Last updated: March 2026
This Privacy Policy explains how Carletta N.V. ("we", "us", "our"), the operator of Pin Up Casino India, collects, uses, and protects your personal data when you use our website and services. We are committed to protecting your privacy in compliance with applicable data protection laws.
We collect the following categories of personal data:
We use your personal data for the following purposes: (a) to provide and manage your account; (b) to process deposits and withdrawals; (c) to verify your identity (KYC compliance); (d) to prevent fraud and money laundering; (e) to personalise your gaming experience; (f) to send promotional communications (where you have opted in); (g) to comply with legal obligations including anti-money laundering (AML) regulations.
We process your data on the following legal bases: (a) performance of a contract — to provide you with our services; (b) legal obligation — to comply with KYC/AML regulations; (c) legitimate interests — to prevent fraud and ensure security; (d) consent — for marketing communications.
We do not sell your personal data to third parties. We may share your data with: (a) payment processors to handle transactions; (b) identity verification services for KYC checks; (c) regulatory authorities when required by law; (d) our group companies including Carletta Limited (Cyprus) for payment processing purposes. All third-party processors are contractually bound to protect your data.
We retain your personal data for as long as your account is active and for a minimum of 5 years after account closure, as required by anti-money laundering regulations. Transaction records are retained for 7 years in compliance with financial regulations.
We use cookies and similar tracking technologies to enhance your experience, analyse site usage, and personalise content. Essential cookies are required for the website to function. Analytics and marketing cookies are used with your consent. You can manage cookie preferences through your browser settings.
You have the right to: (a) access a copy of your personal data; (b) correct inaccurate data; (c) request deletion of your data (subject to legal retention requirements); (d) object to processing for marketing purposes; (e) withdraw consent at any time. To exercise any of these rights, please contact our support team.
We implement industry-standard security measures including SSL/TLS encryption, two-factor authentication, and regular security audits to protect your personal data from unauthorised access, loss or disclosure.
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our website. The updated policy will be effective upon posting.
For privacy-related enquiries, please contact our Data Protection team.
