Privacy Policy - Data Protection and Security

This page explains how CashBox collects, uses, stores, and protects personal data submitted by players during registration, account use, payment processing, and general site interaction. Reading through this document helps players understand what information is gathered, why it is needed, and what rights apply to that data.

What Information CashBox Collects

When a player creates an account at online casino CashBox, certain personal details are required to complete registration and maintain a functioning account. The information collected falls into two broad categories: data provided directly by the player, and data gathered automatically during site use.

Directly submitted data typically includes:

• Full name (first and last)
• Mobile phone number, including the +44 dialling code for UK players
• Email address
• Date of birth, used to confirm the minimum age of 18
• Account password
• Preferred currency, which for UK accounts is GBP (£)
• Payment method details, including card numbers, e-wallet identifiers, or cryptocurrency wallet addresses
• Identity documents submitted during KYC verification, such as a passport or national ID
• Proof of address, such as a recent utility bill
• Selfie images taken alongside identity documents when requested

Automatically collected data may include device type, browser version, IP address, session timestamps, and pages visited. This type of technical data supports account security and helps identify unusual activity.

Why Personal Data Is Collected

CashBox collects personal information for specific operational and compliance reasons. Each data type serves a defined purpose rather than being gathered speculatively.

The main reasons for data collection include:

• Registering and maintaining a player account
• Verifying player identity and confirming age eligibility (18+)
• Processing deposits and withdrawals in GBP and supported cryptocurrencies such as Bitcoin, Tether (USDT), Ethereum, Litecoin, and Dogecoin
• Confirming that payment methods, including Visa, Mastercard, and Skrill, belong to the registered account holder
• Carrying out enhanced verification checks before processing withdrawals, particularly where large sums are involved
• Detecting and preventing fraud, money laundering, or account misuse
• Contacting players through live chat, email, or phone in connection with support queries or account checks
• Sending marketing communications where the player has provided separate consent via the marketing checkbox at registration

Cash Box does not collect data beyond what is reasonably necessary for these functions. Where consent was given for marketing, that consent can be withdrawn at any time by contacting customer support or adjusting account preferences.

How Payment and Verification Data Is Handled

Payment data receives particular attention because of the withdrawal rules in place. CashBox requires that the payment method used for a withdrawal matches the one used to deposit. This means card details, e-wallet accounts, and bank transfer references are stored securely for the duration of account activity to allow this matching process.

During KYC checks, which can be triggered when money is credited to an account or before a withdrawal is processed, players may be asked to submit images of identity documents and bank cards. These documents are reviewed to confirm that the name and details match the registered account. Submitting false or incomplete information can lead to payment refusal and account closure under the published account rules.

For cryptocurrency transactions, wallet addresses associated with deposits are recorded. Players should be aware that a mistaken transfer to an incorrect blockchain address or address type may be unrecoverable, and stored address data cannot be used to reverse such errors.

Data Retention and Storage

Personal data is retained for as long as an account remains active and for a reasonable period after account closure, in line with standard financial and operational record-keeping requirements. Payment records, identity verification files, and transaction histories are typically kept for several years to satisfy anti-money laundering obligations that apply to operators.

Data is stored on secure servers. Technical safeguards are applied to prevent unauthorised access, accidental loss, or unlawful processing. Access to personal data within the organisation is limited to staff who need it to carry out specific tasks such as support, payments processing, or compliance review.

Sharing of Personal Data

CashBox does not sell personal data to third parties. Data may be shared in limited circumstances:

• With payment processors and banking partners involved in handling deposits or withdrawals, including those facilitating Visa, Mastercard, and online bank transfer routes
• With software providers or game studios where a significant win or unusual result requires independent verification, as noted in the withdrawal rules
• With identity verification service providers used to carry out KYC checks
• With regulatory or law enforcement authorities where required by applicable law
• With any third-party service providers involved in operating the platform, under data processing agreements that restrict how those parties may use the data

Third-party data transfers are not permitted from a player account perspective. This means players cannot direct their funds or personal data to be sent to another individual or entity.

Player Rights Regarding Personal Data

Players have the right to request access to personal data held about them, ask for corrections to inaccurate information, and in certain circumstances request deletion of data where it is no longer needed for the purpose for which it was collected. Requests can be made through the 24/7 live chat channel or by email.

Where data processing is based on consent, players can withdraw that consent at any point. Withdrawing marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.

If a verification phone call is required in connection with a withdrawal and the player cannot be contacted within two weeks, the withdrawal request may be cancelled. Keeping contact details up to date reduces the risk of this occurring.

Cookies and Tracking

CashBox uses cookies and similar tracking technologies to support site functionality, remember session preferences, and gather anonymised usage data for performance analysis. Players can manage cookie preferences through the browser settings on the device in use. Disabling certain cookies may affect how parts of the site function.

Responsible Gambling and Data

Where a player uses responsible gambling tools such as self-exclusion or time-out controls, data related to those choices is retained to ensure the restrictions are applied correctly and consistently. This data is not used for marketing purposes. For further detail on responsible gambling controls available at Cash Box, the CashBox responsible gambling page provides a full breakdown of available tools and support resources.

Contact and Policy Updates

This privacy policy may be updated periodically to reflect changes in how data is handled or to align with evolving regulatory requirements. Players are encouraged to review the policy at intervals. Continued use of the account after a policy update constitutes acceptance of the revised terms.

For any questions about how personal data is managed, the support team is available around the clock through live chat and email. Response times and contact routes are detailed on the support pages of the site.