Privacy Policy

This Privacy Policy explains how the online casino services offered via kingbillyz.com ("kingbilly", "we", "us", "our") collect, use, disclose, store, and protect personal data of players and visitors. It applies to all natural persons who visit our website, create an account, participate in games, interact with customer support, or otherwise use our services, including players located in Australia who access our offshore services. This Privacy Policy is designed to meet applicable data protection standards in Curaçao and other relevant jurisdictions and to reflect key principles found in the Australian Privacy Act 1988 (Cth), the EU General Data Protection Regulation ("GDPR") and, where applicable, Mexican data protection law.

By using kingbillyz.com, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Policy, you should not use our services. This Policy is effective from 6 November 2025 and replaces all earlier versions relating to kingbilly's processing of personal data.

Who We Are

Observe: Operator Identity

The kingbilly online casino available at https://kingbillyz.com is operated by:

Dama N.V., a company registered under the laws of Curaçao, with registered address at Scharlooweg 39, Willemstad, Curaçao, registration number 152125. Dama N.V. holds an online gaming licence (No. 8048/JAZ2020-013) issued by Antillephone N.V. under the authority of the Government of Curaçao.
Friolion Ltd., a company registered in Cyprus with address Pavlov Nirvana & Aipeias, 4, ALPHA TOWER, Floor 1, Flat 11, Limassol, Cyprus, postal code 3021. Friolion Ltd. acts as a payment processing agent and subsidiary of Dama N.V.

Expand: Data Controller and Contacts

For the purposes of this Privacy Policy, Dama N.V. is primarily responsible for determining how and why your personal data is processed and acts as data controller. Friolion Ltd. and other group companies or service providers may act as data processors or joint controllers, depending on the processing activity.

Our main contact for privacy and data protection matters is our Data Protection Team (which includes our designated Data Protection Officer-equivalent responsible for oversight of privacy compliance for kingbilly):

Email (primary contact for privacy and complaints): [email protected] (please include "Privacy" in the subject line).
Postal contact (data protection correspondence): Dama N.V., Scharlooweg 39, Willemstad, Curaçao.

We currently do not operate a dedicated telephone line for privacy queries. External Australian services such as Gambling Help Online (1800 858 858) and Lifeline Australia (13 11 14) are independent support organisations for problem gambling and crisis support. They are not operated by kingbilly and should not be used for data protection requests or complaints.

What Personal Data We Collect

Observe: Main Categories of Data

When you use kingbillyz.com, we may collect and process the following categories of personal data, either directly from you, automatically from your devices, or from third parties (such as payment providers or verification services):

Identification and contact data: full name, date of birth, residential address, email address, phone number, country of residence, username, account ID, copies of identification documents (passport, ID card, driver's licence) and proof of address (utility bill, bank statement) as required for KYC and AML checks.
Account and transactional data: account registration details, login history, game and betting history, wins and losses, bonuses claimed, loyalty level, communication preferences, support tickets, internal notes regarding responsible gambling measures or account restrictions.
Payment and financial data: partial payment card details (subject to PCI and provider rules), bank account or e-wallet identifiers, payment tokens, deposit and withdrawal records, currency (including AUD), payment verification records, chargebacks and anti-fraud flags.
Technical and device data: IP address, approximate location derived from IP, device identifiers, browser type and version, operating system, language settings, access times, referrer URLs, session identifiers, log files and similar technical information necessary for the secure operation of our platform.
Behavioural and usage data: clicks, page views, navigation paths, time spent on pages, games played, frequency and duration of sessions, interaction with marketing messages or in-site notifications, and aggregated analytical data.
Cookies and similar technologies: information collected through cookies, web beacons, tags, pixels, SDKs, local storage or other tracking technologies, including unique identifiers and information about how you interact with our content and advertising (see "Cookies & Tracking Technologies" below).
Compliance and risk management data: records related to KYC/AML checks, sanctions screening, fraud investigations, complaints and disputes, self-exclusion and responsible gambling measures, VPN usage flags (including where terms prohibit use for geo‑blocking circumvention), IP blocking logs and regulatory interaction records.

