Privacy Policy

1. Background

Star Jar (IOM) Limited (“the Company”, referred to as “We”, “Our” or “Us”) is committed to protecting the privacy and security of your personal data. We have prepared this Privacy Policy to explain the data we collect, what we do with it, how we keep it secure, and the rights you have over your personal data.

Star Jar operates the website yoyocasino.com under a licence issued by the Isle of Man Gambling Supervision Commission (“GSC”) to provide remote casino and gambling services to end users. For the purposes of data protection law, the Company is the Data Controller in respect of customer personal data, as we determine the purposes and means of processing.

Throughout this Policy, “data protection law” means the Isle of Man Data Protection Act 2018 together with the Data Protection (Application of GDPR) Order 2018 and the GDPR and LED Implementing Regulations 2018 (together, the “Applied GDPR”), and any replacement or successor legislation. Because we make our services available to individuals located in the European Economic Area (EEA) and other territories, the EU General Data Protection Regulation (2016/679) (“EU GDPR”) may also apply to our processing of your personal data under its Article 3(2), alongside applicable e-privacy rules.

1.1. Company information

Star Jar (IOM) Limited is a company incorporated in the Isle of Man with company registration number 018864V, whose registered office is at Second Floor, 14 Athol Street, Douglas, Isle of Man, IM1 1JA. The Company holds a Full licence under the Online Gambling Regulation Act 2001 (OGRA) and is licensed and regulated by the Isle of Man Gambling Supervision Commission (GSC).

1.2. Our contact details

You can contact our head office using the following details:

1.3. Data Protection Officer (DPO)

We have appointed a Data Protection Officer as your point of contact for any questions about this Policy or about how we handle your personal data.

You can contact our Data Protection Officer by email at dpo@yoyocasinoteam.com

2. Data we collect from or about you

1. Registration details: full name, email address, date of birth, physical address, username, password, telephone number and similar details provided when you open and use your account.
2. Payment information: payment on this website is available only in the form of cryptocurrency. Payment information is collected and processed by third-party payment service providers; we do not collect or store your payment credentials ourselves.
3. Government-issued ID: copies of identity documents where required to verify your identity; this may be required to use or continue using our services.
4. Public information: publicly available sources consulted for customer due diligence, e.g. to confirm identity or source of funds.
5. Voluntary information: information you provide when you communicate with us, and any deposit, spend or loss limits you set.
6. Information from third parties: confirmation of age, address, financial information and fraud-prevention data relevant to providing our services.
7. Device information: connection and device identifiers and geolocation data, and detection of software associated with fraudulent activity (e.g. bots, malware) or use of a VPN/proxy.
8. Gaming information: transactions, deposits, balances, bets, withdrawals, bonuses and winnings.
9. Technical information: language preference, browser and operating system, access times, referring domain and similar.
10. Analytics information: information about your use of our services (pages viewed, time on page, clicks, actions, timestamps, alerts) collected for troubleshooting, research, profiling, analytics and tailored marketing.

You are under no obligation to provide personal information to us. However, certain personal information is essential for the provision and quality of our services (for example, to enable you to place bets, or to conduct verification mandated by law), and you may be unable to obtain certain services if you withhold it. For example, we ask for your precise geolocation to ensure we are authorised to provide gambling services in your location.

3. How we use your data

We will only process your data where we have a lawful basis for doing so. The relevant lawful bases are: (a) Consent; (b) Contract; (c) Legal obligation; and (d) Legitimate interests (where these are not overridden by your rights, freedoms and interests). The table below sets out the purposes for which we process your data and the lawful basis or bases we rely on.

If you do not wish us to use your personal information to provide the personalised betting service, you can withdraw your consent at any time by contacting us or via the profile settings on our website.

4. Who we share your information with

• The Isle of Man GSC and other gaming regulators with whom we are licensed.
• Third-party payment service providers, who access or process your cryptocurrency payment information to provide payment services; we do not collect or store this payment information.
• Third-party providers who manage aspects of your account, including anti-fraud, anti-money-laundering and credit-risk checks.
• Third-party providers for advertising and marketing, where you have given consent (which can be withdrawn at any time), and CRM tools used to manage those activities.
• Acquirers, investors or successors in the context of a corporate transaction (sale, merger, financing, restructuring, insolvency), subject to the safeguards required by data protection law.
• Public authorities, courts or law-enforcement bodies where we are under a legal duty to disclose, or where necessary to investigate or prevent fraud, crime or threats to safety, or breaches of our Terms and Conditions.

Some of these third parties (e.g. verification agencies, fraud-prevention agencies and payment service providers) act as independent data controllers in respect of the personal information they hold about you. Where we use processors, we always do so under a written contract containing the data-processing terms required by data protection law. Upon request, we can provide a list of the suppliers and third parties we use to process personal data — please contact us using the details above.

5. How long we keep your information

We retain your personal information for as long as is reasonably necessary for our legal and business purposes. As required by the GSC, we keep your personal data and the details of your financial transactions for a minimum of five years after the closure of your account. In certain circumstances we may be required to retain information for longer (for example, in connection with responsible-gambling and self-exclusion obligations). Once any mandatory retention period has elapsed, we will delete or anonymise personal information that we no longer need to hold.

