Privacy Policy

This Privacy Policy explains how Wsm Casino Amerio (available at wsmcazino.com) collects, uses, shares, and protects personal data. A privacy policy is required to meet transparency obligations under the UK GDPR and the Data Protection Act 2018, and to help website visitors and players understand how their information is handled when using our casino services.

This Privacy Policy applies to (i) visitors of wsmcazino.com, (ii) registered players, and (iii) individuals who contact our support channels.

Effective date: 06 November 2025.

Who We Are

OBSERVE: The casino service described on wsmcazino.com is operated under the corporate name provided: MIBS B.V., with licensing referenced under Curaçao Master License 365/JAZ (validated via gaming-curacao.com/validation).

EXPAND: Under UK GDPR, we must identify the controller and provide a reliable contact point for privacy enquiries. The available profile data does not include a full registered address, postal code, or company registration number; therefore, we provide all verified details we have and a dedicated privacy contact route through our support address, and we will update this section when additional corporate identifiers are published by the operator.

REFLECT: For privacy purposes, the operator acts as the data controller for player and visitor data processed through wsmcazino.com, except where third parties act as independent controllers (e.g., certain payment networks and analytics/advertising platforms).

Operator (legal name): MIBS B.V.
Registered / legal address: Not specified in the provided operator information.
Company registration number: Not specified.
Tax identification number: Not specified.
Licensing reference (Curaçao): Master License 365/JAZ; validator/portal: https://gaming-curacao.com/validation
Data Protection contact (DPO / privacy team): support@wsmcazino.com (please include "Privacy Request" in the subject line).
Telephone: Not specified.

Regional compliance note (UK): Wsm Casino Amerio is not stated as licensed by the UK Gambling Commission in the provided materials. This Privacy Policy addresses UK data protection transparency expectations for UK visitors/players using wsmcazino.com; it does not represent UKGC licensing status.

What Personal Data We Collect

OBSERVE: Using wsmcazino.com involves account, gameplay, and crypto-payment workflows, plus support via Telegram and email escalation to support@wsmcazino.com. These activities generate identifiable and technical data.

EXPAND: UK GDPR requires clear disclosure of categories of personal data, including identifiers, online identifiers, transactional/payment details, and behavioural profiling where used for fraud prevention, responsible gambling, analytics, or marketing.

REFLECT: We collect the following categories (depending on how you interact with wsmcazino.com and your device settings):

Account & identity data

Personal identifiers: full name (where provided), date of birth (where required), username, account identifiers, country/region, and similar registration details.
Contact details: email address, phone number (if provided), and communication preferences.

Verification / KYC and compliance data

Due diligence information: identity documents, proof of address, selfies/liveness checks, source-of-funds/source-of-wealth information, and risk screening results where required for AML/CTF and fraud controls.
Self-exclusion and responsible gambling records: records of requests sent to support@wsmcazino.com (e.g., subject "SELF EXCLUSION"), account limits, and related support correspondence.

Payment and transaction data (crypto-focused)

Transaction details: deposits, withdrawals, timestamps, amounts, payment status, and related references.
Crypto wallet data: wallet addresses and transaction hashes necessary to process crypto payments (e.g., BTC, ETH, USDT on ERC20/TRC20, DOGE, and $WSM token), and network fee/gas information as reflected on-chain.
Payment support data: data you provide when reporting missing deposits or payout issues (noting that complex issues may be escalated to email support during Curaçao business hours).

Gameplay & behavioural data

Betting and gameplay history: game sessions, wagers, wins/losses, bonus usage, and wagering progress.
Behavioural signals: clicks, page interactions, session duration, referral links, and approximate location derived from IP (not precise GPS unless you separately allow it through your device/browser).

Technical, device, and log data

Online identifiers: IP address, device identifiers, browser type/version, OS, language settings, time zone, and approximate geolocation.
Security and audit logs: login timestamps, authentication attempts, device and session logs, error reports, and anti-fraud signals.

Cookies and similar technologies

Cookie data: cookie identifiers and preferences; similar technologies may include local storage and pixels/SDKs where enabled.

Legal Basis for Processing

OBSERVE: wsmcazino.com provides casino account services, crypto transactions, bonuses (see /bonus-terms), and compliance triggers (KYC references in /terms, including verification triggers). These functions require lawful bases under UK GDPR.