Reflect: Voluntary vs Mandatory Data

Some personal data is necessary to create and operate your account, verify your identity, comply with legal obligations (such as AML rules) and provide you with our services. If you choose not to provide mandatory information, we may be unable to open or maintain your account, process payments or allow continued access to kingbilly. Other information, such as certain marketing preferences or optional profile details, is collected on a voluntary basis and can be adjusted or withdrawn where permitted by law.

Legal Basis for Processing

Observe: Core Legal Grounds

Because kingbilly serves players in multiple jurisdictions, different legal bases may apply depending on where you are located and the nature of the processing. Without limiting any rights under local law, our main legal bases for processing personal data include:

Performance of a contract: we process personal data to enter into and perform our contract with you (Terms and Conditions) and to provide core casino services, including account creation and maintenance, accepting bets, determining and paying out winnings, applying bonuses, providing customer support, and operating responsible gambling tools.
Compliance with legal obligations: we collect and retain data to comply with laws and regulatory requirements applicable to Dama N.V. and its group, including KYC and AML regulations, anti-fraud and counter-terror financing rules, tax and accounting requirements, game integrity and reporting obligations imposed by our Curaçao licence or other competent authorities.
Legitimate interests: we process certain data to pursue our legitimate business interests, provided these are not overridden by your rights and interests. These interests include maintaining and improving our services, preventing fraud and abuse (including VPN misuse to circumvent geographic restrictions), ensuring network and information security, handling disputes, and conducting limited analytics to understand service performance and player behaviour.
Consent: where required by law (for example, for some marketing communications or certain categories of cookies), we rely on your explicit or implied consent. You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Expand: GDPR and Other Frameworks

Where GDPR or similar data protection laws (such as UK GDPR) apply to specific processing activities, the legal bases identified above correspond to Articles 6(1)(a), 6(1)(b), 6(1)(c) and 6(1)(f) GDPR. Where Mexican data protection law applies, we process data in line with principles under the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations, including lawful, informed and proportional processing, and we facilitate ARCO rights as described below.

Purpose of Processing

Observe: Primary Purposes

We process personal data strictly for specified, explicit and legitimate purposes and do not further process it in a manner incompatible with those purposes. Key purposes include:

Service provision and account management: creating and administering your account, enabling you to access games, manage deposits and withdrawals, verify your identity, and provide support through channels such as [email protected].
Legal and regulatory compliance: performing KYC and AML checks, monitoring transactions, managing self-exclusion and responsible gambling measures, and fulfilling obligations under our Curaçao licence and other applicable laws, including responding to lawfully authorised requests from regulators or enforcement bodies.
Security and fraud prevention: detecting and preventing fraud, money laundering, bonus abuse, account takeover, misuse of VPNs, underage gambling and other violations of our Terms and Conditions, as well as maintaining technical and organisational security of our systems.
Service improvement and analytics: analysing how players use kingbilly to improve user experience, optimise games and features, enhance performance and stability, and conduct aggregated statistical reporting.
Marketing and promotions: sending you offers, bonuses, loyalty updates, surveys and other marketing communications relating to kingbilly, subject to your consent or applicable legal allowances, and measuring the effectiveness of our campaigns.
Dispute resolution and risk management: handling complaints, managing chargebacks, enforcing our Terms and Conditions, defending our legal rights, and managing operational and regulatory risks.

Reflect: Compatibility and Minimisation

When we use data for analytics, product development or risk management, we seek to aggregate or de-identify data where possible and to minimise the use of directly identifiable information. We do not sell personal data to third parties for their independent marketing purposes.

