Privacy policy

We collect your email address, the exact casino domain, country and currency, payment method, amount band, withdrawal timestamps and outcome, first-or-repeat status, KYC timing, verification duration, bonus context, business-day context and any comment you choose to add. We also process a hashed network identifier for abuse prevention.

After email verification and moderation, we may publish the structured report anonymously with generalised dates or durations, country, currency, amount band, method, outcome and evidence level. We never publish your email address, network identifier, raw evidence file or private moderation notes.

You may upload a redacted image or PDF to support a report. Evidence is stored privately, is available only to authorised moderators and is never given a public URL. Unconfirmed uploads are scheduled for automatic deletion after 24 hours; confirmed evidence is scheduled for deletion after 90 days even when the fact that it was reviewed remains on the report.

If you buy Case Pass, we process your checkout email, broad withdrawal facts, exact casino domain, diagnostic category, complaint draft, timeline, checkpoints, terms URL and any redacted files you choose to upload. Stripe processes the payment details; CHD receives payment status and transaction references but not your full card number. Case Pass content and files are private, are not published as player reports and are scheduled for deletion at the 90-day workspace expiry.

If you opt in, we use your email to send saved-checkpoint and workspace-expiry reminders. You can turn those reminders off in the workspace. Minimal transaction, audit and one-way identity records may remain after workspace deletion where reasonably needed for accounting, fraud prevention, chargebacks, service complaints or legal obligations. Rate-limited pilot feedback, including a one-way network hash used to prevent repeat submissions, is retained for up to 12 months.

If a withdrawal is still pending, you may opt into up to three transactional check-in emails asking whether it was paid, partially paid, rejected, voided or remains outstanding. You can stop those emails from a check-in page or your private report controls. A check-in response does not change public data automatically: final outcomes enter the same human moderation queue as other report updates.

We use email to send verification links, optional payout check-ins and to support corrections, appeals and resolution confirmation. Delivery, bot protection, database and private-file providers process only the data needed to run those functions. Raw email records are removed or anonymised after 24 months without verified activity, or sooner when they are no longer needed.

A secure verification cookie can link you to your own reports so you can request a correction, appeal or resolution update. A short-lived email link can restore that private access after the cookie expires; the request response does not reveal whether an address is in our records. You may also ask us to delete personal data or withdraw an unpublished submission; legal or abuse-prevention records may be retained only where necessary.

Before uploading, remove names, account numbers, card or wallet details, addresses, identity documents, QR codes and casino credentials. Do not send passwords, full bank details or unredacted identity documents.