Privacy Policy
Walked through in the order an account meets it: registering, depositing, withdrawing, and leaving.
Last updated: August 2026
Who is responsible
Sitting as data controller is the operator of this website. A joint controller, other brands inside the same business group and a parent company process parts of it too. Appointed to the role of Data Protection Officer is somebody you can reach at dpo@lizaro.com. The General Data Protection Regulation is the framework.
When you register
Name, date of birth, email address, phone number, country and account currency. That set exists to open the account, to check you are over 18, and to meet the identification duties that apply to us. Behaviour data starts at the same moment: login times, device and browser, IP address, and which pages and games get opened. It keeps sessions secure and fraud visible.
When you deposit
Payment route, references, amounts and balances. Kept because money movement has to be reconstructable, and because anti-money laundering rules require the record rather than merely permit it.
When you withdraw
This is where due diligence data arrives: identity card, driving licence or passport number, proof of address, social security number, source of wealth and funds, bank ID, financial statements. Customer Due Diligence follows the 5th AML Amendment and it triggers on thresholds set by international regulation, not by us.
Some of that comes from you and some does not. Public and government databases, internet and social media sources, commercially available databases, financial and credit institutions, fraud prevention agencies and public authorities can all be consulted where the law calls for that depth of check.
When you leave
It sits there as long as the account does, and once nothing legal or commercial still calls for it, deletion or anonymisation follows. Where anti-money laundering or other regulation demands a longer period, the rule sets the clock rather than we do.
Who else sees any of it
Authorised employees. Brands within the same entity or operator. Contractors, agents, joint controllers, affiliates and subsidiaries. Third-party providers running parts of the platform. Law enforcement, regulators and licensing authorities, once they have the standing to ask.
One clause deserves stating rather than burying: if you submit a complaint or a review about us to a third-party platform — a casino review site, a gambling forum, a dispute resolution body — we may disclose personal data to that platform, limited to what identifies the account, on the basis of our legitimate interest in protecting our business reputation.
Your rights
Access, correction, erasure where nothing requires us to keep it, restriction, objection, portability, and withdrawal of a consent you gave earlier without that affecting anything done before. Any of them goes to dpo@lizaro.com, sent from the registered address. A complaint can also go to the supervisory authority for the place you live, the place you work, or the place you think an infringement happened.
Security and cookies
Traffic runs over SSL, and access to due diligence records is limited to staff whose work requires it. At your end, anything done with the correct email and password counts as done by you — a reused password is the weakest link in the chain.
Cookies come in four categories: essential ones that keep sessions and security working and cannot be switched off, functional ones that remember preferences, performance ones that measure how pages get used, and targeting ones that support advertising. Consent switches the last two on, and every page carries a Cookie Settings panel offering Accept all, Decline all and Save & Close.