Disclosure & Sharing

Observe: Categories of Recipients

We share personal data only where necessary for the purposes described in this Policy, subject to appropriate safeguards and contractual protections. Typical categories of recipients include:

Group entities and payment processors: Friolion Ltd. and other affiliated entities that process payments or support kingbilly's operations, including banks, card schemes and payment service providers that handle deposits, withdrawals and refunds.
Service providers: carefully selected third parties who provide services on our behalf, such as game providers, platform hosting, IT support, CRM and email delivery, analytics, identity verification, AML screening, fraud detection, customer support tools and cyber‑security services.
Regulators and public authorities: gaming regulators (including Antillephone N.V. on behalf of the Government of Curaçao), financial intelligence units, tax authorities, law enforcement and other public bodies when required by law or licence conditions, or where disclosure is necessary to protect our rights or the safety of others.
Professional advisers: lawyers, auditors, accountants, compliance consultants and other professionals who assist us in fulfilling legal, regulatory and governance obligations.
Affiliates and marketing partners: affiliate partners and advertising networks who promote kingbilly, but only to the extent necessary to track referrals, attribute marketing performance and pay commissions. Marketing partners do not receive your full account details unless strictly necessary and subject to legal grounds and contractual safeguards.
Corporate transactions: potential or actual purchasers, investors, or other third parties in connection with any merger, acquisition, restructuring, sale of assets or similar transaction involving Dama N.V. or its group, subject to confidentiality obligations.

Reflect: Limits on Third‑Party Use

Third parties may process your personal data only in accordance with our documented instructions and for the purposes described in this Privacy Policy, unless they are independently responsible for complying with legal obligations (for example, banks fulfilling their own regulatory duties). We do not grant third parties permission to use your personal data for their own unrelated marketing purposes without your consent.

International Transfers

Observe: Cross‑Border Processing

Because kingbilly is operated by Dama N.V. in Curaçao with payment processing supported by Friolion Ltd. in Cyprus and service providers located in various countries, your personal data may be transferred to and processed in jurisdictions outside your country of residence, including:

Curaçao: primary location of our gaming operations and regulatory oversight.
Cyprus and other EEA states: locations of group entities and service providers supporting payments, IT and customer support.
Other international locations: where certain cloud, security, analytics or communications providers operate, which may include countries such as the United States or others.

Expand: Safeguards for International Transfers

Where data protection laws require additional safeguards for transferring personal data across borders (for example, from the EEA/UK or Mexico to other countries), we implement appropriate measures such as:

Contractual protections: standard contractual clauses or other approved contractual mechanisms that require recipients to protect personal data to an equivalent standard.
Technical and organisational measures: strong encryption, access controls, minimisation of data transferred, and secure storage arrangements.
Due diligence: assessing the recipient's security posture, compliance practices and local legal environment where reasonably possible.

Reflect: Transparency for Australian Players

Australian players using kingbilly access an offshore service. By using our site, you understand that your data may be processed outside Australia, including in Curaçao and the EEA. We take reasonable steps to ensure that overseas recipients handle your personal data in a manner consistent with this Policy and, where applicable, with Australian Privacy Principles and other relevant regulations.

Data Retention

Observe: Retention Principles

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, regulatory and reporting obligations, and to resolve disputes. Retention periods may vary depending on the type of data, the context of collection, and any specific legal requirements in relevant jurisdictions.

Expand: Typical Retention Periods

Account and identification data: generally kept for the lifetime of your account and, after closure, for a period typically not exceeding 5 years, or longer where required under AML, gaming, tax or other applicable laws.
Payment and transactional records: normally retained for at least 5-7 years after the relevant transaction, to comply with accounting, audit and AML obligations.
Compliance and risk data: information relating to investigations, disputes, sanctions screening, fraud flags or regulatory inquiries may be kept for extended periods where necessary to establish, exercise or defend legal claims or to comply with regulatory requests.
Marketing data: maintained for as long as you remain subscribed or engaged with our communications and for a reasonable period thereafter to manage opt-outs and ensure we honour your preferences.
Technical logs and cookies data: retained for varying periods, often from a single session up to 24 months, depending on the type and purpose, after which it is deleted or anonymised.

Reflect: Deletion and Anonymisation

When data is no longer needed, we will either securely delete it or irreversibly anonymise it so that it can no longer be linked to you. Where you request deletion of your data and no overriding legal or legitimate interest requires us to keep it, we will act on your request and confirm the outcome.