EXPAND: UK GDPR (and DPA 2018) requires that each processing activity is mapped to a lawful basis. Gambling operations also imply heightened fraud/AML controls and record-keeping obligations; even where the operator is offshore-licensed, it may still apply AML/CTF and integrity measures as a legal/contractual necessity for the service.

REFLECT: We rely on the following legal bases (UK GDPR Article 6), and where special category data is processed (rare), an additional condition under Article 9 applies:

Contract (Art. 6(1)(b)): to create and manage your account, provide gameplay, apply bonus terms, process deposits/withdrawals, and provide customer support.
Legal obligation (Art. 6(1)(c)): to conduct KYC/AML/CTF checks where required, maintain audit trails, respond to lawful requests, and comply with applicable regulatory or law-enforcement requirements (including those connected to the Curaçao licensing environment).
Legitimate interests (Art. 6(1)(f)): to prevent fraud, secure our systems, detect account takeover, maintain platform integrity, measure performance, and improve services - balanced against your rights and expectations.
Consent (Art. 6(1)(a)): for non-essential cookies, certain marketing communications, and advertising/affiliate tracking where required by UK PECR rules. You can withdraw consent at any time.

Regional compliance note (UK PECR): Where cookies or similar technologies are used for analytics/advertising, we request consent unless the technology is strictly necessary for providing the service you request.

Purpose of Processing

OBSERVE: wsmcazino.com is a crypto casino platform with automated and manual withdrawal workflows, support via Telegram and email escalation, and responsible gambling processes (self-exclusion by email). These functions define the primary purposes.

EXPAND: Purposes must be specific and limited to what is necessary (data minimisation and purpose limitation). Gambling platforms commonly require purposes covering KYC, risk controls, bonus administration, dispute handling, and service communications.

REFLECT: We use personal data for the following purposes:

Service delivery: account creation, authentication, gameplay provision, bonus administration (including eligibility and wagering), and platform functionality.
Payments and payouts: processing crypto deposits and withdrawals, conducting checks for unusual activity (including manual review for larger withdrawals), and providing transaction support.
Compliance and integrity: KYC/AML/CTF checks, sanctions/risk screening where applicable, fraud prevention, security monitoring, and audit logging.
Customer support: responding to requests via support channels, including escalation to support@wsmcazino.com.
Service improvement: analytics, debugging, performance monitoring, and product development.
Marketing (where permitted): sending promotional communications and personalised offers, and measuring campaign effectiveness (subject to consent/opt-out requirements).
Dispute handling: investigating complaints and maintaining records needed to resolve disputes, including potential escalation to the Curaçao validator/complaint portal.

Disclosure & Sharing

OBSERVE: The service uses payment rails (crypto networks), may use third-party technology providers, and references regulator validation via gaming-curacao.com/validation. Support may involve Telegram plus email escalation.

EXPAND: UK GDPR requires transparency about recipients, including processors and independent controllers. Gambling services should also explain when disclosure is required for legal compliance, fraud prevention, or dispute handling. Advertising/affiliate disclosure must distinguish consent-based sharing.

REFLECT: We may disclose personal data in the following circumstances:

Service providers (processors)

Hosting and infrastructure: cloud/hosting providers, monitoring, and security tooling used to run wsmcazino.com.
Customer support tooling: systems used to manage support tickets and communications; note that Telegram communications are governed by Telegram's own terms and privacy practices.
Analytics and performance: analytics providers to understand site usage and improve stability (subject to cookie/consent settings where required).

Payment and transaction counterparties

Blockchain networks and wallets: crypto transactions are recorded on public blockchains (e.g., BTC/ETH). Wallet addresses and hashes may be publicly visible by design; we do not control blockchain transparency.
Payment partners: where third-party tools are used to facilitate deposits/withdrawals, fraud scoring, or address screening, those parties may receive relevant transaction data.

Regulators, authorities, and legal disclosures

Licensing-related handling: if needed for dispute handling or compliance linked to the Curaçao licensing framework, data may be shared with relevant oversight entities, including via https://gaming-curacao.com/validation where you choose to submit a complaint.
Legal requests: courts, law enforcement, or other competent authorities where we are required or permitted to do so.

