This Privacy Policy explains how Duckysino (operated by KORNELITY S.R.L. at duckysiino.nl) collects, uses, stores, shares and protects your personal data. Please read it carefully before registering an account or using any part of the platform.

1. Who We Are

Duckysino is a brand operated by KORNELITY S.R.L. ("we", "us", "our"). The platform is accessible at duckysiino.nl and is licensed under the Tobique Gaming Commission Licence No. 38 and the Curaçao Licence OGL/2025/7124/1678. KORNELITY S.R.L. is the data controller responsible for your personal information collected through duckysiino.nl.

If you have any questions about this policy or about how we handle your data, you may contact us at any time:

• Email: [email protected]
• Phone: +4901516458215
• Live Chat: available 24/7 via duckysiino.nl

2. Scope of This Policy

This Privacy Policy applies to all personal data collected through duckysiino.nl, including data collected when you:

• register and maintain a player account;
• make deposits or withdrawals using any of our supported payment methods;
• claim bonuses, free spins, or participate in promotions and tournaments;
• play casino games, live casino tables, crash games, or place sports bets;
• contact our customer support team;
• install or use our Progressive Web App (PWA); or
• browse duckysiino.nl without registering.

By using duckysiino.nl, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, you should not use the platform.

3. Personal Data We Collect

We collect personal data in two principal ways: information you provide to us directly, and information collected automatically when you use the platform.

3.1 Data You Provide Directly

• Registration data: full name, date of birth, residential address, email address, telephone number, and chosen username.
• Identity verification (KYC) data: copy of a valid government-issued passport or national identity card, proof of address (such as a utility bill or bank statement), and a screenshot or image of the payment method used. KYC verification is required on the occasion of your first withdrawal and may be requested at any time in accordance with our regulatory obligations.
• Financial data: payment method details necessary to process deposits and withdrawals via Visa, Mastercard, Skrill, Neteller, Jeton, Paysafecard, Bitcoin, Ethereum, Litecoin, Trustly, SEPA, Klarna, or Google Pay. We do not store full card numbers; card data is handled by PCI-DSS-compliant payment processors.
• Cryptocurrency wallet addresses: where you deposit or withdraw using Bitcoin, Ethereum, or Litecoin, the wallet addresses you provide are recorded for transaction and compliance purposes.
• Communications data: messages, enquiries, and attachments you send to us via live chat, email, or phone.
• Responsible gaming data: any self-exclusion requests, deposit limits, cooling-off periods, or other responsible gaming preferences you set on your account.
• Promotional data: promotional codes (such as RELDAY or 50HIGH) you submit, tournament entries, and loyalty programme activity across Bronze, Silver, Gold, and Platinum tiers.

3.2 Data Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, and screen resolution.
• Usage data: pages visited on duckysiino.nl, games launched (including slots, live casino, sportsbook, and crash games), session duration, bet amounts, bonus activity, and PWA installation data.
• Cookies and similar technologies: session cookies, persistent cookies, analytics cookies, and functional cookies. Please see Section 11 (Cookies) for full details.
• Geolocation data: approximate location derived from your IP address, used to verify that you are accessing the platform from a permitted jurisdiction.
• Transaction logs: all deposit and withdrawal records, including method, amount, timestamp, and processing status, are logged automatically.

4. Legal Bases for Processing

We process your personal data on one or more of the following legal bases:

5. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• Account management: to register, verify, maintain, and close your player account, and to process login authentication.
• Payment processing: to handle deposits and withdrawals across all supported methods, enforce minimum deposit limits (€10 for cards and e-wallets; €20 for crypto) and minimum withdrawal limits (€20–€50 depending on method), apply the standard weekly withdrawal cap of €3,000 (or up to €20,000 for VIP players), and process large wins exceeding €15,000 in monthly instalments of up to €15,000.
• KYC and AML compliance: to verify your identity, confirm that your account name matches your payment method, satisfy our obligations under applicable anti-money laundering legislation, and fulfil conditions of our Tobique Gaming Commission and Curaçao licences.
• Bonus and promotions administration: to credit and track welcome bonuses (up to €2,500 + 250 Free Spins across three deposits, subject to 35x wagering), Sunday reload bonuses, weekly cashback, the Highroller Bonus, tournaments including Rookie Rumble, SpinöLeague 2026, BGaming Drops, Pragmatic Play Drops & Wins, and Evolution World Cup Drops, and rakeback rewards.
• Loyalty programme: to assess your activity and allocate or maintain your Bronze, Silver, Gold, or Platinum loyalty tier and associated benefits.
• Customer support: to respond to enquiries submitted via live chat, email, or phone and to maintain records of those interactions.
• Responsible gaming: to implement and honour any limits, self-exclusion requests, or cooling-off periods you set; to monitor gameplay patterns that may indicate problem gambling; and to provide access to responsible gaming tools and support resources.
• Fraud and security: to detect, investigate, and prevent fraudulent transactions, bonus abuse, collusion, unauthorised account access, and other unlawful activity.
• Platform improvement: to analyse usage patterns, test new features, optimise the PWA experience, and improve the overall quality of duckysiino.nl.
• Marketing (where you have consented): to send you information about new games, promotions, and offers by email, SMS, or push notification. You may withdraw this consent at any time by contacting us or using the unsubscribe link in any marketing message.
• Legal compliance: to comply with court orders, regulatory requests, or other legal obligations.

