Privacy Policy

This Privacy Policy explains how Katsubet, operated via katsubet-ca.com, collects, uses, discloses, and protects personal information of players and visitors from Canada who access our website and related online casino services. It applies to all users who browse the site, register an account, participate in games or promotions, or otherwise interact with our services. By using our services, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective as of 01 January 2026 and supersedes any previous versions.

Who We Are

OBSERVE: Users must know the identity and contact details of the data controller and related entities.

EXPAND: We identify the operator, its registration details, and a dedicated contact channel for privacy matters, while clarifying group relationships relevant to processing.

REFLECT: This ensures transparency and accountability regarding who is responsible for handling your personal information.

Operator / Data Controller

The online casino service made available at katsubet-ca.com under the brand "Katsubet" and locally referred to as "Katsubet" is operated by:

Dama N.V., a company registered under the laws of Curaçao
Registration number: 152125
Registered address (legal address and headquarters): Scharlooweg 39, Willemstad, Curaçao
Online gaming license: 8048/JAZ2020-013, issued by Antillephone N.V. under the authority of the Government of Curaçao

Payment Agent / Related Entity

Friolion Limited, a company registered in Cyprus
Registration number: HE 419102
Role: payment facilitator for certain fiat transactions on behalf of Dama N.V.

For the purposes of Canadian users, Dama N.V. is the entity primarily responsible for determining the purposes and means of processing your personal information related to the katsubet-ca.com service, while Friolion Limited may process personal information as a processor or joint controller in connection with payment services.

Data Protection Contact

We have designated a contact point for privacy and data protection matters:

Data Protection Officer / Data Protection Department
Email: [email protected] (please use the subject line "Privacy / Data Protection")
Website: https://katsubet-ca.com
Postal: Data Protection Department, Dama N.V., Scharlooweg 39, Willemstad, Curaçao

What Personal Data We Collect

OBSERVE: Operation of an online casino for Canadian users requires collection of identity, contact, technical, financial, and behavioral data to operate accounts and comply with gambling, KYC, and AML requirements.

EXPAND: We clarify categories of personal information, their sources, and whether provision is mandatory or optional.

REFLECT: This helps you understand what information is processed, for what functional needs, and which data may be inferred or generated.

Identity and Contact Data

Account registration data: full name, date of birth, residential address, country of residence, email address, telephone number, chosen username, and password or authentication credentials.
Verification data (KYC): copies or details of identification documents (e.g., passport, national ID, driver's licence), proof of address (e.g., utility bill, bank statement), and any additional information requested to confirm your identity, age, and eligibility to use our services.
Communications data: content of emails, chat messages, support tickets, and other communications with our support team.

Technical and Usage Data

Device and connection data: IP address, browser type and version, language settings, device type and operating system, screen resolution, approximate location derived from IP (e.g., province, city), and unique device identifiers where applicable.
Log and activity data: access dates and times, pages viewed, clicks, referring URLs, login and logout timestamps, session duration, and technical diagnostic logs for security and performance.

Payment and Financial Data

Payment method data: limited card details (card type, masked card number, expiry date), bank account or payment wallet identifiers, transaction identifiers, and related metadata, as provided through our payment processors.
Transaction history: deposits, withdrawals, bonuses credited, wagering amounts, wins and losses, chargebacks, payment failures, and payment verification records.

Behavioral and Gambling Data

Gaming activity: game sessions, games played, time and duration of play, bet sizes, in-game actions, betting patterns, wins and losses, bonus usage, and jackpot participation.
Responsible gambling data: self-exclusion requests, deposit or loss limits, reality check settings, and interactions with responsible gambling tools.

Marketing and Preference Data

Marketing preferences: opt-in/opt-out status for email, SMS, push notifications, and on-site marketing, as well as records of your consent.
Profile and segments: internal player segmentation based on activity (e.g., preferred games, frequency of play, response to promotions), created to tailor offers and communications where permitted by law.

Cookies and Similar Technologies

Cookies: small text files stored on your device to remember your preferences, maintain sessions, and support analytics and marketing.
Tracking technologies: web beacons, pixels, tags, local storage, and similar tools used by us or authorized third parties for analytics, fraud prevention, and marketing where permitted.

Where required by applicable law, we will request your consent before setting non-essential cookies or using cookies for targeted advertising.

