Last updated: June 2026

1. Data controller

The data controller responsible for your personal information is Secret Casino Resort, Leoforos Kallitheas 51, 85100 Rhodes, Greece. For privacy-related enquiries, contact [email protected].

2. Scope

This policy applies to personal data collected through newcasinoresorts.com, our contact forms, reservation channels, on-property services, and casino player registration processes where applicable. It does not cover third-party websites linked from our pages.

3. Data we collect

Depending on your interaction with us, we may process:

  • Identity and contact details (name, email, telephone, postal address)
  • Reservation and stay information (dates, room preferences, special requests)
  • Communication records (messages sent via our contact form or email)
  • Casino registration data required by law (government ID details, player card information)
  • Technical data (IP address, browser type, pages visited) via server logs and cookies where used

4. Legal bases for processing

We process personal data on the following grounds under Article 6 GDPR:

  • Contract: to fulfil reservations and provide hotel and gaming services
  • Legal obligation: to comply with Hellenic Gaming Commission requirements, anti-money laundering rules, and tax law
  • Legitimate interests: to respond to enquiries, improve our services, and ensure property security
  • Consent: where required for optional marketing communications

5. How we use your data

Your data is used to:

  • Process bookings and manage your stay
  • Respond to contact form submissions and customer service requests
  • Verify identity and age for casino access as required by Greek law
  • Maintain records mandated by gaming and financial regulations
  • Send service-related communications about your reservation
  • Improve website performance and security

6. Data retention

We retain personal data only for as long as necessary for the purposes described above. Reservation records are kept for the period required by Greek commercial and tax law. Gaming-related records may be retained for up to ten years in accordance with Hellenic Gaming Commission regulations. Contact form data is deleted within twenty-four months unless a longer period is needed to resolve an active enquiry.

7. Sharing and transfers

We do not sell your personal data. We may share information with:

  • Payment processors and banking partners for transaction handling
  • IT and hosting providers bound by data processing agreements
  • Regulatory authorities including the Hellenic Gaming Commission when legally required
  • Professional advisers (legal, audit) under confidentiality obligations

Where data is transferred outside the European Economic Area, we ensure appropriate safeguards such as Standard Contractual Clauses are in place.

8. Your rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure where legally permissible
  • Restrict or object to certain processing
  • Data portability for information provided under contract or consent
  • Withdraw consent for optional processing at any time
  • Lodge a complaint with the Hellenic Data Protection Authority (HDPA)

To exercise these rights, email [email protected]. We will respond within one month, subject to applicable extensions for complex requests.

9. Security

We implement technical and organisational measures appropriate to the sensitivity of the data we process, including encrypted connections (HTTPS), access controls, and staff training. No method of transmission over the internet is completely secure; we encourage you to use strong passwords and protect your player card credentials.

10. Cookies

Our website uses essential cookies required for basic functionality and security. We do not use third-party advertising trackers. You may configure your browser to refuse cookies, though some features may not function correctly.

11. Children

Our services are not directed at individuals under 21 years of age. We do not knowingly collect personal data from minors. Casino access is strictly prohibited for underage persons under Greek law.

12. Changes to this policy

We may update this privacy policy to reflect legal or operational changes. Material updates will be posted on this page with a revised date. Continued use of our services after changes constitutes acknowledgement of the updated policy.

13. Contact

Secret Casino Resort
Leoforos Kallitheas 51, 85100 Rhodes, Greece
Email: [email protected]
General enquiries: [email protected]