Last updated 1 September 2026
1. Who is responsible for your data
The operator of thecasinomedia.com (referred to in this policy as "we", "us" or "the agency") is the data controller for personal data collected through this website and in the delivery of our licensing intermediary services. Our head office is at Avenue Louise 251, 4th Floor, 1050 Brussels, Belgium. Privacy enquiries may be sent to support@thecasinomedia.com or by post to the address above, marked for the attention of the Data Protection Lead.
2. What data we collect
2.1 Data you give us
When you use the contact form, email us, telephone us or engage our services, we collect the information you choose to provide: name, organisation, job title, email address, telephone number, target jurisdiction, project description and the content of your correspondence. During an engagement we may process substantially more detailed information about individuals connected to a licence application, including identity documents, employment and residential history, financial statements, criminal record certificates, litigation history and source-of-wealth evidence. This data is provided under a written engagement agreement and processed on the instructions of the applicant.
2.2 Data collected automatically
When you visit the website our hosting infrastructure records standard server log data: IP address, browser type and version, operating system, referring page, pages visited, date and time of access and approximate geographic region derived from IP address. We use this information for security monitoring, capacity planning and aggregated usage statistics. Where cookies or similar technologies are used, they are described in our GDPR, CCPA and Cookies Policy.
2.3 Data from third parties
In the course of preparing licence applications we may receive personal data about individuals from the applicant organisation, from public registers, from regulators, from background-check providers and from professional referees. We only process such data where the applicant has confirmed it has a lawful basis to share it with us.
3. Why we process data and on what legal basis
- Responding to enquiries — processed on the basis of our legitimate interest in responding to people who contact us, and, where applicable, in taking steps at your request prior to entering a contract.
- Delivering licensing services — processed to perform our contract with the client and, for individuals who are not our direct client, on the basis of the client's legitimate interest in obtaining a licence and our legitimate interest in delivering the service.
- Compliance with law — we are subject to record-keeping, anti-money-laundering, tax and regulatory obligations in Belgium and in the jurisdictions where we file applications.
- Security and fraud prevention — server logs and access records are processed in our legitimate interest in protecting our systems and our clients' confidential information.
- Marketing — we send professional updates only to individuals who have opted in. You may withdraw consent at any time by using the unsubscribe link or emailing support@thecasinomedia.com.
Special category data, such as criminal record information, is processed only where necessary for the licence application, where the applicant has provided it for that purpose and where the processing is permitted by the applicable law of the relevant jurisdiction.
4. Who we share data with
We share personal data only where necessary: with gaming regulators and licensing authorities as part of an application; with local legal counsel, certified translators, background-check providers and notaries engaged for a specific application; with our IT, hosting, secure file-sharing and email service providers, who act as processors under written contracts; with professional advisers such as auditors and insurers; and with law enforcement, courts or regulators where required by law. We do not sell personal data and we do not share it with advertisers.
5. International transfers
Our systems are hosted in the European Economic Area. Because we file applications with regulators outside the EEA, personal data may be transferred to the jurisdiction in which a licence is sought. Such transfers are necessary for the performance of the contract with the applicant or take place under appropriate safeguards, including European Commission standard contractual clauses or adequacy decisions, as applicable. Details of the safeguards used for a specific transfer are available on request.
6. How long we keep data
Enquiry data that does not lead to an engagement is deleted after 24 months. Engagement records, including application files, are retained for the duration of the engagement and for ten years afterwards, reflecting limitation periods, regulatory audit requirements and the practical need to support renewals and change-of-control filings. Server logs are retained for 12 months. Marketing consent records are retained until consent is withdrawn and for three years thereafter to evidence the withdrawal.
7. How we protect data
We maintain technical and organisational measures appropriate to the sensitivity of the data we handle. These include encryption of data at rest and in transit, multi-factor authentication for all staff accounts, a dedicated encrypted client portal for application materials, role-based access limited to the project team, logging and monitoring of access to client files, regular security testing of our systems, staff confidentiality agreements and annual data protection training. Paper documents are stored in locked facilities and destroyed by certified shredding at the end of the retention period.
8. Your rights
Depending on where you are located, you may have the right to access the personal data we hold about you, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to receive your data in a portable format, to withdraw consent where processing is based on consent, and to lodge a complaint with a supervisory authority. In Belgium the supervisory authority is the Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels. To exercise any right, contact support@thecasinomedia.com. We respond within one month and may ask you to verify your identity before acting on a request.
9. Children
This website and our services are directed at professionals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided data to us, please contact us and we will delete it.
10. Changes to this policy
We review this policy at least annually and whenever our processing changes materially. The date at the top of the page indicates the current version. Significant changes affecting existing clients are notified by email.