AllStarz Privacy Policy

Privacy Policy – AllStarz

Last Updated: July 2025

This Privacy Policy explains how AllStarz ("we," "us," "our," or the "Company") collects, processes, stores, and protects your personal data when you access or use our online casino platform, website, mobile applications, and related services (collectively, the "Services"). At AllStarz, we are committed to transparency, accountability, and full compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the Malta Gaming Authority (MGA) guidelines, and Curaçao eGaming regulations. By using our Services, you acknowledge that you have read and understood this privacy policy AllStarz document in its entirety.

Data protection AllStarz practices are designed to ensure that your personal information remains secure, confidential, and processed only for legitimate purposes. We encourage every player to review this page carefully to understand your rights and our obligations under GDPR AllStarz compliance standards.

1. Introduction and Scope

AllStarz operates as a licensed online casino platform under the jurisdictions of Malta and Curaçao. This Privacy Policy applies to all individuals who visit our website, register an account, deposit or withdraw funds, participate in games, contact our support team, or interact with any part of our Services. The privacy policy AllStarz framework covers both automated and non-automated processing of personal data.

This document serves as our official notice to you regarding the types of information we collect, the legal bases for processing, the purposes for which data is used, and the measures we take to protect your information. Whether you are a casual visitor or a registered player, data protection AllStarz principles apply equally to all users.

1.1 Definitions

• Personal Data: Any information relating to an identified or identifiable natural person, including but not limited to name, email address, IP address, payment details, and behavioral data.
• Processing: Any operation performed on personal data, whether automated or manual, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• Data Controller: AllStarz, the entity that determines the purposes and means of processing personal data.
• Data Processor: A third party that processes personal data on behalf of AllStarz.
• Data Subject: Any individual whose personal data is collected and processed by AllStarz.
• Consent: Any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they agree to the processing of their personal data.
• Supervisory Authority: An independent public authority responsible for monitoring the application of data protection regulations, such as the Malta Information and Data Protection Commissioner.

1.2 Legal Basis for Processing

Under GDPR AllStarz compliance, we process personal data based on one or more of the following legal grounds:

• Consent: You have given explicit consent for processing your data for one or more specific purposes.
• Contractual Necessity: Processing is necessary for the performance of a contract to which you are a party, such as your player account agreement.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which AllStarz is subject, including anti-money laundering (AML) and know-your-customer (KYC) requirements.
• Legitimate Interests: Processing is necessary for legitimate interests pursued by AllStarz, provided such interests are not overridden by your fundamental rights and freedoms.

2. Information We Collect

AllStarz collects various categories of personal data to provide you with a safe, efficient, and personalized gaming experience. The data protection AllStarz framework ensures that we collect only the minimum amount of information necessary to fulfill our stated purposes.

2.1 Information You Provide Directly

When you register an account, make transactions, or contact our support team, you may provide the following personal data:

• Identity Information: Full name, date of birth, gender, nationality, and government-issued identification documents (passport, driver's license, or national identity card).
• Contact Information: Email address, telephone number, and residential address.
• Financial Information: Credit or debit card numbers, bank account details, e-wallet information, cryptocurrency wallet addresses, and transaction histories.
• Account Credentials: Username, password (stored in encrypted form), and security questions.
• Verification Documents: Proof of identity, proof of address (utility bills, bank statements), and proof of payment method, as required by KYC and AML regulations.
• Communication Records: Emails, live chat transcripts, telephone call recordings, and any other correspondence with our customer support team.
• Preferences and Settings: Language preferences, marketing communication preferences, and responsible gaming limits you set on your account.

2.2 Information Collected Automatically

When you access the AllStarz platform, certain data is collected automatically through technical means:

• IP Address: Your Internet Protocol address is logged for security, geolocation verification, and fraud prevention purposes.
• Device Information: Hardware model, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, games played, session duration, click patterns, referral URLs, and navigation paths within the platform.
• Location Data: Approximate geographic location derived from your IP address to ensure regulatory compliance and restrict access from prohibited jurisdictions.
• Log Data: Server logs that include access times, error logs, and system activity records.

