Tietosuoja

Effective date: 28 April 2026.

This Privacy Policy explains how Alawin Casino (“we”, “us”, “our”) collects, uses, discloses, stores, and protects personal data when you visit or use alawin-casino.co and related services offered to players in Finland. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act (Tietosuojalaki, 1050/2018).

1. Who we are

Alawin Casino is an online casino service targeting users in Finland. For data protection purposes, we act as the data controller for the personal data described in this Privacy Policy unless we clearly state otherwise. If you have any questions about this Policy or our processing of your personal data, you can contact us at [email protected].

2. Personal data we collect

We may collect personal data directly from you, automatically from your device, and from third parties where permitted by law. The exact data depends on how you interact with our website, sign up, deposit, play kasinopelit, or contact support.

We may process the following categories of data:

Identification data, such as your name, date of birth, nationality, and username.
Contact data, such as your email address, phone number, and residential address.
Account and verification data, such as login details, identity documents, source-of-funds information, and age verification data.
Transaction data, such as deposits, withdrawals, payment method details, and account balances.
Technical data, such as IP address, device type, browser type, language settings, cookie identifiers, and log data.
Gameplay data, such as game history, bet history, winnings, bonuses, free spins, and jackpot participation.
Communication data, such as emails, chat messages, support requests, and complaint correspondence.
Responsible gambling data, such as self-exclusion requests, deposit limits, session limits, and risk indicators.
Marketing preferences, such as your consent choices and communication opt-ins.

3. How we collect data

We collect personal data in several ways. You may provide data when creating or using your account, making deposits or withdrawals, claiming a bonari, contacting support, or submitting verification documents. We also collect technical and usage data automatically when you browse the site, and we may receive information from payment providers, identity verification services, fraud prevention partners, and other service providers involved in delivering the casino experience.

In Finland, many players value privacy, speed, and instant banking, so our service may involve payment flows designed to support Trustly, Zimpler, Finnish bank transfers such as OP, Nordea, and Aktia, Paysafecard, and credit cards. When these services are used, we may receive information necessary to process the payment, confirm the transaction, detect fraud, and fulfil legal and contractual obligations.

4. Why we use your data

We process personal data only when we have a valid legal basis under the GDPR. The main purposes and legal bases may include:

Creating and managing your player account, based on contract performance.
Processing deposits, withdrawals, and payment verification, based on contract performance and legal obligations.
Verifying identity, age, and eligibility to play, based on legal obligations and legitimate interests.
Preventing fraud, money laundering, bonus abuse, and other misuse, based on legitimate interests and legal obligations.
Providing customer support and handling disputes, based on contract performance and legitimate interests.
Meeting accounting, tax, AML, security, and regulatory duties, based on legal obligations.
Sending marketing communications, where consent is required by law.
Improving website functionality, security, and performance, based on legitimate interests.
Managing responsible gambling tools and interventions, based on legal obligations and legitimate interests.

We apply the GDPR principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.

5. Payment and verification

For Finnish players, payment speed and reliability are important, especially where Pay N Play-style journeys are expected. If you use instant banking or similar methods, we may process your personal and banking-related data to complete the transaction, confirm ownership, and meet fraud-prevention requirements.

We may also use identity verification tools and document checks to confirm your identity, prevent underage gambling, and comply with legal obligations. Under Finnish data protection law, the age for a child to independently consent to information society services is 13, but online gambling services may still impose stricter age and eligibility checks because gambling services are regulated and restricted to adults.

6. Cookies and tracking

We use cookies and similar technologies to operate the website, remember your preferences, improve performance, and analyse traffic. Where required, we will ask for your consent before placing non-essential cookies on your device.

Cookies may help us remember your language settings, keep you signed in, measure the effectiveness of promotions, and detect suspicious activity. You can manage cookies through your browser settings and any cookie consent tools provided on the website. Disabling some cookies may affect how the site.