Affiliates and advertising networks

Consent-based marketing: where required by UK PECR/ePrivacy expectations, we will share identifiers for advertising/affiliate attribution only when you have provided the necessary consent via cookie preferences or equivalent mechanisms.

Protective clause: When we share data with service providers, we require contractual commitments to process data only on our instructions, apply appropriate security measures, and assist with UK GDPR compliance where applicable.

International Transfers

OBSERVE: The operator is described as registered/licensed in Curaçao, while the website targets UK users. This implies cross-border processing and potential storage/processing outside the UK.

EXPAND: UK GDPR restricts transfers of personal data outside the UK unless adequate safeguards exist (UK adequacy regulations, International Data Transfer Agreement (IDTA), UK Addendum to EU SCCs, or other permitted mechanisms). "Privacy Shield" is not a UK transfer mechanism; where referenced historically, it must not be relied upon for UK compliance.

REFLECT: Your personal data may be transferred to, stored in, or accessed from jurisdictions outside the UK, including:

Curaçao: operational and compliance handling connected with MIBS B.V. and support operations.
United States / EEA / other regions: where our hosting, analytics, security, or communications providers operate (depending on vendor selection and routing).

Transfer safeguards

UK-approved safeguards: where required, we use the UK IDTA or the UK Addendum to EU Standard Contractual Clauses, plus supplementary measures where appropriate (e.g., encryption, access controls).
Adequacy decisions: where the UK Government recognises a destination as providing adequate protection, we may rely on that adequacy regulation.
Risk-based assessments: we assess transfer risk and apply proportionate technical/organisational controls.

Data Retention

OBSERVE: The service involves account operation, transaction records, KYC triggers, and dispute escalation pathways, implying retention for operational, security, and compliance reasons.

EXPAND: UK GDPR requires storage limitation: keep data no longer than necessary. Gambling and AML-style controls commonly require multi-year retention for audit and dispute handling. Crypto transactions may be permanently recorded on-chain outside our control; we must clarify that "deletion" cannot erase blockchain records.

REFLECT: We retain personal data only for as long as needed for the purposes described, unless a longer period is required/justified by law, regulatory expectations, dispute resolution, or security needs.

Account profile data: kept while your account is active and typically up to 5 years after account closure to address disputes, security investigations, and compliance documentation needs.
KYC/verification records: typically up to 5 years after completion of checks or account closure (whichever is later), unless extended due to ongoing investigations or legal requirements.
Transaction and payment records: typically up to 7 years to support auditability, financial controls, and dispute handling; crypto blockchain records may persist independently of our systems.
Customer support communications: typically up to 3 years after ticket closure, unless required for complaint handling or legal claims.
Security logs and anti-fraud signals: typically 6 - 24 months, extended where needed to investigate incidents or patterns of abuse.
Marketing preferences and consent records: kept until you withdraw consent/opt out, and then retained in suppression form as needed to respect your preferences.
Cookies: retention depends on cookie type (session vs persistent) and is described in the cookie settings/tools and in the section below.

Deletion criteria: We delete or anonymise data when (i) retention periods expire, (ii) the processing purpose no longer applies, and/or (iii) a valid erasure request is granted - unless an exception applies (e.g., compliance, legal claims, fraud prevention).

Your Rights

OBSERVE: Users include UK visitors/players interacting with wsmcazino.com and support channels. The prompt also requires alignment with GDPR and Mexican privacy law references.

EXPAND: For UK users, rights arise under UK GDPR and the Data Protection Act 2018. For Mexico alignment, the closest analogue is the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), which provides ARCO rights (Access, Rectification, Cancellation, Opposition). While Wsm Casino Amerio is UK-targeted, providing these references supports cross-border transparency for users who may access the site from Mexico or assert equivalent rights.

REFLECT: Subject to eligibility and legal exceptions, you have the following rights:

UK GDPR rights

Right of access: request confirmation of processing and a copy of your personal data.
Right to rectification: request correction of inaccurate or incomplete data.
Right to erasure: request deletion where data is no longer necessary or where consent is withdrawn (exceptions apply, e.g., compliance and legal claims).
Right to restrict processing: request a pause on processing in certain situations (e.g., contested accuracy).
Right to object: object to processing based on legitimate interests; object to direct marketing at any time.
Right to data portability: receive certain data in a structured, commonly used format and/or have it transmitted to another provider where technically feasible.
Right to withdraw consent: where we rely on consent (e.g., certain cookies/marketing), you can withdraw it at any time without affecting prior lawful processing.

