Comprehensive Privacy Policy

Welcome to the official Privacy Policy for the Cafe Casino Portal. At our organization, we understand that engaging in real-money sports betting and online casino gaming requires an immense amount of trust. You are entrusting us with your highly sensitive personal, financial, and behavioral data. We do not take this responsibility lightly. This extensive document details the meticulous practices employed by our parent companies, subsidiaries, operational affiliates, and third-party partners (collectively, "we," "us," or "our") regarding the safeguarding of your information when you interact with our websites, mobile applications, and integrated services (the "Services").

As a premier, heavily regulated gaming operator within the United States, our data collection practices are deeply intertwined with strict state and federal compliance mandates. We do not operate in a vacuum; our procedures are dictated by the Bank Secrecy Act (BSA), anti-money laundering (AML) protocols, and the specific regulations imposed by state bodies such as the New Jersey Division of Gaming Enforcement (NJDGE) and the Pennsylvania Gaming Control Board (PGCB). If you do not agree with the data collection and processing methods outlined in this comprehensive policy, we respectfully request that you immediately discontinue all use of our Services.

1. The Scope of Information We Collect

To provide you with a secure, highly personalized, and legally compliant betting environment, we must collect vast amounts of data. This information is gathered from three primary sources: information you directly provide to us, information our systems automatically log, and information we obtain from authorized third-party verification partners.

A. Information You Provide Directly

During the lifecycle of your Cafe Casino account, you will actively supply us with various forms of data. This begins the moment you initiate the registration process and continues through your ongoing interactions with our platform.

• Personally Identifiable Information (PII): To satisfy mandatory Know Your Customer (KYC) regulations, we require your full legal name, date of birth, current residential address, email address, and mobile phone number. Crucially, federal law mandates that we collect the last four digits of your Social Security Number (SSN), or in some cases, your full SSN, to definitively verify your identity and age.
• Supplemental Verification Documents: If our automated KYC checks fail to authenticate your identity, you will be required to upload high-resolution images of your government-issued photo identification (such as a driver's license, state ID, or passport) and recent proof of address (such as a utility bill or bank statement).
• Financial and Banking Data: When you execute a deposit or request a withdrawal, we collect necessary financial details. Depending on your chosen method, this may include partial credit/debit card numbers, bank account routing numbers, or e-wallet identifiers (like your PayPal email). Please note that full credit card numbers are never stored on our servers; they are tokenized and processed by our secure, PCI-DSS compliant payment gateways.
• Account Credentials and Security Data: Your chosen username, encrypted password hashes, and the answers to your personalized security questions.
• Communications and Support Logs: Any text, audio, or files you submit when engaging with our customer service agents via live chat, email, phone, or secure document upload portals.

B. Information Collected Automatically via Technology

Every time you interact with our platform—whether through a desktop browser or by launching the mobile app—our backend systems automatically log a continuous stream of technical and behavioral data.

• Precise Geolocation Data (Critical Requirement): The cornerstone of legal online sports betting and casino gaming in the United States is strict adherence to state borders. We utilize highly advanced geolocation software (such as GeoComply) to continuously monitor your precise physical location using a combination of GPS, Wi-Fi triangulation, Bluetooth, and cellular tower data. If you disable location services or attempt to use a VPN, you will be immediately blocked from placing a wager. We retain this geolocation data to prove to regulators that all bets were struck within a legal jurisdiction.
• Device and Network Fingerprinting: We log your IP address, device type, operating system, browser specifications, unique mobile device identifiers (such as IMEI or MAC addresses), and your internet service provider or mobile carrier details. This helps us optimize our software and detect fraudulent account sharing.
• Gameplay and Transactional Tracking: Every action you take is recorded. We maintain exhaustive logs of your betting history, including the sports you wager on, your stake amounts, the casino games you play, your session durations, deposit frequencies, and cash-out patterns.
• Cookies, Web Beacons, and SDKs: We deploy cookies (small text files stored on your device), tracking pixels, and mobile Software Development Kits (SDKs) to remember your login state, analyze user traffic flows, and measure the effectiveness of our marketing campaigns.

