Privacy Policy

This Privacy Policy outlines how we collect, use, process, and protect your personal information when you access and use our online casino platform. We are committed to maintaining the highest standards of data protection in accordance with UK data protection laws, including the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). By using our services, you acknowledge that you have read, understood, and agree to the practices described in this policy.

1. Information We Collect

We collect various types of personal information to provide you with our gaming services, ensure compliance with regulatory requirements, and enhance your overall experience on our platform. The information we collect falls into several categories, each serving specific purposes related to our operations as a licensed online casino operator in the United Kingdom.

Personal identification information includes your full name, date of birth, residential address, email address, and telephone number. This information is essential for account creation, identity verification, and compliance with UK Gambling Commission regulations. We also collect financial information, including bank account details, payment card information, transaction history, and details of deposits and withdrawals made through your account.

Account registration data including username, password, and security questions
Identity verification documents such as passport, driving licence, or national ID card copies
Proof of address documentation including utility bills or bank statements
Gaming activity data including game preferences, betting patterns, and session duration
Technical information such as IP addresses, browser type, device information, and operating system
Communication records including customer support interactions and promotional preferences

We may also collect information about your interactions with our website, including pages visited, time spent on different sections, and your navigation patterns. This data helps us improve our services and provide a more personalised gaming experience while ensuring responsible gambling practices are maintained.

2. Legal Basis and Purpose of Processing

We process your personal information based on several legal grounds as defined under UK data protection legislation. Our primary legal basis for processing is the performance of our contract with you as a registered player on our platform. This includes providing gaming services, processing payments, and maintaining your account in accordance with our terms and conditions.

Compliance with legal obligations forms another crucial basis for data processing, particularly in relation to anti-money laundering regulations, responsible gambling requirements, and UK Gambling Commission licence conditions. We are legally required to verify player identities, monitor transactions for suspicious activity, and maintain detailed records of all gaming activities.

Account management and provision of gaming services
Payment processing and financial transaction management
Identity verification and anti-fraud measures
Compliance with regulatory requirements and legal obligations
Customer support services and dispute resolution
Marketing communications based on your consent or legitimate interests
Website analytics and service improvement initiatives
Responsible gambling monitoring and player protection measures

Where we rely on legitimate interests as a legal basis, we ensure that our interests are balanced against your privacy rights and do not override your fundamental freedoms. You have the right to object to processing based on legitimate interests at any time.

3. Data Sharing and Third-Party Disclosure

We may share your personal information with carefully selected third parties who assist us in operating our platform and providing our services. All third-party service providers are contractually bound to maintain the confidentiality and security of your information and are only permitted to process your data for the specific purposes we have outlined.

Payment processors and financial institutions receive necessary information to facilitate deposits, withdrawals, and other financial transactions. This includes banks, e-wallet providers, and payment gateway services that enable secure money transfers between your accounts and our platform.

Licensed payment service providers for transaction processing
Identity verification services for compliance purposes
IT service providers for platform maintenance and security
Customer support service providers
Marketing service providers with your explicit consent
Legal advisors and professional service providers
Regulatory authorities when legally required
Fraud prevention agencies and security specialists

We may disclose your information to regulatory bodies, law enforcement agencies, or other authorities when required by law or when necessary to protect our legitimate interests, prevent fraud, or ensure player safety. Such disclosures are made only to the extent necessary and in accordance with applicable legal requirements.

4. Data Security and Protection Measures

We implement comprehensive technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our security framework is regularly reviewed and updated to address emerging threats and maintain compliance with industry best practices and regulatory standards.

All sensitive data is encrypted using advanced encryption technologies both in transit and at rest. Our servers are hosted in secure facilities with restricted access, continuous monitoring, and robust backup systems to ensure data integrity and availability. We employ multi-layered security protocols including firewalls, intrusion detection systems, and regular security audits.

SSL/TLS encryption for all data transmissions
Advanced database encryption for stored information
Multi-factor authentication for administrative access
Regular security assessments and penetration testing
Employee training programmes on data protection
Access controls and privilege management systems
Incident response procedures and breach notification protocols
Regular backup and disaster recovery testing

Despite our security measures, no system is completely immune to security risks. We continuously monitor our systems for potential vulnerabilities and work with cybersecurity experts to maintain the highest possible level of protection for your personal information.

5. Your Rights and Data Control

Under UK data protection law, you have several rights regarding your personal information. These rights are designed to give you control over how your data is processed and to ensure transparency in our data handling practices. You can exercise these rights by contacting our data protection team through the designated channels provided on our website.

You have the right to access your personal information and receive a copy of all data we hold about you. This includes the right to know how your information is being used, who it is shared with, and how long it will be retained. You can also request corrections to any inaccurate or incomplete information in our records.

Right of access to your personal data
Right to rectification of inaccurate information
Right to erasure under specific circumstances
Right to restrict processing in certain situations
Right to data portability where applicable
Right to object to processing based on legitimate interests
Right to withdraw consent for marketing communications
Right to lodge a complaint with the Information Commissioner's Office

Please note that certain rights may be limited by legal requirements or our legitimate interests in maintaining accurate records for regulatory compliance. We will respond to all requests within the timeframes specified by law and provide clear explanations if we cannot fulfil a particular request.

6. Data Retention and International Transfers

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, comply with our legal obligations, and resolve any disputes. Retention periods vary depending on the type of information and the specific legal requirements that apply to our operations as a licensed gambling operator.

Account information and transaction records are typically retained for seven years after account closure to meet anti-money laundering and tax compliance requirements. Marketing communications data is retained until you withdraw your consent or for a maximum of three years if there has been no engagement with our communications.

Active account data retained throughout account lifecycle
Transaction records kept for seven years post-account closure
Identity verification documents stored for regulatory compliance periods
Communication records maintained for dispute resolution purposes
Marketing data retained based on consent or until withdrawal
Technical logs stored for security and operational purposes

When we transfer your personal information outside the United Kingdom, we ensure that appropriate safeguards are in place to protect your data. This includes using adequacy decisions, standard contractual clauses, or other approved transfer mechanisms as recognised under UK data protection law.

This Privacy Policy may be updated periodically to reflect changes in our practices, legal requirements, or business operations. We will notify you of any material changes through our website or direct communication. The effective date of this policy is clearly indicated, and we encourage you to review it regularly to stay informed about how we protect your privacy.