Privacy Policy

1. What Does This Privacy Policy Cover?

Current site status: This website stores account registration details and contact enquiries on its server. It uses essential session and security cookies. Payment processing, gambling activity and analytics are not connected. Email delivery for verification and password recovery depends on the configured mail service. The responsible business details must be added before public deployment.

At Bananzia, we respect the privacy of visitors who access our website. We understand that personal information must be handled responsibly, transparently and in accordance with applicable data protection requirements.

This Privacy Policy explains how information may be collected, used, stored and protected when you visit our website or interact with the services we make available. It also explains the choices and rights that may be available to you regarding your personal information.

We aim to provide clear information about our data practices so you can understand how information is handled and why certain details may be required.

Where consent is legally required for a particular activity, we will seek it separately. Reading this policy does not itself provide consent.

2. What Information May We Collect?

Registration stores an email address and a salted password hash. Login creates a server-side session. The Contact Us form stores the name, email address and message you submit. The server temporarily uses your IP address for rate limiting. We do not currently process deposits, withdrawals or wagers.

Personal Information

Personal information may include details that identify or relate to you, such as:

• Name and contact details.
• Email address and telephone number.
• Date of birth, where required.
• Account identification details, where applicable.
• Information you provide when contacting our team.

Technical Information

When you access our website, certain technical information may be collected, including:

• IP address.
• Browser type and version.
• Device information.
• Operating system.
• Website access dates and times.
• Pages visited and general interaction information.

Communication Information

Messages sent through the Contact Us form are stored in the website database for authorised review. The form shows a reference number only after the server receives the message.

Transaction And Account Information

Where account or payment services are provided, relevant information may include transaction references, payment status, account activity and verification records. Payment card security details should be handled through appropriate payment processing arrangements rather than unnecessarily stored in ordinary website communications.

3. How Do We Use Your Information?

A connected service may use personal information for clearly identified purposes, including:

• Operating and maintaining our website.
• Responding to enquiries and providing customer assistance.
• Managing account-related requests, where applicable.
• Maintaining website functionality.
• Identifying technical problems.
• Protecting our website against fraud and unauthorised activity.
• Meeting applicable legal and regulatory obligations.
• Managing privacy preferences and consent records.
• Improving website performance and usability.

We aim to use personal information only where there is an appropriate purpose and lawful basis for processing.

4. Why Do We Process Your Information?

Where UK data protection law applies, the responsible business must identify an appropriate lawful basis before processing personal information. The appropriate basis for each activity must be confirmed by the responsible business before public deployment.

Depending on the circumstances, these may include:

Contract: Processing necessary to perform a contract or take steps requested before entering into one.

Legal obligation: Processing required to comply with applicable laws and regulatory requirements.

Legitimate interests: Processing necessary for legitimate business purposes, provided those interests do not override your rights and freedoms.

Consent: Processing based on your freely given consent where consent is legally required, including certain marketing and cookie-related activities.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. How Do We Use Cookies?

The website sets an essential session cookie when you sign in and a security cookie to protect form submissions. The session cookie lasts up to seven days; the security cookie lasts up to two hours. We do not currently set analytics or advertising cookies.

Depending on their purpose, cookies may be used for:

• Essential website functionality.
• Remembering preferences.
• Website performance and analytics.
• Measuring website usage.
• Other purposes described in our cookie information.

Where required by law, we will request your consent before placing non-essential cookies or using similar technologies.

If optional cookies are introduced, we will explain the available choices and provide any consent controls required. You may also manage cookies through your browser settings.

We will publish specific cookie information before any additional tracking technologies are enabled.

6. When Do We Share Your Information?

We do not treat personal information as information that can be shared without a valid reason.

Where necessary and legally permitted, information may be shared with relevant service providers and organisations involved in operating our website or supporting its functions.

These may include:

• Website hosting and technical service providers.
• Security and fraud prevention providers.
• Payment processing providers, where applicable.
• Customer communication service providers.
• Professional advisers.
• Other recipients where disclosure is legally required.

