Privacy Policy

Welcome to Chumba Casino. Your absolute privacy and the impregnable security of your personal data are of the utmost importance to us. This comprehensive Privacy Policy ("Policy") is designed to provide you with complete transparency regarding how VGW Malta Limited, VGW Holdings Pty Ltd, VGW Games Limited, and our affiliated corporate entities (collectively referred to as "VGW Group," "we," "us," or "our") collect, utilize, process, store, transfer, and protect your personal information when you access our website, utilize our mobile applications, or interact with any of our social sweepstakes casino services (collectively, the "Services").

This Privacy Policy applies to all individuals who interact with the Services, regardless of whether you are playing purely for recreational purposes using Gold Coins (GC) or participating in our promotional sweepstakes utilizing Sweeps Coins (SC). By accessing, registering an account on, or interacting in any manner with the Chumba Casino platform, you expressly acknowledge that you have carefully read, entirely understood, and agree to be bound by all of the data processing practices outlined in this detailed Policy.

1. Comprehensive Categories of Information We Collect

To provide you with a seamless, legally compliant, and highly personalized social gaming environment, it is necessary for us to collect and process various categories of data. We systematically collect information through three primary channels: information you provide to us directly, information we collect automatically through tracking technologies, and information we obtain from trusted third-party partners.

A. Information You Actively Provide to Us

When you register for a Chumba Casino account, initiate a customer support request, participate in promotional giveaways, or request a prize redemption, you actively transmit personal data to our secure servers. This includes, but is not limited to:

• Personal Identifiers: Your full legal name, precise date of birth, current residential mailing address (P.O. Boxes are strictly prohibited for verification purposes), telephone number, and email address.
• Account Authentication Data: Usernames, highly secure passwords, and security challenge questions utilized to safeguard your profile.
• Identity Verification (KYC) Data: As a legally compliant sweepstakes operator, we are required by federal Anti-Money Laundering (AML) statutes to verify the identity of our players. To process Sweeps Coins prize redemptions, you must provide high-resolution, unredacted copies of government-issued identification (such as a state driver’s license, passport, or national ID card), proof of residential address (such as recent utility bills or bank statements dated within 90 days), and potentially a live facial recognition "selfie" to prevent identity theft.
• Financial and Transactional Information: If you elect to purchase optional Gold Coin packages, you will provide payment details. It is important to note that sensitive financial data, such as full credit card numbers or bank account routing numbers, are processed directly by our PCI-DSS compliant third-party payment gateways (e.g., Skrill, Worldpay). We do not store full credit card numbers on our internal servers; we only retain tokenized transactional records, purchase histories, and billing zip codes.
• Alternative Method of Entry (AMOE) Data: If you request free Sweeps Coins via postal mail, we collect the handwriting, name, address, and Postal Request Codes submitted on your physical index cards.
• User-Generated Content and Communications: Any text, images, or audio provided when you communicate with our customer support agents via Zendesk, email, or telephone, as well as comments or posts made on our official Facebook, Instagram, or X (Twitter) channels.

B. Information We Collect Automatically

As you navigate through the Chumba Casino game lobby, spin the reels of our slot machines, and interact with our web infrastructure, we utilize automated data collection technologies—such as cookies, embedded scripts, and web beacons—to gather specific technical information regarding your equipment and browsing patterns. This automated data includes:

• Device and Hardware Information: We log detailed data regarding the device you use to access the platform. This encompasses the hardware model, exact operating system and version, unique device identifiers (such as MAC addresses, IMEI, or Apple IDFA), mobile network provider information, and the specific browser type (e.g., Chrome, Safari) being utilized.
• Usage and Interaction Data: We meticulously track the details of your sessions. This includes the exact slot games you play, the duration of your gameplay, your wagering history (both Gold Coins and Sweeps Coins), the buttons you click, the pages you view before and after accessing our site (referring/exit URLs), and timestamps of all interactions.
• Precise Geolocation Data: Strict adherence to United States sweepstakes laws is non-negotiable. Therefore, we utilize advanced IP address mapping and, with your explicit device-level consent, precise GPS coordinates to verify your physical location. This ensures that users located in restricted territories (such as Washington, Idaho, and Michigan) are blocked from accessing the Sweeps Coin functionalities. Attempting to obfuscate this data using a VPN is a violation of our Terms.
• Diagnostic Log Files: Our network servers automatically record standard web log information to monitor platform stability. This includes your IP address, browser language, Internet Service Provider (ISP), and detailed crash reports if the application unexpectedly terminates.

