Charmius Privacy Policy — Your Data, Protected

Every byte of your personal information is under our protection the moment you join us. The privacy policy at Charmius is a binding, legally structured document built to GDPR, PIPEDA, and Tobique regulatory standards — not a box-ticking exercise. We use TLS 1.2 and AES-256 encryption across all platform sections, covering Casino, Live Casino, Sports and Esports. We do not sell your data, we do not rent it, and data protection on Charmius is non-negotiable from day one.

What We Collect Across Casino, Live Casino, Sports and Esports

The privacy policy at Charmius governs data collection across every single vertical we operate — and that scope matters. Our data collection aligns with the full account rules and T&C, meaning every category of information we hold is tied directly to a legitimate operational purpose. Nothing is collected for its own sake.

We collect and process eight distinct categories of personal data:

• Registration and account data — the information you provide when setting up your profile, including name, email address, and date of birth.
• Identity/KYC data — documents submitted for identity verification. KYC data safety at Charmius means these files are processed strictly for verification and fraud prevention, never shared beyond authorised compliance partners.
• Payment and financial data — full records of your transactions, deposit methods, and withdrawal details.
• Gaming and transaction history — a complete log of your activity across slots, live tables, sportsbook, and esports markets.
• Technical data — your IP address, browser type, and connection logs collected automatically during each session.
• Communications and support data — correspondence submitted through our support channels.
• Responsible gaming data — records tied to any self-imposed limits or exclusion requests. If you need to manage your play, our deposit limits and self-exclusion tools connect directly to this data layer.
• Marketing preferences — your choices regarding promotional emails, which require double opt-in confirmation before activation.

Processing of sensitive personal data — including racial origin, religious beliefs, or similar categories — is strictly prohibited under our policy. Data may also arrive from third-party sources such as payment processors, KYC verification services, or regulators, but only where necessary.

How We Protect Your Data and Handle Breaches

Bold security is not optional — it is the foundation. Data protection on Charmius runs on two layers of military-grade encryption that cover every data transfer and storage operation on our platform.

Personal data safety at Charmius means we share information only with authorised third-party service providers who operate under strict confidentiality agreements. No external party gains access without a defined, legitimate reason. You can verify our credentials and find our licence number and security overview in the licence number and security overview section.

Secure data handling Charmius maintains includes a 72-hour breach notification obligation. If a data breach occurs, we are legally required to notify both the relevant regulatory authorities and every affected user within 72 hours of detection. You are also responsible for keeping your own login credentials — username and password — secure on your end. SSL encryption on Charmius is active on all pages, so your connection to our platform is protected at every point of entry.

Our Cookies Policy — What Runs in the Background

Transparency about what runs under the surface is part of who we are. The cookies policy on Charmius covers three distinct categories, each serving a defined technical or commercial purpose.

Privacy for Charmius Aussies matters, and that includes control over what gets stored on your device. You can disable any non-essential cookies directly through your browser settings at any time, and doing so will not affect your ability to access your account or play. Required cookies, however, remain active as they are essential to basic platform operation.

Cookies also collect technical data such as your IP address and browser information. This feeds into our security and authentication processes, helping us detect unusual access patterns and protect your account from unauthorised logins.

Your Data Rights Under GDPR at Charmius

You hold serious power over your own data here. Your data rights at Charmius are drawn directly from GDPR and apply in full to every Australian player on our platform. The privacy policy at Charmius is explicit: refusal to consent cannot be used as grounds to deny you service.

Here is a full breakdown of the rights you can exercise at any time:

• Right to access — request confirmation that we are processing your data and obtain a full copy of what we hold.
• Right to rectification — ask us to correct any inaccurate or incomplete information on your account.
• Right to erasure — invoke the “right to be forgotten” and request deletion of your personal data.
• Right to restrict processing — limit how we use your data under specific circumstances.
• Right to data portability — receive your data in a structured, machine-readable format for transfer elsewhere.
• Right to object — formally object to processing, including any direct marketing use.
• Right to withdraw consent — revoke any previously given consent at any time without penalty.
• Right to opt out of marketing — unsubscribe from all promotional communications independently of other account functions.

Data protection on Charmius is built around these rights being real and actionable, not buried in fine print. All marketing emails require double opt-in confirmation, and the exact date, time, and IP address of your subscription are logged. The privacy principles at Charmius mean your data is retained only as long as operationally or legally necessary — after that, it is deleted or fully anonymised.

This policy is an integral part of our Terms and Conditions and is governed by company 3-102-957682 S.R.L. under applicable Tobique licensing requirements. We reserve the right to amend it, and in the event of material changes, we will notify you and seek renewed consent where required.

FAQ

What personal data does Charmius collect from Australian players?

We collect eight categories: registration details, KYC documents, payment data, gaming history, technical data, support correspondence, responsible gaming records, and marketing preferences. Sensitive data such as racial or religious information is never processed.

How quickly must Charmius notify me of a data breach?

We are obligated to notify both regulatory authorities and affected users within 72 hours of detecting any personal data breach. This is a hard legal requirement under our compliance framework.

Can I opt out of marketing emails without closing my account?

Yes. Marketing communications are entirely separate from administrative notifications. You can opt out at any time without any impact on your account status or access to our platform.