Privacy Policy

Information Collection

This Privacy Policy governs the collection, processing, and storage of personal data by Metlait SRL, operator of the website goldencrown-casino.co.com, operating under license reference ALSI-202509073-FI2. The following categories of personal data are subject to collection and processing in the course of providing services through this platform:

Identification data, including full legal name, date of birth, and government-issued identification document details, as required for identity verification and regulatory compliance purposes.
Contact information, including electronic mail address, telephone number, and postal address, as provided by the data subject during registration or subsequent account management procedures.
Financial data, including payment instrument details, transaction records, deposit and withdrawal history, and associated banking information, as necessary for the facilitation of financial transactions.
Technical data, including Internet Protocol addresses, browser type and version, operating system identifiers, device identifiers, session identifiers, and access timestamps, as automatically recorded upon interaction with the platform.
Behavioral and usage data, including navigation patterns, gaming activity records, session duration, and feature utilization metrics, as generated through the data subject's interaction with platform services.
Communication data, including records of correspondence submitted via customer support channels, including electronic mail communications and any documentation provided in connection therewith.
Geolocation data, as derived from technical parameters associated with the data subject's connection to the platform, for the purposes of jurisdictional compliance verification.

Data collection is conducted through direct submission by the data subject, automated technical mechanisms operative within the platform, and, where applicable, through third-party verification and data enrichment service providers engaged by Metlait SRL.

How We Use Data

Personal data collected through the platform is processed exclusively for specified, explicit, and legitimate purposes in accordance with applicable data protection legislation. The purposes for which personal data is processed are enumerated as follows:

Account establishment and administration: Personal data is processed for the purpose of creating, maintaining, verifying, and administering user accounts, including the authentication of data subjects upon each access session.
Service provision and platform operation: Personal data is processed to facilitate the delivery of gaming services, the execution of financial transactions, and the technical operation of all platform functionalities made available to registered users.
Identity verification and regulatory compliance: Personal data is processed to fulfill obligations imposed by applicable anti-money laundering legislation, responsible gambling regulations, and licensing requirements, including the implementation of Know Your Customer procedures as mandated by the applicable regulatory authority.
Fraud prevention and security maintenance: Personal data is processed to detect, investigate, and prevent fraudulent activity, unauthorized access, and other conduct constituting a breach of the platform's terms and conditions or applicable law.
Financial processing and record-keeping: Personal data is processed for the execution of deposits, withdrawals, and associated financial operations, and for the maintenance of transaction records as required by applicable financial and fiscal legislation.
Customer communications and support: Personal data is processed to respond to inquiries, resolve disputes, and provide technical assistance to data subjects who contact the platform's support services.
Legal obligation fulfillment: Personal data is processed to comply with legal obligations to which Metlait SRL is subject, including obligations arising from regulatory directives, judicial orders, or governmental authority requests made in accordance with applicable law.
Platform improvement and analytics: Aggregated and, where applicable, pseudonymized data is processed for the purposes of platform performance analysis, service quality enhancement, and the development of improved functionalities.

Personal data shall not be processed for purposes incompatible with those specified herein. Consent, where required as a legal basis for processing, shall be obtained in a freely given, specific, informed, and unambiguous manner prior to the commencement of the relevant processing activity.

Data Security

Metlait SRL has implemented comprehensive technical and organizational measures designed to ensure a level of security appropriate to the risks presented by the processing of personal data, having regard to the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing, as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons.

The technical measures implemented for the protection of personal data include, but are not limited to, the following:

Encryption of personal data in transmission utilizing Transport Layer Security protocols of industry-standard specification, ensuring that data communicated between the data subject's device and platform servers is protected against interception.
Encryption of personal data at rest utilizing advanced cryptographic standards applied to stored data sets containing personal information, ensuring protection against unauthorized access to stored records.
Implementation of access control mechanisms, including role-based access restrictions, multi-factor authentication requirements for administrative access, and systematic management of user privileges, ensuring that personal data is accessible only to authorized personnel with a legitimate operational necessity.
Deployment of firewall infrastructure, intrusion detection systems, and continuous network monitoring procedures designed to identify and respond to potential security incidents in a timely manner.
Maintenance of secure backup procedures and data recovery mechanisms to ensure the availability and integrity of personal data in the event of a technical incident.

