Privacy Policy
This Privacy Policy governs the collection, processing, and protection of personal data for users engaging with our online gaming platform. As a licensed gambling operator in Great Britain, we are committed to maintaining the highest standards of data protection in accordance with UK GDPR, the Data Protection Act 2018, and regulations set forth by the UK Gambling Commission. This comprehensive policy outlines our practices regarding personal information handling, user rights, and security measures implemented to safeguard your privacy while enjoying our gaming services. By accessing our platform, you acknowledge and consent to the data processing activities described herein. Last updated: January 28, 2026.
Information We Collect
We collect various categories of personal information necessary for providing secure and regulated gambling services in Great Britain. The scope of data collection is strictly limited to what is essential for legal compliance, service provision, and customer protection.
- Identity verification data including full name, date of birth, gender, nationality, and government-issued identification documents
- Contact information comprising residential address, email address, telephone numbers, and postal codes
- Financial data encompassing banking details, payment card information, transaction histories, and deposit/withdrawal records
- Account credentials including usernames, encrypted passwords, security questions, and authentication tokens
- Gaming activity data covering game preferences, betting patterns, session durations, and wagering histories
- Technical information including IP addresses, device identifiers, browser types, operating systems, and connection data
- Communication records encompassing customer service interactions, chat logs, email correspondence, and support tickets
- Marketing preferences including subscription choices, promotional opt-ins, and communication channel selections
- Responsible gambling indicators such as spending limits, time restrictions, self-exclusion preferences, and risk assessment data
Purposes of Data Processing
We process personal data for specific, legitimate purposes aligned with our obligations as a licensed gambling operator and our commitment to providing excellent customer service. All processing activities are conducted with appropriate legal bases under UK data protection legislation.
Account management and customer service represent primary processing purposes, enabling user registration, identity verification, account maintenance, and responsive support delivery. Financial transaction processing ensures secure deposits, withdrawals, and payment verification while maintaining comprehensive records for audit purposes.
Regulatory compliance requires extensive data processing to meet UK Gambling Commission requirements, anti-money laundering obligations, tax reporting duties, and responsible gambling monitoring. We analyse gaming patterns to identify potential problem gambling behaviours and implement appropriate intervention measures.
Security and fraud prevention activities utilise personal data to protect users and our platform from unauthorised access, fraudulent transactions, and malicious activities. Marketing communications, where consent is provided, enable promotional offers, game recommendations, and service updates tailored to user preferences.
Legal Bases for Processing
Our data processing activities rely on multiple legal bases established under UK GDPR, ensuring all personal information handling meets strict legal requirements. Contract performance serves as the primary basis for most processing activities, as data handling is essential for providing gambling services, managing accounts, and processing financial transactions.
Legal compliance obligations require extensive data processing to meet regulatory requirements imposed by the UK Gambling Commission, HMRC tax obligations, anti-money laundering legislation, and consumer protection laws. These statutory duties mandate specific data retention periods and processing activities.
Legitimate interests justify certain processing activities where our business needs align with user expectations and privacy rights. This includes fraud prevention, security monitoring, service improvement, and internal analytics that benefit both our operations and customer experience.
Explicit consent governs marketing communications, optional data sharing, and certain analytical activities. Users maintain full control over consent-based processing and may withdraw permission at any time through account settings or customer support channels.
Data Sharing and Third Parties
We share personal data with carefully selected third parties only when necessary for service delivery, legal compliance, or legitimate business operations. All data sharing arrangements include robust contractual protections ensuring recipient organisations maintain equivalent data protection standards.
Payment service providers receive financial information necessary for processing deposits, withdrawals, and transaction verification. These trusted partners operate under strict security protocols and are bound by comprehensive data protection agreements limiting information use to specified purposes.
Regulatory authorities including the UK Gambling Commission, HMRC, and law enforcement agencies may receive personal data to fulfill our legal obligations. Such disclosures occur only when required by law, regulation, or valid legal process.
Technical service providers supporting our platform infrastructure, customer support systems, and security monitoring receive limited personal data necessary for service delivery. These partnerships are governed by stringent data processing agreements ensuring information protection and use limitation.
