Privacy Policy

1. Our role and data policy

Golisimo is the data controller for the personal information used to run an account. Our own AML policy is aligned with the FATF recommendations. We do not claim that a local gambling licence is the basis for processing your data.

2. Information collected at signup

At registration we collect your email address, password credential, name, date of birth, country of residence, selected currency and language preference. We also receive technical information such as IP address, browser data, device signals and session times to secure the account and detect fraud.

3. Verification and payment information

Before a first payout we may collect a government-issued ID, proof of address, a selfie where needed and evidence of the payment method. Transaction records cover deposits, withdrawals, wagers, settlements, bonus use and payment references. We use those records to process the service, reconcile payments, investigate suspicious activity and resolve support queries.

4. Why source-of-funds evidence may be requested

We may ask for source-of-funds material when activity does not fit the account profile, when cumulative deposits or withdrawals are substantial, when a payment method changes, or when transaction patterns create a risk concern. Suitable material can include a payslip, business-income evidence, a bank statement or proof of sale. We explain the request through the account or support channel.

5. Retention

Under our retention policy, we keep account and KYC data for 5 years after account closure. We retain transaction, technical and communication records only for the period needed for the stated purpose, security review, audit or an applicable legal obligation. Once a retention period ends, we delete or irreversibly anonymise the relevant information.

6. Your rights and response time

You may request access, correction, erasure, restriction, objection or portability. Email dpo@golisimo.com from the address connected to your account and state the right you want to exercise. We may ask for identity confirmation before acting. We acknowledge and normally answer within 30 days, subject to lawful retention or security reasons.

7. Self-exclusion and marketing

If an account is self-excluded, we keep the minimum data needed to enforce that restriction, protect the account and meet the retention policy. Marketing communications are suppressed for the self-excluded account. Account restrictions do not prevent us from replying to a data-rights request or a complaint.

8. Access and sharing

Access is limited to authorised colleagues and contracted providers that need the data for identity checks, payment processing, hosting, security or support. We do not sell personal data. We use role-based permissions and encryption to reduce inappropriate access. Contact dpo@golisimo.com for privacy matters and support@golisimo1.casino for routine account help.