Privacy Policy

1. Introduction

Bubba's Casino ("we," "us," or "our") is a free-to-play social casino. This Privacy Policy explains the information our platform collects, why we use it, when it may be shared, and the choices that may be available under applicable privacy law.

2. Data Controller

Bubba's Casino LLC operates this platform and is responsible for the personal data described in this policy. For privacy inquiries, use our Support page.

3. Information We Collect

• Account Information: Name, email address, username, date of birth, and password (stored securely using bcrypt hashing).
• Account Verification: Date of birth and basic identity information used to verify age eligibility. No government ID is required for standard play.
• Coin & Transaction Data: Virtual coin balance history and in-game transaction logs. If coin-pack payments are activated, purchase records will also be retained. The application does not store full payment-card numbers.
• Gaming Data: Game sessions, virtual coin wager amounts, win/loss records, and gameplay statistics.
• Technical Data: IP address, browser type, device information, operating system, and geolocation data (for geo-blocking compliance).
• Communication Data: Support tickets, messages, and any correspondence with our team.
• Behavioral Data: Login history, session duration, and responsible gambling settings.

4. Legal Basis for Processing (GDPR)

• Contract Performance: Processing necessary to provide our free-to-play social casino services and manage your account.
• Legal Obligation: Processing required to meet applicable consumer-protection, privacy, and other legal requirements.
• Legitimate Interest: Fraud prevention, security monitoring, platform improvement, and customer support.
• Consent: Marketing communications, promotional emails, and non-essential cookies. You may withdraw consent at any time.

5. How We Use Your Information

• Providing and maintaining our gaming services.
• Verifying your age to enforce our 18+ eligibility requirement.
• Processing optional coin-pack purchases through an independent payment provider if that feature is activated.
• Detecting and preventing fraud, multi-accounting, bot usage, and other prohibited activities.
• Enforcing geo-restrictions and responsible gambling measures.
• Communicating with you about your account, promotions, and service updates.
• Improving our platform, games, and user experience.
• Complying with legal and regulatory obligations.
• Generating anonymized analytics and business intelligence.

6. Data Sharing & Third Parties

We do not sell your personal data. We may share information with hosting, database, security, and analytics providers that help operate the platform; with an independent payment processor if coin-pack payments are activated; and with authorities when required by applicable law. We limit sharing to what is reasonably necessary for those purposes.

7. Data Retention

We retain account, security, virtual-coin ledger, support, and game records for as long as reasonably necessary to operate the service, protect account and ledger integrity, resolve disputes, and meet applicable legal obligations. Retention periods may vary by record type. You may request deletion of eligible data through Support, subject to security, ledger-integrity, and legal retention needs.

8. Your Privacy Choices and Rights

• Right of Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data (subject to legal retention requirements).
• Right to Restriction: Request limitation of data processing in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent for optional processing at any time.
• Right to Non-Discrimination: Where required by law, we will not discriminate against you for exercising an applicable privacy right.

9. Data Security

We use practical technical and organizational safeguards, including HTTPS in transit, bcrypt password hashing, HTTP-only authentication cookies, server-side authorization checks, administrative role controls, rate limiting on sensitive routes, and security-focused code and dependency reviews. No online service can guarantee absolute security.

10. Cookies & Tracking

We use essential cookies for session management and authentication. We may also use analytics technologies to understand aggregate site usage. Browser settings can block or delete cookies, although doing so may prevent account features from working correctly.

11. International Data Transfers

Our service providers may process information in countries outside your jurisdiction. Where applicable law requires a transfer safeguard, we and our providers will use an appropriate lawful mechanism.

12. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If we discover that we have inadvertently collected data from a minor, we will promptly delete it and terminate the associated account.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the platform. The "Last updated" date at the top indicates when the policy was last revised. Continued use of the platform after changes constitutes acceptance.

14. Contact Us

For privacy-related questions or to request an applicable privacy right, use the Support page at bubbascasino.org/support. Depending on your location, you may also have the right to contact your local privacy regulator.