Ladies and Gentlemen

Unfortunately, the casino is not responding to my GDPR request.

Kind regards

Eric G*****

Sehr geehrte Damen und Herren,

das Casino reagiert leider nicht auf meine DSGVO-Anfrage.

Mit freundlichen Grü?en

Erik G*****

Hello erikglaeser1,

Thank you very much for submitting your complaint and I'm really sorry to hear about your issue with Wild Tokyo Casino. Please allow me to ask you a few more question before we would move forward.

Could you please advise why are you trying to contact the casino support? - what is your issue? Did you contact them by e-mail support or live chat? When was the last time they responded anything back to you?

Looking forward to your answer.

Regards,

Nick

Hello Nick,

Support has not yet responded to any email regarding my GDPR request. I sent the first one in January 2022. Since then I have sent several more emails. In the live chat, too, I was repeatedly told to send the request by email. The last time I heard from support was when I closed my account in January 2022.

Kind regards

Eric G******

Hallo Nick,

der Support hat bisher auf keine E-Mail bezüglich meiner DSGVO-Anfrage geantwortet. Die erste hatte ich im Januar 2022 geschickt. Seitdem habe ich noch mehrere E-Mails geschickt. Auch im Live-Chat wurde ich immer wieder darauf verwiesen, die Anfrage per E-Mail zu schicken. Das letzte mal hab ich was vom Support im Rahmen meiner Kontoschliessung im Januar 2022 geh?rt.

Mit freundlichen Grü?en

Erik G******

Hello erikglaeser1,

Can you please specify what do you mean by the GDPR request? What exactly did you ask the casino for?

Hello Nick,

I have submitted a request for information in accordance with Art. 15 DSGVO (GDPR).

Here is the text from the email:

Ladies and Gentlemen

I would like information as to whether you have stored personal data about me.

In addition, please provide me with a copy of my personal data stored with you free of charge, including the transaction list with all deposits and withdrawals as well as the game history.

Kind regards

Eric G*****

Hallo Nick, 

ich habe ein Auskunftsersuchen nach Art. 15 DSGVO (GDPR) gestellt. 

Hier der Text aus der E-Mail:

Sehr geehrte Damen und Herren,

ich bitte um Auskunft darüber, ob Sie personenbezogene Daten über meine Person gespeichert haben.

Bitte stellen Sie mir au?erdem kostenfrei eine Kopie meiner bei Ihnen gespeicherten personenbezogenen Daten zur Verfügung, einschlie?lich der Transaktionsliste mit allen Ein-und Auszahlungen sowie den Spielverlauf.

Mit freundlichen Grü?en 

Erik G*****

Hello erikglaeser1,

We will try to get the information from the casino so I will now forward your complaint to my colleague Matej ([email protected]) who will be assisting you from now on.

Wish you best luck resolving it.

Regards,

Nick

Hello erikglaeser1,

I am sorry to hear about your troubles.

I would like to invite the casino representative into the case:

Dear casino representative, could you please help erikglaeser1 with his request?

Hello Matej and Eric,

Please be informed that we are a private company, operated under the Cura?ao license. Cura?ao is a constituent country in the Kingdom of the Netherlands, and its approach to data protection is influence by the Netherlands.

We are not obligated to disclose requested information or provide it, if there were no official request from the AML-authorities.

As it specified in our Terms & Conditions:

- All data given by any user/customer will be kept secure, will not be sold or given to anyone else. Only if forced by law, or to prevent money laundering, data may be shared with the AML-authority of the affected state.

Moreover, all the information regarding your deposits/withdrawals should be visible in your payment method, that was used by you for placing deposits in our casino. Please, contact your payment provider to get this kind of information or check it by yourself in statement.

Furthermore, as you requested permanent closure at 30th January 2022 we are not obligated to store such data for more than 6 months.

You never pass the verification and never shared with us with any personal documents, that can be used to identify you as a personality.

We hope that we fully answered to your complaint.

Kind regards,

Wild Tokyo Casino.

Hello,

Your claims are simply false and not accurate.

According to Art. 3 GDPR (GDPR), every citizen of the Union has the right to request disclosure of their data.

Here it says:

This Regulation applies to the processing of personal data of data subjects located in the Union by a controller or processor not established in the Union, where the data processing is related thereto

to offer goods or services to data subjects in the Union, whether or not a payment is to be made by those data subjects;

to observe the behavior of data subjects, to the extent that their behavior takes place in the Union.

