Privacy Policy

This Privacy Policy explains how Dolly Casino, operated for Canadian users through the website dolly-ca.com (referred to as "we", "us", or "our"), collects, uses, stores, and protects your personal data when you visit the site, register an account, or otherwise interact with our services. It applies to all players and website visitors located in Canada (excluding Ontario) who access or use Dolly Casino via dolly-ca.com. By using our services, you acknowledge that you have read and understood this Privacy Policy.

Effective date: 1 January 2026

Who We Are

Observe: Dolly Casino is operated under specific corporate structures and offshore gaming licences. Users must know which entities are responsible for their personal data and how to contact them.

Expand: The important data indicates Liernin Enterprises LTD as the core operator, with Mirata Services LTD acting as a payment-processing partner. Exact postal addresses are not specified, but registration numbers, jurisdictions, and licensing authorities are known. For Canadian players (excluding Ontario), operations are offered as offshore grey-market services from outside Canada. A designated contact point for privacy matters must be provided, even if a formal Data Protection Officer (DPO) is not legally mandated.

Reflect: We clearly identify the controller(s), their jurisdictions, registration details, and an email contact for privacy matters, while noting any limits in available address information.

The services provided through dolly-ca.com for Canadian users are offered by the following entities (together, the "Operator"):

• Liernin Enterprises LTD, a limited liability company registered in the Marshall Islands, registration number 126211. Liernin Enterprises LTD is the primary operator and holder of offshore gaming licences used for Dolly Casino. Its registered address is in the Marshall Islands; however, an exact street address is not specified in this notice.
• Mirata Services LTD, a limited liability company registered in Cyprus, registration number HE 438222. Mirata Services LTD acts primarily as a payment-processing and related services partner for the Operator. Its registered address is in Cyprus; however, an exact street address is not specified in this notice.

The Operator holds the following relevant gaming licences:

• Offshore Gaming License Number 22-0025, issued by the Philippine Amusement and Gaming Corporation (PAGCOR), Philippines, for offshore online gaming activities (assumed active and valid through at least 2026 based on February 2025 verification).
• Online Gaming License Number OGL/2023/103/0067, issued by the Curacao Gaming Control Board (GCB), Curacao, following migration from the prior sub-license framework (assumed active and valid through at least 2026 based on February 2025 verification).

For the purposes of this Privacy Policy, unless stated otherwise, Liernin Enterprises LTD is the main controller of your personal data collected through dolly-ca.com, and Mirata Services LTD may act as a joint controller or processor in relation to payments and related services.

Contact for Privacy Matters (DPO / Data Protection Contact)

• Email: [email protected] (please indicate "Privacy" in the subject line for faster routing)
• Website: https://dolly-ca.com
• Live chat: available 24/7 via the on-site interface (contact is initially handled by customer support, who can escalate privacy-related queries to the responsible team).

Where required, we may designate a specific Data Protection Officer (DPO) or equivalent role. In such a case, any updated DPO details will be reflected in this Privacy Policy.

What Personal Data We Collect

Observe: To provide and improve online casino services, Dolly Casino must process a broad range of personal, technical, financial, and behavioural data, including data obtained via cookies.

Expand: Beyond basic identifiers, gambling operators must collect data necessary for age verification, anti-money laundering (AML), fraud prevention, and responsible gambling monitoring. Technical logs, device information, and behavioural patterns (such as betting history and interaction with games) are essential for security and compliance. Cookies and similar technologies support both functionality and marketing.

Reflect: We categorise data into logical groups and explain typical content within each category so that users understand what is collected and why, while acknowledging that not all data types must be collected in every case.

