4Tuna Casino Privacy Policy
The Company Behind Your Data
ALPECA LIMITED, registered at Theokritou 5, 2008 Strovolos, Nicosia, Cyprus (registration number HE 464760), is the controller of the personal data you give us on 4tuna.app. It decides why and how that data is used, and it answers to you for it. Everything in this notice applies to the desktop site, the mobile browser, the Android APK and the iOS Progressive Web App alike.
Reasons and Legal Grounds for Processing
We process data for four purposes, each under a specific legal basis in the UK GDPR.
| Purpose | Legal basis |
|---|---|
| Creating your account, running games, paying out winnings | Contract |
| Identity checks and anti-money laundering records | Legal obligation |
| Fraud prevention, security logs and multi-account detection | Legitimate interests |
| Non-essential cookies and marketing emails | Consent |
You can withdraw consent at any time without affecting processing that already took place.
Escalating a Complaint to the ICO
If we do not resolve a concern about your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. We would prefer the chance to put things right first, so write to [email protected] and we will reply within 24 hours to confirm we have your request. You do not need to wait for our final answer before contacting the ICO.
Transfers Outside the UK
Our operating company sits in Cyprus, so your data is processed outside the UK. Transfers to the European Economic Area rely on the UK adequacy regulations that cover it. Where a game provider or payment partner handles data in another country, we use the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses before any data is sent.
Your Rights Over Your Data
You may ask for a copy of your data (access), correction of inaccurate details (rectification), deletion (erasure), a pause on processing (restriction), a stop to processing based on legitimate interests (objection) and a machine-readable export (portability). We answer within one month of receiving a request. Some deletion requests cannot be met while anti-money laundering rules require us to keep records, and we will tell you which data is affected.
Cookie Categories and Consent Choices
We use essential cookies that keep you logged in and remember your cookie choice, analytics cookies that count visits and page performance, and preference cookies that store settings such as your last game category. Under the Privacy and Electronic Communications Regulations (PECR), only essential cookies are set before you consent. Use the notice at the foot of the page to accept, or clear cookies in your browser settings to opt out again at any time.
How Long We Keep Records
We keep account and transaction data while your account is open. After closure, identity documents and payment records stay for five years because anti-money laundering rules require it, after which they are deleted. Server logs are kept for a shorter period needed for security investigations, and marketing preferences are deleted when you unsubscribe.
Named Recipients of Your Data
Payment data goes to Visa, Mastercard, Skrill and Neteller for card and e-wallet transactions, and to the Bitcoin, Ethereum and Litecoin networks for crypto transfers. Game providers receive the identifiers needed to run your sessions: Pragmatic Play, Evolution Gaming, NetEnt, Play’n GO, Hacksaw Gaming, Nolimit City, Push Gaming, Microgaming, Thunderkick, Spribe and BGaming, together with Pragmatic Live for live tables. We do not sell your data to advertisers.
Categories of Personal Data
At registration we collect your full name, date of birth, email address and password. Payments add the method used and transaction amounts, and verification adds a passport or UK photocard driving licence and proof of address. Technical data covers your IP address, device type, browser and session logs, and gameplay records show which games you played and when.
Sending a Data Request
Email [email protected] from the address registered to your account and state which right you want to use. We may ask for identity confirmation before releasing anything, to stop someone else obtaining your data. Requests are free unless they are clearly repetitive or excessive, and we tell you in writing if we need extra time or cannot act on a request, together with the reason.