Privacy Policy at African Grand Casino
What personal data is collected and why
African Grand Casino collects personal information directly from South African players during registration, including full name, date of birth, national ID or passport number, residential address and contact details, as needed to verify identity and comply with local licensing requirements.
Additional information is gathered automatically during account use, such as device type, IP address, browser version and gameplay activity across casino games and sports betting, which supports fraud prevention and platform security. Payment details, including bank account or mobile wallet references used for deposits and withdrawals through methods like Ozow, Capitec Bank or 1Voucher, are also stored to process transactions and meet financial recordkeeping obligations.
How collected data is used
Collected data is used primarily to verify player identity during know-your-customer (KYC) checks, process deposits and withdrawals, and confirm a player meets the minimum legal gambling age of 18 under South African regulation.
Gameplay and betting data also supports responsible gambling monitoring, allowing the detection of unusual patterns that may indicate a need for deposit limits or self-exclusion outreach. Personal data is never sold to third parties for marketing purposes, though anonymised, aggregated statistics may be shared with regulatory bodies or payment processors as part of standard compliance reporting.
Data storage, security and retention
Player data is stored using industry-standard encryption both in transit and at rest, with access restricted to authorised personnel who require it to perform identity verification, customer support or fraud investigation tasks.
Account passwords are never stored in plain text, and two-factor verification is available as an additional account security layer. Data retention periods follow South African financial recordkeeping requirements, typically retaining KYC and transaction records for a minimum of five years after account closure, after which records are securely deleted unless a longer retention period is required by law.
| Data type | Retention period |
|---|---|
| KYC and identity records | Minimum 5 years post-closure |
| Transaction records | Minimum 5 years post-closure |
| Marketing consent data | Until consent withdrawn |
Player rights under POPIA
A South African player has the right to request a copy of their stored personal data, request correction of inaccurate details, or request account deletion, subject to any outstanding regulatory retention obligations that may delay full erasure.
Requests can be submitted through the support contact listed in the site footer, and a response is typically provided within a reasonable timeframe consistent with South Africa's Protection of Personal Information Act (POPIA). A player who withdraws consent for optional marketing communications can do so at any time without affecting their ability to use core account features like deposits, withdrawals or gameplay.