, in particular direct marketing and non-essential cookies, we obtain your explicit consent. Consent is voluntary and can be withdrawn at any time without giving reasons and without any disadvantage to you. Withdrawal does not affect the lawfulness of processing carried out before it.

5. Data Sharing and Third Parties

We never sell your personal data to third parties. Data is shared only in the following clearly defined cases and only to the extent necessary:

5.1 Processors

We work with carefully selected service providers who process data on our behalf. These include:

• Payment service providers (e.g. credit card providers, e-wallet providers such as PayPal, Klarna, Skrill, NETELLER, Trustly, Paysafecard, giropay, Sofortüberweisung, SEPA direct debit, Visa/Mastercard) for secure payment processing
• KYC and identity verification providers for age and identity checks
• IT and hosting providers for the secure operation of the platform
• Analytics and marketing service providers, where you have given consent
• Customer support software providers for handling inquiries

All processors are contractually bound to comply with the GDPR and may only use your data in accordance with our instructions.

5.2 Authorities and Legal Requirements

We are obliged to respond to justified and lawful requests from public authorities, law enforcement bodies or regulators. Data is disclosed in this context only where required by law.

5.3 Corporate Transactions

In the event of corporate restructurings, mergers or acquisitions, data may be transferred to a legal successor. In such a case, you will be informed in good time.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to give you the best possible user experience. Cookies are small text files stored on your device.

6.1 Types of Cookies

• Necessary cookies: Technically required to operate the platform (e.g. session management, authentication). No consent required.
• Functional cookies: Store your preferences (e.g. language, currency selection). Require your consent.
• Analytical cookies: Enable anonymized analysis of user behavior (e.g. Google Analytics). Require your consent.
• Marketing cookies: Used by third parties to deliver interest-based advertising. Require your explicit consent.

6.2 Managing Cookies

When you first visit our website, a cookie consent banner informs you about the cookies in use and lets you reject non-essential cookies or choose them selectively. You can adjust your cookie settings at any time via the relevant link in the footer of our website or disable cookies in your browser. Please note that disabling necessary cookies may limit the functionality of the platform.

7. Data Security

Protecting your personal data is our highest priority. We apply technical and organizational measures (TOMs) that reflect the current state of the art and are appropriate to the risk of the processing.

7.1 Technical Safeguards

• SSL/TLS encryption for all data transmissions between your browser and our servers
• Encrypted data storage for particularly sensitive categories of data
• Use of firewalls, intrusion detection systems and regular security audits
• Two-factor authentication (2FA) as an optional security layer for your account
• Regular penetration tests and vulnerability assessments

7.2 Organizational Safeguards

• Strict access restriction principle (need-to-know basis) for employees
• Regular data protection training for all employees with access to data
• Documented internal data protection policies and a record of processing activities
• Defined processes for reporting data breaches in accordance with Art. 33 and 34 GDPR

In the event of a data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay and take all necessary measures.

8. Data Retention and Deletion

We store your personal data only for as long as necessary for the respective processing purposes or as required by statutory retention obligations. Once the retention period has expired, data is securely and irretrievably deleted or anonymized so that it can no longer be linked to an individual.

• Active accounts: Data is stored for the duration of the business relationship.
• Closed or inactive accounts: Generally up to 5 years after account closure, unless statutory retention periods (e.g. under AO, GwG) require otherwise.
• Tax and accounting records: At least 10 years under Section 147 AO.
• AML-relevant records: At least 5 years under Section 8 GwG.
• Cookie data: According to the lifespan defined for each cookie (visible in the cookie banner).

9. Your Rights as a Data Subject

The GDPR grants you comprehensive rights regarding your personal data. We take these rights seriously and process related requests within one month of receipt. For complex requests, this period may be extended by up to two further months; we will inform you if this is the case.

9.1 Right of Access (Art. 15 GDPR)

You have the right to request confirmation of whether and which personal data we process about you, and to receive a copy of that data. We will also inform you about the purposes of processing, categories of data, recipients, retention periods and your further rights.

9.2 Right to Rectification (Art. 16 GDPR)

If the data we hold about you is inaccurate or incomplete, you have the right to have it rectified without undue delay. Please update your data primarily directly in your account settings or contact our customer support.

9.3 Right to Erasure (Art. 17 GDPR)

You may request the deletion of your personal data if it is no longer necessary for the original purposes, if you have withdrawn your consent or if the processing was unlawful. This right does not apply where statutory retention obligations prevent deletion.