We do not sell, rent, or trade personal data to third parties for their independent commercial purposes. Marketing partnerships, where they exist, operate under strict opt-in consent mechanisms and comprehensive privacy protections.
Data Security Measures
We implement comprehensive technical and organisational security measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. Our security framework exceeds industry standards and regularly undergoes independent assessment.
- Advanced encryption protocols protect data transmission and storage using industry-standard cryptographic algorithms
- Multi-factor authentication systems secure account access and administrative functions
- Regular security audits and penetration testing identify and address potential vulnerabilities
- Access controls limit data availability to authorised personnel based on job requirements and security clearance
- Secure data centres with physical access restrictions, environmental controls, and redundant systems
- Employee training programmes ensure staff understand data protection obligations and security procedures
- Incident response protocols enable rapid detection, containment, and resolution of security breaches
- Data backup systems ensure information recovery while maintaining security and integrity standards
Data Retention
We retain personal data only for periods necessary to fulfill processing purposes, meet legal obligations, and protect legitimate interests. Retention periods vary based on data types, regulatory requirements, and business needs, with regular review ensuring unnecessary information is securely deleted.
Account information and transaction records are retained for six years following account closure to meet UK Gambling Commission requirements and potential tax obligations. Identity verification documents are maintained throughout the customer relationship and for five years post-closure as required by anti-money laundering legislation.
Communication records including customer service interactions are retained for three years to support service quality improvement and dispute resolution. Marketing data is retained until consent withdrawal or account closure, whichever occurs first.
Technical logs and security data are typically retained for twelve months unless longer periods are required for ongoing investigations or legal proceedings. Responsible gambling data may be retained longer when necessary to support ongoing customer protection measures.
Your Data Rights
As a data subject under UK GDPR, you possess comprehensive rights regarding your personal information. We facilitate exercise of these rights through dedicated processes and trained personnel committed to prompt, thorough responses.
Access rights enable you to obtain confirmation of data processing activities and receive copies of personal information we hold. We provide detailed information about processing purposes, data categories, retention periods, and third-party sharing arrangements.
Rectification rights allow correction of inaccurate or incomplete personal data through account management interfaces or customer support channels. We verify identity before implementing changes and notify relevant third parties when appropriate.
Erasure rights, subject to legal and regulatory constraints, enable deletion of personal data when processing purposes are fulfilled or consent is withdrawn. However, certain information must be retained to meet gambling licence obligations and legal requirements.
Data portability rights facilitate transfer of certain personal information to alternative service providers in structured, commonly used formats. Restriction rights enable limitation of processing activities in specific circumstances while maintaining data integrity and legal compliance.
International Data Transfers
While we primarily process data within the United Kingdom, certain business operations may require international data transfers to jurisdictions with equivalent or adequate data protection standards. All international transfers are conducted with appropriate safeguards ensuring continued protection of personal information.
Transfers to European Economic Area countries rely on adequacy decisions recognising equivalent data protection standards. Transfers to other jurisdictions utilise standard contractual clauses approved by UK authorities or alternative transfer mechanisms providing equivalent protection.
We maintain detailed records of international transfers including destination countries, transfer purposes, safeguarding measures, and recipient organisation details. Regular assessments ensure ongoing adequacy of protection measures and compliance with evolving legal requirements.
Where international transfers involve countries without adequacy decisions, we implement supplementary measures including enhanced encryption, access controls, and contractual protections exceeding minimum legal requirements.
Contact Information
We maintain dedicated channels for privacy-related enquiries, data protection concerns, and rights exercise requests. Our customer support team includes trained data protection specialists committed to resolving privacy matters promptly and thoroughly.
Privacy enquiries may be submitted through secure account messaging systems, dedicated email channels, or telephone support lines available twenty-four hours daily. We acknowledge receipt of data protection requests within forty-eight hours and provide substantive responses within legally required timeframes.
You retain the right to lodge complaints with the Information Commissioner’s Office if you believe our data processing activities violate UK data protection legislation. We encourage direct contact to resolve concerns promptly, but regulatory complaint rights remain unrestricted regardless of our internal processes.
This Privacy Policy undergoes regular review to ensure continued accuracy, legal compliance, and alignment with evolving business practices. Material changes are communicated through account notifications, website announcements, and email updates where appropriate consent exists.
