Privacy Policy

This Privacy Policy explains how levelupcasino, operated via the website level-up.bet, collects, uses, discloses, and protects personal information. It applies to all players and visitors who access or use level-up.bet, including those located in Australia and other jurisdictions where our services are available. By using level-up.bet you agree to the practices described in this Privacy Policy. This policy is effective and applies to processing activities carried out from 6 November 2025.

Who We Are

levelupcasino is an online casino service operated through the website level-up.bet.

Operator and Group Companies

Data controller: The primary operator and data controller for level-up.bet is Dama N.V., a public limited company (N.V.) incorporated under the laws of Curaçao, with registration number 152125 and registered address at Scharlooweg 39, Willemstad, Curaçao.
Payment processing subsidiary: Certain fiat payment processing and support services are provided by Friolion Limited, a company incorporated in Cyprus with registration number HE 419102 and registered address at Leandrou, 12A, 3086 Limassol, Cyprus. Depending on the specific transaction and applicable law, Friolion Limited may act as our data processor or, in some cases, as an independent or joint controller in relation to payment data.
Licensing details: Dama N.V. operates levelupcasino under e-gaming license 8048/JAZ2020-013 issued by Antillephone N.V. in Curaçao. While levelupcasino targets Australian players among others, it is not licensed by Australian authorities and operates under Curaçao law, with privacy practices adapted to Australian and other applicable privacy frameworks.

Contact Details and DPO

Primary contact for privacy matters: Email: [email protected] (please include "Privacy" in the subject line for faster routing).
Online channels: 24/7 live chat and chatbot are available on level-up.bet. You may use these channels to request information about your personal data or to submit a privacy request, and our support team will escalate it to the appropriate privacy personnel.
Data Protection Officer / privacy team: Dama N.V. has designated a privacy function (including a Data Protection Officer for GDPR-covered processing) reachable through the above email and channels. Requests will be coordinated centrally and, where relevant, with Friolion Limited.
Postal correspondence for privacy issues: You may send written privacy-related correspondence to:
Dama N.V., Privacy Officer, Scharlooweg 39, Willemstad, Curaçao
or
Friolion Limited, Privacy Officer, Leandrou, 12A, 3086 Limassol, Cyprus.

What Personal Data We Collect

We collect only the personal information that is reasonably necessary for operating levelupcasino on level-up.bet, complying with legal obligations (including KYC/AML), maintaining security, and improving our services. Depending on your interactions and jurisdiction, we may collect the following categories of data.

Identification and Contact Data

Basic account data: Full name, username, date of birth, country of residence, and preferred language.
Contact details: Email address (such as the address you use to contact [email protected]), phone number if you choose to provide it, postal address where required for verification or payment purposes.
Verification documents: Copies of identity documents (e.g., passport, ID card, driver licence), proof of address (e.g., utility bill, bank statement), and, where legally required, additional documents such as source-of-funds or source-of-wealth documentation.

Account, Gameplay, and Behavioural Data

Account activity: Registration date, login/logout timestamps, account status (active, self-excluded, closed), security settings, and communication preferences.
Gameplay and betting history: Game selections, stakes, wins and losses, session durations, tournament participation, bonus usage, and achievements or levels obtained in levelupcasino.
Behavioural and interaction data: Click-stream data, visited pages and navigation paths on level-up.bet, response to promotions, and interactions with onsite tools (e.g., responsible gambling tools, search functionality).

Technical and Device Data

Technical identifiers: IP address, approximate geolocation inferred from IP, device identifiers, browser type and version, operating system, language settings, and referrer URLs.
Log data: Server logs, login attempts, error logs, device fingerprinting parameters (where used for fraud prevention), and security event logs (e.g., unusual access attempts).

Payment and Financial Data

Payment details: Limited card data (tokenised by payment providers whenever possible), bank account identifiers, e-wallet or payment account identifiers, and cryptocurrency wallet addresses, depending on the method you use. We do not store full card numbers where our payment providers can process these directly.
Transaction data: Deposits, withdrawals, bonuses credited and wagered, chargebacks, refunds, and any payment-related correspondence. Transaction data is processed jointly with our payment partners, including Friolion Limited for fiat transactions.

Communications and Support Data

Support interactions: Content of emails sent to [email protected], chat transcripts (live chat and chatbot), recordings or logs of your interactions with customer support, and metadata such as time and channel of contact.
Marketing communications: Your subscription status to newsletters and promotional emails, records of consent, and information about whether messages were opened or links clicked.

