Boomerang Casino Review 2026

Boomerang Casino delivers the baseline technical security expected of any modern gambling platform. All connections run over HTTPS with TLS encryption, and the privacy policy describes a layered data security strategy that combines administrative, technical, and physical safeguards to protect against unauthorized disclosure, alteration, or destruction of personal data. The platform deploys cookies, pixels, web beacons, and tracking technologies, with a consent prompt for non-essential cookies on the first visit. Games across the lobby come from certified third-party providers whose RNG systems are independently audited by agencies such as eCOGRA and iTech Labs, meaning individual title fairness rests on the standards of studios like Evolution and Pragmatic Play rather than the platform itself. That distinction matters more here than at most casinos, for reasons explained below.

License & Regulatory Standing

The licensing picture at Boomerang Casino is genuinely problematic, and players deserve to know it before they deposit a cent.

Boomerang Casino launched in 2020 under Rabidi N.V., a company incorporated in Curacao that held an Antillephone N.V. gaming license. That arrangement collapsed in mid-2024 when Rabidi N.V. was declared insolvent, and its Curacao license was formally revoked, a sequence documented by FinTelegram and widely reported across the watchdog community. The site, however, kept running.

Who is running it now is a question that Boomerang declines to answer. The footer of the homepage, where a license number and operator name should appear, contains neither. When I raised this directly with a live chat agent, she confirmed the information should be in the footer, showed a screenshot demonstrating its absence, and suggested sending the matter to the support email. It’s a deflection that would be almost comical if the stakes weren’t real money.

Their privacy policy, however detailed, compounds the puzzle further. The “Who We Are” section, which in any GDPR-compliant document is where the data controller identifies itself, states only that “the operator of this website is the Data Controller of your personal data.” No company name. No registration number. No jurisdiction. The policy, however, references “brands within the same entity/operator,” “subsidiary companies within our business group,” and a “parent company,” confirming that the site has a corporate structure. It simply refuses to say what that structure is.

Third-party reviews, published in 2025 and 2026, variously name the current operator as Luxinero Group under a Costa Rica business registration, as an Anjouan/Comoro Islands licensee under license number ALSI-152406028-FI2, and as NovaForge Ltd. These are not minor discrepancies in a street address; they’re three different legal entities across two jurisdictions with fundamentally different regulatory frameworks, and none of them can be verified against anything on the live site.

The practical consequence for you isn’t abstract. A Costa Rica business registration provides no gambling-specific player protections whatsoever, because Costa Rica does not issue gambling licenses and registers gaming companies as ordinary businesses with no player protection mandate. Anjouan is a small autonomous island in the Comoros whose licensing framework has faced criticism for limited enforcement capacity and the absence of an independent arbitration body accessible to most international players. Whichever entity is currently operating the site, and whatever license it holds or claims, neither is disclosed to players, and that opacity is not an administrative oversight; it’s a structural feature.

Privacy & Data Handling

At registration, Boomerang collects your email address, date of birth, country, phone number, gender, full name, social security number, zip code, and username, along with automatically captured IP address and location data. For KYC and AML purposes, the platform may also collect government-issued ID numbers, proof of address, source-of-wealth documentation, bank ID, and full financial statements. Financial transaction data, including IBAN, CPF, and CPR numbers, may also be gathered. This is a comprehensive data footprint by any measure, and players should be aware of its full scope before registering.

The policy states compliance with the GDPR and other applicable data protection laws, and it grants players the standard suite of data rights: access, rectification, erasure, restriction, portability, objection, consent withdrawal, and the right to lodge a complaint with an EU supervisory authority. A dedicated Data Protection Officer is reachable at [email protected]. International transfers outside the EU/EEA are said to use European Commission Standard Contractual Clauses or equivalent recognized safeguards.

Data is shared with payment providers, fraud prevention agencies, game providers, analytics partners, marketing partners, and law enforcement. The policy also contains a “Change in Ownership or Control” clause confirming that player data may be transferred in the event of a merger, acquisition, or sale, with the new owner permitted to use it under the same terms. Given that the original operator went insolvent and an undisclosed new entity took over, this clause has already been exercised in practice. Players’ data transferred when Rabidi N.V. collapsed. The privacy policy did not warn them that it would happen; it simply provides for it retroactively.

There is also a notable tension in their policy worth flagging. Claiming GDPR compliance requires the data controller to identify itself explicitly under Article 13. The “Who We Are” section of their privacy notice does not do that. The document is written in the language of GDPR while omitting the single most fundamental GDPR requirement. That is not a technicality. For a player who needed to exercise a data erasure request or lodge a complaint with a supervisory authority, knowing who the data controller actually is would be the starting point.

Reputation

Sentiment on Trustpilot, the most widely used public review platform for this domain, sits at 3.7 out of 5 based on approximately 812 reviews at the time of writing. That aggregate masks a heavily polarized distribution. Positive reviewers consistently praise the game variety, the responsiveness of the live chat team, and the personal VIP manager service at higher loyalty tiers, with several players specifically naming their account managers by first name and describing them as a genuine differentiator.

