Tiki Taka Casino Privacy Policy – Personal Data, Cookies and Rights describes the topics that are important for players when personal data is processed. This page provides general information; without confirmed company information, specific procedures, contact details and retention periods cannot be confirmed.
Personal data may be required for an account, legal checks and security. The applicable privacy policy and cookie settings provide insight into the actual processing, the organisation responsible and the options available for exercising rights.
Privacy at a glance
The table shows categories that may be relevant to an online gambling service. It does not confirm that Tiki Taka Casino collects every listed category or uses it for every stated purpose. The privacy policy should clearly explain for each processing activity which data is used, why it is processed and on which legal basis the processing is based.
Under the General Data Protection Regulation, the GDPR, an organisation must, among other things, be transparent and must not process more data than necessary for a legitimate purpose. Players can request information and make certain choices, although legal exceptions apply to some rights.
Which data is collected
When using an account, identification data, contact details and transaction data may be involved. Technical data may be generated when a device connects to a service. Correspondence with support and communication preferences may also contain personal data.
The exact data depends on the features offered and the applicable obligations. A player can check the privacy policy to see which data is provided directly, which is generated automatically and whether information is received from other sources.
What your data is used for
Processing must have a clear purpose and an appropriate legal basis. Possible legal bases include performance of a contract, a legal obligation, consent and legitimate interest. Which legal basis actually applies depends on the specific purpose and circumstances.
Your account and your gambling
Account data may be required to manage access, apply settings and administer transactions. For processing that is necessary to perform a contract, the contract may provide the legal basis. Not every processing activity related to an account is automatically necessary for that contract.
Legal obligations
Legislation may require an operator to carry out certain checks or retain records. In that case, a legal obligation may provide the legal basis. The applicable policy should clarify which obligation is relevant and which data is required for it.
Fraud prevention and responsible gambling
Data may be used to investigate unusual activity, protect accounts and apply responsible gambling measures. Depending on the purpose, a legal obligation or legitimate interest may be relevant. Where legitimate interest applies, a balance must be made between that interest and the rights and interests of the individuals concerned.
Cookies at Tiki Taka
Cookies are small data files that a service can place in or read from a browser. Similar technologies may collect information about a device or its use. Some technologies support essential functions, while others may be used for measurements or personalised communication.
For non-essential cookies, prior consent is generally required unless a legal exception applies. The player can review the cookie notice and settings to see which categories are available, which parties are involved and how a previous choice can be changed. Browser settings can also remove or block stored cookies, although this may affect how certain functions work.
Sharing with third parties
An operator may engage other organisations for certain activities, for example technical support, payment processing or identity verification. Disclosure of data to authorised authorities may also be legally required under certain circumstances. The privacy policy should describe the recipients or categories of recipients and the reasons for sharing.
When a service provider processes personal data on behalf of a controller, appropriate arrangements regarding that processing are required. Additional safeguards may be necessary for transfers outside the European Economic Area. Without confirmed company information, it cannot be established which parties Tiki Taka Casino uses or whether data is sold.
Retention periods and security
Retention and security should correspond to the purpose of the processing and the risks to individuals. A privacy policy should explain how retention periods are determined and which general protective measures apply.
How long data is retained
Personal data should in principle not be kept in identifiable form longer than necessary for its purpose. Legal retention obligations, disputes or other legitimate reasons may require certain data to be retained for longer. No confirmed retention periods are available; the player can consult the applicable policy or request an explanation of the criteria used.
How your data is protected
Appropriate measures may include access restrictions, encryption, system monitoring and procedures for security incidents. Which measures are actually used has not been established here. Players can also reduce risks by handling account details carefully and reporting suspicious activity.
In addition to measures taken by the controller, careful account use can reduce exposure of personal data. The points below are general precautions and do not confirm that a particular security feature is available at Tiki Taka Casino.
- Use a unique password — A long and unique password reduces the risk that a breach at another service will provide access to the account. A reliable password manager can help store different passwords securely.