Categories of Personal Data

• Identification and Contact Data
  This includes information you provide during registration, verification, and account management, such as:
  • Full name
  • Date of birth and age-confirmation information
  • Country of residence and, where requested, province/territory
  • Email address
  • Telephone number
  • Username, account ID, and other identifiers we assign to your profile
  • Copies of identity documents (e.g., passport, national ID, driver's licence), proof of address, and other KYC documentation where required by our AML and verification procedures.
• Account and Transaction Data
  Data related to your account and use of our services, including:
  • Registration date, account status, and account settings
  • Deposits and withdrawals (amounts, currency, payment method used, timestamps, transaction IDs)
  • Bonus participation (opt-ins, wagering progress, bonus balances)
  • Communication records with our support team (emails, chat logs, complaint details).
• Payment and Financial Data
  In order to process payments and comply with AML obligations, we may collect:
  • Partial payment card details (such as cardholder name, masked card number, expiry date) where applicable
  • Details of e-wallets, bank accounts, and other payment instruments (e.g., account holder name, IBAN or other identifiers, transaction references)
  • Payment verification records and risk indicators provided by our payment processors and anti-fraud providers.

  We do not store full card numbers or CVV/CVC codes on our systems unless strictly necessary and in compliance with applicable security standards.

• Technical and Usage Data
  When you access or use dolly-ca.com, our systems automatically collect:
  • IP address (which may indicate your approximate location)
  • Device identifiers (such as device ID, operating system, browser type and version, screen resolution)
  • Access dates and times, pages visited, referring URLs, and clickstream data
  • Log files relating to logins, failed logins, security events, game launches, and other interactions.
• Behavioural and Preference Data
  To provide gaming services and for responsible gambling and marketing purposes, we may process:
  • Game and betting history (games played, session durations, bet sizes, outcomes, win/loss records)
  • Bonusing and promotion usage (what offers you activate and how you use them)
  • Interaction with emails, notifications, and on-site messages (opens, clicks)
  • Responsible gambling settings and behaviour (self-exclusion, limits, reality checks, time-outs).
• Cookies and Similar Technologies Data
  Through cookies, pixels, and similar technologies, we may collect:
  • Unique cookie identifiers assigned to your browser or device
  • Session data allowing us to maintain your login and security state
  • Analytics and performance data (page loading times, navigation patterns)
  • Advertising-related information where permitted (e.g., whether you have seen or interacted with a particular campaign).
• Special Categories and Sensitive Data
  We generally do not seek to collect special categories of personal data (e.g., health, political views). However:
  • Information about problem gambling concerns, self-exclusion reasons, or related notes you provide to us may be considered sensitive and will be handled with additional care.

Legal Basis for Processing

Observe: As an offshore operator serving Canadian users, we follow general data protection principles inspired by leading frameworks such as the GDPR, while also considering Canadian privacy norms. We must identify clear legal grounds for each main category of processing.

Expand: The key legal bases include consent, performance of a contract (providing gambling services, processing payments), compliance with legal obligations (KYC/AML, record-keeping for licences and regulators), and legitimate interests (fraud prevention, service security, analytics, and certain marketing operations). Because users may access Dolly Casino from jurisdictions with higher privacy standards, we align our practices accordingly.

Reflect: We list and explain each legal basis and give examples of how it applies, allowing users to understand when processing is optional (e.g., marketing consent) and when it is mandatory (e.g., identity verification).

Main Legal Grounds

• Performance of a Contract
  We process your personal data where it is necessary to:
  • Register and manage your gaming account
  • Provide access to games and related functionalities
  • Process deposits, bets, and withdrawals
  • Provide customer support and handle your requests
  • Apply and manage bonuses, loyalty schemes, and promotions that form part of your user agreement.

  If you do not provide the required data, we may not be able to open or maintain your account or process your transactions.