6. Identity Verification (KYC)

Duckysino is required to verify the identity of all players before processing a first withdrawal and in other circumstances where our compliance obligations demand it. As part of the KYC process, we will ask you to provide:

• a copy of a valid passport or national identity card;
• proof of your residential address (for example, a utility bill or bank statement dated within the last three months); and
• a screenshot or image confirming the payment method used on your account.

KYC documents are reviewed within approximately 48 hours of submission. Until verification is complete, withdrawal requests may be held pending. The account name on your Duckysino account must match the name on your payment method and identity documents; mismatches may result in additional verification steps or the return of funds to the originating payment method.

KYC data is processed strictly for identity verification, fraud prevention, and regulatory compliance purposes. It is stored securely and retained for the period required by applicable law and our licensing obligations.

7. Sharing Your Personal Data

We do not sell your personal data. We may share it with third parties only in the following circumstances:

7.1 Service Providers and Data Processors

We engage trusted third-party companies to provide services on our behalf. These processors act only on our documented instructions and are bound by appropriate data protection agreements. They include:

• Payment processors: providers enabling transactions via Visa, Mastercard, Skrill, Neteller, Jeton, Paysafecard, Bitcoin/ETH/LTC, Trustly, SEPA, Klarna, and Google Pay.
• KYC and identity verification providers: specialist services used to verify identity documents and addresses.
• Game providers and studios: including Pragmatic Play, Evolution, BGaming, NetEnt, Spinomenal, Red Tiger, LuckyStreak, Iconic21, Relax Gaming, Belatra Games, Turbo Games, Onlyplay, Volt Entertainment, RubyPlay, Zillion Games, and others. Game providers may receive limited technical data necessary to deliver gameplay.
• Analytics providers: services that help us understand how players use duckysiino.nl and the PWA.
• Customer support tools: platforms used to deliver 24/7 live chat and email support.
• IT and hosting providers: companies responsible for secure hosting, infrastructure, and data storage.
• Fraud prevention and AML screening services: providers that assist with detecting suspicious activity and meeting our anti-money laundering obligations.

7.2 Regulatory Authorities and Licensing Bodies

We may share data with the Tobique Gaming Commission and the Curaçao licensing authority (in connection with Licence OGL/2025/7124/1678), as well as other competent regulators, where we are required or permitted to do so by law or licence condition.

7.3 Law Enforcement and Legal Process

We may disclose personal data to law enforcement agencies, courts, or other public authorities where required by law, court order, or to protect the rights, property, or safety of Duckysino, its players, or others.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of KORNELITY S.R.L.'s business, your personal data may be transferred to the acquiring or successor entity. We will notify you in advance of any such transfer that materially affects how your data is processed.

8. International Data Transfers

As an international online gaming platform, some of the third parties with whom we share data may be located outside your country of residence, including in countries that may not offer the same level of data protection as your home jurisdiction. Where such transfers occur, we take appropriate safeguards — such as standard contractual clauses or equivalent mechanisms — to ensure that your data remains protected to an adequate standard. You may request further information about our transfer safeguards by contacting us at [email protected].

9. Data Retention

We retain your personal data for as long as your account is active and for such additional period as is required by our legal, regulatory, and licensing obligations. In practice, this means:

• Account data and transaction records are retained for a minimum of five years following account closure or the last transaction, in line with standard AML record-keeping requirements under our Tobique and Curaçao licences.
• KYC documents are retained for the period required by applicable anti-money laundering legislation and regulatory guidance.
• Communications and support records are retained for as long as reasonably necessary to resolve disputes and comply with legal obligations.
• Marketing consent records are retained until you withdraw consent and for a reasonable period thereafter as evidence of your consent.
• Responsible gaming records (including self-exclusion data) are retained for the duration of any exclusion period and for a further period as required by our licensing obligations.

