Privacy Policy
This Privacy Policy outlines how we collect, use, process, and protect your personal information when you access and use our online casino services. We are committed to maintaining the highest standards of data protection and ensuring your privacy rights are respected in accordance with UK data protection legislation, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. By using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
1. Data Controller Information
We act as the data controller for all personal information collected through our platform. As a data controller, we determine the purposes and means of processing your personal data in compliance with applicable UK privacy laws. We maintain our operations under strict regulatory oversight and ensure all data processing activities align with the requirements set forth by the Information Commissioner’s Office (ICO). Our commitment extends to implementing appropriate technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction.
We have appointed a dedicated data protection team responsible for monitoring compliance with this Privacy Policy and applicable data protection laws. This team regularly reviews our data handling practices and implements necessary updates to maintain the highest standards of privacy protection. Should you have any concerns about our data processing activities, our team is available to address your queries and provide assistance.
2. Types of Personal Data We Collect
We collect various categories of personal information necessary to provide our gaming services effectively and comply with regulatory requirements. The scope of data collection is limited to what is essential for legitimate business purposes and regulatory compliance.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Information | Full name, date of birth, address, identification documents | Registration, verification processes |
| Financial Data | Payment card details, transaction history, deposit records | Payment processing, account funding |
| Technical Information | IP address, device information, browser details | Automatic collection during site usage |
| Gaming Activity | Game preferences, betting patterns, session duration | Platform interaction, game participation |
- Personal identification data including full legal name, residential address, and government-issued identification numbers
- Contact information such as email addresses, telephone numbers, and postal addresses
- Financial information including bank account details, payment card information, and transaction histories
- Technical data encompassing IP addresses, browser types, operating systems, and device identifiers
- Gaming activity data including game selections, wagering amounts, win/loss records, and session timestamps
3. Purposes of Data Processing
We process your personal data for specific, explicit, and legitimate purposes that are essential for operating our online casino services. Our data processing activities are designed to enhance your gaming experience while ensuring compliance with applicable regulations and maintaining the security of our platform.
Account management represents a primary purpose for data processing, enabling us to create and maintain your player account, verify your identity, and provide personalised gaming experiences. We utilise your information to process deposits and withdrawals, manage your account balance, and maintain accurate records of your gaming activities as required by gambling regulations.
Regulatory compliance necessitates extensive data processing to meet anti-money laundering requirements, responsible gambling obligations, and licensing conditions. We process your data to conduct know-your-customer checks, monitor gaming patterns for signs of problem gambling, and generate reports for regulatory authorities when required.
4. Legal Basis for Processing
Our processing of personal data relies on several legal bases under GDPR, ensuring all data handling activities are conducted lawfully and transparently. We carefully assess the appropriate legal basis for each processing activity and maintain documentation to demonstrate compliance.
Contractual necessity forms the primary legal basis for most of our data processing activities. When you register an account and accept our terms of service, we establish a contractual relationship that requires us to process certain personal data to fulfil our obligations and provide the agreed services.
Legal compliance obligations require us to process personal data to meet various regulatory requirements, including anti-money laundering regulations, responsible gambling measures, and tax reporting obligations. These legal requirements mandate specific data collection and processing activities that we must perform to operate lawfully within the UK gambling market.
5. Data Sharing and Third-Party Disclosures
We maintain strict controls over data sharing and only disclose personal information to third parties when necessary for legitimate business purposes or legal obligations. All data sharing arrangements are governed by comprehensive agreements that ensure recipient parties maintain appropriate security standards and respect your privacy rights.
Payment processing partners receive limited personal and financial data necessary to process deposits, withdrawals, and other financial transactions. These trusted partners operate under strict data protection agreements and are required to process your information solely for the specified purposes.
Regulatory authorities may receive personal data when required by law or regulation. We may disclose information to the UK Gambling Commission, HM Revenue and Customs, or other relevant authorities to comply with licensing conditions, anti-money laundering requirements, or other legal obligations.
6. International Data Transfers
While we primarily process data within the UK and European Economic Area, certain business operations may require international data transfers. All international transfers are conducted in accordance with GDPR requirements and include appropriate safeguards to protect your personal information.
We implement standard contractual clauses approved by the European Commission for transfers to countries without adequacy decisions. These contractual provisions ensure that recipients of your personal data maintain equivalent levels of protection regardless of their geographic location.
7. Data Retention Periods
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable laws and regulations. Our retention periods are regularly reviewed and updated to ensure compliance with evolving legal requirements.
- Account information and gaming records are typically retained for seven years following account closure to meet regulatory requirements
- Financial transaction data is maintained for six years to comply with anti-money laundering regulations and tax obligations
- Marketing communications data is retained until you withdraw consent or for three years if no engagement occurs
- Technical logs and security data are generally deleted after two years unless required for ongoing investigations
8. Data Security Measures
We implement comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security framework incorporates industry-leading technologies and best practices to maintain the confidentiality, integrity, and availability of your information.
Technical security measures include advanced encryption protocols for data transmission and storage, secure server infrastructure with regular security updates, and multi-factor authentication systems for account access. We employ sophisticated monitoring systems to detect and respond to potential security threats in real-time.
Organisational security measures encompass staff training programmes on data protection principles, role-based access controls limiting data access to authorised personnel only, and regular security audits to assess the effectiveness of our protective measures.
9. Your Privacy Rights
Under UK data protection law, you possess several important rights regarding your personal data. We are committed to facilitating the exercise of these rights and will respond to your requests within the legally required timeframes.
- Right of access to obtain confirmation of data processing and copies of your personal data
- Right of rectification to correct inaccurate or incomplete personal information
- Right of erasure to request deletion of your personal data in certain circumstances
- Right to restrict processing when you contest data accuracy or object to processing
- Right to data portability to receive your data in a structured, machine-readable format
- Right to object to processing based on legitimate interests or for direct marketing purposes
10. Contact Information and Complaints
We encourage you to contact us with any questions, concerns, or requests regarding this Privacy Policy or our data processing practices. Our dedicated privacy team is committed to addressing your enquiries promptly and thoroughly.
You may submit privacy-related requests through our secure contact forms or by emailing our data protection team. We will acknowledge receipt of your request within 72 hours and provide a substantive response within one month, as required by applicable data protection laws.
If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the Information Commissioner’s Office, the UK’s independent data protection regulator. The ICO provides guidance on data protection rights and investigates complaints about data processing activities.