Privacy Policy
Privacy Policy
Effective date: 15 September 2026
Introduction
We are TuffPuff Casino. This Privacy Policy explains what personal information we collect when you use our website and services, why we collect it, how we use it, how long we keep it, and the choices and rights available to you. We aim to handle your data fairly and transparently and to protect your privacy in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where it applies.
Information We Collect
We collect information that helps us provide our services, keep our platform secure, and improve your experience. The main categories are:
- Account and registration information: name, username, password, date of birth, and other details you provide when creating or updating your account.
- Identity and verification information: documents or information necessary to confirm your identity and age when required by law or our policies.
- Device and usage data: IP address, device type, browser, operating system, pages visited, actions on the site, timestamps, and diagnostic logs.
- Communications: correspondence with our support team, feedback, and other messages you send.
- Preferences and marketing choices: your communication preferences and any choices you make about receiving promotional messages.
- Aggregated and anonymized data: statistical or de-identified information that does not identify you and that we may use for analytics and service improvement.
How We Use Your Information
We use personal information to operate, maintain and improve our services, and to fulfil legal and compliance obligations. Common uses include:
- Providing and personalizing our website and account features.
- Verifying identity and age to comply with legal requirements and our policies.
- Communicating with you about your account, service updates, and support requests.
- Monitoring and improving security, detecting and preventing fraud, abuse, and other prohibited activity.
- Conducting analytics and research to understand how our services are used and to develop new features.
- Sending marketing messages where you have given consent or where we have a lawful interest and you have not objected.
- Complying with legal obligations and responding to lawful requests from public authorities.
Legal Bases for Processing (where GDPR applies)
When the GDPR applies to our processing, we rely on one or more of the following legal bases:
- Performance of a contract: to provide services you request and to manage your account.
- Legal compliance: to meet legal and regulatory obligations.
- Legitimate interests: for purposes such as fraud prevention, security, internal operations, and improving our services, provided those interests are not overridden by your rights and freedoms.
- Consent: where we ask for your consent (for example, certain marketing communications or non-essential cookies), we process data based on that consent and you can withdraw it at any time.
Sharing and Disclosure
We share personal information only as necessary and with safeguards in place. Typical recipients include:
- Service providers: companies that provide technical, hosting, analytics, customer support, and other services on our behalf.
- Regulators and law enforcement: to comply with legal obligations, respond to lawful requests, or protect legal rights.
- Affiliates and business partners: where required for the delivery of services or with your consent.
- Third parties in connection with business transfers: in the event of a merger, acquisition, or sale of assets, with customary protections for personal data.
- Fraud prevention and safety organizations: to help detect and prevent fraud or other harmful activity.
Cookies and Tracking Technologies
We and our partners use cookies and similar technologies to remember your preferences, analyze site usage, and deliver site functionality. Cookie types include:
- Essential cookies: required for the site to function and for security.
- Performance and analytics cookies: to understand how the site is used and to improve it.
- Functional cookies: to remember choices and personalize features.
- Advertising and targeting cookies: used where permitted to deliver relevant marketing and measure campaign performance.
You can manage or disable cookies via your browser settings and by adjusting cookie preferences in any preference tool we provide. Disabling some cookies may affect the functionality of the site.
Data Retention
We retain personal information only as long as necessary for the purposes described in this policy, including to comply with legal obligations, resolve disputes, and enforce our agreements. Typical retention patterns include:
- Account and registration data: retained while your account is active and for a period thereafter to comply with legal and operational needs.
- Support and communication records: retained for a reasonable period to handle inquiries and to improve our services.
- Logs and security data: retained as needed for security monitoring and to detect or prevent abuse.
Your Rights
Depending on where you live and applicable law, you may have rights in relation to your personal data, including:
- The right to access the personal data we hold about you.
- The right to correct inaccurate or incomplete data.
- The right to request deletion of your personal data in certain circumstances.
- The right to restrict or object to certain processing activities.
- The right to data portability, where applicable.
- The right to withdraw consent at any time where processing is based on consent.
- The right to lodge a complaint with a supervisory authority if you believe your rights have been violated.
To exercise your rights, please contact us. We may need to verify your identity before fulfilling requests. We will respond to requests within the timeframes required by applicable law and may explain any reasons if we cannot comply.
Data Security
We implement technical and organizational measures to protect personal information against unauthorized access, loss, misuse, or alteration. Measures include access controls, encryption where appropriate, monitoring, and staff training. No system can be completely secure, but we take reasonable steps to protect your data.
International Transfers
Your information may be processed or stored in countries outside your home jurisdiction. When we transfer personal data internationally, we use appropriate safeguards such as contractual protections, transfers to countries with adequate data protection laws, or other measures permitted by applicable law to ensure a comparable level of protection.
Children's Privacy
Our services are intended for adults. We do not knowingly collect personal data from persons under the age required by applicable law to access gambling-related services. If we learn that we have collected personal data from a child without appropriate verification or consent, we will take steps to delete that information.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will provide notice through the website or other appropriate means. The effective date at the top of this policy will reflect the most recent update.
Contact Us
If you have questions, requests, or concerns about this Privacy Policy or our data practices, please contact us.