When data is no longer required, it is securely deleted or anonymised.

10. Your Rights

Depending on your jurisdiction and applicable data protection law, you may have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to ask us to correct inaccurate or incomplete personal data.
• Right to erasure: to request deletion of your personal data, subject to our legal retention obligations.
• Right to restriction of processing: to ask us to limit how we use your data in certain circumstances.
• Right to data portability: to receive your personal data in a structured, commonly used format where technically feasible.
• Right to object: to object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: where processing is based on your consent (for example, marketing communications or non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: you have the right to lodge a complaint with a competent data protection supervisory authority if you believe your data has been handled unlawfully.

To exercise any of these rights, please contact us at [email protected]. We will respond within the timeframe required by applicable law. We may need to verify your identity before processing your request.

11. Cookies and Tracking Technologies

Duckysino uses cookies and similar tracking technologies on duckysiino.nl and through the PWA. Cookies are small text files placed on your device that help us operate the platform, remember your preferences, and understand how players use our services.

We use the following categories of cookies:

You can manage your cookie preferences through the cookie settings tool on duckysiino.nl or through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the platform. For the PWA specifically, some functional cookies may be required for the installed experience to operate correctly.

12. Security

We take the security of your personal data seriously. Duckysino implements appropriate technical and organisational measures to protect your information against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and duckysiino.nl;
• secure, access-controlled storage of KYC documents and financial records;
• PCI-DSS-compliant handling of card payment data through regulated third-party processors;
• secure handling of cryptocurrency wallet addresses, with recovery attempts for misdirected crypto funds only available for amounts over €5,000 (subject to a 0.1 BTC fee);
• regular internal security reviews and staff training on data protection obligations; and
• account name-matching requirements on withdrawals to reduce the risk of fraudulent payment redirection.

Whilst we take all reasonable steps to protect your data, no method of internet transmission or electronic storage is entirely secure. We encourage you to use a strong, unique password for your Duckysino account and to keep your login credentials confidential.

13. Responsible Gaming and Data Processing

Duckysino is committed to promoting responsible gambling. As part of this commitment, we process certain personal data specifically to support responsible gaming measures, including:

• recording and honouring deposit limits, loss limits, wagering limits, session time limits, and cooling-off periods you set on your account;
• processing and enforcing self-exclusion requests and ensuring excluded players cannot create new accounts;
• monitoring gameplay patterns and account activity to identify behaviours that may be indicative of problem gambling; and
• sharing data with self-exclusion schemes or regulatory bodies where required by our licensing obligations under the Tobique Gaming Commission or Curaçao authorities.

This processing is carried out on the basis of our legal obligations as a licensed operator and, where applicable, our legitimate interest in protecting vulnerable players. Responsible gaming data is handled with the utmost confidentiality.

If you have concerns about your gambling habits, please contact our support team at [email protected] or via 24/7 live chat.

14. Minors

Duckysino does not knowingly collect personal data from individuals under the age of 18. Our platform is strictly for adults aged 18 and over. Age verification is part of our KYC process, and we reserve the right to request additional proof of age at any time. If we become aware that personal data has been collected from a minor, we will delete that data and close the relevant account promptly. If you believe a minor has registered on duckysiino.nl, please contact us immediately at [email protected].

15. Third-Party Links and Game Providers

duckysiino.nl may contain links to third-party websites or load content from third-party game providers, including Pragmatic Play, Evolution, BGaming, NetEnt, Spinomenal, Red Tiger, LuckyStreak, Iconic21, and others. This Privacy Policy applies only to personal data processed by KORNELITY S.R.L. through duckysiino.nl. Third-party providers operate under their own privacy policies, and we encourage you to review those policies independently. We are not responsible for the data practices of third-party studios, game aggregators, or external websites.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal and regulatory requirements. When we make material changes, we will notify you by posting the updated policy on duckysiino.nl and, where appropriate, by sending a notification to the email address registered to your account. The date of the most recent revision will be displayed at the foot of this page. Continued use of duckysiino.nl after the effective date of any changes constitutes your acknowledgement of the updated policy.

17. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which KORNELITY S.R.L. handles your personal data, please contact us using any of the following channels:

• Email: [email protected]
• Phone: +4901516458215
• Live Chat: available 24/7 at duckysiino.nl

We aim to acknowledge all privacy-related enquiries promptly and to resolve them within the timeframe required by applicable law.

This Privacy Policy was last reviewed and updated in 2025. KORNELITY S.R.L. operates duckysiino.nl under Tobique Gaming Commission Licence No. 38 and Curaçao Licence OGL/2025/7124/1678.