2.3 Information from Third Parties

AllStarz may receive personal data from external sources, including:

• Payment Providers: Transaction confirmation and fraud screening data from banks, credit card companies, and e-wallet operators.
• Identity Verification Services: Results from KYC/AML screening providers and credit reference agencies.
• Regulatory Bodies: Information from gaming regulators, law enforcement agencies, and self-exclusion registries.
• Affiliate Partners: Referral data if you arrived at AllStarz through an affiliate link.
• Social Media Platforms: If you choose to link or log in through a social media account, we may receive basic profile information as permitted by your social media privacy settings.

3. How We Use Your Data

The privacy policy AllStarz data usage practices are guided by the principles of purpose limitation and data minimization. We use your personal data for the following specific purposes:

3.1 Account Management and Service Delivery

• Creating, verifying, and maintaining your player account.
• Processing deposits, withdrawals, and other financial transactions.
• Providing access to casino games, promotions, tournaments, and loyalty programs.
• Communicating with you regarding account activity, service updates, and transactional notifications.
• Resolving disputes and addressing player complaints.

3.2 Legal and Regulatory Compliance

• Conducting KYC and AML checks as required by Malta Gaming Authority, Curaçao eGaming, and other applicable regulatory frameworks.
• Verifying your age and identity to prevent underage gambling.
• Monitoring transactions for signs of fraud, money laundering, or terrorist financing.
• Complying with self-exclusion programs and responsible gambling obligations.
• Responding to lawful requests from regulatory authorities, law enforcement, and courts.

3.3 Security and Fraud Prevention

• Detecting and preventing unauthorized access, account takeover, and bonus abuse.
• Monitoring for suspicious betting patterns or collusion.
• Maintaining the integrity and security of our platform through technical and organizational measures.
• Conducting internal audits and investigations.

3.4 Marketing and Personalization

• Sending promotional offers, bonuses, and newsletters (only with your explicit consent).
• Personalizing your gaming experience based on your preferences and playing history.
• Conducting surveys and market research to improve our Services.
• Displaying relevant advertisements and promotional content.

3.5 Analytics and Platform Improvement

• Analyzing usage patterns and trends to enhance user experience.
• Testing new features, designs, and functionalities.
• Generating aggregated, anonymized statistical reports for internal business purposes.

4. Data Sharing and Disclosure

AllStarz does not sell your personal data to third parties. However, data protection AllStarz obligations may require us to share your information with certain categories of recipients under specific circumstances:

4.1 Regulatory and Legal Authorities

We may disclose personal data to the Malta Gaming Authority, Curaçao eGaming licensing authorities, financial intelligence units, tax authorities, law enforcement agencies, and courts when required by law or when necessary to comply with a legal obligation, regulatory investigation, or judicial proceeding.

4.2 Service Providers and Data Processors

We engage trusted third-party service providers who process data on our behalf, including:

• Payment processors and banking partners.
• KYC/AML verification and identity screening providers.
• Cloud hosting and data storage providers.
• Email and communication service providers.
• Analytics and business intelligence platforms.
• Customer support software providers.
• Game content providers and software developers.

All data processors are contractually obligated to process your data only in accordance with our instructions, this privacy policy AllStarz document, and applicable data protection laws. We conduct due diligence to ensure that all processors maintain adequate security measures.

4.3 Corporate Transactions

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal data.

4.4 With Your Consent

We may share your data with additional third parties when you have provided explicit, informed consent for a specific purpose.

5. International Data Transfers

AllStarz operates across multiple jurisdictions, which may require the transfer of your personal data to countries outside the European Economic Area (EEA). When such transfers occur, GDPR AllStarz safeguards are implemented to ensure that your data receives an adequate level of protection, including:

• Adequacy Decisions: Transferring data only to countries that the European Commission has determined provide an adequate level of data protection.
• Standard Contractual Clauses (SCCs): Utilizing EU-approved standard contractual clauses with recipients in countries without adequacy decisions.
• Binding Corporate Rules: Where applicable, relying on approved binding corporate rules for intra-group transfers.
• Additional Safeguards: Implementing supplementary measures such as encryption, pseudonymization, and access controls to protect data during and after transfer.

You may request details regarding the specific safeguards applied to international transfers of your data by contacting our Data Protection Officer.