C. Information Sourced from Third Parties

We do not rely solely on the information you provide. We proactively source data from trusted external partners to protect the integrity of our platform.

• Identity Verification and Credit Bureaus: We cross-reference the PII you provide during registration with massive public and private databases maintained by identity verification firms and credit reporting agencies to ensure you are who you claim to be.
• Fraud Prevention Networks: We share and receive data from specialized gaming industry fraud networks to identify devices or individuals associated with past bonus abuse, chargeback fraud, or matched betting syndicates.
• Social Media Integrations: If you choose to link your Cafe Casino account to a social media profile for easier login, we may receive basic profile data (like your name and profile picture) as permitted by the specific social media platform's privacy settings.

2. How We Utilize Your Collected Information

We do not collect data arbitrarily. Every piece of information we gather serves a specific operational, legal, or commercial purpose aimed at delivering a superior betting experience.

• Service Delivery and Account Management: The most fundamental use of your data is to actually operate the Cafe Casino platform. We use it to maintain your account balance, process your wagers in real-time, settle your winning bets, and facilitate your deposits and withdrawals efficiently.
• Strict Regulatory Compliance: We use your PII, SSN, and geolocation data to satisfy our strict legal obligations. We must prove to state gaming commissions that you are 21 or older and physically located within their jurisdiction. Furthermore, we use your financial data to perform mandatory Anti-Money Laundering (AML) checks and monitor for suspicious transaction patterns that must be reported to the federal government (FinCEN).
• Security, Risk Management, and Fraud Prevention: Your device fingerprinting, IP logs, and behavioral data are continuously fed into our proprietary risk engines. This allows us to detect unauthorized account takeovers, identify bot networks scraping our odds, prevent multi-accounting, and ban users attempting to exploit promotional bonuses.
• Platform Optimization and Analytics: We analyze aggregate user behavior to understand which sports markets are most popular, which casino games suffer from long load times, and how users navigate our app interface. This data directly influences our future software updates and product development.
• Personalized Marketing and Promotions: We analyze your betting history to tailor our marketing efforts. For example, if you exclusively bet on NBA basketball, we will use your data to send you targeted NBA odds boosts rather than NHL promotions. We use your contact information to deliver these offers via email, push notifications, and SMS (where permitted). You can manage these preferences in your account settings.
• Responsible Gaming Monitoring: We proactively monitor your deposit frequencies, time spent on the app, and wagering patterns to identify potential signs of problem gambling. This data allows us to intervene, provide resources, or enforce cooling-off periods to protect our most vulnerable users.

3. Circumstances Under Which We Share Your Data

Your trust is paramount. We do not sell your personal identifying data to third-party data brokers for their own independent marketing purposes. However, the complex nature of a regulated gaming operation requires that we share your data under specific, strictly controlled circumstances.

A. With Essential Service Providers

We engage a network of highly vetted third-party vendors to perform essential functions on our behalf. We share your data with them solely to the extent necessary for them to perform their contracted duties. These partners include:

• Payment Processors and Financial Institutions: To execute your credit card deposits, PayPal transfers, and bank wire withdrawals.
• Geolocation Vendors: Companies like GeoComply receive your location data to verify your compliance with state borders.
• Identity Verification Services: Agencies that cross-reference your SSN and address to satisfy our KYC obligations.
• Cloud Hosting and IT Infrastructure: Providers like Amazon Web Services (AWS) or Microsoft Azure, where our encrypted databases are physically hosted.
• Customer Support Platforms: The software vendors that power our live chat and email ticketing systems.

