Anubis Casino Privacy Policy
This page summarises the Privacy Policy of Anubis Casino: which personal data the casino processes, why, who receives it, how long it is kept and which rights a player has. The site is run by Novatrix SRL, registered in Costa Rica under number 3-102-893958, and the connection between the browser and the site uses SSL encryption. The sections follow the order in which a player meets each form.
Operator, Policy Text and the Laws It Cites
This page summarises the Privacy Policy of the operator, last updated on 28.07.2026. Where the two differ, the official policy text decides. The data controller is Novatrix SRL, registered in Costa Rica under number 3-102-893958, which runs Anubis Casino. The data protection officer can be reached at DPO@novatrixsrl.net.
The policy is written against PIPEDA and GDPR. It does not mention the Australian Privacy Act, and this page makes no statement about how the policy relates to Australian law.
Details Asked on the Sign-Up Form
The sign-up form asks for an email address and a password, and three drop-down choices: country, state and currency. Two tick boxes sit at the bottom. One says "I want to receive promos", so promotional messages are a separate choice from the box that confirms the player is 18 years old and accepts the terms. The form has no field for a phone number.
Data Categories and Where Data Comes From
The policy groups personal data into identity (full name, username, date of birth, gender, nationality, ID numbers), contact (address, proof of address, email, phone), financial (bank and card details, source of funds and wealth), transaction, gaming (games played, login and logout times, wagering, bonuses claimed and the history of responsible gaming measures), technical (IP address and location, login details, browser, time zone, operating system) and marketing and communications data.
Much of it comes from the player. The Verification tab of the account takes an identity document with a selfie, an address document and proof of payment, in jpg, png or pdf up to 10 MB each, and the Deposit window asks for a date of birth, city, address, postal code and mobile phone number before the first payment. A card payment asks for the card number, the name on the card, the expiry date and the CVV, and a crypto withdrawal needs the wallet address of the player. Payments made with Paysafe are processed by Tronabriz Limited.
The policy names further sources: verification providers, banks and payment providers, AML and PEP databases, regulators and responsible gaming databases, and business partners such as affiliates, ad platforms and analytics providers, which supply pseudonymous data.
Purposes and Legal Bases in Plain Words
Delivering the service rests on the contract with the player. AML, KYC, responsible gaming checks and regulatory reporting rest on a legal obligation. Fraud and bonus abuse prevention and analytics rest on legitimate interest, and security is listed as a purpose as well. Marketing and personalisation rest on consent, legitimate interest or both, and the sign-up form keeps promotional messages in a separate box, “I want to receive promos”.
The policy also lists AI-assisted customer communications: third-party conversational AI tools can be used in messaging, on the basis of legitimate interest.
Who Receives Data and Where It Travels
According to the policy, data can be shared with other members of the operator’s group (for fraud, bonus abuse, AML and responsible gaming, and for marketing only with consent), game providers (for example a username and an IP address), payment providers, marketing partners (with consent), regulators and law enforcement, third-party email and live chat software, AML and KYC tools, and lawyers and consultants. In a business transfer the data can pass to the new owner.
Conversational AI providers named in the policy (OpenAI, Google Gemini and Anthropic) act as processors for support messaging. When data leaves the EEA, the policy relies on Standard Contractual Clauses or an adequacy decision.
How Long Data Is Kept
Data is kept only as long as necessary. AML rules require the casino to keep it for at least five years from the closure of the account, and a request to erase it before that cannot be processed. Anonymised data may be kept.
Player Rights and Complaints
Under GDPR and PIPEDA the policy lists these rights: to access the data, to have it corrected or deleted, to restrict or object to its use, to receive it in a portable form, to opt out of marketing and to withdraw consent. A player who is not satisfied can complain to a data protection authority.
Requests go to DPO@novatrixsrl.net. Deletion is subject to the retention rule above, so data covered by the five-year AML period stays until it ends.
Security Safeguards and Automated Decisions
The policy states that reasonable technical, physical and administrative safeguards protect the data and that a secure server is used. Access to the account needs an ID and a password, and two-factor authentication is available. The Security tab of the profile offers it through an authenticator app with a QR code, next to a password change and a session history, so a login from a device the player does not recognise stands out.
In general the policy provides for no fully automated decisions about players.
Minors, Policy Changes and Questions
Anubis Casino is for adults. The policy says data is not knowingly collected from anyone under 18. The policy may change, and the date at its top shows which version is in force.
Questions about personal data go to DPO@novatrixsrl.net. The policy also names support@anubiscasino.com and the Live Chat window, and the support page has a contact form that asks for an email address and a message.
Updated: