Casino Tycoon
Effective 24 September 2026 · Last updated 26 September 2026
Casino Tycoon is a social casino and resort-building game published by Infisecurity SL (“we”). This policy explains what we collect when you play, why we collect it, and what you can ask us to do with it. It covers the iOS app and the website at tycoon.infisecurity.com.
The short version. We collect the account you create and the game you play. We do not run advertising, we do not use third-party trackers or analytics SDKs, and we do not sell or share your data with data brokers. We never see your payment card — Apple handles purchases.
| Data | Why |
|---|---|
| Account — username, display name, chosen avatar, and an email address if you register with one. Guest accounts have no email. | To give you an account, keep your progress, and let other players see who owns a casino. |
| Password — stored only as a salted hash, never as text. | To sign you in. |
| Game data — your casino layout, balances and transaction history, game rounds, staff, missions, achievements, statistics, friends, favourites, casino visits and notifications. | This is the game. It has to be stored on our servers so play is fair and your resort survives a reinstall. |
| Session data — IP address, browser or device user agent, and timestamps, recorded against each sign-in session. Our staff console can show the approximate country that IP belongs to; the country itself is worked out when the page is viewed and is never stored. | To keep you signed in, to let you see and revoke sessions, and to detect abuse. |
| Purchases — the App Store transaction identifier and which pack it was for. | To credit what you bought exactly once, and to honour refunds. Apple processes the payment; we never receive your card details, name or billing address. |
Signing in sets one strictly necessary cookie that holds your session token, so you stay signed in. In the iOS app the same token is kept in the system's secure cookie store. The game also keeps small preferences (such as sound and motion settings) in your device's local storage. We use no advertising or tracking cookies.
Only the parties that make the game work: our hosting provider, which stores the database and serves the app, and Apple, which processes purchases and tells us that a purchase happened. We may also disclose data if the law requires it, or to protect players and our service from abuse or fraud.
Your account and its game data are kept while the account exists. Sign-in sessions expire automatically and are then deleted. If you ask us to delete your account, we remove it and its game data from our live systems within 30 days, except where we must keep a record — for example a purchase receipt kept for tax or accounting purposes.
Depending on where you live, you may have the right to access the data we hold about you, to correct it, to have it deleted, to receive a copy of it, to object to or restrict certain processing, and to complain to your data protection authority. You can exercise any of these by emailing us; we will not treat you differently for asking. You can also delete your account in the app under Settings, and you can play as a guest without giving an email address at all.
Casino Tycoon is rated 17+ because it simulates gambling, and it is not directed to children. We do not knowingly collect personal data from anyone under 17. If you believe a child has created an account, email us and we will delete it.
Traffic is encrypted with HTTPS, passwords are stored as salted hashes, and session tokens are stored hashed and rotated when used. No system is perfect, but we treat a breach of your data as a serious incident and will notify affected players and regulators where the law requires it.
Our servers are in the European Union. If you play from elsewhere, your data is transferred there and handled under this policy.
Chips, Tycoon Cash and gems are virtual items with no real-world value. They cannot be exchanged for money and cannot be cashed out. Purchases buy virtual items only.
If we change this policy we will update the date at the top of this page, and for material changes we will tell you in the app before the change takes effect.
Questions, requests or complaints: info@infisecurity.com. We answer privacy requests within 30 days.