Tiki Taka Casino Privacy Policy – How Your Data Is Protected describes which privacy issues are relevant at an online casino and which information a player can check. Because no operator-specific privacy information is available, this page distinguishes between general possibilities and confirmed facts.
Personal data may be required for an account, payments and legal checks. The applicable privacy policy and account settings provide information about the actual processing, parties involved and available contact options.
Privacy at Tiki Taka in brief
The General Data Protection Regulation, the GDPR, requires personal data to be processed for clear purposes and not retained longer than necessary. Which data Tiki Taka Casino actually processes should be stated in the applicable privacy policy and the information provided with individual services.
A player can check who is responsible for the processing, which rights apply and how a request can be submitted. It is also advisable to check whether data is transferred outside the European Economic Area and which safeguards are mentioned in connection with such transfers.
Which data Tiki Taka processes
At an online casino, identification data, contact details, account activity and transaction data may be processed. Technical data may help identify technical issues or unusual access. The table provides categories and examples, not confirmation that every category is collected by this operator.
Communication with support may contain information provided by the player. Data about gambling behaviour or configured limits may be relevant to protection against gambling-related risks. The privacy policy should explain which sources are used and whether particular data is mandatory.
Why your data is needed
Processing must have an appropriate legal basis. Under the GDPR, these may include performance of a contract, a legal obligation, consent and legitimate interests. The appropriate basis depends on the specific purpose; a general reference to privacy is not sufficient.
Your account and your gambling
Account data may be required to perform a contract, manage settings and process transactions. Not every type of processing related to an account is automatically necessary for the contract. A player can check for each purpose which data is requested and what the consequences are if that data is not provided.
Legal checks
Identity and age checks may result from applicable legislation. Rules relating to financial crime may also require certain checks or record keeping. The specific obligations and documents depend on the situation; the operator should explain why a document is required and how it can be submitted securely.
Fraud prevention and responsible gambling
Analysis of transactions or account activity may be used to identify fraud and protect players. Depending on the purpose, a legal obligation or legitimate interest may be relevant. Where legitimate interest is used, a balance must be made between that interest and the rights and interests of the player.
Cookies and tracking
Cookies and similar technologies may remember settings, support functionality or measure usage. Some technologies are necessary for a requested service; others may require prior consent. The applicable cookie notice should describe the purpose, parties involved and available choices for each category.
A player can review the cookie settings and withdraw previously given consent for non-essential technologies. Browser settings may also be used to remove or block stored cookies. This may affect functions that depend on cookies and does not always replace opting out with every party involved.
Who data is shared with
An operator may share data with service providers that perform a specific task or with authorised authorities where there is a valid basis for doing so. The privacy policy should identify recipients or categories of recipients. Without operator-specific information, it cannot be established which parties Tiki Taka Casino actually uses.
Payment partners
A payment service provider may require transaction data and identifying information to process or review a payment. The role of such a party may differ: sometimes it processes data on behalf of the operator, while in other cases it independently determines part of the processing. The relevant privacy notices provide more information about this.
Verification services
An external verification service may be used to check identity or age. It should be clear which data is transferred, what the service does with it and how long it is retained. A player can also ask whether an alternative is available if a document cannot be submitted securely.
Game providers
A game software provider may receive technical or account-related data for the operation, security or administration of a service. Which data is involved and what role the provider has should be explained in the applicable information. Sharing data is not the same as selling it.
Retention and deletion
Retention periods may differ by data category and purpose. An operator may be required to retain certain data to meet legal obligations, while other data may be deleted or anonymised sooner. Without confirmed information, no specific retention period can be established for Tiki Taka Casino.
Closing an account therefore does not necessarily result in the immediate deletion of all data. A player can ask which data remains, on what basis and according to which retention period or criteria. The player can also ask how data is deleted after the applicable period expires.
How your data is protected
Appropriate security may include technical and organisational measures that correspond to the risks of the processing. A player can check which measures are described and how a suspected data breach or unusual account activity can be reported. No measure guarantees complete security.
In addition to measures taken by an operator, a player can reduce risks by handling access, documents and settings carefully. The actions below are general precautions and do not guarantee protection against misuse.
- Use a unique password — A long, unique password for the account reduces the consequences of a data breach at another service. A password manager can help store different passwords securely without reusing them.
- Check the connection — Before entering sensitive information, the player can review the browser’s security information and check whether the connection is encrypted. A warning about an insecure connection deserves attention before any data is submitted.
- Limit the information you share — When contacting support, the player can provide only the information required to handle the request. Sensitive documents should only be submitted using a designated secure method, not through an arbitrary message.
- Manage cookie preferences — Available cookie settings and browser settings can be reviewed regularly. A player can withdraw non-essential consent and remove stored cookies while taking into account possible effects on saved preferences and functionality.
- Watch for suspicious messages — An unexpected message asking for a password or identity document may be an attempt at deception. The player can verify the request independently using the contact method listed in the applicable information.
- Check account activity — Regularly reviewing account details and transactions can reveal unknown changes. If misuse is suspected, the player can change the password, review available security settings and notify the operator as soon as possible.
