How will you react to foreign governments requesting information about users accessing your website from foreign IP addresses?
Such requests would be reviewed by our lawyers who would advise us on a case-by-case basis. Like any business, bustabit is obligated to comply with lawful court orders of course.
Are you planning on using any 3rd party companies for KYCing of your users?
No, KYC checks are so rarely required that that's not worth it. bustabit's default assumption for any given user is that they are not prohibited from using bustabit. A KYC check is only necessary if I have a specific reason to believe that someone is prohibited from using bustabit, e.g. if they themselves claim they are underage in chat. It's worth noting that due to the prevalence of VPNs, accessing bustabit from an IP address in a prohibited jurisdiction is not sufficient to trigger a KYC check.
How long do you store user logs (IP addresses, user agents, deposit and withdrawal information) and private information used to confirm age/citizenship/residence? Can a user request the deletion of their data earlier?
Currently connection logs, deposit histories and withdrawal histories are stored indefinitely. Information collected to confirm the user's age, citizenship and/or residency is exclusively used for that purpose, is deleted immediately afterwards and is not passed on to any third parties.
Is it actually illegal to gamble and invest bitcoins in casino bankroll in the prohibited countries ("Aruba, Australia, Curaçao, France, Netherlands, Sint Maarten, United States of America")?
I can't speak to the legality of gambling or investing Bitcoin in any of these jurisdictions. bustabit excludes users from these jurisdictions both from playing and investing not because it's illegal there (it may or may not be) but because our gaming license requires it. Conversely, a country not being on that list doesn't mean that online gambling is legal there (again, it may or may not be). Ultimately it's up to the user to ensure that they always complies with their local laws.
What constitutes inactivity? Is logging in okay, or do wagers need to be placed?
Signing in or connecting to the site while already signed in is all that's necessary for an account to be considered active. You don't need to wager, chat or do anything else. It goes without saying that bustabit will never delete dormant accounts before making a best effort to contact the owner first.
All funds of deleted dormant accounts including their balance and any bankroll investments are forfeited by the user and assumed by the operator.
What happens with the bankroll investment in this case, is it dispersed among other bankrollers?
That's probably how I'd handle it since it seems like the simplest solution on a technical level (doesn't require any bankroll operations). However, since that's still in the distant future I can't commit to a firm answer yet. At some point in the future I would like to start recycling accounts that are clearly unused and making their user names available again, but I don't have any specific plans regarding that yet.