6. Children’s privacy

The Company does not knowingly collect information from anyone under the age of 18. If we become aware of anyone under 18 using our services, we will delete their personal data, permanently close the account and block access to our services.

7. Your data protection rights

Subject to the conditions and exemptions in data protection law, you have the following rights. Not all rights are absolute, and we may take reasonable steps to confirm your identity before responding.

7.1. Right of access

You can ask us to confirm whether we process your personal data and to provide a copy of it, together with information about the processing. Access is free of charge unless the request is repetitive, manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline. We will respond within one month of receiving your request. Where a request is complex or we receive a number of requests from you, we may extend this by up to two further months; if so, we will tell you within the first month and explain why.

7.2. Right to rectification

You can ask us to correct inaccurate or incomplete personal data. You can update much of your information yourself in the “My Account” section of the website.

7.3. Right to erasure

You can ask us to erase your personal data where there is no compelling reason for us to continue processing it. This right is not absolute and only applies in certain circumstances; where we cannot comply, we will explain why.

7.4. Right to restrict processing

In certain circumstances you can ask us to suspend the processing of your personal data — for example, while we consider a challenge to its accuracy or lawfulness. We may still store the data and process it with your consent or for legal claims.

7.5. Right to data portability

Where processing is based on consent or contract and carried out by automated means, you can ask to receive the personal data you provided in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.

7.6. Right to object

You can object to processing based on our legitimate interests. We may continue where there are compelling legitimate grounds, or where we need the data in connection with legal claims. You can object to direct marketing at any time, and we will stop.

7.7. Rights relating to automated decision-making and profiling

Where a decision producing legal or similarly significant effects is based solely on automated processing (including profiling) and is necessary for our contract with you or based on your consent, you have the right to obtain human intervention, to express your point of view and to contest the decision.

7.8. Right to withdraw consent

Where we rely on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.

7.9. Right to complain

You can raise concerns or complain to us using the contact details above, including via our DPO. You also have the right to complain to the Isle of Man Information Commissioner ( https://www.inforights.im/ ). If you are located in the EEA, you may also complain to the supervisory authority in your country of residence, place of work or the place of the alleged infringement.

8. Where we store, process and/or transfer your information

All information you provide is stored on secure servers maintained by us or by suitable third parties. Payment transactions are encrypted using Transport Layer Security (TLS), and our payment processors are PCI DSS accredited.

The personal information we hold about you is primarily stored and processed within the Isle of Man. Where your information is transferred to our third-party suppliers, it may be processed outside the Isle of Man. Where we transfer personal information to a country that does not offer an equivalent level of protection, we take steps to ensure it is treated securely — for example, using approved contractual clauses, intra-group agreements and other appropriate safeguards, subject to any approval required from the Isle of Man Information Commissioner.

9. How we secure your information

We employ technical and organisational security measures to protect your personal data, including secure system configuration, access control, data encryption and monitoring, designed to protect against unauthorised access, disclosure, modification or loss. We maintain a principle of least privilege, so access is restricted to those who have a legitimate need to know within the remit of their role. You also have an important role: your account credentials should be unique and complex, and never shared or re-used across other services.

If we become aware of any loss, misuse or unauthorised alteration of personal data, we will investigate together with our IT team, our DPO and any other necessary parties, and we will report the incident to the Isle of Man Information Commissioner and to affected individuals where required by data protection law (generally within 72 hours of becoming aware of a notifiable breach).

10. Cookies, tags and other identifiers

A cookie is a small file stored in your browser or device that records information about you and can be used to recognise your device and personalise your experience. Cookies may be “session” cookies (which expire when you close the browser) or “persistent” cookies (which remain until they expire or you delete them), and “first-party” (set by us) or “third-party” (set by other providers).

We may use the following categories of cookies and similar technologies:

1. Strictly necessary / essential cookies — required to log in and use the service, and to keep it functioning securely.
2. Functional cookies — remember your choices (such as language) and personalise the service.
3. Analytic cookies — analyse how the service is used so we can improve it.
4. Advertising cookies — deliver tailored advertising and measure campaign effectiveness.
5. Social-media cookies — track use of social features such as “shares” or “likes”; your use of social media is governed by that platform’s own notice.

Strictly necessary cookies are always set because parts of the site will not work without them. Non-essential cookies (functional, analytics, marketing and social-media cookies) are set only in accordance with your choices. You can manage or withdraw your cookie preferences at any time via our cookie settings and through your browser settings; note that disabling certain cookies may affect the functionality of the site.

11. Third-party websites

Our website may contain links to and from the websites of our partner networks, advertisers and affiliates. Those websites have their own privacy notices, and we are not responsible for, and have no control over, information submitted to or collected by them.

12. Changes to this Privacy Policy

We may update or modify this Privacy Policy from time to time. Where there are significant changes, we will take appropriate steps to notify players. The most recent version will always be available on our website.

Last reviewed: 30/09/2026.