Privacy policy

1. Scope and contact point

This Policy applies to information processed through the Website, Site API, account, wallet, games, bonuses, email verification, password recovery, and customer support.

Send Website privacy requests to support@cozmo.bet. A provider may publish a separate privacy notice for information collected through its own hosted page; that notice may also apply.

2. Account and profile information

We process username, email, password hash, account currency and domain, account status and flags, email-verification status, registration IP, account timestamps, and the limited profile information maintained by support or administrators. We do not store your password in readable form.

When you accept the Terms and Privacy Policy during registration, we keep the exact versions accepted, the server-recorded acceptance timestamp, the document language, the registration domain, and the request IP address. We use this audit record to demonstrate your acceptance of these documents, comply with legal obligations, and establish, exercise, or defend legal claims.

3. Session, device, and security information

We process session-token hashes and expiry, login and security events, success or failure, IP address, User-Agent, browser language, host, device fingerprint/hash, recent login times, and block or trust flags. These records help authenticate requests, prevent cross-domain access, detect abuse, and investigate compromise.

4. Payment and financial information

We process payment direction, amount, currency, method, status, timestamps, idempotency reference, provider reference, masked account/card information, masked Shaba information, account-holder name, verified failure reason, and the resulting wallet ledger. Full payment details entered for a provider are transmitted to that provider; the current flow stores only the masked values required for support and reconciliation.

5. Gaming, bonus, and loyalty information

We process game launches and sessions, game and round references, stakes, wins, refunds, action status, wallet effects, callback records, bonus eligibility flags, promo claims, issued-offer snapshots, wagering progress, free spins, Cashback, VIP points, and related ledgers. Customer-facing history excludes raw provider payloads and internal security identifiers.

6. Communications and support

We process messages sent to support, the account and contact references you include, attachments, complaint details, and service emails such as verification, password reset, and security notifications. Do not include a password, token, or full banking credentials in a support message.

7. Purposes and legal bases

We use information to create and secure accounts; provide games, wallet, payments, bonuses, history and support; send essential service messages; settle and reconcile transactions; prevent fraud and abuse; enforce the Terms; maintain records; improve reliability; and meet legal requests or obligations.

Depending on the law that applies, processing may be necessary to perform your agreement, comply with legal obligations, pursue legitimate interests in security and service integrity, protect vital interests, establish or defend legal claims, or act on consent where consent is the required basis. You may withdraw consent for future optional processing without affecting earlier lawful processing.

8. Recipients and service providers

Information is shared only as needed with relevant Cozmobet group companies, hosting and infrastructure providers, the Mascot game platform, AmuPay payment services, email delivery providers, professional advisers, security and fraud services, and competent authorities where lawfully required. We do not publish your full provider data in the Site API.

These recipients may process information in other countries. Where applicable law requires it, the responsible company must use an approved transfer mechanism or other lawful safeguard. A provider’s own privacy terms may also apply when you leave the Website for its page.

9. Browser storage and similar technologies

The Website uses local browser storage for the session token and expiry, chosen language, cached public bootstrap data, and safety records for payment or VIP idempotency. Payment safety records contain an operation key and payload signature, not full banking details. These items are required for session continuity, language persistence, and duplicate-submission protection.

Third-party game or payment pages may use their own cookies or storage under their notices. You can clear Website storage through your browser, but doing so signs you out and may remove locally retained safety state for an unfinished operation.

10. Retention

We retain information for as long as reasonably necessary for the account and service, transaction settlement, security investigations, complaints, legal claims, and any accounting, anti-fraud, or regulatory obligation that applies. Financial, game, bonus, device, and login records may need to be retained after the account is closed.

Retention periods may differ by record and jurisdiction. A deletion request does not require removal of information that must be kept or is necessary to establish, exercise, or defend legal claims; information no longer needed should be deleted or anonymised when operationally and legally possible.

11. Your privacy rights

Subject to the law that applies, you may ask for access, correction, deletion, restriction, objection, portability, or information about processing, and may withdraw consent for optional future processing. We may need to verify your identity and may refuse or limit a request where a legal exception applies.

Send a request from your registered email to support@cozmo.bet. Any privacy rights that cannot be waived under mandatory law remain unaffected.

12. Security, children, and updates

We use access controls, password hashing, scoped bearer sessions, encrypted transport, audit records, provider verification, and data minimisation in public APIs. No system is completely secure; report suspected compromise immediately.

The service is not intended for anyone under 18 or below the legal gambling age. If you believe a minor has supplied information, contact support. We may update this Policy prospectively; the effective date shows the current version.