Your Rights

Observe: Core Data Subject Rights

Regardless of where you are located, we aim to provide a high level of control over your personal data. Subject to applicable law, you may have the following rights:

Right of access: to obtain confirmation of whether we process your personal data and to receive a copy of the data and related information.
Right to rectification: to request correction of inaccurate or incomplete personal data.
Right to deletion / cancellation: to request deletion of personal data where it is no longer necessary, where you have withdrawn consent (if applicable), or where you believe the processing is unlawful or excessive, subject to legal retention requirements.
Right to restriction of processing: to request that we limit processing while we assess a challenge to accuracy, legality or our legitimate interests.
Right to object: to object to processing based on legitimate interests, including profiling, and to object at any time to the use of your data for direct marketing.
Right to data portability: where applicable, to receive certain data in a structured, commonly used, machine‑readable format and to transmit those data to another controller.
Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time, without affecting prior lawful processing.

Expand: GDPR and Mexican Law Alignment

Where GDPR or similar frameworks apply, the rights described above correspond to those in Articles 15-21 GDPR. If you are located in Mexico and the Federal Law on Protection of Personal Data Held by Private Parties applies to our processing, you may exercise your ARCO rights (Access, Rectification, Cancellation and Opposition) in respect of your personal data. We will assess each request in light of our legal and regulatory obligations (for example, under AML and gaming laws) and inform you if certain data cannot be deleted or if restrictions apply.

Reflect: Exercising Your Rights

Submitting a request: send an email to [email protected] with "Privacy Request" in the subject line, clearly stating the right you wish to exercise and providing sufficient information to identify your account.
Verification: we may ask you to provide additional information to verify your identity (for example, confirming account details or providing identification documents) to prevent unauthorised access to your data.
Response timeframe: we aim to respond to all valid requests within 30 days from receipt and verification, or within any shorter or longer period required by applicable law. Complex requests or multiple simultaneous requests may take longer, in which case we will keep you informed.
Fees: we generally handle rights requests free of charge. We may charge a reasonable fee or refuse to act on manifestly unfounded or excessive requests, as permitted by law.
Appeals and complaints: if you are not satisfied with our response, you may lodge a complaint using the process described in the "Complaints & Contacts" section below or with the relevant data protection authority.

Cookies & Tracking Technologies

Observe: Types of Cookies

We use cookies and similar technologies on kingbillyz.com to ensure the site functions correctly, to remember your preferences, and to analyse and improve our services. Categories include:

Strictly necessary (session) cookies: essential for the operation of the website and to provide core functionality, such as enabling login, maintaining your session, processing bets and ensuring security. These are typically deleted when you close your browser.
Functional (persistent) cookies: used to remember your preferences (such as language, region, or display settings) across sessions and to provide enhanced, more personalised features.
Analytics and performance cookies: used to collect aggregated information about how visitors use our site, which pages are visited most often, and any errors encountered. This helps us improve performance and usability.
Advertising and affiliate cookies: used by us and our partners to track referrals from affiliate sites, measure marketing campaign effectiveness and, where applicable, tailor promotional content. These may be set by third‑party domains.

Expand: Managing Cookies

Where required by law, certain non‑essential cookies (such as analytics or advertising cookies) will be used only with your consent. You can manage cookies in several ways:

Browser settings: most web browsers allow you to block or delete cookies via their settings. If you do so, some functions of kingbilly may not work properly.
Cookie banners or preference tools: where available on our site, you may set your cookie preferences or withdraw consent through in‑site tools or banners.
Third‑party opt‑out tools: some analytics or advertising providers offer their own opt‑out mechanisms, which may apply in addition to your browser settings.

Reflect: Impact on Experience

Disabling or rejecting certain cookies may affect your experience of kingbilly, including your ability to remain logged in, to access restricted areas, or to receive personalised content. However, essential cookies needed for basic functionality will still be used where permitted by law.

Data Security

Observe: Technical and Organisational Measures

We take the security of your personal data seriously and implement appropriate technical and organisational measures designed to protect it against unauthorised or unlawful processing, accidental loss, destruction or damage. Measures include:

Encryption in transit: use of TLS 1.2 or higher to encrypt data transmitted between your browser and our servers.
Encryption at rest: storing sensitive data (such as certain financial or authentication information) in encrypted form, subject to technical and regulatory constraints.
Access control: restricting access to personal data to authorised personnel and service providers who need it for their duties, backed by role‑based access control and authentication mechanisms.
Network and infrastructure security: firewalls, intrusion detection and prevention systems, secure configuration of servers and regular patching.