C. Information Sourced from Third Parties

To supplement our internal data and bolster our security protocols, we may acquire information about you from external, trusted third parties:

• Social Media Integrations: If you choose the convenience of registering or logging into Chumba Casino utilizing a third-party account (such as Facebook or Google), we receive specific information according to the authorization procedures determined by those platforms. This typically includes your authenticated email address, public profile name, and profile picture.
• Compliance and Fraud Prevention Partners: We continually cross-reference data with specialized identity verification agencies and fraud prevention databases to ensure the authenticity of the KYC documents you provide, to monitor for money laundering typologies, and to prevent bonus abuse.
• Marketing and Analytics Vendors: We receive aggregated, pseudonymous demographic data and marketing attribution statistics from our advertising partners to measure the exact return on investment (ROI) of our promotional campaigns.

2. How We Utilize Your Personal Information

The extensive collection of this data is not arbitrary; it is strictly tethered to fundamental business operations, legal necessities, and the enhancement of your social casino experience. We process your personal information for the following specific purposes:

• Service Provision and Administration: To create, maintain, and secure your player account; to manage your virtual currency wallets; to process your optional Gold Coin purchases; and to facilitate the accurate tracking and fulfillment of Sweeps Coins prize redemptions.
• Legal and Regulatory Compliance: To verify your age (ensuring you are 18 or older) and your geographical location (ensuring you are not in a restricted state). This is the cornerstone of our ability to operate legally as a promotional sweepstakes entity in the United States and Canada. Furthermore, we use this data to comply with tax reporting requirements (such as issuing IRS 1099-MISC forms for significant prize redemptions).
• Fraud Detection and Platform Security: To deploy sophisticated algorithms that detect, investigate, and actively prevent malicious activities, bot networks, bonus abuse, multiple account creation (smurfing), and unauthorized access to the platform.
• Customer Support and Dispute Resolution: To quickly identify your account when you reach out to our Help Center, to troubleshoot complex technical glitches, and to fairly resolve any disputes regarding game outcomes or transactional errors.
• Platform Optimization and Personalization: To analyze player behavior and traffic trends. Understanding which games are most popular and where users encounter friction allows our engineering team to optimize UI/UX design, improve load times, and tailor the game lobby to highlight your preferred slot genres.
• Marketing and Direct Communications: To send you essential administrative notices (such as updates to this Policy or our Terms), security alerts, and highly targeted promotional messages. These promotions may include exclusive free Sweeps Coins codes, alerts regarding new game releases, and personalized purchase discounts. You retain the right to opt-out of marketing communications at any time.

3. Information Sharing and Third-Party Disclosures

Chumba Casino emphatically respects your privacy. We do not sell your personal information to third-party data brokers for monetary compensation. However, to operate a complex digital ecosystem, we must share your data with strictly vetted entities under specific circumstances:

• Essential Service Providers: We transmit necessary data to third-party vendors who perform critical services on our behalf. This includes payment gateways (to process purchases and redemptions), identity verification software (to process KYC documents), cloud hosting providers (to store our databases securely), and email delivery services. These providers are bound by stringent Data Processing Agreements (DPAs) and are legally prohibited from using your data for any purpose other than executing their contracted duties.
• Corporate Affiliates (VGW Group): Information may be shared seamlessly between VGW Holdings Pty Ltd, VGW Malta Limited, VGW Games Limited, VGW Luckyland Inc., and any future subsidiaries or parent companies for internal administrative, operational, and customer support purposes.
• Law Enforcement and Legal Mandates: We will unilaterally disclose your personal information if we are legally compelled to do so by a valid subpoena, court order, search warrant, or regulatory mandate from a recognized gaming or financial authority (such as the Malta Gaming Authority). Furthermore, we reserve the right to proactively report any suspected illegal activity, fraud, or money laundering to the appropriate law enforcement agencies without prior notice to the user.
• Mergers, Acquisitions, and Business Transfers: In the event that the VGW Group undergoes a structural transition—such as a merger, acquisition by another company, corporate reorganization, or the sale of all or a portion of our assets—your personal data, virtual currency balances, and account history will likely be transferred as a core business asset. You will be notified via email or a prominent platform banner of any such change in ownership or data control.