Cookies and Similar Technologies

Cookies: Small text files stored on your device to remember your preferences, maintain session continuity, and understand how you use level-up.bet.
Other identifiers: Web beacons, pixels, tags, local storage, and similar technologies used to support analytics, security, fraud detection, and advertising where allowed.

We do not intentionally collect information about individuals under 18 years of age and do not provide services to minors. If we become aware that we have collected personal information from a person under 18, we will take reasonable steps to delete it and may close any related account.

Legal Basis for Processing

Because levelupcasino serves players in multiple jurisdictions, including Australia, the European Union, and other regions, the legal basis for processing your personal information may differ depending on where you are located. We apply a harmonised framework that aligns with the Australian Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs), the EU/UK GDPR, and, where applicable, Mexican data protection regulations.

Contractual Necessity

Provision of services: We process personal data that is reasonably necessary to create and maintain your account, verify your eligibility to play, enable deposits and withdrawals, process bets and game outcomes, provide customer support, and operate promotions. For users within the scope of GDPR, this corresponds to Article 6(1)(b) (performance of a contract); under Australian and Mexican law, it reflects processing reasonably necessary to fulfil our contractual relationship with you.

Consent

Marketing and non-essential cookies: We rely on your consent to send direct electronic marketing communications (such as promotional emails) and to use analytics or advertising cookies that are not strictly necessary. You can withdraw this consent at any time via account settings, unsubscribe links, or by contacting [email protected].
Sensitive and special-category data: If we must process certain sensitive categories of data (for example, health-related information connected to responsible gambling self-exclusion in GDPR or Mexican contexts), we will usually do so only with your explicit consent or where authorised by law.

Legitimate Interests

Security and fraud prevention: We process technical, behavioural, and transactional data to monitor for fraud, abuse, money laundering, bonus misuse, and other violations. We balance these interests against your rights and reasonable expectations.
Service improvement and analytics: We analyse aggregated and pseudonymised data to understand usage patterns, improve game offerings, optimise the levelupcasino experience on level-up.bet, and maintain the stability and performance of our systems.

Compliance with Legal Obligations

KYC/AML and regulatory duties: We process your identification documents, transaction history, and related data as required by anti-money laundering (AML), counter-terrorism financing (CTF), responsible gambling, sanctions, tax, and other regulatory obligations in Curaçao, the European Union, Australia, and other relevant jurisdictions.
Record-keeping and reporting: We retain and may share certain information with regulators, law enforcement, courts, and supervisory bodies (including gaming regulators and data protection authorities) when required by law or when responding to valid legal requests or defending legal claims.

Purpose of Processing

We use your personal information only for specified, explicit, and legitimate purposes and do not process it in ways that are incompatible with those purposes.

Service Provision and Account Management

Operating levelupcasino: To register and authenticate your account, provide access to games and tournaments, process bets and winnings, manage promotions and loyalty programs, and provide ongoing player support on level-up.bet.
Account administration: To manage your balances, transaction history, account preferences, responsible gambling limits, self-exclusion status, and communication settings.

Compliance, Security, and Fraud Prevention

Regulatory compliance: To meet our KYC/AML, CTF, sanctions, responsible gambling, and tax obligations, including verifying your identity and monitoring transactions for suspicious activity.
Security measures: To secure our systems, detect and prevent hacking, abuse, fraud, bonus exploitation, and other malicious or unlawful activities.

Service Improvement and Analytics

Analytics and performance: To analyse how visitors and players use level-up.bet, identify trends, troubleshoot issues, and improve the design, usability, and performance of the website and mobile interfaces.
Product development: To develop new features, games, promotions, and responsible gaming tools, using aggregated or pseudonymised data whenever feasible.

Marketing and Personalisation

Direct marketing: To send you promotional communications about bonuses, tournaments, and new features of levelupcasino, where permitted by law and based on your consent or legitimate interest, as applicable.
Personalised experience: To tailor content, recommendations, and offers on level-up.bet to your preferences and gameplay history, within the limits set by your jurisdiction and your marketing preferences.

Disclosure & Sharing

We do not sell your personal information. We share data only with carefully selected recipients and only to the extent reasonably necessary for the purposes described in this Privacy Policy or as required by law.

Group Companies and Operational Partners

Dama N.V. and group entities: Your data may be accessed by authorised staff and group entities involved in operating and supporting levelupcasino, strictly on a need-to-know basis.
Friolion Limited (payment processing): Payment-related data is shared with Friolion Limited in Cyprus and other payment processors to process deposits, withdrawals, and refunds and to detect and prevent fraudulent transactions.