Where third parties process information on our behalf, appropriate contractual and security arrangements should be maintained.

We do not sell personal information to third parties.

7. When Is Your Data Transferred Abroad?

Some service providers may process information outside the United Kingdom.

Where personal information is transferred internationally and UK data protection law applies, we will use an appropriate transfer mechanism where required.

Depending on the destination and circumstances, this may include UK adequacy regulations, an applicable international data transfer agreement or other legally recognised safeguards.

We aim to ensure that international transfers are handled in accordance with applicable data protection requirements.

8. How Do We Protect Your Information?

The Login and Contact forms transmit information to the website server over HTTPS in production. Passwords are stored as salted hashes, session tokens are stored as hashes on the server, and form submissions use CSRF protection. Payment security measures cannot be described until a provider is connected.

We take the protection of personal information seriously and aim to apply appropriate technical and organisational measures to reduce the risk of unauthorised access, disclosure, alteration or loss.

The measures used should reflect the nature of the information processed and the risks associated with the relevant activities.

No internet-based system or method of electronic storage can be guaranteed to be completely secure. We therefore avoid making absolute security promises.

We also encourage visitors to protect their own information by using strong passwords where applicable, avoiding suspicious links and keeping confidential account credentials private.

9. How Long Do We Keep Your Information?

Account and contact records remain in the website database until they are reviewed and deleted under the responsible business’s retention procedure. Session records expire after seven days; password reset links after 30 minutes; verification links after 24 hours. No payment records are created by the current site. A retention schedule and deletion process must be confirmed before public deployment.

Retention periods may depend on:

• The type of information.
• The reason it was collected.
• Whether an account or enquiry remains active.
• Applicable legal and regulatory obligations.
• The need to resolve disputes or protect legal rights.

When information is no longer required, it should be securely deleted or anonymised in accordance with our applicable retention procedures.

Specific retention periods should be determined by the actual data processing activities associated with our website.

10. What Are Your Data Protection Rights?

Where UK data protection law applies, you may have several rights concerning your personal information.

These may include:

• Right of access: Request access to personal information we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete information.
• Right to erasure: Request deletion of personal information in circumstances permitted by law.
• Right to restriction: Request that certain processing activities be restricted.
• Right to data portability: Request a copy of eligible information in a commonly used electronic format.
• Right to object: Object to certain types of processing, including processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent where processing relies on your consent.

These rights are subject to applicable legal conditions and exceptions.

You can submit a privacy request through the Contact Us form. The responsible business must publish its legal identity and a verified privacy contact before public deployment.

11. How Do We Protect Children's Privacy?

Our website is not intended for individuals below the applicable legal age for gambling-related services.

We do not knowingly seek to collect personal information from children in connection with gambling-related activities.

Where we become aware that information has been collected in circumstances that are not permitted, appropriate steps should be taken in accordance with applicable legal requirements.

12. What Happens When You Visit External Websites?

If external links are introduced, they will lead to services with their own privacy practices.

When you follow an external link, you leave the Bananzia website and become subject to the privacy practices of the destination website.

We do not control the privacy policies or data handling practices of external websites. We recommend reading the relevant privacy information before providing personal details to another website.

13. How Can This Privacy Policy Change?

We may update this Privacy Policy when our website, data processing activities or applicable legal requirements change.

When we make changes, we will update the date displayed at the beginning of this document. Where a significant change requires additional communication or consent, we will take the appropriate steps.

We encourage visitors to check this page periodically to remain informed about our current privacy practices.

14. How Can You Contact Us About Privacy?

If you have questions about this policy or wish to make a data protection request, use our Contact Us form. We store your enquiry on the website server for review.

Include “privacy request” in your message so it can be identified for review.

Bananzia Casino

The verified business identity and privacy contact have not yet been supplied. These details must be added before public deployment.