Privacy Policy

Last updated: 15 May 2026

This Privacy Policy explains how Rollon Entertainment N.V. ("Rollon", "we", "us", or "our"), a company registered in Curaçao under company number 168472, holding gaming licence number OGL/2025/0768/0421 issued by the Curaçao Gaming Authority (CGA), collects, uses, stores, shares, and protects your personal data when you use the Rollon website, applications, and services (the "Platform").

Rollon is a crypto-first, privacy-focused gaming platform. We are committed to collecting as little personal data as possible and to being transparent about what we collect and why. By using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Platform.

This Policy should be read together with our Terms of Service and Responsible Gaming Policy.

1. Our Privacy-First Approach

We built Rollon around a simple principle: you should be able to play without handing over your life story.

• We do not require mandatory identity verification (KYC) to register or play under normal circumstances.
• We do not ask for your passport, ID, or proof of address by default.
• We collect only the data we genuinely need to operate the Platform, keep it secure, comply with the law, and protect our players.

However, as a regulated operator we are subject to legal obligations relating to fraud prevention, anti-money-laundering (AML), and responsible gaming. This means that in specific circumstances (described in Section 4) we may be required to request additional information from you. This is the exception, not the rule.

2. Data We Collect

2.1 Account Data

When you create an account, we may collect:

• Email address;
• Username and password (passwords are stored in encrypted/hashed form);
• Account preferences and settings;
• Communication and language preferences.

Depending on the registration method, an account may be created using only an email address or a connected crypto wallet.

2.2 Wallet and Blockchain Data

Because Rollon is a crypto platform, we process:

• Cryptocurrency wallet addresses used for deposits and withdrawals;
• On-chain transaction data (transaction hashes, amounts, timestamps, network);
• Balances and transaction history within your account.

Please note that blockchain transactions are, by their nature, public and permanent. Data recorded on a public blockchain cannot be altered or deleted by us or anyone else. See Section 9.

2.3 Technical and Device Data

Collected automatically when you use the Platform:

• IP address and approximate location derived from it;
• Device type, operating system, and browser;
• Device identifiers and screen settings;
• Connection and network information;
• Log data, including access times and pages viewed.

We use this data partly to enforce geographic restrictions (see Section 5) and to detect fraud and abuse.

2.4 Gameplay and Behavioural Data

• Bets, wagers, game sessions, and results;
• Deposits, withdrawals, and bonus activity;
• Patterns of play, used for fraud detection and responsible-gaming monitoring.

2.5 Communications Data

• Messages you send to our support team (live chat, email);
• Records of correspondence and support tickets;
• Feedback, survey responses, and complaints.

2.6 Marketing Data

• Your preferences for receiving (or not receiving) marketing;
• Your interactions with our communications and promotions.

3. What We Do Not Collect by Default

In line with our privacy-first model, under normal circumstances we do not collect:

• Government-issued identification documents;
• Proof of address;
• Bank account details (where crypto is used);
• Biometric data;
• Social security or national insurance numbers.

We will only ever ask for such information in the limited circumstances described below.

4. When We May Request Identity Verification

Although Rollon operates without mandatory KYC, we may request identity or source-of-funds information in specific situations, including where:

• We are legally or contractually required to do so under AML or regulatory obligations;
• We detect or suspect fraud, multi-accounting, bonus abuse, or other breaches of our Terms;
• Unusual, high-value, or high-risk transaction activity is identified;
• A withdrawal exceeds defined thresholds;
• We receive a valid legal, regulatory, or law-enforcement request;
• We need to investigate a chargeback, dispute, or security incident;
• We have responsible-gaming concerns about a player.

If we request verification, we will tell you what we need and why. We may restrict deposits, withdrawals, or account access until the request is satisfied. Any documents provided for verification are handled with strict confidentiality and retained only as long as necessary.

5. How We Use Your Data (Purposes and Legal Bases)

We process your data for the following purposes:

Where we rely on consent (for example, certain marketing), you may withdraw it at any time.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Platform, keep you logged in, remember preferences, ensure security, and analyse usage.

• Essential cookies are required for the Platform to function and cannot be disabled.
• Functional cookies remember your settings and preferences.
• Analytics cookies help us understand how the Platform is used.
• Marketing cookies may be used to measure and improve promotions.

You can manage non-essential cookies through your browser settings or any cookie controls we provide. Disabling certain cookies may affect how the Platform works.

