The padlock in your browser bar tells you one thing: the connection between your device and Casushi is encrypted. It says nothing about what happens to your data once it lands on the operator’s servers. That gap between „encrypted in transit” and „securely stored” is where most beginner assumptions go wrong, so this primer walks through what a privacy policy actually covers, what Casushi’s own terms say, and which questions to ask before you deposit.
What the padlock does and does not prove about Casushi
Transport encryption, usually TLS, scrambles data while it travels between your browser or the Casushi app and the casino’s servers. That stops someone on the same public Wi-Fi from reading your login details or card number mid-flight. It is a baseline, not a badge of overall security. A site can run perfectly good HTTPS and still keep your verification documents in a plain, unencrypted database for years.
Casushi is licensed by the UKGC, and that licence carries real obligations. The operator behind the licence is Solaya Group Limited, and UK Gambling Commission rules require licensees to protect customer data, hold it only as long as needed, and report certain breaches. That is a meaningful floor. It is not a guarantee that every field in your account is encrypted at rest, and it is not something the padlock icon can confirm for you.
The practical takeaway for a beginner is to treat the padlock as a starting point and the privacy policy as the document that answers the harder questions. Look for three things: how long data is kept, who it is shared with, and what rights you have to get it deleted or corrected. If any of those sections are vague, that tells you something about the operator’s approach.
Reading the Casushi privacy policy for retention and third-party sharing
Retention periods are the most commonly skipped part of any casino privacy policy, and they matter more than most beginners realise. Casushi, like any UK-licensed operator, has to retain records for anti-money-laundering checks and gambling regulation, often for several years after an account closes. That is a legal requirement, not a choice. What you want to check is whether the policy states those periods clearly or hides behind phrases like „as long as necessary”.
Third-party sharing is the second area to scrutinise. A casino bonus or the 40 free spins welcome offer does not exist in isolation: payments run through processors, identity checks run through verification providers, and marketing may run through affiliates. Casushi’s policy should name the categories of recipients and explain why data goes to each. Watch for broad clauses that permit sharing with „partners” without defining what a partner is.
Use this checklist when you open the policy for the first time:
- Retention: are specific timeframes given for account data, transaction records and verification documents, or is the wording open-ended?
- Third parties: are payment processors, KYC providers and marketing partners listed by category, with a stated purpose for each?
- Your rights: does the policy explain how to request access, correction or deletion, and does it name a data protection contact?
- Transfers: if data leaves the United Kingdom, does the policy say which safeguards apply?
- Marketing consent: is there a clear opt-out, and does it cover both email and the Casushi app notifications?
One myth worth killing: a promo code such as WELCOME2026 or a feature like Drops & Wins 2026 does not change how your data is handled. Promotions are marketing mechanics; the privacy terms sit underneath them and apply regardless of which offer you claim. The same goes for Daily Catch and the rest of the games lobby, which covers slots, live casino, roulette, blackjack and game shows. Your data footprint depends on what you do in the account, not on which game you open.
Verification is where data collection gets most intrusive, so it deserves a mention. To satisfy casino regulation, Casushi will ask for ID, proof of address and sometimes source-of-funds documents before a casino withdrawal. Those documents are sensitive, and a good policy explains how long they are kept and who reviews them. If the wording is thin here, ask casino support directly and keep the reply.
Payment methods deserve the same scrutiny. Card details, e-wallet identifiers and bank references all pass through third parties, and the Casushi guide covers withdrawal times and payment methods in more detail than a privacy policy will. Read both together: the payment page tells you how fast money moves, the privacy policy tells you what data trail it leaves.
Finally, keep the padlock in perspective. HTTPS protects the journey, not the destination. The real questions are what Casushi stores, for how long, and who else can see it, and only the privacy policy and a straight answer from casino support will tell you that. Check those before you deposit £10 and stake £10 on slots for the welcome offer, not after.