Privacy Policy
This Privacy Policy outlines how we collect, use, store, and protect your personal information when you access and use our online casino platform. We are committed to maintaining the highest standards of data protection and privacy in compliance with UK data protection laws, including the Data Protection Act 2018 and the UK General Data Protection Regulation. Your privacy is of paramount importance to us, and we have implemented comprehensive measures to ensure your personal data remains secure while providing you with an exceptional gaming experience.
1. Information We Collect
We collect various types of personal information necessary to provide our gaming services and comply with regulatory requirements. The information we gather falls into several categories, each serving specific purposes related to your account management, game provision, and legal compliance obligations.
Personal identification information forms the foundation of your account creation and verification process. This includes your full name, date of birth, residential address, email address, and telephone number. We also collect government-issued identification documents such as passport details, driving licence information, or national identity card numbers as required for age verification and anti-money laundering compliance.
Financial information is essential for processing deposits, withdrawals, and maintaining transaction records. We collect details about your payment methods, including:
- Bank account information and sort codes
- Credit and debit card details including card numbers, expiry dates, and security codes
- Digital wallet information and cryptocurrency addresses
- Transaction histories and payment preferences
- Mobile payment account details for pay by mobile services
Technical information is automatically collected when you interact with our platform to enhance your user experience and maintain system security. This encompasses your IP address, browser type and version, operating system, device identifiers, login timestamps, and gameplay session data.
Gaming behaviour data helps us understand your preferences and ensure responsible gambling practices. We monitor your betting patterns, game preferences, session duration, win and loss records, and any self-exclusion or limit-setting activities you implement.
2. Purposes of Data Processing
We process your personal data for legitimate business purposes that are essential to operating our online casino services within the regulatory framework established by UK gambling authorities. Each processing activity serves specific operational, legal, or security requirements that enable us to deliver safe and compliant gaming services.
Account management represents our primary processing purpose, encompassing user registration, identity verification, age confirmation, and ongoing account maintenance. We use your information to create and maintain your player account, verify your eligibility to participate in gambling activities, and ensure compliance with Know Your Customer requirements mandated by the UK Gambling Commission.
Financial transaction processing requires comprehensive data handling to facilitate secure deposits and withdrawals. We process payment information to execute financial transactions, verify funding sources, detect potentially fraudulent activities, and maintain accurate financial records as required by anti-money laundering regulations.
Regulatory compliance obligations necessitate extensive data processing to meet licensing requirements established by the UK Gambling Commission and other relevant authorities. This includes maintaining transaction records, reporting suspicious activities, implementing customer due diligence measures, and supporting regulatory investigations when required.
Security and fraud prevention measures rely on continuous data analysis to protect both our platform and our users from malicious activities. We monitor account access patterns, analyse transaction behaviours, and implement risk assessment protocols to identify and prevent unauthorised access, fraudulent transactions, and other security threats.
3. Legal Basis for Processing
Our data processing activities are grounded in specific legal bases established under UK data protection legislation, ensuring that every instance of personal data handling meets stringent legal requirements. We carefully assess and document the appropriate legal basis for each processing activity to maintain full compliance with applicable privacy laws.
Contractual necessity serves as our primary legal basis for most data processing activities related to service provision. When you create an account and agree to our terms and conditions, we establish a contractual relationship that necessitates processing your personal data to deliver the agreed-upon gaming services, manage your account, and facilitate financial transactions.
Legal compliance obligations require us to process certain personal data to meet regulatory requirements imposed by gambling authorities, financial regulators, and tax authorities. This includes maintaining customer records, reporting financial transactions, implementing anti-money laundering measures, and cooperating with law enforcement investigations.
Legitimate interests provide the legal foundation for processing activities that serve our business operations while balancing your privacy rights. These interests include fraud prevention, system security maintenance, customer service provision, and business analytics that help us improve our services without compromising your privacy.
Explicit consent forms the basis for specific processing activities such as marketing communications, promotional offers, and non-essential data analytics. We always seek clear, informed consent before processing your data for these purposes and provide easy mechanisms for withdrawing consent at any time.
4. Data Sharing and Third-Party Disclosure
We maintain strict controls over data sharing and only disclose your personal information to trusted third parties when necessary for legitimate business purposes or legal compliance. Every data sharing arrangement is governed by comprehensive agreements that ensure recipient parties maintain equivalent privacy protection standards.
Service providers and business partners receive limited personal data necessary to support our operations. Payment processors handle financial transaction data to facilitate deposits and withdrawals, while identity verification services process identification documents to confirm your eligibility. Customer service platforms may access account information to resolve inquiries, and technical service providers receive system data to maintain platform functionality.
Regulatory authorities receive personal data as required by licensing conditions and legal obligations. The UK Gambling Commission may request player information during compliance audits, while financial authorities receive transaction data for anti-money laundering monitoring. Tax authorities may access financial records as required by applicable tax legislation.
Legal disclosures occur when we receive valid legal demands for information from law enforcement agencies, courts, or other governmental authorities. We carefully review each request to ensure it meets legal requirements and only disclose the minimum information necessary to comply with the legal obligation.