Legal Basis for Processing

OBSERVE: For Canadian users accessing an offshore casino, processing must rest on recognized legal grounds under applicable data protection principles (contract, consent, legitimate interests, legal obligations).

EXPAND: We align our practices with internationally recognized standards such as GDPR principles and Canadian privacy expectations (including PIPEDA), even though our main establishment is in Curaçao.

REFLECT: This section explains why we are legally permitted to process your personal information and how we balance our interests with your rights.

Performance of a Contract

Creating and managing your Katsubet account at katsubet-ca.com.
Providing access to games, processing bets, determining outcomes, and crediting winnings.
Processing deposits, withdrawals, and other financial transactions.
Providing customer support, handling your requests, and communicating essential service updates.

Without this data, we cannot provide you with our services or fulfill our contractual obligations.

Compliance with Legal and Regulatory Obligations

Conducting identity verification, age verification, and "Know Your Customer" (KYC) checks.
Monitoring transactions and gaming activity for Anti-Money Laundering (AML), counter-terrorist financing, and fraud prevention requirements under Curaçao and other applicable regulations.
Maintaining accurate records for tax, accounting, licensing, and regulatory reporting obligations.
Cooperating with lawful requests from competent authorities or regulators, including Curaçao authorities and, where applicable, Canadian law enforcement acting through lawful channels.

Legitimate Interests

We process certain personal information based on our legitimate interests, provided that such interests are not overridden by your rights and freedoms. These include:

Ensuring network and information security, including detecting, preventing, and responding to fraud, abuse, security incidents, and technical issues.
Improving and optimizing our website, games, and user experience, including analytics and performance monitoring.
Personalizing content and non-intrusive marketing communications to improve relevance for our users, where allowed by law.
Defending and exercising legal claims, including managing disputes, complaints, and legal proceedings.

Where we rely on legitimate interests, we perform a balancing assessment to ensure that our interests do not unfairly prejudice your privacy rights.

Consent

Sending electronic marketing communications (email, SMS, push notifications) about promotions, bonuses, and offers, where consent is required.
Using certain cookies and similar technologies for analytics and advertising where local laws require prior consent.
Processing special categories of data, if ever relevant and only where explicitly permitted by law and you have provided explicit consent.

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

Purpose of Processing

OBSERVE: Users should clearly understand why and how their information is used.

EXPAND: We map the data categories to specific, limited purposes consistent with gambling regulation and privacy standards.

REFLECT: This ensures our processing is transparent, purposeful, and not excessive.

Provision and Management of Casino Services

Creating and administering user accounts for Katsubet.
Providing access to games, platforms, and related features.
Managing bets, wagers, game outcomes, and payouts.
Handling deposits, withdrawals, currency conversions, and payment disputes.

Customer Support and Communication

Responding to your inquiries, complaints, and requests submitted via email or other channels.
Notifying you of material changes to our terms, policies, or services.
Sending transaction-related messages (e.g., deposit confirmations, security alerts).

Legal, Regulatory, and Risk Management

Performing KYC and AML checks, sanctions screening, and age verification.
Monitoring activities to detect and prevent suspicious or unlawful behaviour (e.g., money laundering, fraud, match-fixing, bonus abuse, account takeovers).
Fulfilling record-keeping, audit, and reporting obligations to licensing and regulatory authorities.

Service Improvement and Analytics

Analyzing platform usage, game performance, and player behavior to improve functionality, usability, and stability.
Developing new features, optimizing game offerings, and fixing bugs and performance issues.
Conducting statistical, trend, and business analysis in aggregated or pseudonymized form where feasible.

Marketing and Personalization

Sending promotional messages about bonuses, tournaments, and special offers, subject to your marketing preferences and consent where required.
Customizing marketing and website content based on your gaming preferences and historical interactions.
Measuring the effectiveness of marketing campaigns and promotions.

Disclosure & Sharing

OBSERVE: Operation of an online casino involves multiple third-party providers and regulatory interactions.

EXPAND: We identify categories of recipients, circumstances of disclosure, and safeguards applied.

REFLECT: This ensures transparency regarding how and with whom your data is shared.

