Your data at the casino: what you give, get, and refuse
A licensed casino account holds a sensitive data package: full identity, scanned ID, payment data, playing history. At ONJN operators this collection is a legal duty (KYC/AML) bundled with protection obligations; at unlicensed sites the same data goes to an entity with zero local accountability — the real offshore risk beyond the money in your balance.
Your protections at a licensed operator
GDPR applies in full: access, rectification, post-closure erasure (with legal KYC/AML archiving exceptions, typically 5 years), disclosure of recipients. The connection must be encrypted, and KYC documents uploaded through the site's secured form — never email or messaging apps.
Red flags that must stop you
- Document requests via WhatsApp/Telegram or plain email
- Requests for PINs, banking passwords or CVV outside the payment form
- No privacy policy, or one without a legal entity
- A domain differing from the one verified in the ONJN registry
Minimum account hygiene
A unique password, two-factor authentication where available, periodic session checks, and a dedicated email for gambling accounts.
18+. No guide makes gambling profitable — only safer as paid entertainment. Responsible gambling →