SSL encryption
Encryption of the connection can protect data against interception or modification during transmission. A secure connection alone says nothing about all measures used for storage or access. The player can check the connection information in the browser before entering sensitive data.
Restricted employee access
Access restrictions can ensure that employees only view data necessary for their work. Additional measures may include access logging and periodic reviews of permissions. Whether and how Tiki Taka Casino applies these measures should be stated in the available privacy and security information.
Your rights under the GDPR
The GDPR gives individuals rights under certain conditions, including access, correction and deletion. Restriction, portability, objection and withdrawal of consent may also be relevant. Applicability differs depending on the request and legal basis; a statutory retention obligation may, for example, limit a request for complete deletion.
A request can be sent to the privacy or support channel specified by the operator. The controller may request additional information if necessary to establish the person’s identity. A response should be provided within the period required by applicable law.
The following rights provide practical ways to exercise control over personal data. Not every right applies in every situation; the legal basis, purpose and any legal exceptions determine how a request is assessed.
- Access — A player can ask which personal data is processed, for which purposes and with which recipients it is shared. A copy of the data can help assess the processing and identify any errors.
- Correction — Incorrect personal data can be corrected, and incomplete information can be supplemented where appropriate. The player can indicate which information is incorrect and which correct information should replace it.
- Deletion — A deletion request may concern data that is no longer needed or for which consent has been withdrawn. The controller assesses any exceptions, including applicable statutory retention obligations, and explains any refusal.
- Restriction — If there is doubt about the accuracy or lawfulness of processing, restriction may be requested under certain conditions. The data generally remains stored, but other use is limited while the relevant situation continues.
- Portability — For certain automated processing based on consent or a contract, a player may request provided data in a structured, commonly used and machine-readable format. Direct transfer to another controller may be requested where technically feasible.
- Objection — A player may object to processing based on legitimate interests by explaining their personal circumstances. Processing for direct marketing may also be objected to, after which that processing must stop for that purpose.
- Withdraw consent — Where consent is the legal basis, the player can withdraw it for future processing through the available settings or by submitting a request. Withdrawal does not retroactively make processing that previously took place lawfully unlawful.
Minors
Age verification is important to prevent minors from accessing gambling services. If the data of a minor may have been processed incorrectly, a parent or legal representative can contact the operator and explain the situation. The operator may request information to verify the authority of the person making the request.
Contact and changes
The applicable privacy policy should state the identity of the data controller and provide a contact method for privacy-related questions. Where a data protection officer has been appointed, their contact details may also be relevant. This page does not provide contact details because no confirmed source is available for them.
When changes are made, a player can check the date, changed purposes and any new recipients. A complaint can first be submitted to the controller; in addition, an individual may file a complaint with the Dutch Data Protection Authority. Filing a complaint with the supervisory authority does not depend on first submitting a complaint to the operator.
A privacy request can be submitted more clearly by first determining which right should be exercised and then using the listed contact method. The following sequence can help make the request clear and track its handling.
- 1. Choose the request — The player first determines which right is relevant, such as access, correction, deletion or objection. If there are several purposes, separate requests may be combined as long as it remains clear which data and processing each part concerns.
- 2. Make contact — The player then looks in the applicable privacy policy for the controller’s privacy or support channel. The request can be submitted using that listed contact method; keeping a copy of the message helps with later follow-up.
- 3. Confirm your identity — If there is reasonable doubt about identity, the controller may request additional information. The player should check why the information is needed and which secure submission method is offered before sharing an identity document or other sensitive information.
- 4. Describe the request precisely — A clear description states the desired right, the data concerned and any relevant account information. For a correction, the player can indicate what is incorrect; for deletion, the player can ask which data must remain due to legal obligations.
- 5. Follow up or submit a complaint — The player should keep the response and request clarification about the decision if necessary. A response should be provided within the period required by applicable law. If dissatisfied, a complaint can be submitted to the Dutch Data Protection Authority.
Frequently asked questions about privacy at Tiki Taka
Why does Tiki Taka ask for your identity document?
An identity document may be required for identity or age verification and for other applicable legal checks. The specific reason and secure submission method should be explained when the request is made.
Is your data sold to third parties?
No confirmed information is available about the sale of data by Tiki Taka Casino. The privacy policy can clarify which recipients receive data and for which purposes.
How do you disable marketing cookies?
Consent for marketing cookies can be withdrawn through the cookie settings. Browser settings can also be used to remove or block stored cookies.
How long does Tiki Taka retain your documents?
No specific retention period has been confirmed. The player can ask about the retention period or criteria for identity documents and any legal reasons for continued retention.
Can you have your account and data deleted?
Account closure and data deletion can be requested. Some data may nevertheless be retained where there is a valid legal basis for doing so.
How do you request a copy of your data?
An access request can be submitted through the listed privacy or support channel. A clear description helps with handling the request; identity verification may follow if necessary.
Where do you submit a privacy complaint?
A privacy complaint can be submitted to the controller. In addition, an individual can contact the Dutch Data Protection Authority, the Dutch supervisory authority for data protection.