Privacy Policy

1. What we collect and why

Aureon collects three categories of personal data. Identity data (name, date of birth, government ID details) is collected at KYC for regulatory compliance under Curacao licensing rules and EU AML directives. Account and contact data (email, phone, address) supports account access, support communication and marketing where consent is given. Transaction and behavioural data (deposits, withdrawals, wagers, login times, device fingerprint) supports fraud prevention, AML monitoring, responsible-gambling oversight and aggregate analytics.

We do not sell personal data to third parties. We share data only with named processors who are contractually bound by the same protections (game studios for round verification, payment processors for transaction routing, KYC verification providers, hosting and analytics infrastructure providers).

2. Your rights

Under EU data protection law (GDPR), if it applies to you, you have the right to: access a copy of your personal data, correct inaccurate data, request deletion subject to AML retention obligations, object to or restrict certain processing, port your data to another controller, and lodge a complaint with your national data protection authority. To exercise any of these rights, email [email protected] with your Aureon username and a description of the request.

Some data must be retained for regulatory reasons (AML, dispute resolution) even after account closure. Retention periods are 7 years from last transaction for identity and transaction data, 24 months for behavioural data unrelated to AML monitoring, indefinite for self-exclusion records.

3. Cookies and tracking

Aureon uses three cookie categories. Strictly necessary cookies support login, language preference, the cashier and security; these are always on. Performance and analytics cookies measure aggregate site usage; opt-in via the consent banner on first visit. Marketing cookies support retargeting and affiliate attribution; opt-in only.

You can review and change cookie preferences at any time via the Cookie Preferences link in the footer. Browser-level controls (Do Not Track, third-party cookie blocking) are respected where the browser sends them.

4. Security and contact

Account data is encrypted in transit (TLS 1.3) and at rest (AES-256). Payment data is handled by PCI-DSS certified processors; Aureon never stores raw card numbers on its own systems. Suspicious-login alerts are sent to the registered email any time a new device or geography accesses the account. Contact the privacy team at [email protected] for any data-protection question or to exercise your rights.