7. Marketing communications

If the law allows and, where required, you have given consent, we may send you emails or on-site messages about promotions, bonuses, free spins, tournaments, and other offers. You can opt out of marketing communications at any time using the unsubscribe link in our messages or by contacting support.

We do not want to overwhelm you with promotions, and we aim to respect your preferences. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of processing carried out before.

8. Sharing your data

We may share personal data with selected third parties when necessary to operate our services. These may include:

Payment service providers.
Identity verification and age-check providers.
Fraud prevention and security partners.
IT hosting, cloud, and software providers.
Customer support tools and communication platforms.
Professional advisers, auditors, and legal counsel.
Authorities, regulators, and law enforcement where required by law.

We require these recipients to use your data only for the agreed purposes and to protect it appropriately. Where a third party acts as our processor, it handles data on our instructions and under contractual safeguards.

9. International transfers

Some of our service providers may process personal data outside Finland or outside the European Economic Area. When this happens, we use appropriate safeguards allowed under the GDPR, such as adequacy decisions, Standard Contractual Clauses, or other permitted transfer mechanisms.

We take steps to ensure that international transfers do not reduce the level of protection required for personal data. If applicable, we assess the destination country, the nature of the transfer, and the safeguards needed before data is.

10. Data retention

We keep personal data only for as long as necessary for the purposes described in this Policy, including legal, accounting, tax, anti-money laundering, fraud prevention, dispute resolution, and regulatory compliance.

Retention periods vary depending on the type of data and the legal basis for processing. For example, account records, transaction logs, verification data, and responsible gambling records may need to be retained longer than routine support messages because legal duties and compliance requirements may apply. When data is no longer needed, we delete it or anonymise it securely.

11. Security

We use technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include encryption, access controls, monitoring, secure hosting, staff training, and restricted administrative.

No online service can guarantee absolute security, but we continuously work to improve our safeguards. If we become aware of a personal data breach that creates a risk to your rights or freedoms, we will respond in line with our legal duties under the GDPR and applicable Finnish law.

12. Your rights

Under the GDPR and Finnish data protection law, you may have the right to:

Access your personal data.
Rectify inaccurate or incomplete data.
Request erasure in certain circumstances.
Restrict processing in certain circumstances.
Object to processing based on legitimate interests.
Receive your data in a portable format where applicable.
Withdraw consent at any time where consent is the legal basis.
Lodge a complaint with the supervisory authority.

These rights are subject to conditions and exceptions under the GDPR and the Finnish Data Protection Act. For example, some data cannot be erased immediately if we must retain it for legal compliance or dispute handling.

To exercise your rights, contact us at [email protected]. We may ask for information to verify your identity before responding to your.

13. Responsible gambling

We take responsible gambling seriously and may process data to help detect risky play patterns, manage self-exclusion, and support limit-setting tools. This may include account activity, deposit behaviour, session length, bonus usage, and other indicators relevant to player.

If gambling is causing harm, support is available in Finland through Peluuri at 0800 100 101. Peluuri provides free and confidential support, and its services are available on weekdays.

14. Children and age limits

Our services are intended only for adults who are legally permitted to use online gambling services. We do not knowingly collect personal data from minors for gambling purposes. If we learn that a minor has provided us with personal data, we will take appropriate steps to restrict use and delete the data where legally possible.

Because age verification is essential in Finland, we may require additional checks before allowing access to certain services or before processing withdrawals. This is part of our compliance and player-protection obligations.

15. Complaints and supervision

If you have a concern about how we process your personal data, please contact us first at [email protected] so we can review the matter. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman or another competent supervisory authority under the GDPR.

We encourage you to contact us first because many issues can be resolved quickly and directly. However, using our internal support process does not limit your right to contact a.

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or processing practices. When we make material changes, we will update the effective date above and, where appropriate, provide additional notice through the website or by email.

Your continued use of the website after an update means that you have read the revised Policy, to the extent permitted by applicable law. We recommend reviewing this page periodically to stay informed about how we handle your data.