• Compliance with Legal and Regulatory Obligations
  As a licensed online gambling operator, we are required to comply with various laws and regulatory requirements (including KYC/AML, counter-terrorist financing, responsible gambling, and licence conditions). We therefore process your data to:
  • Verify your identity and age
  • Conduct risk assessments and ongoing monitoring for AML and fraud
  • Keep statutory records of transactions and gaming activity for specified periods
  • Cooperate with law-enforcement agencies, regulators, and courts when lawfully required to do so.
• Legitimate Interests
  We may process your data where it is necessary for our legitimate interests or those of third parties, provided that such interests are not overridden by your rights and freedoms. This includes:
  • Maintaining the security and integrity of our platform, including detection and prevention of fraud, abuse, account takeover, and technical issues
  • Protecting our rights, property, and interests, including enforcing our Terms and Conditions
  • Performing internal analytics and statistical reporting to improve our products, user experience, and risk management
  • Personalising aspects of the service (such as recommending games or displaying relevant content), where this does not rely solely on your consent.
• Consent
  In certain situations, we rely on your explicit consent, for example:
  • Sending you marketing communications (email, SMS, push notifications) that are not based on another legal ground
  • Using certain non-essential cookies and tracking technologies for advertising purposes
  • Sharing some of your data with specific partners for direct marketing or campaign measurement.

  You may withdraw your consent at any time via your account settings, unsubscribe links in communications, or by contacting us at [email protected]. Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal.

• Protection of Vital Interests and Public Interest
  In rare cases, we may process data to protect vital interests of you or another person (e.g., communicating information to authorities if we reasonably believe someone is at immediate risk of serious harm) or where required for a task carried out in the public interest pursuant to applicable law.

Purpose of Processing

Observe: Users must understand how each main category of personal data is used in connection with Dolly Casino's services.

Expand: Purposes range from core service delivery (account operations, payments, game access) to security (anti-fraud, AML), analytics, and marketing. Responsible gambling obligations also require specific analyses of play patterns.

Reflect: We group purposes into clear themes and provide concise explanations, linking them to the legal bases described above.

Main Purposes

• Providing and Managing Casino Services
  • Creating and maintaining your gaming account on dolly-ca.com
  • Allowing you to deposit, wager, and withdraw funds
  • Operating games, tournaments, bonuses, and loyalty programs
  • Ensuring accurate calculation of balances, bets, and winnings.
• Customer Support and Communication
  • Responding to your inquiries via email, live chat, or other channels
  • Sending transactional messages (e.g., deposit confirmations, security alerts, policy updates)
  • Handling feedback, disputes, and complaints.
• Legal, Regulatory, and Compliance Purposes
  • Conducting KYC checks and ongoing AML monitoring
  • Meeting record-keeping and reporting obligations to regulators or competent authorities
  • Enforcing our Terms and Conditions and preventing prohibited behaviour (e.g., money laundering, bonus abuse, match-fixing).
• Security, Fraud Prevention, and Risk Management
  • Monitoring logins, transactions, and gameplay for unusual or suspicious patterns
  • Protecting against hacking, account takeover, and other security incidents
  • Managing chargebacks, payment disputes, and other financial risks.
• Analytics and Service Improvement
  • Analysing aggregated play and traffic data to understand how our services are used
  • Improving site performance, usability, game selection, and features
  • Testing new functionalities and optimising user experience.
• Marketing and Personalisation (Where Permitted)
  • Sending you news, promotions, and offers related to Dolly Casino, where allowed by law and your preferences
  • Measuring the effectiveness of campaigns and communications
  • Adjusting content and offers presented to you based on your profile and preferences, within applicable legal boundaries.
• Responsible Gambling
  • Monitoring relevant indicators of potentially harmful play patterns
  • Applying self-exclusion, deposit limits, or other voluntary tools you select
  • Contacting you, where appropriate, regarding responsible gambling matters and providing information about support resources.

Disclosure & Sharing

Observe: Dolly Casino necessarily shares certain data with partners (e.g., payment processors, technical providers, regulators) to deliver and support its services.

Expand: Sharing must be limited to what is necessary, subject to confidentiality and security obligations. Categories of recipients and circumstances of disclosure need to be transparent, including potential advertising and affiliate partners for marketing, where consent or another legal basis is used.

Reflect: We outline typical recipients, purposes of sharing, safeguards in place, and the principle that data is not sold for unrelated commercial purposes.

