Privacy Policy

Key Principles

Privacy is a fundamental human right and persons engaging with iGaming Compliance must trust that their personal data is handled with care. Therefore, protection of privacy and security of personal data is very important to iGaming Compliance. Any processing of personal data relating to identified or identifiable natural persons may only be processed in accordance with this Policy.

1. Definitions

Client: Natural person or company with which iGaming Compliance enters into a business relationship.

Data Controller: The entity which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Personal Data: Any information relating to an identified or identifiable natural person.

Processing: Any operation performed on personal data, whether automated or not.

2. Background, Scope & Purpose

In this policy, "iGaming Compliance", "we," "our" or "us" refers to iGamingcompliance Curaçao N.V., a company registered at Livestrong Offices
Groot Kwartierweg 10 in Curaçao. We are the controller of personal data processed through our services.

We recognize the expectations of our clients, employees and other third parties regarding the privacy, confidentiality and security of their personal data when it resides within our systems.

This Data Privacy Policy describes our privacy practice standards for mitigating risk regarding the processing of personal data: what type of personal data we collect, why and how we collect, use and store it; the legal basis for processing it; and our rights and obligations in relation to such processing.

3. Types of Personal Data

The personal data that we collect and process depends on the type and scope of services engaged:

IGAMING COMPLIANCE SERVICES

Data Subjects: Clients, Ultimate Beneficial Owners, directors of client companies, shareholders, employees, business associates

Types of Personal Data: Name, address, telephone, email, nationality, date of birth, place of birth, gender, tax/social/national identification number, job title, client ID documents, signature, bank account details, financial information, professional data, personal data, criminal record (if required by law)

GAP ASSESSMENT REVIEWS

Data Subjects: Client personnel, compliance officers, key management

Types of Personal Data: Contact details, professional qualifications, employment history, compliance records

OUTSOURCED COMPLIANCE OFFICER SERVICES

Data Subjects: Client staff, customers, business partners

Types of Personal Data: Identity verification data, transaction records, compliance monitoring data, regulatory communications

HUMAN RESOURCES

Data Subjects: Employees, candidates, managers

Types of Personal Data: Name, address, contact details, nationality, date of birth, qualifications, employment information, compensation details, health data (where required)

We may process special categories of personal data such as criminal records when required for enhanced due diligence measures under applicable anti-money laundering legislation and when performing background checks, with appropriate safeguarding measures.

We do not knowingly process personal data of minors.

4. Use of Personal Data, Purposes and Legal Grounds

4.1 Clients

When a client engages us for professional services, we collect and use personal data when we have a valid business reason in connection with those services and legal obligations. Legal grounds include:

  • Our legal obligations under anti-money laundering and counter-terrorism financing legislation

  • Performance of the contract between client and us

  • Legitimate interest in providing seamless, high-quality services

4.2 Employees

We process employee data for HR and payroll purposes and conduct background checks required by law or regulation. Legal grounds include:

  • Legal obligation under applicable labor legislation

  • Performance of employment agreement

  • Compliance with regulatory obligations

4.3 Suppliers

We process supplier data to manage relationships and contracts, and conduct required background checks. Legal grounds include:

  • Performance of supplier contracts

  • Compliance with regulatory obligations

  • Legitimate interest in managing payments and relationships

5. Personal Data Retention

Personal data will be kept for the duration of the business relationship and the years afterward stipulated by local regulations for complying with all legal, regulatory, and internal policy purposes. After expiration of this retention period, corresponding data are routinely deleted and hard copies destroyed.

6. Sub-processing and Third Parties

We may appoint certain third parties to provide services or technical support, to which personal data may be disclosed, such as: IT service providers, banking partners, legal firms, auditors, or other suppliers as required by law or contract.

Sub-processors are subject to terms and conditions no less protective than those set out in this Policy. We will inform clients of sub-processor details upon written request and provide advance notice of any changes.

7. Rights of Data Subjects

Subject to applicable legislation, all data subjects have the following rights:

  • Right to be informed about data collection and use
  • Right of access to personal data
  • Right to rectification of inaccurate data
  • Right to erasure (right to be forgotten)
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Rights relating to automated decision making

Contact us at info@igamingcompliance.com for any questions regarding these rights.

8. Personal Data Breach

We have implemented effective processes to ensure timely notification of personal data breaches to the relevant data protection authorities and affected individuals where required by law.

9. Safeguarding Measures

9.1 Confidentiality and Security

We keep personal data confidential and ensure our employees and sub-processors are bound by the same confidentiality obligations.

9.2 Technical Safeguarding Measures

We have adopted technical and organizational measures including:

  • Data encryption tools

  • Multi-factor authentication

  • Firewalls and antivirus software

  • Access controls and monitoring systems

  • Regular security assessments

10. Transfers of Personal Data

Personal data may be transferred to and stored outside the country where data subjects are located, including outside the European Economic Area. We ensure appropriate security and legal precautions through standard data protection clauses and equivalent protection measures.

11. Other Disclosures

We disclose personal data where required by law, to comply with judicial proceedings or regulatory inquiries, with data subject consent, and to report suspicious transactions to relevant authorities under anti-money laundering legislation.

We do not share personal data for advertising or marketing purposes without explicit consent.

12. Complaints

Data subjects have the right to lodge complaints with the relevant data protection authority. Complaints may also be submitted to info@igamingcompliance.com.

13. Contact Information

For questions about this policy or data processing, contact us at info@igamingcompliance.com or iGamingcompliance Curaçao, Groot Kwartierweg 10 ivestrong Building, Curaçao.

TOP