Service Providers and Technical Partners

IT and infrastructure providers: Hosting providers, cloud services, content delivery networks, and technical support providers that host data, ensure platform stability, and provide email delivery, live chat, and customer relationship management tools.
Verification, risk, and analytics services: Identity verification providers, AML/CTF screening providers, fraud and risk management tools, and analytics services, used to verify your identity, assess risk, and improve our services.
Marketing and advertising partners: Subject to your consent where required, we may share limited data with marketing providers, affiliate networks, and advertising platforms to deliver or measure campaigns promoting levelupcasino on level-up.bet.

Regulators, Authorities, and Legal Recipients

Regulatory and supervisory authorities: Gaming regulators, tax authorities, financial intelligence units, data protection authorities, and other competent public bodies in Curaçao, the European Union, Australia, Mexico, and other relevant jurisdictions, where disclosure is required by law or regulation.
Law enforcement and dispute resolution: Courts, law enforcement agencies, external legal advisors, auditors, and dispute resolution bodies when necessary to establish, exercise, or defend legal claims or respond to lawful requests.

Corporate Transactions

Business transfers: In the event of a merger, acquisition, reorganisation, sale of assets, or similar corporate transaction involving levelupcasino or Dama N.V., personal data may be transferred to the acquiring or successor entity, subject to strict confidentiality and continued protection consistent with this Privacy Policy.

International Transfers

Because levelupcasino operates globally, your personal information may be transferred to, stored in, or accessed from countries outside your country of residence, including countries that may have different data protection rules from those in your jurisdiction.

Where Data May Be Processed

Primary locations: Curaçao (where Dama N.V. is established), Cyprus (Friolion Limited and some payment and support services), and other European Economic Area (EEA) countries where certain service providers are located.
Other locations: Other countries where our technical, support, or verification providers operate, which may include jurisdictions outside the EEA, Australia, and Mexico.

Protection Measures

Contractual safeguards: When personal data is transferred from the EEA, the UK, or Switzerland to countries without an adequacy decision, we implement appropriate safeguards such as European Commission Standard Contractual Clauses (SCCs) or equivalent lawful transfer mechanisms, together with risk assessments and supplementary measures where necessary.
Vendor due diligence: We select service providers that implement robust security and privacy standards and we bind them by data processing agreements limiting their use of your data to our documented instructions.
Australian and Mexican considerations: For Australian and Mexican users, by using level-up.bet you acknowledge and consent to cross-border disclosures. We take reasonable steps to ensure overseas recipients do not breach the Australian Privacy Principles or applicable Mexican data protection regulations, but in some cases overseas recipients may not be subject to the same privacy laws as in your home country.

Data Retention

We retain personal information only for as long as it is reasonably necessary for the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements. When data is no longer required, we will take reasonable steps to securely destroy or permanently de-identify it.

Retention Periods

Account and identification data: Typically retained for the duration of your account and, after closure, for a period that is generally no longer than 5 years, unless a longer period is required by AML/CTF, tax, gaming, or other legal obligations.
Transaction and gameplay data: Retained for at least the same period as account and identification data, to support regulatory audits, responsible gambling reviews, and dispute resolution.
Technical and log data: Retained for shorter periods (often from several months up to 2 years) for security, troubleshooting, and analytics, unless we need to retain specific logs for investigation or legal purposes.
Marketing data: Retained for as long as you remain subscribed or until you withdraw consent or object to marketing, after which we may retain limited information on a suppression list to ensure your preferences are respected.
Cookies and similar identifiers: Stored on your device for periods defined in our cookie settings (for example, session-only for some cookies and up to 13 months or as required by law for others), after which they expire or are refreshed based on your consent.

Deletion and Anonymisation

Deletion criteria: We will delete or anonymise personal data when it is no longer needed for the purposes described in this Privacy Policy, when applicable legal retention periods have expired, or when you successfully exercise your right to erasure or cancellation and we are not required to keep the data.
Aggregated data: We may continue to use aggregated or irreversibly anonymised information (which can no longer be associated with an identified or identifiable person) for analytics, compliance reporting, or business planning for a longer period.

Your Rights

Depending on your place of residence and applicable law-including the Australian Privacy Act 1988 (Cth), the EU/UK General Data Protection Regulation (GDPR), and Mexican data protection regulations-you may have various rights regarding your personal information. We respect these rights and provide mechanisms to exercise them in a way that is free of charge and timely, typically within 30 days.

