How Starzino Handles Your Personal Data
Who we are, why we use your data and who else sees it
The controller of your personal data is EHC LIMITADA, the operator of Starzino, a company incorporated in Costa Rica with its registered office at Calle 7, Barrio Escalante, San José 10101, Costa Rica. This notice follows the UK GDPR and the Data Protection Act 2018.
We pass data only to the parties we need to run your account. Payments go through Pay by Bank, Visa, Visa Electron, Mastercard, Maestro, Skrill, Neteller and Jeton, and through the Bitcoin, Ethereum, Litecoin and USDT networks, all handled by PCI DSS certified providers. Game studios such as Play’n GO, NetEnt, Pragmatic Play, Evolution and Playtech Live receive only the technical identifiers needed to run a round, and the odds in our sportsbook come from a Sportradar feed. Our own staff review your verification documents.
If you believe we have mishandled your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, and we would welcome the chance to put things right first.
| Purpose | Lawful basis under the UK GDPR |
|---|---|
| Opening and running your account, processing payments | Contract |
| Identity checks and anti-money laundering records | Legal obligation |
| Fraud prevention, security logs and improving the site | Legitimate interests |
| Promotional emails and optional cookies | Consent, which you can withdraw at any time |
We make no decisions about you based solely on automated processing, and a member of our team reviews every account that our systems flag for unusual activity. Your account is protected by TLS encryption on every connection, two-factor authentication through an authenticator app and an automatic logout after 25 minutes of inactivity, and 5 failed login attempts block access for 20 minutes.
How long we keep your records
We keep your account data for as long as the account is open. After you close it, we retain payment and verification records for 5 years to meet our anti-money laundering duties, and then delete or anonymise them. Technical logs are removed sooner, and we stop sending promotional emails the moment you withdraw consent. Verification photos are stored in encrypted form, and only the staff who run identity checks can open them.
Where your data travels and what we collect
Our company is based in Costa Rica, so your data is transferred outside the United Kingdom. We protect those transfers with the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, and every connection to the site uses TLS encryption.
We collect your email address, password, country and currency at registration, and later your name, date of birth and address. For payments we hold the method used, the amount and the transaction time, and for verification a photo of your passport or UK photocard driving licence, a selfie and a proof of address. Technical data includes your IP address, device type, browser and session logs.
How we use cookies
We use strictly necessary cookies to keep you signed in and to remember your cookie choice, and optional cookies to measure how the site is used. Under the Privacy and Electronic Communications Regulations (PECR), we set optional cookies only after you press Accept on the cookie notice. You can change your mind at any time by deleting cookies in your browser settings, and the site keeps working without the optional ones.
What you can ask us to do with your data
You can ask for a copy of your data (access), correct inaccurate details (rectification), delete your data (erasure), pause its use (restriction), object to processing based on legitimate interests, and receive your data in a portable format. We answer within one month. Erasure does not apply to records that the law requires us to keep, such as payment and verification records during the 5-year period.
Contacting us about your data
Send every request about your personal data to [email protected] from the email address of your account, and state which right you wish to use. We may ask for proof of identity before we act, and live chat can guide you to the right form from 8 a.m. to midnight UK time (GMT/BST).