7. How We Share Your Data

We do not sell your personal data. We share data only as necessary, with:

• Game providers — to deliver the games you play (e.g. Pragmatic Play, Evolution, BGaming and others), where required for the service.
• Payment and crypto-processing partners — to process deposits and withdrawals.
• Blockchain-analytics and fraud-prevention providers — to detect illicit funds, fraud, and AML risks.
• IT, hosting, and infrastructure providers — who help us run the Platform securely.
• Customer-support and communications tools — to assist you.
• Regulators, authorities, and law enforcement — where legally required, or to protect our rights, users, or the integrity of the Platform.
• Professional advisers — such as lawyers and auditors, where necessary.
• Successors — in the event of a merger, acquisition, or restructuring of our business.

We require third parties who process data on our behalf to protect it and to use it only for the agreed purposes.

8. International Data Transfers

Rollon operates internationally, and your data may be processed in countries other than your own, including outside your country of residence. Where we transfer data internationally, we take reasonable steps to ensure it is protected by appropriate safeguards consistent with this Policy and applicable law.

9. A Note on Blockchain Data

Cryptocurrency transactions are recorded on public blockchains. This has important privacy implications:

• On-chain data (such as wallet addresses, amounts, and transaction times) is public, visible to anyone, and outside our control.
• Blockchain records are permanent and immutable — they cannot be edited, erased, or "forgotten", including by us.
• Anyone analysing the blockchain may be able to associate transactions with a wallet address.

You should consider this before transacting in cryptocurrency, and we encourage the use of good wallet-privacy practices. Our deletion and erasure obligations (Section 12) cannot extend to data recorded on a public blockchain.

10. Data Retention

We keep personal data only for as long as necessary for the purposes set out in this Policy, including:

• For the lifetime of your account, plus a reasonable period afterwards;
• For as long as required to comply with legal, regulatory, tax, AML, and accounting obligations;
• For as long as needed to resolve disputes, prevent fraud, and enforce our agreements.

When data is no longer needed, we delete or anonymise it. Note that, as explained in Section 9, on-chain data cannot be deleted.

11. Data Security

We take the security of your data seriously and use technical and organisational measures designed to protect it, including:

• Encryption of sensitive data in transit and at rest;
• Hashing of passwords;
• Access controls limiting who can access data;
• Monitoring and protection against unauthorised access;
• Support for two-factor authentication on accounts.

No system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials and wallet secure. If you believe your account has been compromised, contact us immediately.

12. Your Rights

Depending on your jurisdiction and applicable law, you may have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten"), subject to legal limits and the blockchain limitation in Section 9;
• Restrict or object to certain processing;
• Withdraw consent where processing is based on consent;
• Data portability, where applicable;
• Lodge a complaint with a relevant supervisory authority.

To exercise any of these rights, contact us using the details in Section 16. We may need to verify your request before acting on it, and some rights are subject to legal exceptions (for example, where we must retain data for AML purposes).

13. Marketing and Communications

We may send you service-related messages (such as security alerts and account notices), which are necessary and cannot be opted out of while you hold an account.

For promotional marketing, you can opt out at any time by using the unsubscribe link in our messages or adjusting your account settings. Opting out of marketing will not affect service-related communications.

14. Automated Processing and Profiling

We use automated systems to help detect fraud, multi-accounting, bonus abuse, money laundering, and signs of gambling harm. This may involve analysing your transaction and gameplay patterns.

These systems may flag accounts for human review, and may lead to restrictions, requests for verification, or account suspension. Where a significant decision is made about you, you may request human review by contacting us.

15. Minors

The Platform is strictly for adults aged 18 or over (or the legal gambling age in your jurisdiction, whichever is higher). We do not knowingly collect data from minors. If we learn that a minor has provided us with data or used the Platform, we will close the account and delete their data. If you believe a minor is using the Platform, please contact us immediately.

16. Third-Party Links

The Platform may contain links to third-party websites, including game providers, payment services, and social media. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with your data.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The most current version will always be posted on the Platform with the "Last updated" date. Where changes are material, we will take reasonable steps to notify you. Your continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: support@rollon.games
• Live chat: available 24/7 on the Platform
• Operator: Rollon Entertainment N.V., Zuikertuintjeweg Z/N, Curaçao
• Licence: OGL/2025/0768/0421, issued by the Curaçao Gaming Authority (CGA)

We will respond to your enquiry as soon as reasonably possible.

Rollon — your game, your privacy.