Privacy Policy
This privacy policy explains how Boomerang Casino handles the personal data of players in Ireland who open an account, place a bet, claim a bonus or simply browse the site. It sets out what information is gathered, why it is needed, the legal grounds for using it, how long it is kept and the controls that every account holder has over their own records. Boomerang Bet treats player data as something held in trust rather than owned, and the sections below describe the practical rules that follow from that principle.
The policy applies to the website, the mobile experience and any support channel connected to the Boomerang Casino brand. By registering an account or continuing to use the service, a player accepts the practices described here. Where local law grants a stronger protection than this document, that stronger protection prevails.
What Personal Data Is Collected
Data reaches Boomerang Bet in several ways. Some of it is typed in directly during registration or a later account update. Some is generated automatically by the device and browser used to reach the site. And some is supplied by trusted partners who handle payments or verify identity on the operator’s behalf. Grouping the information by purpose makes the picture clearer.
Account data covers the details needed to create and run a profile: name, date of birth, email address, telephone number, username, chosen currency and login credentials. This is the backbone of every account and confirms that the person registering is a real adult based in a permitted region.
Verification and KYC data is requested to meet anti-money-laundering and age-checking obligations. It can include a government-issued identity document, proof of address such as a utility bill, and in some cases a short selfie or additional confirmation when a withdrawal is reviewed.
Payment data records the movement of funds. Depending on the method chosen it may cover the card type and masked number, e-wallet identifiers, bank references or a cryptocurrency wallet address, along with the amount, timestamp and status of each deposit and withdrawal. Full card numbers are handled by the payment provider, not stored in plain form by the casino.
Device and usage data is collected in the background. It includes the IP address, approximate location derived from it, browser type, operating system, device identifiers, pages viewed, games opened, session length and the actions taken while logged in. This technical layer keeps accounts secure and helps the platform run smoothly across different hardware.
Why the Data Is Used
Nothing is gathered without a working reason. The table below pairs each category of information with the main purposes it serves, so account holders can see exactly what each field supports.
| Data category |
Primary purposes |
| Account details |
Creating and maintaining the profile, logging players in, sending service messages and confirming eligibility to play. |
| Verification and KYC |
Confirming age and identity, preventing fraud, and meeting anti-money-laundering duties before payouts are released. |
| Payment records |
Processing deposits and withdrawals in EUR or crypto, reconciling balances and investigating disputed transactions. |
| Device and usage |
Securing the account, detecting unusual activity, fixing technical faults and improving the overall experience. |
| Bonus and gameplay |
Applying promotions correctly, calculating cashback and rakeback, and enforcing wagering and fair-play rules. |
| Support contact |
Answering live-chat and email queries, keeping a record of past issues and improving service quality. |
Legal Basis for Processing
Each activity rests on a defined legal ground, in keeping with the data-protection framework that Irish and European players expect. Understanding which ground applies helps explain why some data cannot simply be deleted on request while an account remains active.
Contract
Running the account, taking deposits and paying out winnings all form part of the service agreement, so the data needed to deliver that service is processed on a contractual basis.
Legal Obligation
Age verification, anti-money-laundering checks and financial record-keeping are required by law, and the relevant records must be held for the periods those laws set.
Legitimate Interest
Fraud prevention, network security and product improvement rely on a legitimate interest that is balanced against the privacy of the individual.
Consent
Marketing messages and non-essential cookies depend on freely given consent, which can be withdrawn at any time without affecting the core service.
Cookies and Similar Technologies
Cookies and comparable identifiers keep players signed in, remember preferences and measure how the site performs. Some are essential and load automatically, while analytics and marketing cookies run only where consent has been given. A separate cookie policy sets out the full list of categories, how long each type lasts and how to change the choices in a browser, so this section stays deliberately short.
Third-Party Processors
Delivering a casino means working with specialist companies that handle particular tasks. These processors act only on documented instructions and may use the data solely for the service they provide to Boomerang Bet. They are bound by confidentiality and by contractual data-protection terms.
Payment providers process card, e-wallet, bank and cryptocurrency transactions and carry out their own security screening. Game providers supply the slots, live tables and sportsbook software, and they receive limited technical data so that gameplay can load, run fairly and record results. Identity-verification partners check documents during KYC. Communication and analytics tools help send account messages and understand how the platform is used.
Data is never sold to outside advertisers. Where information is shared, it is limited to what the partner genuinely needs, and each partner is expected to apply security standards comparable to those described in this policy.
How Long Data Is Retained
Personal data is kept only for as long as there is a valid reason to hold it. An active account keeps its records for the life of that account so the service can function. Once an account closes, certain information still has to be retained to satisfy financial, regulatory and anti-money-laundering rules, and it is held for the period those rules require before being securely deleted or anonymised.
Verification documents are stored for the mandated retention window and then removed. Transaction histories follow financial record-keeping timescales. Marketing preferences are held until consent is withdrawn or the account closes. When no legal or operational reason to keep a record remains, that record is erased or stripped of anything that could identify a person.
How Data Is Kept Secure
Protecting player information relies on layered safeguards rather than a single measure. Traffic between the browser and the servers is encrypted with SSL, so details entered on the site cannot be read in transit. Access to stored data is restricted to staff who need it for their role, and that access is logged and reviewed.
Additional controls include network monitoring, firewalls, segregation of sensitive records and routine testing of the systems that hold account data. No online service can promise perfect security, but the aim is to keep the risk of unauthorised access as low as practically possible and to react quickly if a problem is detected.
Player Rights Over Personal Data
Every account holder in Ireland has a set of rights over the information Boomerang Bet holds about them. These rights can be exercised free of charge in normal circumstances, and a response follows within the timeframe set by data-protection law.
Access
Request a copy of the personal data held and an explanation of how it is being used.
Rectification
Ask for inaccurate or incomplete details, such as a changed address, to be corrected.
Erasure
Request deletion of data where there is no overriding legal reason to keep it.
Objection
Object to certain processing, including direct marketing, which then stops.
Restriction
Ask that processing be paused while a query about accuracy or use is resolved.
Portability
Receive the data provided in a common, machine-readable format where this applies.
Some rights have limits. A request to erase data will not remove records that anti-money-laundering or financial law requires the operator to retain, and identity may need to be confirmed before a request is actioned so that no one else can access an account under a false claim.
International Data Transfers
Because payment processors, game studios and technology partners operate in several countries, some data may be handled outside Ireland. Where information moves beyond the European Economic Area, it is protected by recognised safeguards such as standard contractual clauses or an adequacy decision, so the level of protection travels with the data rather than being left behind at the border.
Protecting Players Aged 18 and Over Only
Boomerang Casino is strictly for adults aged 18 or above. No account is intended for anyone under that age, and no data is knowingly collected from minors. Age is confirmed during registration and again through verification checks. If it emerges that an account has been opened by someone underage, the account is closed and the associated data is handled in line with the rules that apply to such cases.
Contacting the Data Team
Questions about this policy, or a wish to exercise any of the rights described above, can be raised through the account’s support channels. The 24/7 live chat can direct a query to the team responsible for data protection, and a written request can be sent by email to the same support desk. To protect the account, the team may ask a few questions to confirm identity before acting on a request. This policy may be updated from time to time to reflect changes in the service or the law, and the current version always applies to ongoing use of Boomerang Bet.