Negative reviews cluster around two recurring themes: withdrawal delays stretching from days to weeks despite the platform’s stated processing times, and document verification loops in which players report repeatedly submitting KYC paperwork without resolution before their accounts are blocked. One reviewer filed a formal complaint with a gaming authority over a refusal to process a withdrawal; another described being unable to log in to an account they had not used in years while still receiving daily SMS marketing messages from the casino. The Boomerang Casino team responds actively to reviews on the platform, though the responses to critical posts tend toward the formulaic, frequently noting that the described situation does not match internal records without providing any further specificity.

Also worth flagging is that another Trustpilot reviewer alleged that the casino offers free spins in exchange for positive online reviews, which, if true, would directly compromise the integrity of the public review record. This cannot be verified or dismissed based on external sources alone, but the star rating distribution, which skews heavily toward five stars, with a sharp spike in one-star reviews and relatively little in between, is a pattern consistent with an incentivized review environment. Players researching the casino should weigh the Trustpilot aggregate with that caveat in mind.

No industry awards could be confirmed at the time of this review, and I couldn’t identify any formal sponsorship deals. A separate but related brand operating under the Boomerang name has been linked to a partnership with AC Milan to expand visibility in European markets, though this association applies to a distinct entity rather than the casino site under review here. In terms of community presence, the platform does not appear to maintain a prominent Twitch or streaming presence, and no notable eSports or influencer partnerships were identified. The brand’s reputation rests almost entirely on its product and player experience rather than on any broader industry profile. Given player sentiment on Trustpilot, I wouldn’t be comfortable with that fact.

Responsible Gaming

Boomerang Casino’s responsible gaming page opens with a statement framing the platform’s commitment as an extension of its customer service policy, describing a desire for players to enjoy the games while remaining aware of potential social and financial harms.

However, the practical tools available to players consist of one mechanism: email-based self-exclusion. Players who want a break or a permanent closure can contact [email protected], at which point the casino states it will close the account “as soon as practicable.”

No offer of deposit limits, loss limits, wagering limits, session time reminders, reality check pop-ups, or cooling-off periods with defined timeframes. There is no account control panel for setting any of these. The self-exclusion process also places the burden of disclosure firmly on the player, requiring them to notify the casino of any other accounts they hold, while the casino commits only to making “reasonable efforts” to prevent the creation of new accounts. Whether that is a limitation or a loophole depends on the casino’s willingness to enforce it in practice, and there is evidence from Trustpilot that at least one self-excluded player had their account reopened after requesting reinstatement despite their known gambling addiction history. The terms do not prohibit reinstatement at the player’s own request, which raises a legitimate question about the robustness of the exclusion process.

But the educational content on their Responsible Gambling page is genuinely thoughtful. A self-assessment section lists a series of behavioral questions, including whether gambling has affected work or family relationships, whether the player has lied about money spent, and whether they feel desperate or suicidal as a result of gambling. Those who answer yes to most questions will be directed toward the three external organizations the casino names: GamCare, Gamblers Anonymous at www.gamblersanonymous.org, and Gambling Therapy at www.gamblingtherapy.org. All three are credible organizations with global reach, and their inclusion is a positive signal. GamCare and Gambling Therapy, in particular, are widely regarded as industry-standard reference points for responsible gaming support.

Regarding underage protection, the policy is unambiguous: registration for anyone under 18 is prohibited, and the casino is responsible for verifying the age of all clients, with any winnings from underage accounts to be canceled. The page also recommends Net Nanny (www.netnanny.com) as a parental control tool for households that use shared devices.

Is Boomerang Casino Legit and Safe?

Boomerang Casino is a functioning platform with real games from certified providers, TLS-encrypted connections, and a promotions structure that operates as described. You, at standard stakes, in ordinary circumstances, will likely deposit, play, and withdraw without incident. That baseline is worth stating, because it is the experience the majority of satisfied Trustpilot reviewers describe.

The qualifications, however, are substantial and stack up in one direction. The original licensed operator, Rabidi N.V., no longer exists following its insolvency in mid-2024 and the subsequent revocation of its Curacao license. The entity currently running the site has not disclosed its name, jurisdiction, or license number anywhere on the platform, including in its privacy policy, as required under GDPR. A live chat agent could not supply the information when asked directly.

The responsible gaming toolkit extends only to an email-based self-exclusion with no in-account limit-setting tools, and there is documented evidence of a self-excluded problem gambler having their account reopened at their own request despite their known addiction history. Withdrawal complaints on Trustpilot follow a consistent pattern of delays, document loops, and, in some cases, no payment. The star rating distribution on the same platform raises questions about whether the review pool has been shaped by incentivized submissions.

None of this makes Boomerang Casino a scam in the blunt sense of the word. But the combination of an unidentified current operator, a collapsed original licensing structure, a GDPR styled privacy policy that omits the data controller’s identity, minimal responsible gaming enforcement, and a recurring pattern of withdrawal friction adds up to a risk profile that players should assess honestly before depositing. Those comfortable with offshore operators and able to manage their own play limits may find the product genuinely enjoyable. But if you want regulatory accountability, enforceable protections, or a clear dispute escalation path, you’re in the wrong neighborhood.