Privacy Policy

Who we are and what this covers

BetJohn Casino has run under a Curacao Gaming Control Board licence since 2021. When this page says we, it means the licensed operator behind betjohn.org and the staff who run the cashier, the support desk and the games lobby.

This policy covers everything that happens on betjohn.org: browsing the lobby, opening an account, depositing, withdrawing, claiming a bonus, talking to support. It does not cover other websites you reach from ours — once you leave, their policies apply, not this one.

What we collect when you open an account

An account cannot exist without some of this. The rest is optional and marked as such at the point we ask.

• Identity: full name, date of birth, and the country you live in. Age is not optional — we are not allowed to serve anyone under 18.
• Contact: email address, and a mobile number if you turn on login alerts.
• Account settings: your chosen currency (AUD, USD, GBP, CAD, BTC or USDT), interface language, and any deposit or session limits you set.
• Payment details: the wallet, card token or crypto address you fund from. We store a reference to the instrument, not the full card number.
• Verification documents: photo ID and a proof of address when a withdrawal or a compliance check requires them.
• What you write to us: live chat transcripts, emails and phone notes.

What we collect automatically

Some of this is generated the moment your browser asks our server for a page. We do not need your permission to receive it; we do need a reason to keep it.

Why we are allowed to hold it

Four reasons cover everything on this page. If a piece of data does not fit one of them, we should not have it.

• To run your account. We cannot pay out a withdrawal to a person we cannot identify.
• Because our licence requires it. Curacao licensing, anti-money-laundering rules and tax record-keeping all set minimum retention.
• Because we have a real interest in it. Fraud checks, bonus abuse checks, keeping the site up.
• Because you said yes. Marketing email is the main one, and consent can be withdrawn at any time without affecting your account.

Verification and anti-money-laundering checks

Before a first withdrawal — and sometimes sooner, if a deposit pattern trips a rule — we ask you to prove you are who you say you are. This is not us being difficult; it is the condition on which we are allowed to hold money for you.

1. We ask for photo ID and a proof of address dated within the last three months.
2. A trained assessor, not an algorithm alone, checks that the documents match the account.
3. Where the law requires it, we screen the name against sanctions and politically-exposed-person lists.
4. Documents are stored encrypted, access-logged, and destroyed on the retention schedule below.

Who we share it with

We do not sell personal data and we do not rent mailing lists. Data leaves us in four directions only.

• Payment processors — the wallet, card or crypto rail you chose needs enough detail to move the money.
• Game studios — the 48 providers behind our lobby receive a session token and your play, not your name or address.
• Verification and fraud partners — the specialists who check documents and screen for money laundering.
• Regulators, auditors and law enforcement — when a properly issued order or our licence conditions require it.

Every supplier is bound by contract to use the data only for the job we hired them for, and to delete it when that job ends.

Where it is stored and for how long

Data sits on servers inside the European Economic Area and in the licensing jurisdiction. Where a supplier operates elsewhere, the transfer runs on standard contractual clauses.

How we keep it safe

• Traffic between your browser and our servers is encrypted in transit; stored documents and payment references are encrypted at rest.
• Staff see only what their role needs. Access to verification documents is restricted and every view is logged and audited.
• Payment card numbers are tokenised by the processor. We never hold a full card number, and we will never ask for one in chat or by email.
• If a breach ever affects your data in a way that creates real risk, we will tell you and the regulator without sitting on it.

Your rights over your data

Ask through live chat or by email from the address on your account, and we will answer within 30 days.

• See it — a copy of what we hold about you.
• Fix it — correct anything wrong. Name and date of birth changes need a document.
• Delete it — we will erase everything we are not legally required to keep. Transaction records and self-exclusion entries stay.
• Take it with you — a machine-readable export of the data you gave us.
• Object — tell us to stop processing for a given purpose, and we will unless a legal duty overrides it.
• Complain — to us first, then to the supervisory authority in your jurisdiction if our answer is not good enough.

Marketing and how to stop it

Promotional email goes out only to players who opted in. Every message carries a working unsubscribe link, and unsubscribing takes effect on the next send, not eventually.

Turning off marketing does not turn off the emails your account needs: withdrawal confirmations, security alerts and changes to these terms will still arrive. Those are not marketing.

If you have self-excluded, marketing stops permanently and we do not need you to ask twice.

Changes and how to reach us

When this policy changes materially, we date-stamp it at the top of the page and tell account holders by email before the change takes effect. Minor wording fixes just get the new date.

Privacy questions go through the same doors as everything else: 24/7 live chat, the international phone line, or email through the help centre. Our contact page lists all three and what each is best for.