Privacy Policy

Version: 1.0  |  Last Updated: 30 July 2026

Energy Casino (“We”, “Us”, “Our”) is committed to protecting and respecting Your privacy. This Privacy Policy describes how We collect, process, store, share, and protect personal data when You visit or use energy-nyerogep.com (the “Platform”), register an account, or otherwise interact with our services.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy. By using the Platform, You acknowledge that You have read and understood this Privacy Policy.

1. Introduction

1.1. Who We Are

Energy Casino operates the online gaming platform accessible at energy-nyerogep.com. As the data controller responsible for the personal information You provide to Us or that We collect through Your use of the Platform, We are committed to processing Your data lawfully, fairly, and transparently in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and relevant national implementing laws.

1.2. Scope

This Privacy Policy applies to all personal data collected from You when You:

• Visit, browse, or use the Platform;
• Register and maintain a Player Account;
• Contact our Customer Support team;
• Participate in promotions, surveys, or tournaments;
• Interact with our communications, including emails and notifications.

1.3. Data Protection Officer

For all privacy-related matters, You may contact our Data Protection Officer (DPO) at: [email protected].

2. Data We Collect

2.1. Data You Provide Directly

When You register an account or interact with our services, You provide Us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, gender;
• Contact Data: Email address, telephone number, postal address;
• Authentication Data: Username, password (encrypted), security questions;
• Financial Data: Payment card details (last four digits), e-wallet identifiers, bank account details, transaction history;
• Verification Documents: Copies of government-issued ID, proof of address, source of funds documentation;
• Communication Data: Records of correspondence with Customer Support, live chat transcripts.

2.2. Data We Collect Automatically

When You access the Platform, certain data is collected automatically through technical means:

• Usage Data: Pages visited, games played, session duration, click-path data;
• Device Data: Device type, operating system, browser type and version, screen resolution;
• Network Data: IP address, geolocation (country/region level), ISP information;
• Transaction Data: Deposit amounts, withdrawal requests, bet history, win/loss records;
• Cookie Data: Data collected through cookies and similar tracking technologies (see Section 6).

2.3. Data From Third Parties

We may receive personal data about You from the following third-party sources:

• Payment service providers and financial institutions;
• Identity verification and KYC service providers;
• Fraud prevention and AML screening agencies;
• Responsible gaming databases (e.g., self-exclusion registers).

3. How We Use Your Data

3.1. Primary Purposes

We use Your personal data for the following primary purposes:

• Account Administration: Creating, managing, and maintaining Your Player Account;
• Identity & Age Verification: Conducting KYC checks to confirm Your identity and that You meet the minimum age requirement of 18 years;
• Service Delivery: Providing access to Games, processing deposits and withdrawals, and awarding bonuses;
• Customer Support: Responding to inquiries, resolving complaints, and providing technical assistance;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, and unauthorised account access;
• AML & Compliance: Meeting anti-money laundering, counter-terrorist financing, and other regulatory obligations;
• Responsible Gaming: Monitoring gambling behaviour to identify potential problem gambling and applying Player Protection Tools;
• Marketing: Sending You promotional communications and personalised offers, where You have provided consent.

3.2. Secondary Purposes

• Conducting analytics to improve Platform performance and user experience;
• Generating aggregated, anonymised statistical reports;
• Complying with legal or regulatory requests from competent authorities.

4. Legal Bases for Processing

We process Your personal data only where a valid legal basis exists under Article 6 of the GDPR. The applicable legal bases are:

• Contractual Necessity (Art. 6(1)(b) GDPR): Processing necessary to perform the contract with You, including account management, payment processing, and game delivery;
• Legal Obligation (Art. 6(1)(c) GDPR): Processing required to comply with applicable laws, including KYC, AML, and responsible gaming obligations;
• Legitimate Interests (Art. 6(1)(f) GDPR): Processing for fraud prevention, IT security, improving our services, and direct marketing to existing customers, where Your interests and rights do not override our interests;
• Consent (Art. 6(1)(a) GDPR): Processing based on Your freely given, specific, informed, and unambiguous consent, particularly for non-essential marketing communications and certain cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

5.1. Categories of Recipients

We may share Your personal data with the following categories of third parties:

• Payment Processors: To facilitate deposits and withdrawals (e.g., Visa, Mastercard, Skrill, Neteller, Trustly);
• KYC & Verification Providers: Identity verification and document authentication services;
• AML / Fraud Prevention Agencies: Fraud detection, blacklist screening, and suspicious activity monitoring;
• Game Software Providers: Third-party game studios whose games are hosted on the Platform;
• IT & Cloud Service Providers: Hosting, infrastructure, and technical support services;
• Customer Support Platforms: Third-party tools used to manage chat, email, and helpdesk communications;
• Marketing & Analytics Partners: Where You have consented to marketing, partners who assist in delivering personalised communications;
• Legal & Regulatory Authorities: Law enforcement, regulators, and courts, where required by law or legal process.

5.2. Data Processing Agreements

All third-party service providers acting as data processors on Our behalf are required to enter into Data Processing Agreements (DPAs) that impose equivalent data protection obligations and restrict their use of Your data to the purposes specified by Us.