Group Companies and Payment Partners

Group entities: Dama N.V. and its subsidiary or affiliated entities, including Friolion Limited in Cyprus, may access personal information where necessary to process payments, provide support services, manage risk, and ensure regulatory compliance.
Payment processors and banks: third-party payment service providers, card schemes, banks, e-wallet providers, and other financial institutions engaged to process deposits, withdrawals, and refunds.

Service Providers and Technical Partners

IT and hosting providers: infrastructure, hosting, cloud services, and content delivery networks.
Game providers: certified game studios and platform providers supplying casino games and supporting fair-play functionality.
Security and anti-fraud providers: solutions used for fraud detection, AML screening, identity verification, and risk scoring.
Analytics and performance tools: providers that help us understand website usage and improve performance, using aggregated or pseudonymized data where possible.

Marketing, Affiliates, and Advertising Networks

Affiliate partners: marketing partners who refer players to katsubet-ca.com and require limited data (e.g., tracking identifiers, anonymized statistics) to calculate commissions.
Marketing service providers: email delivery services, SMS gateways, campaign management platforms, and, where applicable and lawful, advertising networks and remarketing services.

Where legally required, we will only share data with marketing and advertising partners based on your prior consent and in line with applicable cookie and marketing rules.

Regulators, Authorities, and Legal Disclosures

Licensing authorities and regulators in Curaçao or other relevant jurisdictions, for compliance reporting and audits.
Law enforcement agencies, courts, and competent authorities, where required by law, court order, or to protect our rights or the rights of third parties.
Professional advisors (e.g., lawyers, auditors, consultants) bound by confidentiality obligations, for purposes of legal advice, audits, or dispute management.

Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or similar corporate transaction involving Dama N.V., personal information may be transferred as part of the transaction, subject to appropriate confidentiality and data protection safeguards and, where required, notice to users.

International Transfers

OBSERVE: Data of Canadian users may be processed and stored outside Canada, particularly in Curaçao, the European Union, and other locations where our providers operate.

EXPAND: We describe the nature of these cross-border transfers and the safeguards applied, taking into account globally recognized standards.

REFLECT: This informs you that your data may be subject to foreign laws while still benefiting from robust protection measures.

Locations of Processing

Curaçao: main operational and licensing jurisdiction of Dama N.V., where core gaming and account data may be processed.
Cyprus: location of Friolion Limited, our payment facilitator for certain fiat transactions.
European Economic Area (EEA) and other countries: locations of some of our hosting, cloud, gaming, analytics, and security providers.

Safeguards for International Transfers

We use reputable providers that implement appropriate technical and organizational security measures aligned with industry standards (e.g., encryption, access controls).
Where applicable, and especially for transfers from the EEA or jurisdictions recognizing similar rules, we rely on:
- Standard Contractual Clauses (SCCs) or equivalent contractual safeguards approved by relevant authorities.
- Data processing agreements that require processors to protect personal information and limit its use to specified purposes.
We take steps to minimize the data transferred and, where possible, use pseudonymization or aggregation.

By using katsubet-ca.com, you acknowledge that your information may be processed in countries that may have different data protection laws than Canada. In all cases, we will safeguard your personal information as described in this Privacy Policy.

Data Retention

OBSERVE: Gambling, AML, and tax rules require retention of certain records for defined periods, while privacy principles require storage no longer than necessary.

EXPAND: We set retention periods based on legal obligations, dispute limitation periods, and business needs.

REFLECT: This balances compliance requirements with your expectation that data is not kept indefinitely.

General Retention Principles

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, including meeting any legal, accounting, or reporting obligations.
We consider the nature and sensitivity of the data, the risk of harm from unauthorized use or disclosure, the purposes of processing, and applicable legal retention periods.

Indicative Retention Periods

Account and identity data: normally retained for the duration of your active account and for up to 5 - 7 years after account closure, to comply with AML, KYC, regulatory, and dispute limitation requirements.
Transaction and gambling records: typically retained for at least 5 - 7 years from the date of the relevant transaction or gaming activity, to comply with legal and regulatory obligations and to handle potential disputes.
Customer support communications: retained for up to 5 years after the last interaction, depending on the nature of the inquiry and any associated legal requirements.
Marketing data and preferences: retained until you withdraw your consent or object to marketing, plus a short period to record and implement your preference.
Cookies and technical logs: retained according to their technical lifespan, typically:
- session cookies: for the duration of the browser session;
- persistent cookies: from a few days up to 24 months, depending on the purpose;
- security and audit logs: usually up to 24 months, unless a longer period is required for investigations.