Categories of Recipients

• Payment Service Providers and Financial Institutions
  We share necessary payment and identification data with:
  • Banks, card schemes, e-wallet providers, and other payment processors
  • Anti-fraud and credit risk service providers assisting with payment verification and security.
• Technical and Operational Service Providers
  We may engage third parties who process data on our behalf, such as:
  • IT hosting providers, cloud infrastructure, and data centres
  • Game providers and software vendors whose content is integrated into our platform
  • Customer support tools, email delivery systems, and communication platforms
  • Analytics, performance monitoring, and security solution providers.

  These providers are bound by contractual obligations to process your data only according to our instructions and to maintain appropriate security measures.

• Regulators, Authorities, and Law Enforcement
  We may disclose your personal data when required to:
  • Gaming regulators responsible for our licences (e.g., PAGCOR, Curacao GCB)
  • Financial intelligence units and similar AML/CTF authorities
  • Law-enforcement agencies, courts, or other governmental bodies upon a lawful request or legal obligation.
• Affiliates and Business Partners
  In certain circumstances, and where permitted by law:
  • We may share limited data with marketing affiliates who referred you to Dolly Casino, for the purpose of tracking and attributing referrals and commissions
  • We may share aggregated or pseudonymised data with partners for analytics or performance measurement.
• Advertising Networks and Marketing Partners
  Subject to consent and applicable laws:
  • Advertising and marketing partners may receive identifiers and technical data (e.g., cookie IDs, hashed email addresses) to help deliver or measure targeted campaigns related to Dolly Casino
  • We do not authorise these partners to use your data for their own unrelated purposes.
• Corporate Transactions
  In connection with a potential or actual merger, acquisition, sale of assets, reorganisation, or similar transaction:
  • Your data may be disclosed to advisers and potential counterparties, subject to confidentiality safeguards
  • Any successor entity will be bound by this Privacy Policy or a substantially similar policy and will be required to respect your rights.

We do not sell your personal data to third parties for their independent marketing purposes.

International Transfers

Observe: Dolly Casino is operated by entities registered and licensed outside Canada, and many of our service providers are also located in various countries.

Expand: Data may be transferred among the Marshall Islands, Cyprus, Curacao, the Philippines, and other jurisdictions where our infrastructure or partners are based. Where the laws of the destination country may offer a different level of protection, we must implement appropriate safeguards in line with leading international standards.

Reflect: We inform users that international transfers occur, list typical destination regions, and describe the contractual and technical measures used to protect their data.

Territorial Scope of Transfers

• Your personal data may be stored and processed in:
  • The Marshall Islands (operator's registration jurisdiction)
  • Cyprus (payment-processing partner jurisdiction)
  • Curacao and the Philippines (licensing and certain operational jurisdictions)
  • Other countries where our hosting providers, game providers, and technical partners maintain infrastructure (which may include states within the European Economic Area, the United Kingdom, or other regions).

Protection Measures for Transfers

• We seek to ensure that any international transfer of personal data is subject to appropriate safeguards, which may include:
  • Contractual protections such as standard contractual clauses or equivalent data transfer agreements requiring partners to protect your data in line with recognised standards
  • Technical measures including strong encryption in transit and at rest, access controls, and pseudonymisation where appropriate
  • Organisational measures such as strict internal policies, training, and data access restrictions to protect your privacy.
• Where we rely on cloud or hosting providers that adhere to recognised international certifications (e.g., ISO 27001, SOC 2), we consider such certifications as part of our due diligence.

By using our services, you understand that your personal data may be transferred outside of your home jurisdiction, including Canada, and that we will take reasonable steps to ensure it remains protected as described in this Privacy Policy.

Data Retention

Observe: Online gambling operators must retain certain data for legally mandated minimum periods (particularly for AML/KYC and regulatory reasons) while not keeping other data longer than necessary.

Expand: We must specify typical retention periods or criteria by category (e.g., account records, transaction history, marketing data) and explain when data may be anonymised or deleted, including in response to user requests, subject to legal obligations.