9.4 Right to Restriction of Processing (Art. 18 GDPR)

You may request that the processing of your data be restricted, e.g. if you contest the accuracy of the data, if the processing is unlawful, or if you have objected to the processing and the review is still pending.

9.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller, provided the processing is based on consent or a contract and is carried out by automated means.

9.6 Right to Object (Art. 21 GDPR)

You have the right to object to the processing of your data where it is based on legitimate interests (Art. 6 (1) (f) GDPR). If you object to direct marketing, your data will no longer be processed for that purpose without undue delay; no specific reason is required.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw it at any time with effect for the future, without any disadvantage to you. Processing carried out before the withdrawal remains lawful.

9.8 Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent data protection supervisory authority. The competent authority for Germany is the Federal Commissioner for Data Protection and Freedom of Information (BfDI), available at www.bfdi.bund.de, as well as the data protection authority of your federal state of residence.

To exercise any of your rights, please contact: [email protected]

10. International Data Transfers

When using the services of external processors, it may be necessary to transfer personal data to countries outside the European Economic Area (EEA). We ensure an adequate level of data protection by relying on one of the following mechanisms:

• EU Commission adequacy decision: Transfers to countries for which the EU Commission has determined an adequate level of protection (Art. 45 GDPR)
• Standard Contractual Clauses (SCC): Use of the standard contractual clauses approved by the EU Commission as an appropriate safeguard (Art. 46 (2) (c) GDPR)
• Binding Corporate Rules (BCR): Where recipients operate within a corporate group with approved BCR

Upon request, we will provide you with information about the safeguards in place. Please send your request to [email protected].

11. Minors

Our services are intended exclusively for persons who have reached the minimum age of 18 years. Registration and use of our platform by minors is strictly prohibited. We use technical and procedural age verification measures to ensure that minors cannot access our offering.

If we become aware that personal data of minors has been collected by mistake, we will delete it promptly and completely. If you have reason to believe that a minor has registered an account with us, please contact us immediately at [email protected]. You can find more information on the protection of minors in our Responsible Gaming Policy.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements or technological developments. The current version is always available on this page at /privacy-policy. The version number and the date of the last update shown at the top of the document are adjusted with every change.

In the case of material changes that significantly affect your rights or the nature of the data processing, we will inform you via the email address you have provided or through a prominent notice on the platform. Where a change requires renewed consent, we will obtain it before the change takes effect. Continued use of our platform after notification of minor changes constitutes acknowledgment, but not consent to processing for which consent is required.

13. Contact Information

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, we are happy to help. For general inquiries, please use:

• Email (General Support): [email protected]
• Email (Data Protection / DPO): [email protected]
• Website: nvcasino-apps.de

Please send requests regarding your data subject rights (access, deletion, rectification, etc.) exclusively to [email protected] so that they can be handled quickly and confidentially. Please include your username and the email address your account is registered with in your request, so that we can verify your identity before disclosing or processing your data.

Frequently Asked Questions (FAQ)

What data does NV Casino collect at registration?

At registration, we collect your name, email address, date of birth, home address and username. As part of age and identity verification, copies of ID documents and proof of address may also be required. See Section 2 for details.

Is my data sold to third parties?

No. We never sell your personal data to third parties. Data is shared only with carefully selected processors (e.g. payment service providers) who are contractually bound to GDPR compliance, and with authorities within the framework required by law.

How can I have my account and data deleted?

You can request the deletion of your account and personal data at any time by sending an email to [email protected]. Please note that certain data cannot be deleted immediately due to statutory retention obligations (e.g. under AO or GwG). In that case, we will transparently inform you of the reasons and time limits.

How can I withdraw my consent to the newsletter?

You can withdraw your consent to receive marketing communications at any time, either via the unsubscribe link in every promotional email or directly in your account settings under "Communication Preferences". Withdrawal is free of charge and requires no explanation.

How long is my data stored?

For active accounts, data is stored for the entire duration of the business relationship. After account closure, retention periods of 5 to 10 years generally apply, depending on the category of data and the applicable legal requirements. See Section 8 for details.

What should I do if I suspect my data has been misused?

Contact our customer support immediately at [email protected]. We will take immediate security measures and inform you of all necessary steps. If a data breach posing a high risk to your rights is identified, we will notify you without undue delay in accordance with Art. 34 GDPR.