Privacy Policy
This Privacy Policy explains how Hollycorn N.V. ("we", "us", "the Casino"), operator of Shikaka Casino, collects, uses, stores, and protects personal data when you use our website and services. Hollycorn N.V. is incorporated in Curaçao and operates under Curaçao eGaming licence #8048/JAZ2020-013.
By registering an account with Shikaka Casino, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
1. Data We Collect
We collect personal data that you provide directly, data generated through your use of our services, and data received from third parties for verification purposes.
Data You Provide
- Registration data: full legal name, date of birth, residential address, email address, telephone number, and chosen currency.
- Identity verification (KYC) data: copies of government-issued photo ID, proof of address documents, and payment method documentation.
- Payment data: partial card numbers, e-wallet account identifiers, and bank account details used for deposits and withdrawals.
- Communication data: content of messages sent to customer support via live chat, email, or any other channel.
Data Generated by Your Use
- Transaction data: deposit amounts, withdrawal requests, bet amounts, game results, bonus credits, and account balance history.
- Technical data: IP address, browser type and version, operating system, device identifiers, and session timestamps.
- Behavioural data: pages visited, features used, session duration, game preferences, and click-through patterns.
- Cookie data: information collected via cookies and similar tracking technologies as described in our Cookie Policy.
Data from Third Parties
- Identity verification data from KYC providers used to confirm the accuracy of registration information.
- Fraud prevention signals from payment processors and anti-fraud services.
- Age verification results where required by applicable regulations.
2. How We Use Your Data
| Purpose | Legal basis |
|---|---|
| Account registration and management | Performance of contract |
| Processing deposits and withdrawals | Performance of contract |
| Identity verification (KYC) and age verification | Legal obligation |
| Anti-money laundering (AML) compliance | Legal obligation |
| Fraud prevention and security monitoring | Legitimate interests |
| Responsible gaming monitoring and tools | Legal obligation / Legitimate interests |
| Customer support | Performance of contract |
| Marketing and promotional communications (opted-in players) | Consent |
| Website and service improvement | Legitimate interests |
| Regulatory reporting and compliance | Legal obligation |
3. Data Sharing
We do not sell your personal data to third parties. We share personal data only in the following circumstances:
- Service providers: payment processors, KYC verification providers, fraud prevention services, customer support platforms, and hosting providers who process data on our behalf under data processing agreements.
- Regulatory authorities: Curaçao eGaming and other competent authorities when required by applicable law or licence conditions.
- Law enforcement: where we are legally obligated to disclose data in connection with criminal investigations or court orders.
- Business transfers: in the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity under equivalent privacy protections.
4. Data Retention
We retain personal data for as long as your account is active and for a period after closure as required by applicable laws and regulations. Specific retention periods are as follows:
| Data category | Retention period |
|---|---|
| Account and registration data | 5 years after account closure |
| Transaction records | 5 years after the transaction date |
| KYC documents | 5 years after account closure |
| Support communications | 3 years after the last communication |
| Marketing preferences | Until consent is withdrawn or account is closed |
| Technical and log data | 12 months |
5. Data Security
We apply industry-standard technical and organisational measures to protect your personal data. These include 256-bit SSL encryption for all data transmissions, secure storage of player funds in segregated accounts at tier-1 banking institutions, restricted access to personal data on a need-to-know basis, regular security audits and penetration testing, and two-factor authentication available for player accounts.
Despite these measures, no data transmission over the internet can be guaranteed as completely secure. You transmit data to us at your own risk. If you become aware of any security breach affecting your account, contact our support team immediately.
6. Your Rights
Subject to applicable law, you have the following rights regarding your personal data:
- Right of access: you may request a copy of the personal data we hold about you.
- Right to rectification: you may request correction of inaccurate or incomplete data.
- Right to erasure: you may request deletion of your personal data where we no longer have a lawful basis to retain it. Note that certain data must be retained for regulatory compliance purposes and cannot be deleted upon request.
- Right to restrict processing: you may request that we limit how we use your data in certain circumstances.
- Right to data portability: you may request that we provide your data in a structured, machine-readable format.
- Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
- Right to object: you may object to processing based on legitimate interests, including marketing communications.
To exercise any of these rights, contact our support team via live chat or email. We will respond within 30 days. Where requests are complex or numerous, we may extend this period by a further 60 days with notice to you.
7. Marketing Communications
If you have opted in to receive marketing communications during registration or subsequently through your account settings, we may send you promotional emails, SMS messages, or notifications about bonuses, new games, and special offers. You can opt out at any time by clicking the unsubscribe link in any marketing email, updating your communication preferences in your account settings, or contacting the support team to remove you from all marketing lists.
Opting out of marketing communications does not affect transactional communications related to your account, such as deposit confirmations, withdrawal notifications, and security alerts.
8. International Data Transfers
Hollycorn N.V. is incorporated in Curaçao, and your personal data may be processed in countries outside the European Economic Area. Where such transfers occur, we implement appropriate safeguards, including standard contractual clauses approved by the European Commission, to ensure that your data receives equivalent protection.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The updated policy will be published on this page with a revised "Last updated" date. We will notify registered players of material changes via email or account notification. Continued use of the Casino after a policy update constitutes acceptance of the revised policy.
10. Contact
For questions about this Privacy Policy, data subject requests, or any privacy-related concerns, contact our support team via live chat available 24/7 on the website, or by email through the contact form in the Help Centre.