Learn clearly how your personal data is collected, what it's used for, and how it's kept safe.
The six core principles candycasino follows to protect your data
Candycasino only collects information that is genuinely necessary to provide its services. We don't collect your social media history, call logs, or any other irrelevant data. Every piece of information we ask for comes with a clear explanation of why it's needed.
Your name, mobile number, and email are never sold to third parties. Sharing user data with advertising companies, data brokers, or for any commercial purpose goes against candycasino's policy.
All data is protected with 256-bit SSL encryption. Information stored on our servers remains encrypted at all times. Regular security audits are conducted to identify and address any vulnerabilities promptly.
You may view, correct, or request deletion of your data at any time. To stop marketing emails, simply click the unsubscribe link at the bottom of any email.
Personal data is deleted within a set period after an active account is closed. However, certain transaction records may need to be retained for a specified period to meet legal or regulatory requirements.
In the rare event of a data security incident, affected users will be notified by email within 72 hours. A full and transparent account will be provided — what happened, what data was affected, and what steps are being taken.
Important: By creating an account or using the candycasino platform, you are considered to have accepted this Privacy Policy. Please read it before registering.
candycasino Two types of information are collected about you — what you provide directly, and data generated automatically as you use the platform.
Information you provide directly:
Automatically Collected Information:
| Data Type | Reason for Collection | Mandatory? |
|---|---|---|
| Name & Identity | Account registration & KYC | Yes |
| Mobile Number | OTP Verification & Support | Yes |
| Payment Information | Deposits & Withdrawals | Yes |
| Device Information | Security & Fraud Prevention | Automatic |
| Gaming history | Responsible Gaming Monitoring | Automatic |
Candycasino uses your data only for specific, legitimate purposes. Information collected for one purpose is never used for another.
Your consent is required to receive promotional emails or SMS. This option is presented during registration and can be turned off at any time from your account settings or via the unsubscribe link in any email. Transaction and security-related communications, however, cannot be disabled — they are sent for your own protection.
Candycasino never sells your information to third parties for commercial purposes. However, in limited circumstances, certain data must be shared with specific partners. Those situations are outlined below.
Regardless of the situation, only the minimum necessary information is ever shared — never a full profile.
The candycasino website and app use cookies — small data files stored on your device that help make the platform more personalised and efficient.
Most browsers offer the option to block cookies. However, disabling essential cookies may prevent the platform from functioning correctly.
Candycasino does not retain your data indefinitely. While your account is active, your information is kept in order to provide our services. After your account is closed, data is held for a set period and then securely deleted.
Please note: If you request that your data be deleted but we are legally required to retain it, we will do so. However, that data will no longer be used for any service-related purposes.
You have specific rights regarding your personal data at candycasino. To exercise any of these rights, please contact support.
To exercise these rights, email support@candycasino.asia. You will receive a response within 30 days of your request.
Candycasino strictly does not provide services to anyone under 18. We do not knowingly — or unknowingly — collect personal data from minors.
Candycasino may update this privacy policy when necessary. For significant changes, you will be notified in advance via your registered email address.
Candycasino uses 256-bit SSL encryption. Data is also encrypted when stored on our servers. Regular third-party security audits are conducted, and automated alerts are in place to flag any suspicious activity.
Use a strong password and never share it with anyone. Keep Two-Factor Authentication enabled. Avoid logging in on public Wi-Fi. If you notice anything suspicious, contact support immediately.
When you open an account on any online platform, a natural question comes to mind — where does my information go? This concern is entirely reasonable, especially when you are required to provide your mobile number, national ID details, and banking information. candycasino This is taken seriously, which is why the Privacy Policy is written in plain, straightforward language.
In the digital age, data is a valuable asset. Many platforms sell or share user information with advertising companies — usually without the user's knowledge. candycasino takes a clear stance on this: your data exists solely to serve you, and nothing else.
Many users wonder — is it safe to submit a copy of your national ID? At candycasino, KYC documents are stored on encrypted servers upon submission. Once verification is complete, document copies are moved to a restricted-access database accessible only to authorised security and compliance personnel.
Only the necessary information is shared with third-party verification services — not entire documents. All such partners also adhere to international data protection standards.
The mobile number you provide at registration is used for three main purposes — OTP verification, important security alerts, and (with your consent) promotional SMS messages. candycasino does not share your number with any telemarketing companies. If anyone calls you claiming to be from candycasino and asks for your password or OTP — that is a scam. We will never ask for your password or OTP over the phone.
Cookies often get a bad reputation for invading privacy, but they're actually a standard part of web technology. On candycasino, cookies serve two main purposes — keeping you logged in and improving platform performance. Marketing cookies never run without your consent.
You can delete cookies at any time through your browser settings. Keep in mind that doing so will require you to log in again each time, as clearing session cookies removes your saved login information.
If you would like your data deleted — email support@candycasino.asia after closing your account. Use the subject line "Data Deletion Request" and include your registered mobile number or email address. You will receive a response within 30 days. Please note that certain transaction records are required by law to be retained and cannot be deleted, but they will no longer be used for any service-related purposes.
Candycasino believes transparency is the foundation of a sustainable business. User trust, once lost, is hard to regain. That's why we uphold this privacy policy not merely as a legal obligation, but as a genuine ethical commitment.