Core Rights (Access, Correction, Deletion)

Access: You can request confirmation of whether we hold personal information about you and obtain a copy of such information in a commonly used format, together with details about how we process it.
Correction/Rectification: You can request that we correct personal information that is inaccurate, incomplete, or out of date. Where possible, you may also correct certain details directly via your levelupcasino account settings on level-up.bet.
Deletion/Erasure/Cancellation: You can request that we delete or cancel your personal information when it is no longer necessary for the purposes for which it was collected, when you withdraw consent (where consent was the sole basis), or when you believe processing is unlawful. We may need to retain some information where required by AML/CTF, gaming, tax, or other legal obligations.

Additional Rights under GDPR and Mexican Law

Restriction of processing: Under GDPR, you may request that we restrict processing of your data in certain circumstances (for example, while we verify accuracy or assess an objection).
Objection: You may object to processing based on our legitimate interests, including profiling related to such interests. We will stop processing unless we demonstrate compelling legitimate grounds or the processing is necessary for legal claims.
Data portability: You may request that we provide your data in a structured, commonly used, and machine-readable format or transmit it to another controller, where technically feasible and where required by GDPR.
ARCO rights (Mexico): If Mexican law applies to you, you have ARCO rights-Access, Rectification, Cancellation, and Opposition-under the Federal Law on Protection of Personal Data Held by Private Parties and related regulations. You may also revoke consent to processing when consent is the legal basis, subject to legal and contractual limitations.
Withdrawal of consent: Where we rely on consent (for example, marketing or certain cookies), you may withdraw it at any time via account settings, unsubscribe links, or by contacting [email protected]. This will not affect the lawfulness of processing before withdrawal.

How to Exercise Your Rights

Submitting a request: You can exercise your rights by contacting us at [email protected] (subject line "Privacy Request") or via live chat on level-up.bet. Please provide sufficient information to verify your identity and clearly describe your request.
Verification: For your security, we may request additional information (for example, verifying that you can log in to your account or confirming certain account details) before acting on your request.
Response time and cost: We aim to respond to all valid requests within 30 days, in line with GDPR and Mexican regulations and consistent with Australian Privacy Principle requirements. In complex cases or where we receive multiple requests, we may extend this period as permitted by law but will keep you informed. We do not charge a fee for handling your request unless it is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act.

Supervisory Authorities and Remedies

Australian users: If you are in Australia and are not satisfied with how we handle your personal information or privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC) (www.oaic.gov.au).
EU/EEA and UK users: You have the right to lodge a complaint with your local data protection authority or with the lead authority in the EU/EEA country where you live, work, or where the alleged infringement occurred, in accordance with GDPR.
Mexican users: If Mexican data protection law applies to you and you are dissatisfied with our handling of your ARCO rights or privacy complaint, you may contact the Mexican data protection authority, the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) (www.inai.org.mx).

Cookies & Tracking Technologies

levelupcasino uses cookies and similar technologies on level-up.bet to ensure the website functions correctly, to enhance your experience, and to support security, analytics, and marketing activities in compliance with applicable laws.

Types of Cookies We Use

Session cookies: Temporary cookies that remain on your device only while your browser is open and are automatically deleted when you close it. They are primarily used to maintain your logged-in session and support basic functionality.
Persistent cookies: Cookies that remain on your device for a defined period or until you delete them. They are used to remember your preferences (such as language or region) and to recognise you when you return to level-up.bet.
First-party cookies: Cookies set by level-up.bet that we control and use for core functionality, security, and certain analytics.
Third-party cookies: Cookies set by third parties (for example, analytics providers, advertising networks, or affiliate tracking partners) that help us measure traffic, understand usage patterns, and, where permitted, deliver and measure marketing campaigns.

Cookie Purposes

Strictly necessary/functional: Required for the website to function correctly, including enabling basic navigation, securing login sessions, processing payments, and remembering preferences essential to the service.
Analytics and performance: Used to collect aggregated information on how visitors use level-up.bet, identify technical issues, and improve site performance and user experience.
Advertising and personalisation: Used, where allowed by law and subject to your consent, to deliver personalised offers, measure the effectiveness of campaigns, and manage affiliate relationships.

Managing Cookies

Browser controls: Most web browsers allow you to view, delete, or block cookies and to configure settings such as "Do Not Track". Blocking certain cookies may impact your ability to use some features of levelupcasino on level-up.bet.
On-site controls: Where available, you can use our cookie banner or internal preference panel to manage your consent for different categories of cookies (for example, accepting necessary cookies while rejecting analytics or advertising cookies).
Withdrawal of consent: If we rely on your consent for non-essential cookies, you can change your cookie preferences or clear existing cookies at any time, which will take effect for future browsing sessions.

Data Security

We take reasonable steps to protect your personal information against unauthorised access, misuse, loss, and disclosure, implementing technical, organisational, and physical measures consistent with industry practices and applicable legal requirements.

