PowerPlay Privacy Policy

PowerPlay Privacy Policy explains what personal data we collect, how we use and protect it, who we share it with and the rights you hold under Canadian privacy law and the Curaçao data protection framework.

Play at PowerPlay

PowerPlay is operated by Deck Entertainment B.V. The company takes the privacy of its players seriously and treats personal data as something that is held in trust rather than owned. This policy sets out how we handle personal data across the account lifecycle, from sign-up to account closure and beyond. It is written in plain English so you can understand it without a law degree. The legal version is available on request through support.

What personal data does PowerPlay collect?

We collect three broad categories of personal data. The first is account data that you provide directly, including your name, date of birth, address, email, phone number, password hash and any documents you upload for verification. The second is transaction data generated by your activity on the site, including deposits, withdrawals, wagers, game outcomes, bonus history and loyalty points. The third is technical data captured automatically when you visit the site, including device type, browser, IP address, time zone, screen resolution and the pages you view. We do not collect biometric data and we do not buy personal data from third party data brokers.

How does PowerPlay use my personal data?

Account data is used to verify your identity, comply with anti-money laundering rules and prevent underage gambling. Transaction data is used to credit your account correctly, process payments, calculate loyalty points and detect fraudulent or collusive activity. Technical data is used to keep the site secure, diagnose bugs and improve the user experience. With your consent, we use a subset of your data to personalise the games and offers shown in the lobby and to send marketing communications about new releases and promotions. You can withdraw marketing consent at any time from the account preferences page without affecting your ability to play.

Who does PowerPlay share my data with?

We share personal data only with the third parties we need to run the service. Payment processors receive the data required to process your deposits and withdrawals. KYC verification providers receive the documents you upload to confirm your identity and address. Game studios receive a non-identifying player ID and stake data to deliver the games and pay out winnings. Live chat is provided by a regulated third-party platform that handles transcripts on our behalf. Email marketing is delivered through a regulated email service provider. We share data with law enforcement and regulators when legally required to do so. We do not sell personal data to advertisers.

What rights do I have over my personal data?

You have the right to access the personal data we hold about you, to request a copy in a portable format, to ask for corrections to inaccurate data, to ask for deletion subject to our regulatory record-keeping obligations and to withdraw consent for marketing communications. To exercise any of these rights, email privacy@powerplay.com or ask live chat to raise a privacy request. We respond within 30 days. Some data, including transaction records and KYC documents, must be retained for up to seven years after account closure to satisfy anti-money laundering regulations, even if you request deletion. The retention schedule is published in full on request.

How is my data kept secure?

Every page on PowerPlay runs over modern TLS encryption. Passwords are hashed and salted using industry-standard algorithms. Payment data is tokenised by the payment processors and never stored on our servers in raw form. Access to personal data inside the company is restricted to the minimum number of staff who need it to do their jobs, and every access is logged. We run regular external penetration tests against the platform and patch the findings on a published schedule. Two-factor authentication is available to every account holder and is strongly recommended.

How long do you keep my data?

Account and transaction data is retained for seven years after account closure to satisfy Curaçao Gaming Authority record-keeping obligations and anti-money laundering rules. KYC documents are retained for the same period. Technical and analytics data is retained for 24 months in identifiable form and then aggregated. Marketing preferences are retained for the life of the account and for three years after closure to honour any opt-outs you have set. Once a retention period expires, the data is securely deleted or anonymised so it can no longer be linked back to you.

Does PowerPlay use cookies and similar technologies?

Yes. Cookies, local storage and similar technologies are used to keep you logged in, remember your preferences, measure how the site is performing and deliver relevant marketing. The full breakdown is in the cookie policy, which is linked from the footer of every page. You can manage your cookie preferences at any time through the consent banner that appears on your first visit or through the cookie settings link in the footer.

How do I contact the data protection team?

Email privacy@powerplay.com for any privacy-related question or request. For general support questions, live chat or support@powerplay.com is faster. If you are not satisfied with how we handle a privacy request, you can escalate to the Curaçao data protection authority through the contact details published on the regulator's website. The full company and licence details are at the bottom of every page.

What happens to my data if I close or self-exclude?

If you close your account through the how to close account guide, marketing data is removed within 30 days and you stop receiving any communications. Account and transaction records are retained for the seven-year regulatory window described above and then permanently deleted. If you self-exclude through the responsible gambling tools, an additional flag is attached to the record so that any attempt to reopen the account during the exclusion period is blocked automatically. The exclusion flag itself is treated as health-adjacent data and is held to a stricter internal access policy than ordinary account data.

Do you transfer data outside of Canada?

Yes. Some of the regulated service providers we use, including the live-chat platform, the KYC verification provider and certain payment processors, are based in the European Union, the United Kingdom and Cyprus. Where data is transferred outside Canada we rely on the recipient's local data protection framework where it provides equivalent protection, and we use contractual safeguards including standard contractual clauses to fill any gaps. A summary of cross-border transfers and the safeguards in place is available on request through privacy@powerplay.com.