Mexican privacy law alignment (LFPDPPP - ARCO)

Access / Rectification / Cancellation / Opposition (ARCO): you may request access to your data, correction, cancellation (where applicable), or object to certain processing, subject to legal and operational limits.

How to exercise your rights (procedure)

Submit a request: email support@wsmcazino.com with subject "Privacy Request - Rights".
Provide identifiers: include your account email/username and describe the right you wish to exercise. Do not send excessive data; we may request proportionate verification to protect your account.
Verification: we may ask for additional information to confirm you are the account holder (especially for access/portability/erasure).
Response timeframe: we aim to respond within 30 days (2025 standard). If requests are complex or numerous, we may extend within the limits allowed by applicable law and will explain why.
Fees: requests are handled free of charge unless manifestly unfounded or excessive, in which case a reasonable fee may apply or we may refuse the request with reasons.

Important limitation (blockchain): Where data is embedded in public blockchain records (e.g., wallet addresses/transaction hashes), we cannot delete or alter the blockchain itself; we can, where appropriate, delete internal mappings or account references we control.

Cookies & Tracking Technologies

OBSERVE: The site uses typical web technologies to keep sessions working, secure accounts, and measure performance; marketing and affiliate attribution may be present subject to consent requirements in the UK.

EXPAND: Under UK PECR and UK GDPR, non-essential cookies (analytics/advertising) generally require opt-in consent, and users must be able to manage preferences. Transparency must cover cookie categories and how to disable them.

REFLECT: wsmcazino.com may use cookies and similar technologies as follows:

Types of cookies

Session cookies: temporary cookies used to keep you logged in and maintain session security; typically deleted when you close your browser.
Persistent cookies: stored for a defined period to remember preferences and help recognise returning visitors.
Third-party cookies: set by third parties (e.g., analytics or advertising partners) where enabled.

Cookie purposes

Strictly necessary (functional/security): authentication, fraud prevention signals, load balancing, and essential site features.
Preferences: language, UI settings, and cookie choices.
Analytics: measuring visits, feature usage, and performance to improve wsmcazino.com (typically consent-based in the UK).
Advertising/affiliate attribution: measuring campaign performance and showing relevant promotions (consent-based where required).

How to manage cookies

Cookie settings: use the site's cookie preference controls (where available) to accept or reject non-essential cookies.
Browser controls: you can block or delete cookies via your browser settings; note that blocking strictly necessary cookies may break login and payment-related functions.
Device-level controls: where applicable, adjust device advertising identifiers and tracking permissions.

Data Security

OBSERVE: The platform processes account access, gameplay, and crypto transactions, and supports automated withdrawals under thresholds and manual review above thresholds - requiring robust security, access control, and incident handling.

EXPAND: UK GDPR Article 32 requires appropriate technical and organisational measures. Industry practice for gambling and financial-adjacent systems includes encryption in transit, least-privilege access, MFA, monitoring, audits, secure SDLC, and incident response. Where certifications (ISO 27001/SOC 2) are not confirmed, we must not claim them as achieved; we can describe "where applicable" alignment targets.

REFLECT: We implement a layered security program designed to protect confidentiality, integrity, and availability:

Technical measures

Encryption in transit: TLS 1.2+ is used to protect data transmitted between your device and our servers.
Encryption at rest: sensitive data is protected using encryption or equivalent cryptographic controls where appropriate.
Access controls: role-based access, least privilege, and segregation of environments to limit who can access personal data.
Multi-factor authentication (MFA): applied for administrative access and other high-risk access paths where supported.
Monitoring and logging: continuous monitoring for suspicious activity, with security logs retained for investigation and audit purposes.

Organisational measures

Staff training: privacy and security awareness training for personnel handling user data.
Vendor management: due diligence and contractual controls for processors and key service providers.
Secure development practices: change control, vulnerability management, and patching procedures.

