Privacy Policy

1. Who we are

Instasino (“we”, “us”), operated by SAVANT LIMITADA, runs the Instasino online casino and sportsbook and the information website nl-en.insta-sino.com. We are the data controller for the personal information described in this policy. Questions can be sent to [email protected]; our data protection officer can be reached at the same address.

2. Information we collect

We collect information you provide directly and information generated by your use of the service:

• Account data: name, date of birth, address, email, phone number, username and password hash.
• Verification data: copies of identity documents, proof of address and, where required, source-of-funds documents.
• Transaction data: deposits, withdrawals, payment method identifiers (never full card numbers), bets and game history.
• Technical data: IP address, device type, browser, operating system, approximate location and cookie identifiers.
• Communications: live-chat transcripts, emails and call recordings with our support team.

3. How we use your information

• To create and manage your account and process payments.
• To verify your identity and age and to comply with anti-money-laundering and gambling regulations.
• To detect fraud, bonus abuse and multiple accounts.
• To provide responsible-gaming tools and intervene where we detect signs of harm.
• To send service messages and, with your consent, promotional offers you can opt out of at any time.
• To improve the website and games through aggregated analytics.

4. Legal basis and retention

We process data to perform our contract with you (Art. 6(1)(b) GDPR), to meet legal obligations such as licensing, AML and tax rules (Art. 6(1)(c)), for our legitimate interests in security and fraud prevention (Art. 6(1)(f)), and on the basis of your consent for marketing (Art. 6(1)(a)). Account and transaction records are retained for at least five years after account closure as required by our licence; marketing preferences are deleted when you withdraw consent.

5. Sharing of information

We share data only where necessary: with payment providers to process transactions, with identity-verification and fraud-prevention services, with game providers for game session data, with regulators and law enforcement where legally required, and with service providers who host or support our platform under strict confidentiality agreements. Transfers outside the EEA rely on the EU standard contractual clauses. We never sell personal data.

6. Cookies

This website uses strictly necessary cookies to remember your language and preferences and, where you accept them, analytics cookies that help us understand which pages are useful. You can change your choice at any time in your browser settings. Affiliate tracking uses a first-party cookie valid for 30 days.

7. Security

All data is transmitted over 256-bit TLS and stored on encrypted servers with access limited to staff who need it for their role. We run regular penetration tests and our payment processing is PCI DSS compliant. In the unlikely event of a data breach affecting you, we will notify you and the relevant authority without undue delay.

8. Your rights

Under the GDPR you may request access to the personal information we hold about you, ask us to correct inaccurate data, request deletion where we have no legal duty to keep it, restrict or object to certain processing, request data portability and withdraw marketing consent at any time using the unsubscribe link or your account settings. To exercise these rights email [email protected]; we respond within one month. You may also lodge a complaint with the Autoriteit Persoonsgegevens.

9. Children

Our services are for adults aged 18 and over. We do not knowingly collect data from minors and close any account we discover belongs to a person under 18.

10. Changes to this policy

We may update this policy to reflect changes in law or our services. Material changes are announced on the website and by email to registered players at least 14 days before they take effect.