See: https://dsgvo-gesetz.de/art-3-dsgvo/

In addition, according to money laundering laws, you are obliged to keep the data for longer than 6 months.

If you refuse to disclose the data, I will inform the supervisory authorities and thus also the ALM authorities.

Kind regards

Eric G*****

Hallo,

Ihre Behauptungen sind schlichtweg falsch und nicht zutreffend.

Nach Art. 3 DSGVO (GDPR) hat jeder Unionsbürger das Recht, eine Offenlegung seiner Daten einzufordern.

Hier hei?t es:

Diese Verordnung findet Anwendung auf die Verarbeitung personenbezogener Daten von betroffenen Personen, die sich in der Union befinden, durch einen nicht in der Union niedergelassenen Verantwortlichen oder Auftragsverarbeiter, wenn die Datenverarbeitung im Zusammenhang damit steht

betroffenen Personen in der Union Waren oder Dienstleistungen anzubieten, unabh?ngig davon, ob von diesen betroffenen Personen eine Zahlung zu leisten ist;

das Verhalten betroffener Personen zu beobachten, soweit ihr Verhalten in der Union erfolgt.

Siehe: https://dsgvo-gesetz.de/art-3-dsgvo/

Ausserdem sind Sie nach den Geldw?schegesetzen verpflichtet, die Daten, auch l?nger als 6 Monate aufzuheben.

Wenn Sie sich weigern eine Offenlegung der Daten zu vollziehen, werde ich die Aufsichtsbeh?rden und mithin auch die ALM-Beh?rden informieren.

Mit freundlichen Grü?en

Erik G*****

Hello Eric.

I am not a GDPR expert, but as far as I know, the personal data stored by the companies should be held only as much as necessary, and this period is not defined.

Because you never passed the KYC and you closed your account more than six months ago, I think the casino's arguments are valid. Most likely, they anonymized the player data and kept only financial records. 

Anyway, I am afraid that this complaint is out of our scope of expertise. 

However, I believe that the GDPR was explicitly designed to be unable to identify persons after they stop using certain services, which is precisely this case.

Hello Matej,

Unfortunately, that statement is not correct either. You do not have to have previously identified yourself for information according to Art. 15 GDPR. It is enough if a person is identifiable. The casino itself points this out in its data protection declaration:

According to the GDPR, personal data is any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical , physiological, genetic, psychological, economic, cultural or social identity of that natural person.

See: https://wildtokyo.net/de/privacy-policy

My person was therefore already identifiable during registration.

It goes on to say, "We collect your personal information when you register an account..."

Regarding the retention period it says:

We keep personal information for as long as we reasonably need it for a legitimate or business purpose. We are required to retain your information to comply with applicable tax laws, resolve disputes, and enforce our agreements. When deciding how long to retain information, WildTokyo considers local laws, contractual obligations, and the wants and needs of our customers. If you withdraw your consent to the terms of the Privacy Policy, WildTokyo will stop processing your personal information and the information will be deleted.

Regarding the storage obligations: The company must store data on persons in connection with transactions for five years. This is what the tax and money laundering guidelines say, which also apply in Curacao.

If the company continues to refuse to provide the necessary data, I will lodge a complaint with the responsible authorities, in particular with the AML authority.

Hallo Matej,

leider ist auch die Aussage nicht richtig. Man muss sich für eine Auskunft nach Art. 15 GDPR nicht vorher bereits identifiziert haben. Es reicht wenn eine Person identifizierbar ist. Darauf wei?t das Casino selbst in seiner Datenschutzerkl?rung hin:

Nach der DSGVO sind personenbezogene Daten alle Informationen, die sich auf eine identifizierte oder identifizierbare natürliche Person ("betroffene Person") beziehen; als identifizierbar wird eine natürliche Person angesehen, die direkt oder indirekt identifiziert werden kann, insbesondere durch Zuordnung zu einer Kennung wie einem Namen, zu einer Kennnummer, zu Standortdaten, zu einer Online-Kennung oder zu einem oder mehreren besonderen Merkmalen, die Ausdruck der physischen, physiologischen, genetischen, psychischen, wirtschaftlichen, kulturellen oder sozialen Identit?t dieser natürlichen Person sind.

Siehe: https://wildtokyo.net/de/privacy-policy

Meine Person war somit schon bei der Registrierung identifizierbar.