B. For Legal, Regulatory, and Integrity Purposes

This is the most critical area of data sharing for a legal sportsbook. We are legally compelled to disclose your personal and betting data in the following scenarios:

• State Gaming Commissions: We grant state regulators (like the NJDGE, PGCB, MGCB, etc.) sweeping access to our databases to audit our operations, verify tax calculations, and ensure we are not accepting illegal wagers.
• Law Enforcement and Subpoenas: We will surrender your data to local, state, or federal law enforcement agencies (such as the FBI or IRS) if presented with a valid subpoena, court order, or search warrant, particularly in cases involving suspected money laundering or organized crime.
• Sports Integrity Monitoring: To protect the integrity of professional and collegiate sports, we share anonymized, and occasionally identifiable, betting patterns with sports governing bodies (e.g., the NFL, NBA, NCAA) and integrity monitoring firms (like U.S. Integrity) to detect instances of match-fixing, point-shaving, or insider betting.

C. Corporate Restructuring

If the Cafe Casino Portal or its parent entities undergo a business transition, such as a merger, acquisition by another company, or sale of all or a portion of its assets, your personal data will likely be among the assets transferred to the new corporate entity. You will be notified via email of any such change in ownership.

4. Understanding Cookies and Tracking Technologies

When you visit our web portal or use our mobile applications, we deploy cookies and similar tracking technologies (like web beacons, pixels, and mobile ad identifiers). These are essential for the functionality of our platform.

• Strictly Necessary Cookies: These are required for the website to function. They handle your active Cafe Casino login session, ensure your bets remain in your bet slip as you navigate pages, and manage critical security protocols. You cannot opt out of these cookies without breaking the site.
• Performance and Analytics Cookies: These collect aggregated, anonymous information about how visitors use our site, which pages are most popular, and where users encounter errors. We use this data to improve the platform's speed and design.
• Targeting and Advertising Cookies: These track your browsing habits to build a profile of your interests. We use these to deliver relevant advertisements to you on third-party websites and social media platforms. You can opt out of these specific cookies using your browser settings or our cookie consent manager.

While you can configure your browser to block all cookies, doing so will completely break your ability to log in, place wagers, and verify your location on our platform.

5. Data Security: Protecting Your Bankroll

We deploy a defense-in-depth cybersecurity strategy to protect your sensitive data from unauthorized access, alteration, or destruction.

All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL protocols. Our databases are housed in highly secure data centers protected by biometric physical security, advanced firewalls, and continuous intrusion detection systems. We regularly subject our infrastructure to penetration testing by independent cybersecurity firms.

Despite our massive investments in security, the internet is never 100% secure. You share in the responsibility of protecting your account. You must choose a strong, unique password that you do not use on any other website. We highly mandate that you enable Two-Factor Authentication (2FA) on your Cafe Casino account, which requires a unique code sent to your phone for every login. Never share your credentials with anyone, not even someone claiming to be from our support team.

6. Data Retention: Why We Keep Your Data

We do not hold your data indefinitely, but we must hold it for a significant period due to our heavily regulated status. We retain your personal information for as long as your account remains open, and as needed to provide you with the Services.

Crucially, even if you close your account or request data deletion, federal Anti-Money Laundering (AML) laws and state gaming regulations strictly mandate that we retain your registration data, financial transaction logs, and complete betting history for a minimum period of five (5) years after the closure of your account. We cannot override these federal and state laws. Once this mandatory retention period expires, your data is securely purged or irreversibly anonymized.

7. State-Specific Privacy Rights (CCPA/CPRA, VCDPA, CPA)

Depending on your state of residence, you may be afforded specific statutory rights regarding your personal data. We are fully committed to complying with state-level privacy legislation, including the California Consumer Privacy Act (CCPA) as amended by the CPRA, the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), and similar laws enacted across the United States.