Assurance and incident response

Security assessments: regular reviews and testing (e.g., vulnerability scans and penetration testing) proportionate to risk.
Incident response: documented procedures to triage, contain, investigate, and remediate security incidents; where legally required, we will notify users and relevant authorities.
Standards alignment: security controls are designed to be consistent with recognised frameworks (e.g., ISO/IEC 27001 or SOC 2 principles) where applicable and as adopted by our vendor ecosystem.

Complaints & Contacts

OBSERVE: The profile provides a critical email contact (support@wsmcazino.com) and a regulator portal link (gaming-curacao.com/validation). Phone numbers and postal address are not specified, so complaint handling must rely on available channels while clearly stating limitations.

EXPAND: UK GDPR requires that individuals can lodge complaints with the ICO (UK supervisory authority). The prompt also requires Mexican authority contact information: Mexico's privacy authority is INAI. Additionally, the casino operates under Curaçao licence validation/complaints, which should be described as a separate pathway for operational disputes (not a replacement for data protection regulators).

REFLECT: If you have privacy questions, requests, or complaints relating to Wsm Casino Amerio on wsmcazino.com, you can contact us and escalate as follows:

Contact channels

Primary privacy contact (email): support@wsmcazino.com (subject: "Privacy Complaint" or "Privacy Request - Rights").
Online forms: Curaçao licence validator/complaints portal: https://gaming-curacao.com/validation (search license 365/JAZ).
Postal address: Not specified for the operator in the provided information.
Phone: Not specified.

Internal complaint procedure (step-by-step)

Step 1 - Submit details: email us with your account identifier, a clear description of the issue, relevant dates, and what outcome you seek.
Step 2 - Verification: we may request information to confirm you are the account holder (to avoid unauthorised disclosure).
Step 3 - Investigation: we review logs, communications, and relevant records. Complex matters may require escalation and may be handled during business hours aligned to Curaçao time zones.
Step 4 - Response timeline: we aim to provide a substantive response within 30 days (2025 standard); urgent security issues may be prioritised sooner.
Step 5 - Resolution / next steps: we will explain actions taken, any legal basis for refusal/limitation, and available escalation options.

Escalation to supervisory authorities

United Kingdom (ICO): Information Commissioner's Office - Website: https://ico.org.uk/ | "Make a complaint" guidance: https://ico.org.uk/make-a-complaint/ | Telephone (ICO switchboard): 0303 123 1113 (UK).
Mexico (INAI): Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales - Website: https://www.inai.org.mx/.
Curaçao (licence-related issues): Gaming Curaçao validation/complaints: https://gaming-curacao.com/validation (license 365/JAZ).

Clarification: Data protection complaints to the ICO/INAI concern privacy rights and personal data handling. Licence/operational disputes may be submitted to the Curaçao portal, but that route does not replace your statutory rights under applicable data protection law.

Updates

OBSERVE: The page has a provided last updated date (06 Nov 2025). The platform communicates with users via email and on-site experiences; we can implement update notices through email, banners, and account dashboard alerts.

EXPAND: UK GDPR transparency implies users should be informed of material changes, especially where processing purposes, recipients, or lawful bases change. A minimum 30-day notice for significant changes is a strong fairness practice, particularly for a gambling context where continued use implies ongoing processing.

REFLECT: We may update this Privacy Policy to reflect operational, legal, or technical changes affecting Wsm Casino Amerio on wsmcazino.com.

Last updated: November 2025 (06 November 2025).
How we notify you:
- Email notice: to your registered email address where the change is material.
- Website banner: prominent notice on wsmcazino.com for material changes.
- Account/dashboard alert: an in-account message where available.
Advance notice: for significant changes, we aim to provide at least 30 days' notice (2025 standard) before the changes take effect, unless an urgent change is required to address security or legal compliance.
Your options: if you object to material changes, you may (i) adjust your privacy/cookie settings where applicable, (ii) withdraw consent for marketing, and/or (iii) request account closure and exercise applicable data rights, subject to retention obligations described above.

Changelog (material changes)

November 2025: Initial publication for Wsm Casino Amerio on wsmcazino.com, including UK GDPR/PECR transparency, crypto transaction disclosures, international transfer safeguards (IDTA/UK Addendum), and expanded complaint escalation references (ICO/INAI and Curaçao validator portal).