Expand: Governance and Awareness

In addition to technical protections, we maintain internal policies and procedures to manage data security and privacy risks, including:

Staff training: regular training and awareness programs for employees and contractors handling player data, covering data protection principles, phishing and social engineering risks, and secure handling of information.
Vendor oversight: contractual requirements for service providers to implement adequate security measures and to notify us of incidents affecting player data.
Security testing and audits: periodic reviews of our systems, including vulnerability assessments and internal audits, to evaluate the effectiveness of security controls. We strive to align our practices with recognised security standards (such as ISO 27001 and SOC 2) where appropriate, although this does not imply formal certification unless explicitly stated on our site.

Reflect: Incident Response

We maintain procedures for identifying, assessing and managing personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you and relevant authorities in accordance with applicable legal requirements, taking into account jurisdictions such as Curaçao, the EEA, Australia, Mexico and others where our players are located.

Complaints & Contacts

Observe: How to Contact Us

If you have questions, concerns or complaints about how we handle your personal data, or if you wish to exercise your rights, you should first contact our data protection team:

Email (primary channel): [email protected] (subject: "Privacy" or "Data Protection").
Postal address: Dama N.V., Scharlooweg 39, Willemstad, Curaçao (Data Protection Team).

Expand: Internal Complaint Procedure

Submission: send your complaint or enquiry by email or post, clearly describing the issue and including relevant account details.
Acknowledgement: we aim to acknowledge receipt of your complaint within 5 business days.
Investigation: our team will review your complaint, may request additional information if necessary, and coordinate with relevant departments (such as customer support, compliance or technical teams).
Response: we aim to provide a substantive response within 30 days from receipt of a complete complaint, or within any timeframe required by applicable law. If we cannot meet this timeframe due to complexity or volume, we will inform you of the delay and provide an updated timeline.
Escalation: if you remain dissatisfied, you may request further review by a senior member of our compliance or legal team and/or escalate to a competent supervisory authority, as described below.

Reflect: External Avenues of Redress

Depending on your location, you may have the right to lodge a complaint with a data protection or privacy authority in addition to, or instead of, contacting us. Examples include:

Australia: Office of the Australian Information Commissioner (OAIC) - see www.oaic.gov.au for contact details and complaint procedures.
European Economic Area / UK: your local data protection authority, for example, the authority in the country where you live or work, or where you believe a breach occurred.
Mexico: the National Institute for Transparency, Access to Information and Personal Data Protection (INAI), which supervises compliance with Mexican personal data regulations.

These authorities are independent of kingbilly. For gambling‑related complaints that do not primarily concern privacy (for example, fairness of games or payouts), you may also follow the dispute resolution process described in the Terms and Conditions and, where relevant, escalate to our licensing authority under our Curaçao licence. However, external Australian services such as Gambling Help Online and Lifeline Australia remain independent support services and are not complaint channels for our privacy practices.

Updates

Observe: Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our services, legal or regulatory developments, industry standards or our internal practices. The version published on https://kingbillyz.com/privacy-policy is the current version and supersedes all earlier versions.

Expand: Notification and Version Control

Last updated: November 2025.
Notification methods: for material changes, we will take reasonable steps to inform you in advance, such as by email, in‑account messages, website banners or notifications on the homepage or in your player dashboard.
Advance notice: where feasible and required, significant changes that materially affect your rights or the way we process your data will become effective no earlier than 30 days after we notify you, allowing you time to review the changes.
Changelog: in cases of significant updates, we may provide a summary of key changes (for example, new categories of data collected, new purposes, or updates to international transfers) alongside the updated Policy.

Reflect: Your Options on Changes

If you continue to use kingbilly after changes become effective, you will be deemed to have accepted the updated Privacy Policy to the extent permitted by law. If you do not agree with material changes, you may choose to stop using our services and request account closure, and you may exercise your rights in relation to your personal data as described in the "Your Rights" and "Complaints & Contacts" sections.