6. Data Retention

AllStarz retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Our data protection AllStarz retention schedule is as follows:

• Active Account Data: Retained for the duration of your account being active and for a period of five (5) years after account closure, unless a longer retention period is required by law.
• Transaction Records: Retained for a minimum of five (5) years after the transaction date, in accordance with AML regulations and financial record-keeping requirements.
• KYC/AML Documentation: Retained for a minimum of five (5) years following the termination of the business relationship, or longer if required by specific regulatory mandates.
• Marketing Consent Records: Retained for as long as consent remains valid, and for a reasonable period thereafter to demonstrate compliance.
• Communication Records: Customer support interactions are retained for a minimum of three (3) years for quality assurance and dispute resolution purposes.
• Technical Logs: Server logs and IP address records are retained for a period of twelve (12) months unless required longer for ongoing investigations.

Upon expiration of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with you.

7. Your Data Protection Rights

Under GDPR AllStarz compliance, you have the following rights regarding your personal data. We are committed to facilitating the exercise of these rights promptly and transparently:

7.1 Right of Access (Article 15 GDPR)

You have the right to obtain confirmation as to whether your personal data is being processed, and if so, to access that data along with information about the purposes of processing, categories of data, recipients, retention periods, and the existence of automated decision-making.

7.2 Right to Rectification (Article 16 GDPR)

You have the right to request correction of inaccurate personal data and to have incomplete data completed. You may update certain information directly through your AllStarz account settings.

7.3 Right to Erasure (Article 17 GDPR)

You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when processing is unlawful. Please note that this right is not absolute, and AllStarz may retain certain data where required by legal or regulatory obligations.

7.4 Right to Restriction of Processing (Article 18 GDPR)

You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of your data, when processing is unlawful, or when AllStarz no longer needs the data but you require it for legal claims.

7.5 Right to Data Portability (Article 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance, where processing is based on consent or contractual necessity and carried out by automated means.

7.6 Right to Object (Article 21 GDPR)

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, your personal data will no longer be processed for such purposes.

7.7 Right Not to Be Subject to Automated Decision-Making (Article 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless such processing is necessary for a contract, authorized by law, or based on your explicit consent.

7.8 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7.9 How to Exercise Your Rights

To exercise any of the above rights, please contact our Data Protection Officer using the contact details provided in Section 12 of this privacy policy AllStarz document. We will respond to your request within thirty (30) days. In complex cases, this period may be extended by an additional sixty (60) days, in which case we will inform you of the extension and the reasons for it. We may request verification of your identity before processing your request to prevent unauthorized access to personal data.

7.10 Right to Lodge a Complaint

If you believe that AllStarz has not adequately addressed your data protection concerns, you have the right to lodge a complaint with the relevant supervisory authority, such as the Office of the Information and Data Protection Commissioner (IDPC) in Malta or the data protection authority in your country of residence.

8. Cookies and Tracking Technologies

AllStarz uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. This section of the privacy policy AllStarz explains how we use these technologies.

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They enable the website to remember your actions and preferences over time, such as login details, language settings, and display preferences.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our platform, including authentication, security, and session management. These cookies cannot be disabled without affecting the functionality of the Services.
• Performance and Analytics Cookies: Collect anonymous data about how visitors use our platform, including page views, bounce rates, and loading times. We use tools such as Google Analytics to gather this information.
• Functionality Cookies: Remember your preferences and settings, such as language, region, and display options, to provide a more personalized experience.
• Advertising and Targeting Cookies: Track your browsing activity to deliver relevant advertisements and measure the effectiveness of our marketing campaigns. These cookies may be set by third-party advertising networks.

8.3 Managing Cookies

When you first visit AllStarz, a cookie consent banner will appear, allowing you to accept or decline non-essential cookies. You can also manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may limit the functionality of our platform. For more information, please refer to our separate Cookie Policy.

8.4 Other Tracking Technologies

In addition to cookies, AllStarz may use web beacons (tracking pixels), local storage, and session storage technologies for similar purposes, including measuring email open rates and tracking user interactions on the platform.