Business transfer scenarios may involve data disclosure if we undergo corporate restructuring, merger, acquisition, or asset sale. In such circumstances, we ensure that acquiring parties commit to maintaining equivalent privacy protection standards and honour existing privacy commitments to our users.
5. Data Retention and Storage
Our data retention practices balance operational needs, regulatory requirements, and privacy principles to ensure we maintain personal information only as long as necessary for legitimate purposes. We have established comprehensive retention schedules that specify appropriate storage periods for different categories of personal data.
Active account data remains accessible while your account remains open and active, enabling ongoing service provision and account management. This includes personal identification information, financial data, and gaming history necessary for day-to-day operations and customer service support.
Regulatory retention requirements mandate that certain records be maintained for specified periods following account closure or transaction completion. Financial transaction records must be retained for six years to comply with anti-money laundering regulations, while customer identification documents are maintained for five years following account termination as required by gambling licence conditions.
Data storage infrastructure employs industry-standard security measures to protect stored information from unauthorised access, corruption, or loss. We utilise encrypted databases, secure data centres with physical access controls, and regular backup procedures to ensure data integrity and availability.
Secure deletion procedures ensure that personal data is permanently and irreversibly destroyed when retention periods expire or when you exercise your right to erasure. We employ certified data destruction methods that prevent any possibility of data recovery from deleted storage media.
6. Security Measures and Data Protection
We have implemented comprehensive technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our multi-layered security approach addresses various threat vectors and continuously evolves to counter emerging cybersecurity challenges.
Technical security measures form the foundation of our data protection strategy, incorporating advanced technologies and industry best practices:
- End-to-end encryption for all data transmission using TLS protocols
- Advanced encryption standard for data at rest in our storage systems
- Multi-factor authentication for account access and administrative functions
- Intrusion detection systems monitoring network traffic and system access
- Regular security vulnerability assessments and penetration testing
- Automated backup systems with encrypted off-site storage
Organisational security measures ensure that human factors in data protection are properly managed through policies, training, and access controls. All employees undergo comprehensive privacy and security training, and access to personal data is strictly limited based on job requirements and the principle of least privilege.
Incident response procedures are in place to quickly identify, contain, and remediate any potential data security breaches. We maintain detailed incident response plans that include immediate containment measures, impact assessment protocols, notification procedures for affected individuals and regulatory authorities, and remediation strategies to prevent future occurrences.
Regular security audits and compliance assessments ensure our protection measures remain effective and aligned with evolving regulatory requirements. We engage independent security experts to conduct periodic reviews of our systems and procedures, implementing recommended improvements to maintain the highest security standards.
7. Your Privacy Rights
Under UK data protection legislation, you possess comprehensive rights regarding your personal data that we collect and process. These rights empower you to maintain control over your personal information and ensure transparency in how we handle your data.
The right of access enables you to request confirmation of whether we process your personal data and obtain copies of the information we hold about you. You can request details about processing purposes, data categories, recipient information, retention periods, and the source of your personal data.
The right to rectification allows you to request correction of inaccurate or incomplete personal data. We will promptly investigate any accuracy concerns and make necessary corrections while notifying relevant third parties who have received the corrected information.
The right to erasure, commonly known as the right to be forgotten, enables you to request deletion of your personal data under specific circumstances. This includes situations where the data is no longer necessary for original processing purposes, you withdraw consent, or the data has been unlawfully processed.
The right to restrict processing allows you to limit how we use your personal data while maintaining the information in our systems. This may apply when you contest data accuracy, object to processing, or need the data preserved for legal claims.
The right to data portability enables you to receive your personal data in a structured, commonly used format and transmit it to another service provider. This right applies to data processed based on consent or contract using automated means.
To exercise these rights, contact our data protection team using the methods specified in our contact section. We will respond to valid requests within one month and may request additional information to verify your identity and prevent unauthorised access to your personal data.
8. Contact Information and Updates
We maintain open communication channels for privacy-related inquiries, complaints, and requests related to your personal data. Our dedicated data protection team is committed to addressing your concerns promptly and comprehensively while ensuring full compliance with applicable privacy regulations.
For general privacy inquiries, data protection requests, or concerns about how we handle your personal information, you can reach our data protection officer through our secure customer service portal or by email using the contact details provided on our website. When contacting us about privacy matters, please include sufficient information to verify your identity and clearly describe your inquiry or request.
If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the Information Commissioner's Office, the UK's independent data protection regulator. The ICO investigates complaints about data protection violations and can impose corrective measures when necessary.
This Privacy Policy is regularly reviewed and updated to reflect changes in our data processing practices, regulatory requirements, or technological developments. Material changes will be communicated through prominent notices on our website and, where required, through direct communication to affected users. Continued use of our services following policy updates constitutes acceptance of the revised terms.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. The effective date of this policy and any subsequent updates will be clearly indicated, ensuring transparency about when changes take effect and enabling you to make informed decisions about your continued use of our services.