If you reside in a state with active comprehensive privacy legislation, you possess the following rights:

• The Right to Know and Access: You have the right to request a comprehensive report detailing the specific pieces of personal information we have collected about you, the sources from which we obtained it, the business purposes for collecting it, and the categories of third parties with whom we have shared it.
• The Right to Deletion: You have the right to request that we delete the personal information we have collected from you. HOWEVER, as noted in Section 6, this right is not absolute. Because we are a regulated financial and gaming entity, our federal AML and state record-keeping obligations legally override your right to deletion for a minimum of five years. We will deny deletion requests for active accounts or accounts closed within the past five years.
• The Right to Correction: You have the right to request that we correct any inaccurate personal information we hold about you in our systems.
• The Right to Opt-Out of Sale or Sharing: While we do not "sell" your data to data brokers for cash, sharing data with marketing partners for targeted advertising may qualify as a "sale" or "sharing" under certain state laws (like the CCPA). You have the explicit right to opt-out of this specific type of sharing.
• The Right to Limit Use of Sensitive Personal Information: You have the right to direct us to restrict the use of your sensitive data (like your SSN or precise geolocation) to only those purposes strictly necessary to provide the betting services you requested.
• The Right to Non-Discrimination: We will never deny you service, alter your betting odds, or offer you inferior customer support simply because you chose to exercise your privacy rights.

To exercise any of these state-specific rights, please submit a formal request via the privacy email listed in the Contact Information section below. To protect your data, we will require you to verify your identity before processing any access or deletion request.

8. Children's Privacy and Underage Gambling

Our platform is completely, unequivocally restricted to individuals who are twenty-one (21) years of age or older (or 18+ for specific Daily Fantasy Sports products, where legal). We do not intentionally design our services to appeal to minors, nor do we knowingly collect or solicit personal information from anyone under the legal gaming age.

Our robust KYC onboarding process is specifically engineered to filter out underage applicants by cross-referencing SSNs and public records. If we discover that a minor has circumvented our security protocols and created an account by utilizing fraudulent identification, we will immediately freeze the account, confiscate all deposited funds and winnings, and permanently purge their personal data from our marketing databases in compliance with the Children's Online Privacy Protection Act (COPPA).

9. International Data Transfers

While the Cafe Casino Portal is targeted exclusively at residents of the United States, we utilize a global network of technology vendors, cloud hosting providers, and customer support infrastructure. Consequently, your personal information may be transferred to, stored at, or processed in locations outside of your home state, or potentially outside of the United States entirely (such as in Canada or the European Union).

When we transfer your data internationally, we ensure that rigorous safeguards are in place to guarantee it receives an equivalent level of protection to that mandated by US law. We utilize legally recognized data transfer mechanisms, such as executing Standard Contractual Clauses with our vendors, to ensure your privacy remains uncompromised across borders.

10. Third-Party Links and External Services

Within our application or on our website, you may encounter links that direct you to external, third-party websites or services that are not owned or operated by us. This may include links to responsible gaming organizations (like the NCPG), state regulatory bodies, or our payment gateway partners. Please be aware that this Privacy Policy applies solely to our platform. We hold no responsibility for the privacy practices, data collection methods, or content of these external third-party sites. We strongly encourage you to review the individual privacy policies of any external site you visit.

11. Modifications to this Privacy Policy

The digital landscape and regulatory environment are constantly evolving. We reserve the absolute right to update, modify, or completely overhaul this Privacy Policy at any time to reflect changes in our operational practices, new technology integrations, or shifts in state/federal law.

If we make material changes to how we handle your sensitive data, we will provide prominent notice before the changes take effect. This may take the form of an email sent to the address registered to your account, a pop-up notification within our mobile app, or a forced acceptance screen upon your next Cafe Casino login. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. Your continued use of the Services following any modification constitutes your full acceptance of the updated Privacy Policy.

12. Contact Information

If you have any questions, concerns, or formal complaints regarding this Privacy Policy, our data handling procedures, or if you wish to exercise your state-specific privacy rights, please contact our dedicated Data Protection and Compliance team.

• Privacy & Data Requests: [email protected]
• General Customer Support: Accessible 24/7 via the Support Portal in your account dashboard.
• Responsible Gaming Support: 1-800-GAMBLER