Weiter hei?t es: ?Wir erheben Ihre pers?nlichen Daten, wenn Sie ein Konto registrieren, …"

Bezüglich der Aufbewahrungsdauer hei?t es:

Wir bewahren personenbezogene Daten so lange auf, wie wir sie sinnvollerweise für legitime oder gesch?ftliche Zwecke ben?tigen. Wir sind verpflichtet, Ihre Daten aufzubewahren, um geltende Steuergesetze einzuhalten, Streitigkeiten beizulegen und unsere Vereinbarungen durchzusetzen. Bei der Entscheidung über die Aufbewahrungsdauer von Informationen berücksichtigt WildTokyo lokale Gesetze, vertragliche Verpflichtungen sowie die Wünsche und Bedürfnisse unserer Kunden. Sollten Sie Ihre Zustimmung zu den Regelungen der Datenschutzrichtlinie zurückziehen, wird die Verarbeitung Ihrer pers?nlichen Daten durch WildTokyo beendet und die Daten werden gel?scht.

Zu den Aufbewahrungspflichten: Daten zu Personen in Zusammenhang mit Transaktionen muss das Unternehmen fünf Jahre aufbewahren. Dies besagen die Steuer- und Geldw?scherichtlinien, die auch in Curacao gelten.

Sollte sich das Unternehmen weiterhin weigern die erforderlichen Daten zu Verfügung zu stellen, werde ich eine Beschwerde bei den zust?ndigen Stellen, insbesondere bei der AML-Beh?rde einlegen.

Hello Eric,

We have forwarded your case to our legal department, and they confirm that we are not obligate to provide you the list of transactions or game history, since in Art. 15 GDPR there is nowhere stated that we should do so.

We suggest you to check this again.

Moreover, as I mentioned before, we do not store data more than 6 months, after your account has been blocked.

All the necessary information regarding your transactions, you may find in your payment statements.

Apologize, but that is all that I can provide you with.

Kind Regards,

Wild Tokyo Representative.

Hello Eric,

I also checked the situation and believe that the casino representative is correct.

The point of GDPR is not to store personal data for more than is necessary. 

So I understand completely that the game logs are already deleted, and all financial information you can get from your bank.

Based on that info and the nature of the complaint (out of our scope), I want to reject the case.

Eric, if you believe that the casino did something wrong, please get in touch with the relevant authority, but I am afraid that we can't help you here. 

Hello Matej,

the casino is wrong. And all other casinos adhere to this legal framework as I received an answer here without any problems. Art. 15 GDPR gives everyone a clear right to do so. Here you can see that this casino is dubious. From that I sent my first request on January 31, 2022, where the data was supposedly still available. This has remained unanswered to this day.

You can close the complaint as UNSOLVED and I will lodge a complaint with the supervisory authorities.

Many Thanks.

Hallo Matej,

das Casino hat nicht Recht. Und alle anderen Casinos halten sich an diese rechtlichen Rahmenbedingungen, da ich hier problemlos eine Antwort erhalten habe. Art. 15 DSGVO gibt jedem eindeutig ein Recht dazu. Hieran merkt man, das dieses Casino unseri?s ist. Davon ab hab ich meine erste Anfrage am 31.01.2022 gesendet, wo die Daten angeblich noch vorlagen. Diese blieb bis heute unbeantwortet.

Sie k?nnen die Beschwerde als UNGEL?ST schlie?en und ich lege Beschwerde bei den Aufsichtsbeh?rden ein.

Vielen Dank.

Dear Eric.

Our rating is based on fairness in the relationship between the casino and the player. However, your case concerns the problem with obtaining data from a casino and a law that does not affect the casino's fairness. Also, the casino's explanation makes sense. I admit I am not a GDPR expert; however, you can obtain all the data you want from your bank, so I don't see a reason here why you insist so badly on getting your data.

By not giving your logs, you are not suffering any harm, and most importantly, all this information is available to you through your bank. Therefore I must reject the case and not close it as unresolved. 

(However, if you send me an outcome from the authority and explain how the casino damaged you by not giving you the information you requested, I will definitely reconsider the case.)

Dear erikglaeser1,

We are extending the timer by 7 days. Please, be aware that in case you fail to respond in the given time frame or don’t require any further assistance, we will reject the complaint.

Hello,

since you cannot help me, you can close the case.

Kind regards

Eric glasses

Hallo,

da Sie mir nicht weiterhelfen k?nnen, k?nnen Sie den Fall schlie?en.

Mit freundlichen Grü?en

Erik Gl?ser

Thanks. 

I am rejecting the complaint for the reasons described above.