Reflect: We provide a clear overview of how long data is kept and under what conditions retention may be extended or curtailed.

Retention Principles

• We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
  • Providing our services to you
  • Complying with legal, regulatory, accounting, or reporting obligations
  • Resolving disputes and enforcing our agreements.
• Where specific laws or licence conditions require minimum retention periods (for example, for AML records), we will comply with those requirements even if your account is closed.

Typical Retention Periods

• Account and Identification Data:
  Generally retained for the duration of your active account and for a period of up to 5 years after account closure, or longer if required by AML or regulatory obligations.
• Transaction and Gaming History:
  Typically retained for 5 - 7 years after the end of the relevant financial year or account closure, to comply with anti-money laundering, tax, and regulatory record-keeping requirements.
• Customer Support and Complaint Records:
  Retained for up to 5 years after resolution, or longer where necessary for the establishment, exercise, or defence of legal claims.
• Marketing Data (contact details and consent records):
  Retained for as long as you remain subscribed or until you withdraw consent or object, plus a short period (usually up to 2 years) to document your opt-out for compliance purposes.
• Technical Logs and Security Data:
  Retention periods vary but are generally from several months up to 2 years, unless longer retention is needed for security investigations or legal reasons.

Deletion and Anonymisation

• When data is no longer required, we will either:
  • Securely delete or destroy it; or
  • Anonymise it so that it can no longer be linked to you (for example, for aggregate statistics and analytics).
• Your right to erasure (where applicable) may be limited by our legal and regulatory obligations, especially regarding AML and gaming regulation.

Your Rights

Observe: While Dolly Casino targets Canadian users and is operated offshore, we choose to align our privacy practices with leading international standards, including principles derived from the GDPR.

Expand: Users should be able to request access, correction, deletion, restriction, objection, data portability, and to withdraw consent, within reasonable and defined timeframes. Some references in the instructions to Mexican laws and EU authorities are not jurisdictionally applicable for Dolly Casino; however, we maintain a similar level of protection as a matter of policy, while clarifying that local law in your jurisdiction will prevail where applicable.

Reflect: We list each core right, explain how to exercise it, and state that requests are handled within 30 days where practicable and free of charge, subject to legal limitations.

Overview of Rights

• Right of Access
  You may request confirmation as to whether we process your personal data and obtain a copy of such data, together with information about how we use it.
• Right to Rectification
  You may request correction of inaccurate or incomplete personal data. In many cases, you can update certain details directly via your account settings.
• Right to Erasure ("Right to be Forgotten")
  You may request deletion of your personal data where:
  • It is no longer necessary for the purposes for which it was collected
  • You have withdrawn consent (where consent was the legal basis)
  • You have successfully objected to processing.

  This right is not absolute and may be limited where we are required to retain data for legal, regulatory, or legitimate interest reasons (for example, AML and gaming regulations).

• Right to Restrict Processing
  You may request that we restrict the processing of your data (other than storage) if:
  • You contest its accuracy
  • Processing is unlawful and you oppose erasure
  • We no longer need the data but you require it for legal claims.
• Right to Object
  You may object to:
  • Processing based on our legitimate interests, in which case we will stop processing unless we demonstrate compelling legitimate grounds
  • Processing for direct marketing purposes, in which case we will stop such marketing without undue delay.
• Right to Data Portability
  Where technically feasible and applicable, you may request that we provide you with certain personal data in a structured, commonly used, machine-readable format, or transmit it directly to another controller, where processing is based on your consent or on a contract and is carried out by automated means.
• Right to Withdraw Consent
  Where we rely on your consent (for example, for marketing emails or certain cookies), you may withdraw this consent at any time via:
  • Account settings or preference centres (where available)
  • Unsubscribe links in our communications
  • Contacting us at [email protected].

  Withdrawal does not affect the lawfulness of past processing.

