Privacy Policy

Responsibility and contact

• The Ice Casino T&C (clause 20) commit the operator to handle personal information strictly in line with the privacy policy.
• Questions about the policy or about how data is processed go to [email protected].

What personal data is collected

• Account information given at registration, whether directly on the site or through an affiliate’s landing page: full name, e-mail address, home address, date of birth, phone number and payment details such as a card number.
• Verification data requested under the KYC policy: identity documents, payment card photos, proof of address and, where needed, source-of-funds documents.
• Voluntary information: messages sent by e-mail or live chat, feedback, suggestions and complaints.
• Device information: IP address, geolocation and unique device identifiers.
• Non-personal information: pages viewed, clicks, browser type, operating system, language, access times and the referring website. Once combined with personal data, it is treated as personal data.

Why data is collected

• To run the account and services, process deposits and withdrawals and answer support requests.
• To verify identity and age, screen against sanctions lists and prevent fraud and money laundering.
• To meet responsible gaming obligations and other compliance duties.
• For marketing, only where the player has agreed to it.

Technical and organisational measures

• Regular monitoring for vulnerabilities and attacks, annual penetration testing, staff training by security professionals and proportionate network protection.
• Access limited to personnel with a legitimate business need.

Retention

• Personal data is kept while the account is active, or as long as law, legitimate interest or operational need requires; for risk management and compliance it can be stored for up to five years.
• Data is depersonalised five years after account closure or inactivity; full deletion is not possible where records are needed for due diligence, fraud prevention and responsible gaming.
• Verification and transaction records can be kept for five years under the AML policy.

Legal bases and rights

• Legal bases named in the policy: consent, contract and legitimate interests.
• Consent can be withdrawn at any time, and processing based on legitimate interests can be objected to.
• Players can choose which communications they receive or opt out entirely, and can ask to review, correct, update or remove their data.
• The policy does not name a data-protection supervisory authority. In Ireland, the national data-protection regulator is the Data Protection Commission (dataprotection.ie).

Account and service delivery

• Create and manage accounts, verify identity and age, provide the casino games and the sportsbook, and answer support queries.

Payments and transactions

• Process deposits and withdrawals through payment providers, which receive first and last name, date of birth, e-mail, address, postcode, city, country, phone number and alias.

Risk, fraud and security

• Protect players and the operator from security threats and fraud, and detect money laundering, bonus abuse and duplicate accounts.

Responsible gambling

• Apply deposit and loss limits and self-exclusion, and keep the records these obligations require.

Service improvement and analytics

• Use non-personal usage and technical data to improve how the services work.

Marketing and communications

• An e-mail provider receives only the e-mail address and user ID; an SMS provider receives only the phone number, used for marketing, verification at sign-up and security features.
• Direct mail, SMS, e-mail and phone marketing need the player’s explicit consent.

Legal and regulatory compliance

• Disclose data where the law or a legal process requires it, or to investigate illegal activity.

Automated checks and profiling

• Under the AML policy, automated risk models flag unusual transactions for manual review by the compliance team.
• Segmentation and personalised offers count as legitimate interests; closing the account ends further profiling within 72 hours, and [email protected] answers questions on processing.

How to access or update data

• Players can contact the operator at any time to review, correct, update or remove the personal data it holds, giving clear details of the change.
• Registration details must stay accurate and be updated promptly.

Correction and deletion

• Some data must be kept for record-keeping, and residual copies may remain in archives; corrections are passed on to third parties.
• Closing the account, possible at any time through live support, removes the player from communication channels within 72 hours.

Identity verification

• Requests sent to the privacy address from the registered e-mail are easier to match to the right account.

Security checks and payments

• Accepting the T&C authorises identity checks, and withdrawals can be restricted while they run. Payment data is processed by payment providers and by T&C Whitebox CY Limited.

• Only players aged 18 or over, or the higher local legal age, may register; minors are not allowed to take part (T&C 32.1).
• Proof of age can be requested at any stage. An account found to belong to a minor is closed and its winnings are forfeited (6.5).
• The T&C encourage parents to use filtering software such as CyberPatrol, GamBlock or Net Nanny, in line with the responsible gaming advice; a parent who suspects a child has an account can tell support.

The privacy policy has no separate section on international transfers: it names neither the countries where data is stored nor safeguards such as EU Standard Contractual Clauses.

• The operator, Whitebox B.V., is registered in Curaçao; payments are managed by T&C Whitebox CY Limited in Cyprus.
• Service providers for maintenance, analysis, audit, payments, fraud detection, marketing and development may use the data only for those tasks; game studios and support platforms also receive data.
• The e-mail and SMS providers are described as compliant with PIPEDA, FIPPA and the GDPR. Details are available from [email protected].

• This page is a plain-English summary prepared by this site. It is not Ice Casino’s privacy policy; the policy published on the official site is the binding text and applies wherever the two differ.
• The T&C state that the English text prevails over translations, and the operator updates the privacy policy from time to time.
• This site has no access to Ice Casino accounts and does not handle requests about player data; those go to the operator’s privacy address.

Definition

• A cookie is a small text file placed on a device when it visits the website, which lets the site recognise the visitor on a return visit.

Purpose

• Under T&C clause 21, Ice Casino uses cookies to provide certain functions of the website.
• The privacy policy also describes collecting usage data (pages viewed, clicks) and technical data (browser, operating system, language) to improve the services.

Retention

• Neither the T&C nor the privacy policy gives cookie lifetimes or a list of individual cookies.

Management

• Cookies can be deleted or blocked in the browser settings; the T&C point to aboutcookies.org for instructions.
• Deleting or disabling cookies may block some areas or features.

Legal basis

• The official texts do not assign a legal basis to cookies; the general bases in the privacy policy are consent, contract and legitimate interests.

• Using the services means accepting the policy; opening an account binds the player to the T&C, which include it.
• Changes apply from publication; for material changes, the operator takes reasonable steps to warn players in advance.
• A player who disagrees can close the account via live support.

Sharing of personal data

• Profiles are never published, and inside the company only authorised staff who need the data can see it.
• E-mail provider: e-mail address and user ID. SMS provider: phone number.
• Payment providers: the identity and contact details needed to process payments.
• Game providers behind the slots and live casino titles, and player support providers, who see the messages sent to support.
• Service providers for maintenance, analysis, audit, fraud detection, marketing and development, including sports governing bodies and financial institutions.

Legal disclosures and change of control

• Data can be disclosed when the law or a legal process requires it, or to investigate illegal activity, enforce agreements and defend claims; where allowed, the operator tries to notify the player.
• In a sale, merger or other change of control, the acquirer can keep using the data under the same policy.

Responsibility

• Service providers must use the data only for their tasks, and content a player shares on social networks stays under the player’s control there.

• This site links to the official Ice Casino website and to independent help services such as GamblingCare.ie; each runs under its own privacy policy.
• The Ice Casino T&C (clause 29) treat links on icecasino.com the same way: other websites are outside the operator’s control and are used at the visitor’s own risk.
• Read the privacy notice of any external site before entering personal data there.