How AeroBet handles your personal data

AeroBet collects three broad categories of data: what you type in yourself, what your device reveals automatically, and what a payment or verification step requires. The casino launched in 2025 under Anjouan Gaming Licence No. ALSI-152406050-FI4, and that licence — an offshore one, not a Canadian provincial permit — sets the anti-money-laundering rules behind most of the collection.

Registration data you provide yourself

Opening an account means handing over identifying details. According to the operator, that set includes your full name, date of birth (the age gate is non-negotiable), email address, mobile number, residential address, chosen currency — CAD for Canadian players — and account credentials. Communication preferences and language choice sit here too, since the site runs in English and French. Account creation steps are covered on their own page: AeroBet review.

Data your device hands over automatically

The moment a page loads, technical data is logged: IP address, approximate geolocation derived from it, browser type, operating system, screen resolution, referral source and session timestamps. Geolocation matters more than most players realise — it is how the casino enforces its restricted-country list, which blocks registrations from markets including the United States, the United Kingdom, Greece, Cyprus, Ukraine, Israel, Iran, Iraq, Qatar, Moldova and North Korea. Gameplay telemetry (games opened, bet sizes, session length) is recorded as part of running a fair, auditable casino with a published total payout of 96%.

Payment and verification information

Funding data depends on the rail you pick. AeroBet supports Interac, Visa and Mastercard, Apple Pay, MiFinity, MuchBetter, Skrill, Neteller, Neosurf, Paysafecard, iDebit, Instadebit, Revolut, Open Banking and bank transfer, with Bitcoin, Ethereum, Tether (USDT), USD Coin, Litecoin, Dogecoin and BNB Chain available as a secondary crypto option. Card and Interac transactions route through processors that receive the transaction details directly; the casino keeps records of amounts, timestamps and the method used, with a C$30 minimum on both deposits and withdrawals.

KYC is mandatory before your first payout. The documents requested are:

• Valid government-issued ID — passport, driver’s licence or provincial ID card
• Proof of address — a recent utility bill or bank statement
• Confirmation of the payment method used, requested in some cases
• A unique six-digit verification code for transactions over $2,000
• Proof of source of wealth, such as bank statements or employment verification, for deposits or withdrawals exceeding $5,000

Verification is typically approved in about 24 hours, with terms allowing up to 72. Deposit and payout mechanics themselves live elsewhere; here the point is simply that these documents exist as a data category the casino must hold.

The operator states that player data travels over encrypted connections and that payment card details are handled by PCI-compliant processors rather than stored in plain form on the casino’s own systems. Encryption, restricted storage and role-based access work as three layers, and each one covers a different failure mode.

Encryption in transit and at rest

Traffic between your browser and AeroBet runs over SSL/TLS, which is what stops a shared café Wi-Fi from exposing your login or your uploaded ID. Sensitive stored fields — credentials, verification documents — are held in encrypted form. A padlock in your address bar is the visible half of this; the storage half you have to take from the operator’s documentation.

Where data lives and how long

Records tied to gambling activity cannot simply be deleted on request, because the Anjouan licence and anti-money-laundering rules force the operator to retain transaction and verification data for a regulatory period after an account closes. Data is held on secured servers with backups; the practical consequence for you is that “delete my account” and “delete every byte about me” are two different requests, and only the first is granted immediately.

Who can actually open your file

Access is limited by role. Live chat agents on the 24/7 support desk see enough to answer a question; the payments and compliance teams see verification documents; nobody outside those functions should be able to pull your ID scan. Staff accounts are logged, and document uploads happen inside the account area rather than over email — sending a passport photo to a chat agent as an attachment is exactly the habit this structure is meant to break.

You can ask what AeroBet holds about you, correct it, request deletion within the limits of gambling record-keeping law, and switch off marketing at any time. Requests go through the 24/7 live chat or the support email address, and identity confirmation is required first — otherwise anyone could request your file.

Access and portability

A subject access request returns the personal data linked to your account: profile fields, transaction history, verification status, communication preferences. Expect the compliance team to verify you before releasing anything, using the same document standard as KYC.

Correction and deletion

Wrong surname spelling, an outdated address, a changed phone number — these are corrected on request, and keeping them accurate is in your interest, because a payout is checked against the name on your ID. Deletion closes the account and removes marketing data, while transaction and verification records stay for the mandated retention period.

Opting out and self-exclusion

Marketing opt-out is a preference toggle plus the unsubscribe link in every promotional email. If the reason for opting out is control over your play rather than inbox clutter, the tools you want are cooling-off and self-exclusion: Responsible Gambling. A self-exclusion request also suppresses promotional contact, which is the point of it.