Technical and Organisational Measures

Encryption and secure transmission: We use modern encryption protocols (such as TLS 1.2 or higher) to protect data in transit between your device and our servers. Where appropriate, we also use encryption or pseudonymisation to protect data at rest.
Access controls: Personal information is accessible only to authorised personnel who require access for their job functions. Access is controlled through authentication mechanisms, role-based permissions, and logging of access events.
Authentication and account security: We encourage strong passwords and implement security measures such as login monitoring and session controls. Additional security features, such as multi-factor authentication for administrative access, are used to protect internal systems.
Monitoring and audits: Systems are monitored for unusual activity, and we perform periodic security assessments and reviews of technical and organisational controls. Our key service providers are subject to due diligence and contractual security obligations, and we seek alignment with recognised standards such as ISO 27001 and SOC 2 where appropriate.

Staff Training and Incident Response

Training and awareness: Staff members who handle personal information receive training on data protection, confidentiality, and security obligations, and are bound by confidentiality obligations in their employment or service agreements.
Incident response: We maintain procedures to detect, assess, and respond to data incidents. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will take appropriate remedial action and, where required by law, notify affected individuals and relevant supervisory authorities (such as the OAIC, EU data protection authorities, or Mexican INAI) without undue delay.

While we implement robust safeguards, no system can guarantee absolute security. You are also responsible for maintaining the confidentiality of your account credentials and for promptly notifying us if you suspect any unauthorised use of your account.

Complaints & Contacts

We are committed to handling your personal information and privacy-related concerns fairly, transparently, and in accordance with applicable laws in Australia, the EU/EEA, Mexico, and other relevant jurisdictions.

How to Contact Us

Email (primary channel): [email protected] (for privacy matters, please include "Privacy" in the subject line).
Live chat and chatbot: Available 24/7 on level-up.bet, with the option to escalate to a human agent for complex privacy or complaint issues.
Postal address: Dama N.V., Privacy Officer, Scharlooweg 39, Willemstad, Curaçao
or
Friolion Limited, Privacy Officer, Leandrou, 12A, 3086 Limassol, Cyprus.

Internal Complaint Procedure

Step 1 - Submission: Submit your concern or complaint via email, live chat, or post. Please describe the issue clearly and provide any supporting information (such as account ID, relevant dates, or copies of correspondence), but avoid sending unnecessary sensitive data.
Step 2 - Acknowledgement: We will acknowledge receipt of your complaint as soon as reasonably practicable, generally within a few business days, and will inform you if we require additional information.
Step 3 - Investigation and response: We will investigate your complaint and aim to provide a substantive reply within 30 days, consistent with GDPR, Mexican regulations, and Australian expectations. If we need more time due to complexity, we will notify you of the extension and provide an updated timeframe.
Step 4 - Resolution: We will inform you of the outcome of our investigation, any corrective measures taken, and available options if you remain dissatisfied.

Escalation to Supervisory Authorities

Australia: If you are not satisfied with our response or believe we have not handled your personal information in accordance with the Australian Privacy Act 1988 (Cth), you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) (www.oaic.gov.au).
European Union/EEA and UK: If GDPR applies to you, you may lodge a complaint with your local data protection authority, particularly in the EU/EEA member state of your habitual residence, place of work, or place of the alleged infringement.
Mexico: If Mexican data protection regulations apply and you are not satisfied with our handling of your ARCO rights or privacy complaint, you may contact the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) (www.inai.org.mx).

Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the features of levelupcasino on level-up.bet. When we make material changes, we will take reasonable steps to notify you in advance.

Notification of Changes

On-site notifications: We may display banners, pop-up notices, or alerts in your account dashboard informing you of changes to this Privacy Policy.
Email communications: Where appropriate, we may send you an email to the address associated with your account outlining significant changes, especially those affecting how we process your personal information.
Advance notice: For material changes that significantly affect your rights or how we use your data, we will generally provide at least 30 days' notice before the updated policy becomes effective, unless immediate changes are required by law or for security/compliance reasons.

Version Control

Current version: This Privacy Policy is the version effective as of 6 November 2025 and supersedes any previous versions published on level-up.bet.
Historic versions: We may retain prior versions of this Privacy Policy and make them available on request or via an archive section on level-up.bet, to provide transparency about how our practices have evolved.
Your options: If you do not agree to an updated Privacy Policy, you may choose to discontinue using level-up.bet and request account closure and, where applicable, deletion or cancellation of your personal information, subject to our legal retention obligations.

Last updated: November 2025.