Privacy Policy

Last updated: February 14, 2026

1. Introduction

Bubba's Casino ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online casino platform. This policy applies to all users globally, and we comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Data Controller

Bubba's Casino LLC is the data controller for the personal data collected through our platform. For data protection inquiries, please contact our Data Protection Officer at dpo@bubbascasino.com or through our Support page.

3. Information We Collect

  • Account Information: Name, email address, username, date of birth, and password (stored securely using bcrypt hashing).
  • Identity Verification: Government-issued ID, proof of address, and source of funds documentation as required for KYC/AML compliance.
  • Financial Data: Transaction history, deposit and withdrawal records, wallet balances, and payment method details.
  • Gaming Data: Game sessions, bet amounts, win/loss records, RNG seeds for provably fair verification, and gameplay statistics.
  • Technical Data: IP address, browser type, device information, operating system, and geolocation data (for geo-blocking compliance).
  • Communication Data: Support tickets, messages, and any correspondence with our team.
  • Behavioral Data: Login history, session duration, and responsible gambling settings.

4. Legal Basis for Processing (GDPR)

  • Contract Performance: Processing necessary to provide our gaming services, manage your account, and process transactions.
  • Legal Obligation: Processing required for KYC/AML compliance, age verification, responsible gambling obligations, tax reporting, and regulatory requirements.
  • Legitimate Interest: Fraud prevention, security monitoring, platform improvement, and customer support.
  • Consent: Marketing communications, promotional emails, and non-essential cookies. You may withdraw consent at any time.

5. How We Use Your Information

  • Providing and maintaining our gaming services.
  • Verifying your identity and age for regulatory compliance.
  • Processing deposits, withdrawals, and other financial transactions.
  • Detecting and preventing fraud, money laundering, and other prohibited activities.
  • Enforcing geo-restrictions and responsible gambling measures.
  • Communicating with you about your account, promotions, and service updates.
  • Improving our platform, games, and user experience.
  • Complying with legal and regulatory obligations.
  • Generating anonymized analytics and business intelligence.

6. Data Sharing & Third Parties

We do not sell your personal data. We may share your information with: payment processors for transaction processing; identity verification providers for KYC compliance; regulatory authorities and law enforcement as required by law; cloud infrastructure providers for hosting and data storage; analytics providers using anonymized data only. All third-party processors are contractually bound to protect your data and process it only as instructed by us.

7. Data Retention

We retain your personal data for as long as your account is active and for a minimum of 5 years after account closure, as required by anti-money laundering regulations. Transaction records are retained for a minimum of 7 years. Game session data is retained for 3 years for provably fair verification purposes. You may request deletion of non-essential data at any time, subject to our legal retention obligations.

8. Your Rights (GDPR & CCPA)

  • Right of Access: Request a copy of all personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data (subject to legal retention requirements).
  • Right to Restriction: Request limitation of data processing in certain circumstances.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Withdraw consent for optional processing at any time.
  • Right to Non-Discrimination (CCPA): We will not discriminate against you for exercising your privacy rights.

9. Data Security

We implement industry-standard security measures including: TLS/SSL encryption for all data in transit; AES-256 encryption for sensitive data at rest; bcrypt password hashing; secure session management with HTTP-only cookies; rate limiting and DDoS protection; regular security audits and penetration testing; role-based access controls for administrative systems; comprehensive audit logging of all data access.

10. Cookies & Tracking

We use essential cookies for session management and authentication. These are strictly necessary for the platform to function and do not require consent. We do not use third-party tracking cookies for advertising purposes without your explicit consent. You can manage cookie preferences through your browser settings. For detailed information about our cookie usage, please see our Cookie Notice.

11. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission. We only transfer data to countries that provide an adequate level of data protection or where suitable safeguards exist.

12. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If we discover that we have inadvertently collected data from a minor, we will promptly delete it and terminate the associated account.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the platform. The "Last updated" date at the top indicates when the policy was last revised. Continued use of the platform after changes constitutes acceptance.

14. Contact Us

For privacy-related questions or to exercise your data protection rights, contact us at: Email: dpo@bubbascasino.com | Support Page: bubbascasino.com/support | You also have the right to lodge a complaint with your local data protection supervisory authority.