Privacy Policy
Your data belongs to you. We collect it because running a safe, regulated casino requires certain information, but we never lose sight of the fact that it remains yours. This policy explains what we gather, why we need it, and what control you have over everything.
1. Nature and Scope of Personal Data Collected
When you create an account or use our services, we collect information directly from you. We also gather data automatically as you interact with our platform.
The categories of personal data we process include:
- Identity information such as your full name, date of birth, and gender
- Contact details including your email address, telephone number, and residential address
- Financial data covering payment card details, bank account information, and transaction history
- Verification documents like passport copies, utility bills, and proof of funds
- Technical data including IP addresses, device identifiers, browser type, and operating system
- Usage information showing how you navigate our site, games played, and betting patterns
- Communication records from customer support interactions and marketing preferences
We only collect what we genuinely need. Regulatory requirements under UK gambling law and anti-money laundering rules mean certain data collection is mandatory, not optional.
2. Purposes and Objectives of Data Processing
Every piece of information we hold serves a specific purpose. We process your data to deliver our services and meet our legal obligations as a licensed gambling operator.
Our processing purposes include:
- Creating and managing your player account
- Processing deposits, withdrawals, and maintaining transaction records
- Verifying your identity and age to prevent underage gambling
- Complying with anti-money laundering and know-your-customer requirements
- Detecting fraud, collusion, and suspicious activity
- Delivering responsible gambling tools and interventions
- Providing customer support and resolving disputes
- Sending service communications about your account
- Marketing our products where you have given consent
- Improving our platform through analytics and testing
Under GDPR, we rely on different legal bases depending on the activity. Contract performance covers account operation. Legal obligation covers regulatory compliance. Legitimate interests cover fraud prevention and platform improvement. Consent covers marketing communications.
3. Security Measures and Technical Integrity
Protecting your information is not something we take lightly. We implement technical and organisational measures designed to keep your data secure from unauthorised access, loss, or misuse.
Our security framework includes 256-bit SSL encryption for all data transmission between your device and our servers. We store sensitive information in encrypted databases with access controls limiting who can view what. Multi-factor authentication protects internal systems. Regular penetration testing identifies vulnerabilities before bad actors can exploit them. Staff receive ongoing training about data protection responsibilities. Physical security at our data centres meets industry standards.
No system is completely immune to risk. We cannot guarantee absolute security, but we take reasonable steps to minimise threats and respond quickly if incidents occur.
4. Sharing Information with Third Parties
We do not sell your personal data. That is a firm commitment. We share information only where necessary for specific purposes with carefully selected partners.
Categories of third parties who may receive your data include:
- Payment processors and banking partners who handle your transactions
- Identity verification providers who confirm your documents are genuine
- Regulatory bodies including the UK Gambling Commission when required
- Gaming software suppliers whose products power our platform
- Anti-fraud services that help detect suspicious behaviour
- Professional advisors such as lawyers and auditors
- Law enforcement agencies when legally compelled
- Marketing partners where you have consented to receive promotions
Each third party must meet our data protection standards. We use contracts that require them to handle your information appropriately and only for the purposes we specify.
5. Cookie Management and Similar Technologies
Our platform uses cookies and similar tracking technologies. These small files stored on your device help us recognise you, remember your preferences, and understand how people use our site.
Essential cookies keep things working. They handle login sessions, load balancing, and security features. You cannot opt out of these because the platform would not function without them. Performance cookies show us aggregated data about visitor behaviour. We use this to identify problems and improve user experience. Marketing cookies track your activity across sites to deliver relevant advertising. These require your consent.
You control non-essential cookies through your browser settings or our cookie preference centre. Blocking certain cookies may affect functionality. We recommend reviewing your choices periodically.
6. Data Retention Period
We keep your data only as long as necessary. Retention periods vary based on the type of information and our legal obligations.
Account information stays active while your account remains open. After closure, we retain records for a minimum of five years as required by anti-money laundering regulations. Some jurisdictions require longer periods. Transaction records follow similar rules due to financial crime prevention duties. Marketing preferences remain until you withdraw consent. Technical logs typically expire after twelve months unless needed for ongoing investigations.
When retention periods end, we securely delete or anonymise your data so it can no longer identify you.
7. User Rights Over Their Data
GDPR grants you specific rights over your personal information. We make exercising these rights straightforward.
Your rights include:
- Right of access to obtain copies of data we hold about you
- Right to rectification where information is inaccurate or incomplete
- Right to erasure in certain circumstances, though gambling regulations limit this
- Right to restrict processing while we address concerns you raise
- Right to object to processing based on legitimate interests
- Right to data portability to receive your data in a structured format
- Right to withdraw consent for processing that relies on it
Contact our data protection team to submit a request. We respond within one month as required by law. Complex requests may take longer with notice. We verify your identity before releasing information to prevent unauthorised access.
8. International Data Transfers
We operate under a licence issued in Curaçao under reference 8048/JAZ. Some of our service providers and group companies operate outside the European Economic Area.
When we transfer data internationally, we ensure adequate protection through approved mechanisms. Standard contractual clauses approved by the European Commission govern many relationships. Some countries have adequacy decisions confirming their data protection laws meet EU standards. We assess each transfer individually and implement supplementary measures where needed.
You can request information about specific safeguards protecting your data during international transfers.
9. Privacy Policy Updates
This policy reflects our current practices. We review it regularly and update it when necessary.
Changes might result from new regulations, service modifications, or improvements to our data handling. Significant updates affecting your rights or how we use your information will be communicated via email or prominent notice on our platform. Minor clarifications may happen without notification. The date at the top of this policy shows when we last made changes.
Continuing to use our services after updates indicates acceptance of the revised terms. We recommend checking this page periodically.
10. Contact Information
Questions about this policy or how we handle your data deserve clear answers. Our data protection team handles all privacy-related enquiries.
Reach out through our customer support channels for initial guidance. For formal data protection matters, request escalation to our designated Data Protection Officer. We aim to resolve concerns quickly and transparently.
You also have the right to lodge complaints with your supervisory authority. For UK residents, this is the Information Commissioner's Office.
Gambling should remain enjoyable entertainment. If you feel your gambling is becoming problematic, please use our responsible gambling tools or contact GamCare for support. You must be 18 or older to use our services.