Deletion and Anonymization

Once the relevant retention period expires, or when data is no longer required for the purposes for which it was collected, we will securely delete or anonymize the data, unless longer retention is required by law or needed to establish, exercise, or defend legal claims.
Where full deletion is not immediately possible (e.g., data in backups), we will securely isolate and protect the data from further processing until deletion is feasible.

Your Rights

OBSERVE: Users require clear information about their privacy rights and how to exercise them.

EXPAND: We align with key principles found in GDPR-style frameworks and Canadian privacy expectations, providing transparent, accessible mechanisms for exercising rights.

REFLECT: This empowers you to maintain control over your personal information handled by Katsubet.

Overview of Your Rights

Right of access: to obtain confirmation of whether we process your personal information and to receive a copy of such data, along with relevant information about the processing.
Right to rectification: to request correction of inaccurate or incomplete personal information held by us.
Right to erasure ("right to be forgotten"): to request deletion of your personal information where:
- the data is no longer necessary for the purposes collected;
- you withdraw consent where processing is based on consent and there is no other legal ground;
- you have validly objected to processing; or
- erasure is required by applicable law.
This right may be limited where retention is required for legal or regulatory reasons (for example, AML or gambling regulations).
Right to restriction of processing: to request that we limit processing of your data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.
Right to object: to object, on grounds relating to your particular situation, to processing based on our legitimate interests, and to object at any time to processing for direct marketing.
Right to data portability: to receive certain personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where technically feasible and legally required.
Right to withdraw consent: where we rely on your consent (e.g., for marketing or certain cookies), you may withdraw it at any time, without affecting the lawfulness of prior processing.

How to Exercise Your Rights

Submit a request: Contact us via email at [email protected] with the subject line "Privacy Request" and provide:
- your full name and username;
- the country from which you usually access katsubet-ca.com (e.g., Canada);
- a clear description of the right you wish to exercise and the data concerned.
Verification: For security reasons, we may request additional information to verify your identity before acting on your request.
Response time: We will respond to your request as soon as reasonably possible and, in any event, within 30 days of receipt of a complete request, subject to any extensions permitted by applicable law in complex cases.
Fees: Requests are generally handled free of charge. We may charge a reasonable fee or refuse to act on requests that are manifestly unfounded, excessive, or repetitive, as allowed by law.

Please note that certain rights may be limited due to our obligations as a licensed gaming operator, particularly in relation to fraud prevention, AML/KYC requirements, compliance with regulatory directions, and retention of records for legal purposes.

Cookies & Tracking Technologies

OBSERVE: Cookies are essential for secure session management and a functional gaming experience, but also enable analytics and marketing.

EXPAND: We explain types of cookies, their purposes, and how you can manage them.

REFLECT: This gives you control over non-essential tracking while preserving necessary functionality.

Types of Cookies We Use

Strictly necessary cookies (session cookies): required for website operation, account login, session management, and security. These cookies are typically deleted when you close your browser.
Functional cookies (persistent): used to remember your preferences (e.g., language, region, saved settings) and enhance your user experience. These may remain on your device for a defined period.
Analytics and performance cookies (first-party and third-party): help us understand how users interact with the site, which pages are visited most frequently, and any errors encountered, so we can improve performance and services.
Advertising and marketing cookies (third-party): used, where permitted by law and subject to your consent where required, to deliver relevant marketing content and measure the effectiveness of promotional campaigns.

Managing Cookies

You can adjust your browser settings to block or delete cookies. Please refer to your browser's help or settings section for detailed instructions.
Blocking or deleting strictly necessary cookies may impair the functionality of katsubet-ca.com and prevent you from logging in or placing bets.
Where we provide an internal cookie or privacy settings panel on the website, you can use it to manage your preferences for non-essential cookies, including analytics and advertising cookies.

Data Security

OBSERVE: Operating an online casino involves processing sensitive financial and behavioral data that requires strong security safeguards.

EXPAND: We implement layered technical and organizational measures aligned with recognized industry practices.

REFLECT: These measures aim to protect your data against unauthorized access, loss, misuse, or alteration.

