Privacy Policy — Big Clash Casino

Effective date: May 6, 2026

This Privacy Policy explains how NovaForge Ltd. (trading as Big Clash Casino, “Big Clash”, “we”, “us” or “our”) collects, uses, discloses and protects personal information about you when you use our website and services, including casino, live-casino, crypto-casino and sportsbook products. By accessing or using our services, registering an account, or communicating with us, you agree to the collection and use of your information as described in this Policy.

Operator and contact details

  • Operator: NovaForge Ltd. (Company registration number: 15684)
  • Registered address: Hamchako, Mustamudu, Autonomous Island of Anjouan, Union of the Comoros
  • Licence: Gaming licence issued by the Anjouan gambling authority
  • Support and privacy contact: [email protected]

Scope This Policy applies to all personal data we collect through our website and services (including mobile web and progressive web app), our customer support channels (including live chat and email), and related business activities. It covers users in all jurisdictions where we operate.

  1. Personal data we collect We collect personal data necessary to provide our services, to meet legal and regulatory obligations (including anti-money laundering and age verification), and to operate and improve our platform.

Categories of personal data we collect include:

  • Account and contact data: name, email address, telephone number, date of birth, username, postal address, preferred language, currency.
  • Identity and verification data (KYC): government-issued ID (passport, national ID, driver’s license), proof of address (utility bill, bank statement), selfie/photo for identity verification.
  • Payment and financial data: payment card details (partial card details where required by payment processors), bank account details, e‑wallet identifiers, cryptocurrency wallet addresses, transaction history, deposits, withdrawals. (See our /payment-methods/ page for supported methods.)
  • Gameplay and betting data: game history, bets, wins/losses, virtual currency activity, session logs, bet limits, live-casino interaction history (see /live-casino/), sportsbook activity (see /sportsbook/), tournament participation and leaderboard positions.
  • Technical and device data: IP address, device identifiers, browser and operating system, device type, connection information, mobile carrier, geolocation where permitted by law and necessary for compliance.
  • Communications and marketing data: correspondence with support, marketing preferences, opt-in consents, promotional participation (see /bonuses/).
  • Customer support data: chat transcripts, emails, recordings of support interactions.
  • Behavioural and analytics data: site navigation, pages viewed, time spent, clickstream data, cookies and similar technologies.
  • Other data: information you provide in forms, surveys, or when contacting us.

We do not collect special categories of personal data (such as health, race, religion) except where required by law and only with explicit, lawful justification.

  1. How we collect personal data
  • Directly from you: when you register, verify identity, deposit or withdraw funds, contact support, or participate in promotions and tournaments.
  • Automatically: through cookies, analytics and server logs when you use our services.
  • From third parties: payment processors, identity verification providers, KYC/AML screening services, fraud prevention providers, game providers, advertising partners, and publicly available sources.
  • From partners: affiliates, marketing partners, and customer support platforms.
  1. Purposes of processing and lawful bases We process your personal data for the following purposes and on these lawful bases:
  • To provide and operate our services (performance of a contract): account setup, game play, deposits and withdrawals, account management, live-casino streams, sportsbook bets, tournaments and promotions (/bonuses/, /crypto-casino/, /live-casino/, /sportsbook/).
  • To verify identity and meet legal and regulatory obligations (legal obligation): age verification, anti-money laundering (AML) and counter-terrorist financing (CTF), sanction screening and record keeping.
  • To process payments and prevent fraud (performance of a contract / legitimate interests): payment processing, withdrawal handling, chargeback handling, and fraud prevention.
  • To communicate with you (performance of a contract / consent / legitimate interests): customer support, account notifications, transactional messages, and service updates.
  • To personalise and improve services (legitimate interests / consent where required): recommendations, site personalization, game suggestions, matchmaking for tournaments and leaderboards.
  • For analytics and performance measurement (legitimate interests): understanding site usage, improving user experience and product development.
  • For marketing and promotions (consent / legitimate interests where permitted): email, SMS or other promotional communications and targeted offers. You can opt out at any time.
  • For compliance, dispute resolution, and enforcement (legal obligation / legitimate interests): responding to legal requests, disputes, or regulatory inquiries.
  • For mergers, acquisitions or corporate transactions (legitimate interests): evaluating or facilitating business transfers with appropriate safeguards.
  1. Sharing and disclosure of personal data We share personal data with third parties only as described below and as required by law:
  • Service providers and processors: payment processors, e-wallet providers, banks, blockchain/crypto providers, identity verification (KYC) vendors, AML screening vendors, fraud detection providers, hosting and cloud service providers, analytics and CRM providers. These parties process data on our behalf under contract.
  • Game suppliers and platform partners: authorised game providers and studios that provide titles and live dealer services (see /live-casino/ and /crypto-casino/), where sharing is necessary to deliver game sessions and settle bets.
  • Regulators, law enforcement and licensing authorities: to comply with legal obligations, licensing requirements (including the Anjouan authority), investigations, or court orders.
  • Affiliates and marketing/advertising partners: where necessary to support promotions and affiliate-driven registrations; only the minimum data required is shared.
  • Business transfers: in the event of a merger, acquisition, reorganisation, insolvency, or sale of assets, personal data may be transferred as part of the business transaction. We will require the recipient to respect your privacy rights.
  • Other disclosures: with your consent or as otherwise disclosed at the time of collection.