5.3. No Sale of Personal Data

We do not sell, rent, or otherwise commercialise Your personal data to any third party for their own marketing purposes.

6. Cookies & Tracking Technologies

6.1. What Are Cookies

Cookies are small text files placed on Your device when You visit a website. We use cookies and similar technologies (such as web beacons, pixel tags, and local storage objects) to operate the Platform, remember Your preferences, and analyse usage patterns.

6.2. Categories of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled and include session management, authentication, and security cookies;
• Functional Cookies: Remember Your preferences (e.g., language, currency, login status) to provide a personalised experience;
• Analytical / Performance Cookies: Collect aggregated data about how You use the Platform to help Us improve its performance (e.g., via Google Analytics or similar tools);
• Marketing / Targeting Cookies: Track Your browsing activity across websites to deliver relevant advertising. These require Your prior consent.

6.3. Cookie Consent & Control

Upon Your first visit to the Platform, You will be presented with a cookie consent banner enabling You to accept or reject non-essential cookies. You may also manage Your cookie preferences at any time through Your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.

7. Data Security

7.1. Technical & Organisational Measures

Energy Casino implements appropriate technical and organisational security measures to protect Your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between Your device and our servers;
• Encryption of sensitive data at rest, including payment information and identity documents;
• Role-based access controls, limiting staff access to personal data on a need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• Multi-factor authentication for administrative access to data systems.

7.2. Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to Your rights and freedoms, We will notify You without undue delay in accordance with our obligations under Article 34 of the GDPR. We will also notify the relevant supervisory authority where required under Article 33 of the GDPR within 72 hours of becoming aware of the breach.

8. Data Retention

8.1. Retention Periods

We retain Your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Standard retention periods are as follows:

• Account Data: For the duration of Your Account plus 5 years after closure, to meet AML record-keeping obligations;
• Transaction Records: 7 years from the date of the transaction, in line with financial regulatory requirements;
• KYC Documentation: 5 years from the end of the business relationship;
• Marketing Preferences: Until You withdraw Your consent or request erasure;
• Support Correspondence: 3 years from the date of the last communication.

8.2. Anonymisation

Where data is no longer required for operational or legal purposes, We anonymise or securely delete it in accordance with industry best practices.

9. Your Rights

9.1. Rights Under GDPR

As a data subject, You have the following rights under the GDPR, which You may exercise at any time by contacting Us at [email protected]:

• Right of Access (Art. 15): The right to obtain a copy of the personal data We hold about You;
• Right to Rectification (Art. 16): The right to have inaccurate or incomplete data corrected;
• Right to Erasure / “Right to be Forgotten” (Art. 17): The right to request deletion of Your data, subject to legal retention obligations;
• Right to Restriction of Processing (Art. 18): The right to request that We limit the processing of Your data in certain circumstances;
• Right to Data Portability (Art. 20): The right to receive Your data in a structured, machine-readable format and to transmit it to another controller;
• Right to Object (Art. 21): The right to object to processing based on legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent (Art. 7(3)): The right to withdraw any consent You have given at any time, without affecting the lawfulness of prior processing.

9.2. Response Timeframe

We will respond to all verified rights requests within 30 calendar days of receipt. This period may be extended by a further 60 days where the request is complex or numerous, in which case We will notify You within the initial 30-day period.

9.3. Right to Lodge a Complaint

If You believe that We have processed Your personal data in violation of applicable data protection law, You have the right to lodge a complaint with the relevant supervisory authority in Your country of residence. In Hungary, the competent authority is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) (Hungarian National Authority for Data Protection and Freedom of Information).

10. International Data Transfers

10.1. Transfers Outside the EEA

Some of Our service providers and partners may be located outside the European Economic Area (EEA). Where We transfer personal data to countries that do not provide an equivalent level of data protection, We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Binding Corporate Rules (BCRs) where applicable;
• Adequacy decisions by the European Commission recognising the country as providing adequate protection.

10.2. Your Rights in Transfers

You may request further information about the specific safeguards applied to any transfer by contacting Our DPO at [email protected].

11. Minors

11.1. Age Restriction

The Platform is strictly intended for individuals aged 18 years or older. We do not knowingly collect, process, or retain personal data of individuals under the age of 18. If We become aware that a minor has provided Us with personal data, We will take immediate steps to delete that data and close the Account.

11.2. Parental Responsibility

Parents and guardians are encouraged to use parental control software and internet filtering tools to prevent minors from accessing gambling websites. For further guidance, please refer to our Responsible Gaming Policy.

12. Changes to This Policy

We reserve the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated to You via the email address registered on Your Account and/or via a prominent notice on the Platform. The date of the latest revision is always indicated at the top of this document. We encourage You to review this Policy periodically.

13. Contact Information

If You have any questions, requests, or concerns regarding this Privacy Policy or Our data processing practices, please contact Us:

• General Support: [email protected]
• Data Protection Officer (DPO) / Privacy: [email protected]
• Website: energy-nyerogep.com

We aim to respond to all data protection enquiries within 30 calendar days.