Technical Security Measures

Encryption in transit: All connections to katsubet-ca.com are protected using Transport Layer Security (TLS 1.2 or higher) to encrypt data transmitted between your browser and our servers.
Encryption at rest: Sensitive data fields are encrypted or otherwise protected when stored, following security best practices appropriate to the type and sensitivity of the data.
Access controls: Access to personal information is restricted to authorized personnel and service providers on a need-to-know basis, using unique credentials, role-based permissions, and, where appropriate, multi-factor authentication.
Secure infrastructure: We use secure data centers and hosting environments protected by firewalls, intrusion detection and prevention systems, and other security technologies.

Organizational and Procedural Measures

Security policies and training: We maintain internal policies and conduct staff training to promote awareness of data protection, confidentiality, and security obligations.
Vendor due diligence: We carefully select third-party providers and require them, through contracts and due diligence, to implement appropriate security measures.
Regular assessments: We conduct ongoing monitoring and periodic assessments of our systems and controls, including security audits and vulnerability management, taking into account international standards such as ISO 27001 and SOC 2 where applicable to our providers.

Incident Response

We maintain incident response procedures to detect, investigate, and respond to potential data breaches or security incidents.
In the event of a data breach that is likely to result in a significant risk to your rights and freedoms, we will take appropriate remedial steps and, where required by applicable law, notify you and relevant authorities without undue delay.

Complaints & Contacts

OBSERVE: Users must have clear channels to raise concerns or complaints about our handling of personal information.

EXPAND: We provide contact details and a structured escalation process, including the option to contact supervisory authorities.

REFLECT: This supports accountability and effective redress mechanisms.

Contacting Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, you can contact us at:

Email: [email protected] (subject: "Privacy / Data Protection")
Postal: Data Protection Department, Dama N.V., Scharlooweg 39, Willemstad, Curaçao

Internal Complaint Procedure

Submit your complaint: Provide a detailed description of your concern, including relevant dates, account details, and any supporting documentation.
Acknowledgement: We will acknowledge receipt of your complaint within a reasonable period, typically within 5 business days.
Investigation: We will review your complaint, consult relevant records, and, if needed, request further information from you to clarify the issue.
Response: We will provide a substantive response as soon as reasonably possible, and in any event within 30 days from the date we receive a complete complaint, unless a longer period is justified due to complexity (in which case we will inform you of the delay and the reasons).
Resolution: Where we identify an issue, we will take appropriate corrective measures, which may include updating records, adjusting internal processes, or providing additional information or redress where appropriate.

Escalation to Supervisory or Regulatory Authorities

If you are not satisfied with our response or believe that we are not handling your personal information in compliance with applicable privacy laws, you may have the right to contact a relevant data protection or privacy regulatory authority in your jurisdiction. For users in Canada, this may include, for example:

Office of the Privacy Commissioner of Canada (OPC)
Website: https://www.priv.gc.ca
General inquiries: via contact forms and phone numbers listed on the OPC website.
Provincial or territorial privacy commissioners (where applicable), such as in Alberta, British Columbia, or Quebec. Details are available on their respective official websites.

You may also have similar rights to lodge complaints with other supervisory authorities, depending on your place of residence or where you believe your rights have been infringed.

Updates

OBSERVE: Our services, legal environment, and technologies may evolve, requiring updates to this Privacy Policy.

EXPAND: We describe how changes will be communicated and how users may react to significant updates.

REFLECT: This ensures ongoing transparency and informed decision-making by users.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.
Each version will be identified by an effective date at the top of the document. The current version is effective as of 01 January 2026.

Notification of Material Changes

For material changes that significantly affect your rights or the way we process your data, we will provide additional notice by:
- emailing you at the address associated with your Katsubet account, where available;
- displaying a prominent notice (e.g., banner or pop-up) on the katsubet-ca.com website; and/or
- notifying you through your account dashboard or similar in-service notifications.
Where required by law or appropriate in light of the nature of the changes, we will provide advance notice of at least 30 days before material changes take effect, to give you the opportunity to review the updated policy.

Your Options in Case of Changes

If you do not agree with the updated Privacy Policy, you may choose to cease using our services and request account closure.
Continued use of katsubet-ca.com after the effective date of any changes will constitute your acknowledgement of the updated Privacy Policy.

Last updated: January 2026