Where data processors are outside your country or the European Economic Area (EEA), we implement appropriate safeguards (such as Standard Contractual Clauses, binding corporate rules, or other lawful transfer mechanisms) to protect your data.

  1. International data transfers Our operations are international. Personal data may be transferred to and processed in countries other than the country where you live, including the Union of the Comoros, jurisdictions of our payment processors and cloud providers, and countries where our service providers are located. Where transfers occur from the EEA or other jurisdictions with data-transfer restrictions, we rely on adequacy decisions, appropriate safeguards (e.g., Standard Contractual Clauses) and other lawful transfer mechanisms. You may contact [email protected] for details on transfer safeguards.

  2. Cookies, tracking technologies and analytics We use cookies and similar technologies to operate and improve our services:

  • Strictly necessary cookies: enable core functionality (login, account security, game sessions). These cookies cannot be disabled without affecting service.
  • Preferences cookies: remember language, currency, and display preferences.
  • Analytics cookies: collect aggregate usage data (page views, session duration) to improve performance and product development.
  • Marketing cookies: enable targeted advertising and track the effectiveness of campaigns.

You can manage and block cookies through your browser settings or device settings. Our cookie banner (present when you first visit) allows you to accept or change cookie preferences. Blocking certain cookies may limit functionality. For account settings and some privacy choices, you can also manage preferences via your account area at /login/.

  1. Account verification, KYC and document handling To comply with AML, licensing and age requirements we require identity verification before processing withdrawals or when risk indicators occur. Typical documents requested:
  • Government-issued ID (passport, ID card, driver’s licence)
  • Proof of address (utility bill, bank statement no older than 3 months)
  • Proof of payment (photocopy of card with middle digits masked, e‑wallet screenshot)

Verification documents are processed securely, used only for lawful compliance, and stored in encrypted form. We do not publish or share your documents except to comply with regulatory inquiries or when necessary with processors involved in the verification process.

  1. Security of your personal data We implement appropriate technical and organisational measures to protect personal data, including:
  • 256‑bit SSL/TLS encryption for data in transit.
  • Encryption at rest for sensitive data where appropriate.
  • Role-based access controls and least-privilege principles for staff access.
  • Two-factor authentication (2FA) options to protect accounts.
  • Regular security assessments, vulnerability scanning and third‑party audits.
  • Employee training and internal policies to limit internal misuse.

While we apply industry-standard measures, no system can be guaranteed 100% secure. If you suspect misuse of your account, contact [email protected] immediately.

