APP PRIVACY POLICY.

1. Who controls your data

Funfair Casino is the controller of personal data processed through the Funfair Casino mobile app. Questions about this policy or your app account can be sent to privacy@funfaircasino.ie or support@funfaircasino.ie.

2. Data we process

• Account data: account identifier, email address, sign-in provider, verified phone number, selected venue, and acceptance of app terms.
• Membership data: first name, player ID, membership tier, visit points, tier points, recent session summaries, and the linked player-record identifier.
• Wallet and voucher data: wallet identifier, voucher campaign, value, venue, status, expiry, assignment, redemption state, and promotion eligibility records.
• Security data: trusted-device records, device identifier, app-integrity or App Check result where enabled, notification token and permission state, rate-limit events, audit logs, and account-deletion records.
• Usage and diagnostics: news and event views, in-app message and analytics events, crash or operational diagnostics, and service interaction data.

3. How we use it

• To create and secure your account and wallet.
• To match a verified phone number to an eligible player membership record.
• To display membership, points, tier, voucher, jackpot, news, event, venue, and giveaway information.
• To issue and protect promotional freeplay vouchers and prevent duplicate-account or first-install voucher abuse.
• To send account, security, voucher, reward, venue, and service messages.
• To prevent fraud, investigate misuse, maintain audit records, improve the service, and comply with legal obligations.

4. Sign-in, phone verification, and devices

The app supports email, Google, Apple, and phone verification flows through trusted authentication providers. Phone verification is used to help match an account to a player record and protect sensitive account and device-trust actions. A trusted device is recorded only after the required recent authentication or phone reauthentication checks succeed.

5. Notifications and analytics

With the relevant device permission, the app may use push notifications and in-app messages for security, rewards, vouchers, venue updates, reminders, and service information. Firebase Analytics and similar operational tools may process app events and diagnostics to maintain and improve the service. You can manage notification permissions in your device settings. Where consent is required for optional analytics or marketing, we will request it or provide the applicable controls.

6. Sharing and service providers

We use trusted providers for authentication, cloud database hosting, functions, notifications, app integrity, analytics, in-app messaging, and infrastructure. Authorised staff and backend systems may access membership, wallet, voucher, and giveaway information when needed to operate the venues and validate or redeem rewards. We do not sell personal data. We may disclose data where required for law, fraud prevention, security investigations, disputes, or professional advice.

7. Retention and deletion

We generally keep active app-account data while the account is in use. When an account is deleted, the app-facing profile and account data are removed or anonymised where possible. Limited security, fraud-prevention, voucher, audit, legal, responsible-gaming, accounting, or dispute records may be retained for as long as necessary. In particular, a limited first-install voucher ledger may be retained to prevent duplicate promotional abuse and preserve redemption history.

To request deletion, visit Delete Account. Deletion is permanent and may remove points, vouchers, rankings, promotions, and other account-linked services.

8. Your rights

Subject to GDPR and Irish data-protection law, you may have rights to access, correct, delete, restrict, or port your data, object to certain processing, and withdraw consent where processing is based on consent. You may also complain to the Data Protection Commission in Ireland. Some records cannot be deleted immediately where retention is required for security, fraud prevention, legal claims, accounting, or compliance.

9. Security and international processing

We use authentication controls, server-side access controls, abuse prevention, monitoring, and encrypted cloud infrastructure where appropriate. No system is completely secure, so protect your phone, sign-in credentials, SMS codes, and wallet QR. Our cloud and service providers may process data outside Ireland or the EEA using appropriate safeguards where required.

This policy supplements the Funfair Privacy Policy for the mobile app.