4. Cookies, Web Beacons, and Advanced Tracking Technologies

To provide a state-of-the-art web experience, Chumba Casino employs cookies and similar tracking protocols. A "cookie" is a microscopic text file that a web server places on your device's hard drive or browser memory.

Categories of Cookies Deployed:

• Strictly Necessary Cookies: These are the architectural foundation of the website. They are absolutely essential for you to navigate the site, authenticate your login credentials securely, and maintain your session state as you transition from the lobby to a specific slot game. The platform cannot function without these.
• Performance and Analytical Cookies: We utilize industry-standard analytics tools to collect aggregated, anonymous data regarding how our user base interacts with the platform. This helps us identify broken links, measure page load speeds, and calculate the overall popularity of specific games.
• Functionality Cookies: These allow the platform to "remember" you. They save your localized preferences, such as your audio volume settings for slot games, and whether you have already dismissed a specific promotional pop-up.
• Targeting and Advertising Cookies: These are utilized to deliver relevant Chumba Casino advertisements to you when you browse other websites or social media platforms. They also help us cap the frequency of ads you see and measure the exact conversion rates of our digital marketing campaigns.

Managing Your Preferences: You possess the absolute right to modify your browser settings to block all cookies, reject third-party cookies, or alert you when a cookie is being deployed. However, please be advised that systematically blocking Strictly Necessary cookies will break core functionalities of Chumba Casino, rendering you unable to log in or play games. For more detailed information, please review our standalone Cookie Notice.

5. Data Security, Integrity, and Retention Protocols

We do not take the responsibility of guarding your data lightly. Chumba Casino has implemented a comprehensive, multi-layered security infrastructure designed to protect your personal information from unauthorized access, accidental loss, malicious alteration, and unauthorized disclosure.

Our defenses include 256-bit Secure Socket Layer (SSL/TLS) encryption for all data transmitted between your device and our servers. Our internal databases are heavily firewalled, and access to raw user data is strictly limited on a "least privilege" basis to only those authorized personnel who absolutely require it to perform their job functions. Furthermore, KYC documents are stored in highly secure, encrypted environments and are subjected to regular vulnerability penetration testing.

Data Retention: We will retain your personal information only for as long as your account remains active or as long as is necessary to fulfill the operational purposes outlined in this Policy. Crucially, due to stringent federal tax laws, AML regulations, and potential legal disputes regarding sweepstakes entries, we are legally required to retain certain financial transactional records, AMOE histories, and identity verification documents for a minimum period of five (5) to seven (7) years following the closure or deletion of your account.

6. Comprehensive United States State-Specific Privacy Rights

The landscape of data privacy within the United States is rapidly evolving. Depending on your specific state of permanent residence, you are granted extensive, legally enforceable rights regarding the control of your personal data under comprehensive state privacy statutes.

A. California Privacy Rights (CCPA & CPRA)

If you are a resident of the State of California, the California Consumer Privacy Act (CCPA), as amended and expanded by the California Privacy Rights Act (CPRA), affords you the following specific rights:

• The Right to Know (Access): You have the right to submit a verifiable request, up to twice in a 12-month period, asking us to disclose the specific pieces of personal information we have collected about you, the categories of sources from which the data was collected, the business purpose for collecting it, and the categories of third parties with whom we share it.
• The Right to Delete: You possess the right to request the permanent deletion of the personal information we have collected from you. Please note that this right is not absolute; we are legally permitted to deny your deletion request if retaining the information is necessary to comply with a legal obligation (such as AML record-keeping), detect security incidents, or complete a transaction for which the data was collected.
• The Right to Correct Inaccurate Data: If you discover that the personal information we maintain about you is factually incorrect, you have the right to request that we rectify it.
• The Right to Opt-Out of the "Sale" or "Sharing" of Data: While we do not sell data for cash, under the CPRA's broad definition of "sharing" for the purposes of cross-context behavioral advertising, the use of third-party tracking cookies may be classified as such. You have the explicit right to opt-out of this sharing.
• The Right to Limit the Use of Sensitive Personal Information: You may direct us to limit the use of your sensitive personal data (such as your exact GPS geolocation or government-issued ID) strictly to the purposes necessary to provide the core services you requested.
• The Right to Non-Discrimination: We are legally prohibited from discriminating against you—such as by denying you access to games or providing a lower quality of service—simply because you chose to exercise any of your CCPA/CPRA rights.

B. Privacy Rights for Residents of Virginia, Colorado, Connecticut, Utah, and Texas

If you reside in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), or other states with recently enacted comprehensive privacy frameworks, you generally share similar rights to those granted in California. Specifically, you have the right to confirm whether we are processing your personal data, the right to access that data in a portable format, the right to correct inaccuracies, and the right to request deletion. You also have the explicit right to opt-out of the processing of your personal data for the purposes of targeted advertising.

C. How to Exercise Your State Privacy Rights

To exercise any of the rights detailed above, you must submit a "Verifiable Consumer Request." You can do this by utilizing the "Contact Us" portal located within our Help Center or by emailing our Privacy Team directly. For your protection, we must verify your identity before processing your request. We will attempt to match the identifying information provided in your request (such as your email and date of birth) with the data we already maintain on file. We will respond to all legitimate requests within forty-five (45) days of receipt.

7. Children's Privacy Protection

The Services provided by Chumba Casino are strictly and exclusively intended for adult individuals who are at least eighteen (18) years of age, or the age of legal majority in their jurisdiction of residence (e.g., 19 in specific Canadian provinces), whichever is higher. We do not design our platform to attract minors, nor do we knowingly solicit, collect, or maintain personal information from anyone under the age of 18.

If we obtain actual knowledge that we have inadvertently collected personal information from a child under the age of 18 without verified parental consent, we will take immediate and aggressive steps to permanently delete that information from our active databases and terminate the associated account. If you are a parent or legal guardian and believe that your minor child has provided us with personal information, please contact us immediately via the Help Center.

8. International Data Transfers

Chumba Casino operates primarily for users in the United States and Canada. However, our parent company (VGW Group) is headquartered in Australia, and our operations team and servers are distributed globally, including Malta and the United States. Therefore, please be explicitly aware that your personal information will be transferred to, stored, and processed outside of your country of residence.

By accessing our platform, creating an account, or otherwise using the Services, you unequivocally consent to the transfer, storage, and processing of your information in these global jurisdictions. We ensure that all such international data transfers are safeguarded by robust, legally approved mechanisms, such as Standard Contractual Clauses (SCCs), to guarantee your data remains protected regardless of where it is physically housed.

9. Modifications and Updates to this Privacy Policy

The digital regulatory environment, online tracking technologies, and our own operational practices are in a constant state of evolution. Consequently, we reserve the unilateral right to modify, amend, update, or revise this Privacy Policy at any time, at our sole discretion.

Whenever we make material changes to this document—such as altering how we share data with third parties or changing our legal bases for processing—we will revise the "Last Updated and Effective Date" located at the top of this page. Furthermore, if the changes significantly impact your privacy rights, we will proactively provide you with prominent notice. This may occur by sending a direct email to the address registered to your account or by displaying a mandatory acknowledgment banner upon your next login. We strongly encourage you to review this Privacy Policy periodically.

10. Contact Information

If you have any questions, concerns, comments, or formal complaints regarding this Privacy Policy, our use of cookies, or our broader data processing methodologies, our dedicated Support Team is here to assist you.

Please navigate to the Help Center to submit a secure support ticket. Alternatively, you may contact us in writing at the registered address of VGW Games Limited: Trident Park, Notabile Gardens, No6 - Level 3 Central Business District Mdina Road, Zone 2 BIRKIRKARA, CBD2010, Malta.