The organizational measures implemented for the protection of personal data include, but are not limited to, the following:

Restriction of access to personal data to employees, contractors, and service providers whose functions require such access, subject to obligations of confidentiality.
Implementation of internal data protection policies and procedures governing the handling, storage, and disposal of personal data.
Periodic review and assessment of security measures to identify vulnerabilities and implement appropriate remediation actions in a timely manner.
Engagement of third-party data processors subject to contractual data processing agreements imposing security obligations commensurate with those observed by Metlait SRL.

In the event that a personal data breach is identified, Metlait SRL shall undertake notification procedures in accordance with applicable data protection legislation, including notification to the relevant supervisory authority and, where required, to affected data subjects, within the timeframes prescribed by law.

Your Rights

Data subjects whose personal data is processed by Metlait SRL are vested with a range of rights in relation to such data, as conferred by applicable data protection legislation. These rights may be exercised by submitting a written request through the contact channels specified in this document. Each right recognized under applicable law is described as follows:

Right of access: Data subjects are entitled to obtain confirmation as to whether personal data concerning them is being processed and, where such processing is confirmed, to receive a copy of the personal data undergoing processing together with supplementary information regarding the processing activities to which such data is subject.
Right to rectification: Data subjects are entitled to require the correction of inaccurate personal data concerning them and, having regard to the purposes of the processing, to require the completion of incomplete personal data.
Right to erasure: Data subjects are entitled to request the deletion of personal data concerning them where the continued retention of such data is no longer necessary in relation to the purposes for which it was collected, where consent upon which processing was based has been withdrawn, or where processing is determined to be unlawful, subject to applicable legal retention obligations.
Right to restriction of processing: Data subjects are entitled to request that the processing of their personal data be restricted in circumstances specified under applicable data protection legislation, including during the period in which the accuracy of data is contested or the lawfulness of processing is under examination.
Right to data portability: Data subjects are entitled to receive personal data concerning them which has been provided to Metlait SRL in a structured, commonly used, and machine-readable format, and to request the transmission of such data to another controller where technically feasible and where processing is carried out by automated means on the basis of consent or contractual necessity.
Right to object: Data subjects are entitled to object to the processing of their personal data on grounds relating to their particular situation where such processing is conducted on the basis of legitimate interests, and to object unconditionally to the processing of personal data for direct marketing purposes.
Right to withdraw consent: Where processing is conducted on the basis of the data subject's consent, the data subject is entitled to withdraw such consent at any time without prejudice to the lawfulness of processing conducted prior to the withdrawal.
Right to lodge a complaint: Data subjects are entitled to submit a complaint to the competent supervisory authority in the jurisdiction in which they are habitually resident, where they work, or where an alleged infringement of applicable data protection legislation is considered to have taken place.

Requests submitted in exercise of the foregoing rights shall be responded to within the timeframes prescribed by applicable data protection legislation. Verification of the identity of the requesting data subject may be required prior to the processing of any such request. No charge shall be imposed for the processing of requests except in circumstances where requests are manifestly unfounded or excessive, in which case a reasonable fee may be applied or the request may be refused, with notification provided to the data subject accordingly.

Contact

All inquiries, requests, and correspondence pertaining to the processing of personal data by Metlait SRL, including the exercise of data subject rights as described in this document, shall be directed to the data controller through the following electronic correspondence channel:

Electronic correspondence: [email protected]

Written requests submitted via electronic mail shall be processed in accordance with the timeframes and procedures prescribed by applicable data protection legislation. Data subjects are advised to specify in their correspondence the nature of the request or inquiry being made, together with sufficient identifying information to enable the verification of identity and the identification of the relevant personal data records.