How to Exercise Your Rights

1. Submit a Request
   Send an email to [email protected] clearly stating:
   • Your full name and account ID or username
   • The right(s) you wish to exercise
   • Any additional information needed to identify your data.
2. Verification
   For your security, we may ask you to provide additional information to confirm your identity before fulfilling your request.
3. Response Time
   We aim to respond to all valid requests within 30 days of receipt. If your request is complex or we receive numerous requests, we may extend this period, but we will inform you of any extension and the reasons for it.
4. Fees
   Requests are generally handled free of charge. We may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, particularly if repetitive.

Note: The availability and scope of certain rights may depend on the privacy laws that apply in your jurisdiction. Regardless, Dolly Casino endeavours to handle your requests in line with high international data protection standards.

Cookies & Tracking Technologies

Observe: Cookies and similar technologies are essential to run an online casino platform and support analytics and marketing.

Expand: We must distinguish cookie types (session, persistent, third-party) and purposes (strictly necessary, functional, analytics, advertising) and provide guidance on how users can control them, both through browser settings and internal tools where available.

Reflect: We explain our cookie practices in plain language and give users practical management options.

Types of Cookies Used

• Session Cookies
  Temporary cookies that are stored on your device only while your browser session is active. They:
  • Enable essential functions such as login, account navigation, and maintaining your security state
  • Are deleted when you close your browser.
• Persistent Cookies
  Cookies that remain on your device for a defined period or until you delete them. They:
  • Remember your preferences (e.g., language, site settings)
  • Help us recognise you when you return to Dolly Casino
  • Support long-term analytics and performance evaluation.
• Third-Party Cookies
  Cookies placed by third-party service providers integrated into our site, such as:
  • Analytics providers (for traffic and usage statistics)
  • Advertising and marketing partners (for campaign tracking and, where permitted, personalised advertising).

Purposes of Cookies

• Strictly Necessary and Functional Cookies
  Essential for operating the site and providing requested features. Without these cookies, the website may not function properly, and you may not be able to log in or use key services.
• Analytics and Performance Cookies
  Help us understand how visitors use dolly-ca.com, which pages are most popular, and how users move around the site. This information is generally aggregated and enables us to improve performance and usability.
• Advertising and Marketing Cookies
  Used, where permitted, to:
  • Measure the effectiveness of campaigns
  • Limit how often you see a particular advertisement
  • Deliver more relevant promotions related to Dolly Casino.

Managing Cookies

• Browser Settings
  Most web browsers allow you to:
  • View which cookies are stored on your device
  • Delete existing cookies
  • Block some or all cookies
  • Set preferences for certain sites.

  However, blocking or deleting cookies, especially strictly necessary cookies, may affect your ability to use certain features of Dolly Casino and may prevent you from logging in or playing games.

• On-Site Controls
  Where available, we may provide internal tools or preference panels that allow you to manage optional cookies and tracking technologies directly on the site. Your choices will be stored via cookies or similar mechanisms.

Data Security

Observe: Security is critical for online casinos processing financial and sensitive behavioural data.

Expand: Our security framework uses encryption, access controls, authentication measures, audits, training, and incident response procedures. We aim to align with recognised standards such as ISO 27001 and SOC 2 where feasible.

Reflect: We describe the key elements of our security program so users understand that their data is protected, while noting that no system can be absolutely secure.

Technical and Organisational Measures

• Encryption
  • Data transmitted between your browser and dolly-ca.com is protected using TLS 1.2 or higher encryption protocols
  • Where appropriate, we encrypt sensitive data at rest using industry-standard algorithms.
• Access Controls
  • Access to personal data is restricted to authorised personnel who require it for their role
  • We use role-based access control (RBAC), authentication mechanisms, and logging to monitor access and changes.
• Authentication and Account Security
  • Users must maintain strong, unique passwords for their accounts
  • We may offer or require additional security features such as multi-factor authentication, where supported.
• Security Audits and Monitoring
  • Our systems are monitored for unusual or suspicious activity
  • We regularly review and update our security controls and may engage external experts for security assessments or penetration tests.
• Staff Training and Confidentiality
  • Employees and contractors with access to personal data are required to maintain confidentiality
  • We provide training on data protection and information security relevant to their responsibilities.
• Incident Response
  • We maintain procedures for identifying, assessing, and responding to security incidents
  • Where required by law, we will notify you and/or relevant authorities of any data breach that is likely to result in a significant risk to your rights and freedoms, providing information and guidance as appropriate.

