Pistolo Privacy Policy

How Stellar Ltd collects, stores, and shares player data across the Pistolo platform.

Pistolo Privacy Policy

Who Controls Your Data

Stellar Ltd, the operator of Pistolo under Anjouan Gaming Board licence ALSI-202411077-FI2, is the data controller responsible for the personal information collected through pistoloplay.com. The registered office is at Hamchako, Mutsamudu, Anjouan, Union of the Comoros. All data processing decisions relating to registration, payments, and account activity on Pistolo sit with Stellar Ltd rather than any third party.

Lodging a Complaint

If a player believes their data has been mishandled, the first step is to raise the matter directly with our support team, since most concerns can be resolved without escalation. Where a player is not satisfied with the outcome, they retain the right to lodge a complaint with the data protection supervisory authority relevant to their jurisdiction. Australian players may also raise a concern with the Office of the Australian Information Commissioner, independently of any response received from Stellar Ltd.

What We Collect and How Cookies Are Used

Registration data includes the player’s name, date of birth, email address, residential address, and chosen account currency. Payment data covers the method used, whether Visa, Mastercard, Neosurf, Jeton, MiFinity, Skrill, Neteller, bank transfer, or a supported cryptocurrency, along with transaction amounts and timestamps. KYC documents submitted for verification, such as an Australian driver’s licence, a passport, or a Medicare card together with a utility bill or bank statement, are stored securely once uploaded. Technical data, including IP address, device type, and browser logs, is recorded automatically for every session to support fraud prevention and account security.

Cookies on Pistolo fall into three categories: essential cookies that keep a player logged in and the cashier functioning, analytics cookies that measure how the site is used to guide improvements, and preference cookies that remember settings such as odds format or display language. Essential cookies cannot be disabled without breaking core site functionality, but analytics and preference cookies can be declined from the cookie banner shown on first visit or adjusted later through the browser’s own cookie settings.

Third Parties Data Is Shared With

Payment processors handling Visa, Mastercard, Neosurf, Jeton, MiFinity, Skrill, Neteller, bank transfer, and cryptocurrency transactions receive the data necessary to complete each deposit or withdrawal. KYC verification providers process submitted identity and address documents to confirm a player’s eligibility. Game software providers, including Play’n GO, Pragmatic Play, Evolution, Hacksaw Gaming, Nolimit City, Betsoft, and Red Tiger Gaming, receive gameplay data such as bets placed and outcomes generated, strictly limited to what is needed to run the games themselves. None of this data is sold to marketing or advertising third parties.

International Data Transfers

Because Stellar Ltd’s servers and several of its payment and verification partners operate outside Australia, personal data submitted by Australian players is transferred internationally as a routine part of running the platform. Where such a transfer occurs, contractual safeguards with each processor require a standard of data protection consistent with this policy, regardless of where the servers handling the data are physically located.

How Long We Keep Your Data

Account and transaction data is retained for as long as the account remains active, plus a further period afterward to satisfy anti-money laundering and audit obligations under the Anjouan licensing framework. Following account closure, KYC documents and financial records are retained for this compliance period before secure deletion; marketing preferences and non-essential cookies are cleared much sooner, typically once a browsing session ends or a player withdraws consent.

Your Rights Over Your Data

Players can request access to the personal data held about them, ask for corrections to inaccurate details, or request deletion of data no longer required for legal or compliance purposes. A player may also request that processing be restricted while a dispute is resolved, object to processing carried out for purposes such as promotional communication, and request a portable copy of their data in a common format such as CSV or JSON. Requests are handled by the support team and typically actioned within a reasonable timeframe once identity has been confirmed.

Why We Process Your Data

Registration and payment data is processed to open and operate a player’s account, to process deposits and withdrawals, and to meet KYC and anti-money laundering obligations tied to the Anjouan licence. Technical and session data is processed on the basis of a legitimate interest in preventing fraud and keeping the platform secure. Marketing communications, where a player has opted in, are processed on the basis of consent, which can be withdrawn at any time from the account settings without affecting access to the casino or sportsbook.

Contact for Data Requests

Requests relating to personal data, including access, correction, deletion, or portability requests, can be sent to [email protected]. Include the email address registered to the account so the request can be matched and actioned without delay.