9. Data Security

AllStarz implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, loss, or destruction. Our data protection AllStarz security framework includes:

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL protocols. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Personal data access is restricted to authorized employees and contractors on a strict need-to-know basis. Multi-factor authentication is required for access to sensitive systems.
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS).
• Regular Audits: We conduct periodic internal and external security audits, penetration testing, and vulnerability assessments to identify and address potential weaknesses.
• Data Backup: Regular encrypted backups are maintained in geographically separated, secure locations to ensure data availability and disaster recovery.
• Employee Training: All staff members undergo regular data protection and information security training to ensure awareness of their responsibilities under this privacy policy AllStarz and applicable regulations.
• Incident Response: We maintain a documented data breach incident response plan that includes detection, containment, assessment, notification, and remediation procedures.

While we strive to protect your personal data, no method of electronic transmission or storage is completely secure. We encourage you to take precautions such as using strong, unique passwords and enabling two-factor authentication on your AllStarz account.

10. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, AllStarz will, in accordance with GDPR AllStarz requirements:

• Notify the relevant supervisory authority within seventy-two (72) hours of becoming aware of the breach, where feasible.
• Communicate the breach to affected data subjects without undue delay when the breach is likely to result in a high risk to their rights and freedoms.
• Document all breaches, including the facts, effects, and remedial actions taken, regardless of whether notification to the supervisory authority is required.

11. Children's Privacy

AllStarz Services are intended exclusively for individuals who are at least eighteen (18) years of age, or the legal gambling age in their jurisdiction, whichever is higher. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal data from a person under the applicable age threshold, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has provided personal data to AllStarz, please contact our Data Protection Officer immediately.

12. Third-Party Links and Services

The AllStarz platform may contain links to third-party websites, services, or applications that are not operated or controlled by us. This privacy policy AllStarz does not apply to those third-party services. We encourage you to review the privacy policies of any third-party websites you visit, as we are not responsible for their data practices, content, or security measures. The inclusion of a link on our platform does not imply endorsement of the linked website or service.

13. Responsible Gambling and Data Processing

AllStarz is committed to promoting responsible gambling. As part of our responsible gaming obligations, we may process your personal data for the following purposes:

• Monitoring your gambling behavior to detect signs of problem gambling.
• Implementing deposit limits, loss limits, session time limits, and cooling-off periods at your request.
• Enforcing self-exclusion measures and sharing relevant data with national and international self-exclusion registries.
• Providing referrals to gambling support organizations.
• Conducting affordability checks where required by regulatory guidelines.

Processing for responsible gambling purposes is carried out under our legal obligations and legitimate interests in protecting player welfare.

14. Changes to This Privacy Policy

AllStarz reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered users via email or through a prominent notice on our platform.
• Where required by law, seek your consent before applying changes that affect the processing of your personal data in a materially different way.

We encourage you to review this privacy policy AllStarz periodically to stay informed about how we protect your data. Your continued use of the Services after the posting of changes constitutes your acceptance of the revised policy.

15. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy, data protection AllStarz practices, or the processing of your personal data, please contact our Data Protection Officer (DPO):

• Data Protection Officer
• Company: AllStarz
• Email: [email protected]
• Postal Address: [Registered Office Address], Malta

We aim to respond to all data protection inquiries within thirty (30) days of receipt. For urgent matters related to GDPR AllStarz compliance or suspected data breaches, please mark your communication as urgent.

16. Governing Law and Jurisdiction

This Privacy Policy and any disputes arising from or relating to data protection AllStarz practices shall be governed by and construed in accordance with the laws of Malta, without regard to its conflict of law provisions. You agree that any legal proceedings relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Malta, unless otherwise required by applicable data protection legislation that grants you the right to bring proceedings in your country of residence.

17. Consent and Acceptance

By creating an account, using our Services, or otherwise providing personal data to AllStarz, you confirm that you have read, understood, and agree to the terms of this Privacy Policy. Where specific processing activities require your explicit consent, we will obtain it through clear affirmative action, such as checking a consent box during registration or opting in to marketing communications. You may withdraw your consent at any time as described in Section 7.8 of this privacy policy AllStarz document.

This Privacy Policy was last reviewed and updated in July 2025. AllStarz is committed to maintaining the highest standards of data protection and GDPR AllStarz compliance. Thank you for trusting AllStarz with your personal information.