While we strive to protect your data using commercially reasonable measures, no online system is entirely immune from risks. You are encouraged to take your own precautions, such as safeguarding your login credentials and using up-to-date security software.

Complaints & Contacts

Observe: Users need clear ways to contact Dolly Casino about privacy concerns and to escalate complaints, including to relevant authorities where applicable.

Expand: We provide multiple channels (email, live chat, postal details where possible) and describe an internal complaint procedure with expected response times. As an offshore operator, formal oversight may rely primarily on licensing regulators and general data protection or consumer protection bodies in the operator's jurisdictions.

Reflect: We give practical steps for raising concerns and note that users may also seek advice or lodge complaints with relevant supervisory or consumer authorities, consistent with applicable law.

Contact Channels

• Email (primary contact for privacy and complaints):
  [email protected]
• Website and Live Chat:
  https://dolly-ca.com - live chat interface (24/7 support, which can escalate privacy and data protection issues internally).
• Operator Entities (corporate information):
  Liernin Enterprises LTD, registered in the Marshall Islands (No. 126211)
  Mirata Services LTD, registered in Cyprus (No. HE 438222)

Internal Complaint Procedure

1. Submit Your Complaint
   Send a detailed description of your concern, including relevant dates, account information, and any supporting evidence, to [email protected].
2. Acknowledgement
   We aim to acknowledge receipt of your complaint within 5 business days.
3. Investigation and Response
   We will investigate your complaint and provide a substantive response within 30 days where possible. If we require more time due to complexity, we will inform you of the delay and expected timeline.
4. Escalation
   If you are dissatisfied with our response, you may request that your complaint be escalated within our organisation for further review.

External Authorities

Depending on your location and applicable law, you may have the right to lodge a complaint with a competent data protection or consumer protection authority. As an offshore operator, our primary regulatory contacts are linked to our gaming licences. For further information on our licensing regulators, you may consult:

• Curacao Gaming Control Board
• Philippine Amusement and Gaming Corporation (PAGCOR) (or its official contact channels, as updated from time to time).

You may also seek independent legal advice or consult any relevant privacy or consumer authority in your home jurisdiction if you believe your rights have been infringed.

Updates

Observe: Privacy laws and our services evolve over time, requiring updates to this Privacy Policy.

Expand: Users should be informed of material changes in advance where reasonably possible and have options to object or close their account. Version control and notification methods (email, banners, dashboard alerts) should be stated.

Reflect: We set out how and when we update the policy, how we will notify you, and how changes affect your continued use of Dolly Casino.

Policy Changes and Notification

• We may update this Privacy Policy from time to time to reflect:
  • Changes in our services, technologies, or business practices
  • Changes in applicable laws or regulatory requirements
  • Feedback or clarifications needed to better explain our practices.
• When we make material changes (for example, expanding the types of data collected, new purposes of processing, or significant changes to user rights or sharing practices), we will:
  • Provide notice via email to the address associated with your account, where feasible, and/or
  • Display prominent notices on dolly-ca.com, such as banners or alerts in your account dashboard.
• Where required or appropriate, we will provide at least 30 days' advance notice of significant changes before they take effect, giving you an opportunity to review them.

Your Options in Case of Changes

• If you do not agree with the updated Privacy Policy, you may:
  • Adjust your privacy or marketing preferences where available, and/or
  • Request closure of your account and, where applicable, withdrawal of any remaining real-money balance, subject to our Terms and Conditions and legal obligations.
• Your continued use of Dolly Casino after the effective date of an updated Privacy Policy will constitute your acceptance of the changes, to the extent permitted by law.

Last updated: January 2026