Privacy policy — Xtreme casino
The privacy policy describes how the Xtreme platform collects, uses and protects players' personal data. The platform operates under the supervision of PlayCity, with identity verification via the Diia app and access from the age of 21.
This page explains the principles of data processing at xtreme casino: what data is collected, for what purpose and how it is protected. The data is current as of September 2026.
What data is collected
To operate accounts and comply with regulatory requirements, the platform processes registration and transaction data. The scope is limited to what is needed for verification, carrying out transactions and tax accounting.
The main categories of data:
- Registration data and identity confirmation via Diia.
- Data on deposits and withdrawals.
- Technical session data for account security.
- Transaction history for tax accounting.
Age and identity confirmation is mandatory, as access to gambling is open only from the age of 21. Without verification via Diia, full access to the cashier is unavailable.
Purpose of data processing
Data is processed to provide services, comply with the law and protect the player. Each processing purpose is linked to a specific platform function, and data is not collected just in case.
The main purposes for which data is used:
- Verification of the player's age and identity.
- Carrying out cashier transactions and withdrawals.
- Withholding tax as a tax agent.
- Protecting the account from unauthorised access.
As the operator acts as a tax agent, some of the data is needed to correctly calculate 18% personal income tax and 5% military levy in line with tax.gov.ua. This is a legal requirement, not an optional extra.
In our observation, access to the account area and the cashier is tied to an identity confirmed via Diia, which reduces the risk of third-party access.
Data protection and storage
Data transmission is protected by connection encryption, and access to the account area is tied to a confirmed identity. These measures reduce the risk of the account being used by third parties.
Data retention periods are determined by the purpose of processing and legal requirements. Registration and transaction data is stored for as long as regulatory and tax rules require.
Player rights regarding data
The player has the right to know what data is being processed and to request its correction in the event of inaccuracies. These rights are exercised within the framework of the applicable laws of Ukraine.
Since the accuracy of data affects payouts and tax accounting, it is worth updating it immediately after any changes. Discrepancies between profile data and the identity document can complicate withdrawals.
Sources and documents
The policy is based on verified data on regulation and taxation. It has been confirmed as current as of September 2026.
Questions and answers
It confirms that the player is 21 or over and confirms their identity, which is a requirement of the regulated market. Without it, full access to the cashier is unavailable.
Transaction data is needed to process deposits and payouts, as well as for tax accounting. The operator withholds tax as a tax agent.
Data transmission is protected by encryption, and access to the account area is tied to an identity confirmed via Diia. This reduces the risk of third-party access.
Yes, the player has the right to request the correction of inaccuracies within the framework of the law. Data is worth updating promptly, as it affects payouts.