Encryption & Data

Everything a casino platform knows about a player travels through encryption at some point, and almost none of it stays encrypted at rest in the way marketing copy implies. This section separates the two. Coverage includes what TLS actually protects between a browser and a cashier, where data is decrypted inside a platform and who can read it there, how payment tokenisation limits the damage from a breach, and what a privacy policy means when it says data may be shared with service providers. We work through the practical questions a player can act on: which documents an operator genuinely needs for verification, how long they are retained, what deletion means once anti-money-laundering rules apply, and how affiliate and analytics scripts loaded into an account page change the picture. Where an operator’s stated practice cannot be verified from outside, we say so rather than treating the policy document as evidence.