  1. Data retention We retain personal data only for as long as necessary to fulfil the purposes set out in this Policy, or as required by law. Typical retention periods:
  • Active account data: retained while your account is active.
  • Closed accounts / post-closure records: retained for up to 7 years for compliance with AML, tax, licensing requirements and dispute resolution.
  • Transaction records: retained as required by applicable law and licensing rules (commonly 5–7 years). Following expiry of retention periods, we securely delete or anonymise personal data.
  1. Your rights Depending on your jurisdiction, you may have rights regarding your personal data, including:
  • Right of access: request a copy of personal data we hold about you.
  • Right of rectification: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of your personal data (subject to legal retention obligations and our right to retain limited data for compliance).
  • Right to restriction of processing: request limitation of processing in certain circumstances.
  • Right to data portability: receive a copy of your data in a structured, machine-readable format.
  • Right to object: object to processing based on legitimate interests or direct marketing.
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
  • Right to lodge a complaint with a supervisory authority: you may lodge a complaint with your local data protection authority if you consider our processing violates applicable law.

To exercise rights, contact us at [email protected]. We will respond within applicable legal timeframes (generally within one month). You may be asked to provide information to verify your identity before we act on requests.

  1. Automated decision-making and profiling We use automated systems for fraud detection, risk scoring, KYC screening and to personalise offers and promotions. These automated processes are designed to prevent unlawful activity, reduce fraud and enhance user experience. Where profiling results in significant effects on you (e.g., account restrictions), you may request human review or explanation by contacting [email protected].

  2. Marketing communications and opt-out We may send promotional messages by email, SMS or other channels where you have consented to receive them or where allowed by law. You may opt out at any time:

  • Unsubscribe links in marketing emails.
  • Reply STOP to SMS messages where applicable.
  • Manage preferences in your account area at /login/ or by contacting [email protected].

Promotional offers and bonus terms are described at our /bonuses/ page. If you object to profiling for direct marketing, we will stop using your personal data for that purpose.

  1. Minors and age restrictions You must be 18 years or older to register and use Big Clash services. We do not knowingly collect personal data from persons under 18. If we become aware that we have collected data from a minor, we will delete the data and close the account, unless retention is required by law. Age verification is mandatory and may involve ID checks.

  2. Third‑party websites and services Our services may contain links to third-party websites (including game provider pages and affiliate sites). This Policy does not apply to such third parties. We encourage you to read the privacy policies of any third-party sites you visit.

  3. Responsible gaming and self-exclusion We support responsible gaming. Tools, information and self-help options are available; you may request account exclusion, limits or closure by contacting [email protected]. For self-exclusion requests we will act promptly and will process exclusions in accordance with our operational procedures. For help and external resources, we can provide contacts for relevant organisations. (See our Responsible Gaming resources and contact support for assistance.)

  4. Complaints and supervisory authority If you have a privacy-related complaint, please contact [email protected] first so we may investigate and resolve it. If you remain dissatisfied, you have the right to lodge a complaint with your local data protection authority. For residents of the EEA, this means the national supervisory authority for data protection.

  5. Changes to this Privacy Policy We may update this Policy to reflect changes in our practices, legal requirements or services. Material changes will be posted on our website with an updated effective date. Continued use of our services after notice constitutes acceptance of the updated Policy.

  6. Other important information

  • No fee for exercising rights: we do not charge a fee to process standard requests, although we may charge a reasonable fee or refuse repetitive or manifestly unfounded requests as allowed by law.
  • Accuracy of information: please keep your account information accurate and up-to-date via your account at /login/ or by contacting support.
  • How we store your data: personal data is stored on secure servers operated by our hosting providers and processors, under contractual obligations to protect your information.

Internal resources

  • To access the platform and manage your account: /login/
  • Learn about our games and live offerings: /live-casino/ and /crypto-casino/
  • Review available bonuses and promotions: /bonuses/
  • Learn about supported payment methods: /payment-methods/
  • Use our sportsbook services: /sportsbook/
  • Install or access our app-like experience: /app/

Contact us If you have any questions, concerns or requests regarding this Privacy Policy or our data processing practices, please contact: [email protected]

NovaForge Ltd. Hamchako, Mustamudu Autonomous Island of Anjouan Union of the Comoros

This Privacy Policy constitutes our commitments regarding your personal data. By using Big Clash services you acknowledge you have read and understood how we process your personal data.