The Way Fortunica Safeguards Your Personal Data
Data protection at our casino follows the GDPR (Regulation EU 2016/679), and full identity checks apply once a transaction reaches £2,000. We explain what information we collect, why we need it and what happens to it afterwards.
Claim 100% up to £1,500What Personal Data We Collect at Casino Fortunica
When players register and play at Casino Fortunica, we collect identity details at sign-up, verification documents for compliance checks, and transaction data once certain thresholds are reached. The table below sets out the main categories, why each is gathered, and the point at which it is triggered.
| Data Category | Purpose | Threshold / Timeframe |
|---|---|---|
| Full legal name, date of birth, address, phone, nationality | Account onboarding and identity verification | Collected at registration |
| Government ID, card photo, selfie with ID, proof of address | Know Your Customer (KYC) compliance | Reviewed within 24 hours of upload ('Temporarily Approved' status) |
| Transaction records | Anti-money laundering (AML) monitoring | Full identity check triggered at £2,000 or more per transaction |
| Login activity | Dormant account management | Account flagged dormant after 12 months of inactivity; £10 monthly fee applies while balance is positive |
These categories cover everything we hold from the moment an account is opened through to ongoing monitoring, and each one maps directly to a specific compliance step rather than general data gathering.
Our Data Protection Framework
Our privacy practices operate under GDPR (Regulation EU 2016/679) compliance, integrated alongside a FATF risk-based framework for anti-money laundering purposes. This means personal data is handled under a multi-tier validation structure covering Simplified, Customer and Enhanced Due Diligence (SDD, CDD, EDD), with the level of checking applied matched to the risk a given account or transaction presents.
Enhanced checks for Politically Exposed Persons
Politically Exposed Persons (PEPs) and their close associates are subject to Enhanced Due Diligence, which requires Board of Directors approval before onboarding and documentation on the source of funds or wealth. This heightened status remains in place for at least 12 months after a person leaves public office, reflecting the risk-based approach applied across our compliance desk.
Once documents are uploaded for verification, an account receives a 'Temporarily Approved' status for a 24-hour review window, during which withdrawals remain locked. If requested paperwork is not supplied within 15 days, the balance is confiscated and the account is terminated, so completing verification promptly through account access protects both the funds and the profile.
How Long We Hold Data and Your Rights
We retain the onboarding and verification data described above for as long as an account remains active, and continue to apply AML monitoring to transactions throughout the relationship. Accounts with no login activity for 12 consecutive months are marked dormant, and a monthly administrative charge of £10 applies while a positive balance remains, which is a reason to keep account details and login access current.
Players who wish to query how their data is used, or who need to exercise a data protection request, can contact our privacy desk directly rather than the general support channel. Verification documents, including proof of address issued within the past three months, are reviewed by our compliance desk under the same due diligence framework that governs identity checks across the full range of our services.
Players managing their account activity, including time-outs or limits, can review the options available through account limits and self-exclusion, which sit alongside our data retention practices as part of responsible account management.