- Check security settings — Available account settings may show which additional security options exist. If extra verification is offered, enabling it may provide better protection for access; the availability of a specific method has not been confirmed here.
- Be careful with identity documents — Before sharing a document, the player can check why it is needed and which secure submission method is available. Information should only be redacted where the receiving party and applicable rules allow it.
- Recognise suspicious messages — Unexpected messages asking for passwords, codes or documents deserve additional scrutiny. The player can independently look up a known contact method instead of following instructions from a suspicious message.
- Manage devices and sessions — An up-to-date device and a locked screen reduce the risk of unauthorised access. On shared devices, it is advisable to log out after use and not save login details.
- Check preferences and activity — Regularly reviewing account details, communication preferences and visible activity can reveal irregularities. If unfamiliar changes appear, the player can change the password and notify the available support channel.
Your rights under the GDPR
The GDPR gives individuals various rights, including access, rectification and, in certain cases, deletion. Applicability differs by request and legal basis. An organisation may, for example, retain data where a legal retention obligation requires it, even if an account is closed.
A request may concern specific data or a particular processing activity. The controller may request additional information where there is reasonable doubt about the identity of the requester, but should not request more data than necessary.
The following rights provide different ways to exercise control over personal data. Not every right applies in every situation; the legal basis, purpose and any legal exceptions also determine how a request is assessed.
- Access — Through an access request, an individual can ask which personal data is processed, for which purposes and to which recipients data has been disclosed. A copy of the relevant data may form part of the response.
- Rectification — Incorrect personal data can be corrected and incomplete data can be supplemented. The request becomes clearer when the individual indicates which information is incorrect and which correct information should replace it.
- Deletion — A request to erase data may, for example, be relevant when the data is no longer necessary for its original purpose. Deletion is not unlimited: a legal retention obligation or another applicable exception may make retention necessary.
- Restriction of processing — Where accuracy is disputed or in other legally defined situations, restriction may be requested. The data generally remains stored, but further use is limited under certain conditions while the matter is being assessed.
- Data portability — For certain data processed automatically on the basis of consent or a contract, an individual can request a structured, commonly used and machine-readable copy. Direct transfer to another controller may be requested where technically feasible.
- Objection — Processing based on legitimate interest may be objected to because of the individual’s specific situation. Processing for direct marketing may also be objected to; processing for that purpose must then stop.
- Withdraw consent — Where consent is the legal basis, that consent can be withdrawn. This does not automatically make previous processing unlawful. The individual can use the available settings or contact method and specify which processing the withdrawal concerns.
Contact about privacy
For a privacy request, a player can check the available support or privacy contact option in the account environment or privacy policy. No confirmed contact details are available. A clear description of the request helps the controller identify the correct data and the right being exercised.
The controller should respond within the legally applicable period and explain any limitations or extension. If the handling is unsatisfactory, an individual can submit a complaint to the Dutch Data Protection Authority, the Dutch supervisory authority.
A privacy request to Tiki Taka Casino can be prepared and submitted in a structured way. The following sequence helps clarify the desired right, confirm identity carefully and track the handling of the request.
- 1. Choose the request type — First determine which right fits the situation, such as access, correction, deletion or objection. A request may contain several parts, but a separate description for each part makes clear which action is being requested from the controller.
- 2. Find a contact option — Then check the privacy policy or account environment for an available support or privacy contact option. Because no contact details are confirmed here, the player should independently check which channel is listed for privacy requests and how a message can be submitted securely.
- 3. Confirm your identity if necessary — Where there is reasonable doubt about identity, the controller may request additional information. The requester can check why the verification is necessary, which information is sufficient and how any documents can be submitted securely without sharing unnecessary additional information.
- 4. Describe the request precisely — Then state which right is being exercised and which data, processing activity or period the request concerns. For correction, it helps to distinguish between the incorrect and correct information; for deletion, the individual can specify which data is concerned.
- 5. Follow the handling — Keep a copy of the request and any responses. The controller should respond within the legally applicable period. If an appropriate response is not received, the individual can follow up or submit a complaint to the Dutch Data Protection Authority.