Privacy Policy
What we collect, why we hold it, who sees it and how long it stays. Written to be read rather than skimmed past.
Last updated: August 2026
Who is responsible
The operator of this website is the data controller for the personal data described here. A joint controller, other brands within the same business group and a parent company also process parts of it. A Data Protection Officer is appointed and reachable at dpo@lizaro.com.
The General Data Protection Regulation is the framework this policy sits inside.
The four groups of data
| Group | What it covers | Why we hold it |
|---|---|---|
| Registration data | name, date of birth, email address, phone number, country, account currency | opening and running the account |
| Due diligence data | identity card, driving licence or passport number, proof of address, social security number, source of wealth and funds, bank ID, financial statements | age and identity checks, anti-money laundering, legal obligations |
| Transaction data | deposits, withdrawals, payment routes, references, balances | processing money and meeting record-keeping duties |
| Behaviour data | login times, device and browser, IP address, pages and games opened | security, fraud detection, and keeping the site working |
Where it comes from
Most of it comes from you. Some of it does not: public and government databases, internet and social media sources, commercially available databases, financial and credit institutions, fraud prevention agencies and public authorities all feed into due diligence where the law requires that depth of check.
Who it is shared with
Authorised employees. Brands within the same entity or operator. Contractors, agents, joint controllers, affiliates and subsidiaries. Third-party service providers who run parts of the platform. Law enforcement, regulatory and licensing authorities where they are entitled to ask.
One sharing rule is unusual enough to state plainly rather than bury in a list: if you submit a complaint or a review about us to a third-party platform — a casino review site, a gambling forum, a dispute resolution body — we may disclose personal data to that platform, limited to what identifies the account, on the basis of our legitimate interest in protecting our business reputation.
How long it stays
For the life of the account, and then deleted or anonymised once no legal or business need remains. Anti-money laundering rules and other regulation extend that period where they apply, and in those cases the retention clock is set by the rule rather than by us.
Your rights
Access to what is held. Correction of anything wrong. Erasure where nothing requires us to keep it. Restriction and objection. Portability. Withdrawal of a consent you previously gave, without that affecting anything done before you withdrew it.
Send any of these to dpo@lizaro.com from the address the account is registered under. You may also complain to the supervisory authority in your EU member state of residence, your place of work, or the place where you believe an infringement happened.
Security
Traffic runs over SSL. Access to due diligence records is limited to the staff whose work requires it. The account is yours to protect at your end: anything done with the correct email and password counts as done by you, so a password reused from somewhere else is the weakest link in the chain.
Cookies
Four categories. Essential cookies keep sessions and security working and cannot be switched off. Functional cookies remember preferences. Performance cookies measure how pages are used. Targeting cookies support advertising. The last two run on consent, and a Cookie Settings panel with Accept all, Decline all and Save & Close is available on every page.