Privacy Policy
This Privacy Policy governs the collection, processing, storage, and protection of personal information provided by users of our online gambling platform. We are committed to maintaining the highest standards of data protection in compliance with UK legislation, including the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). This policy explains how we handle your personal data, your rights as a data subject, and our obligations as a data controller operating within the United Kingdom’s regulated gambling environment. Last updated: January 23, 2026.
1. Data Controller Information and Legal Basis
We operate as the data controller for all personal information collected through our gambling services. Our processing activities are conducted under multiple legal bases as defined by UK data protection legislation. The primary legal basis for processing includes legitimate interests in providing gambling services, contractual necessity for account management and payment processing, legal obligations under gambling regulations, and explicit consent where required for marketing communications.
Our data processing operations are supervised by the UK Gambling Commission and comply with all applicable anti-money laundering regulations. We maintain comprehensive records of all processing activities and conduct regular audits to ensure continued compliance with evolving regulatory requirements. All data processing decisions are made with careful consideration of proportionality and necessity principles.
2. Categories of Personal Data Collected
We collect various categories of personal data necessary for providing secure and compliant gambling services. The scope of data collection varies depending on your interaction level with our platform and the specific services utilised.
- Identity verification data including full legal name, date of birth, nationality, and government-issued identification documents
- Contact information encompassing residential address, email address, telephone numbers, and preferred communication methods
- Financial information including bank account details, payment card information, transaction history, and source of funds documentation
- Account security data comprising login credentials, security questions, authentication tokens, and access logs
- Gaming activity records including betting patterns, game preferences, session duration, and wagering amounts
- Technical data encompassing IP addresses, device information, browser specifications, and connection metadata
- Communication records including customer service interactions, live chat transcripts, and correspondence history
3. Data Collection Methods and Sources
Personal data is obtained through multiple channels during your engagement with our services. Direct collection occurs when you voluntarily provide information during account registration, identity verification procedures, payment transactions, and customer support interactions. We also collect data automatically through technical systems monitoring your platform usage, including cookies, tracking pixels, and analytics tools.
Third-party sources provide additional data necessary for regulatory compliance, including credit reference agencies for affordability assessments, identity verification services for anti-fraud protection, and payment processors for transaction validation. We may also receive information from affiliate partners, advertising networks, and social media platforms where you have provided appropriate consent.
4. Purposes and Legal Justification for Processing
Your personal data is processed for specific, legitimate purposes directly related to providing gambling services within the UK regulatory framework. These purposes are carefully balanced against your privacy rights and are limited to what is necessary and proportionate.
- Account creation and management to establish and maintain your gambling account in accordance with licensing conditions
- Identity verification and age confirmation to comply with legal obligations and prevent underage gambling
- Financial transaction processing including deposits, withdrawals, and payment verification for contractual performance
- Fraud prevention and anti-money laundering compliance to meet legal obligations and protect legitimate interests
- Customer support provision to fulfil contractual obligations and maintain service quality standards
- Responsible gambling monitoring to identify potential problem gambling behaviours and implement protective measures
- Marketing communications delivery where explicit consent has been provided or legitimate interests apply
- Legal compliance including regulatory reporting, dispute resolution, and law enforcement cooperation
5. Data Sharing and Third-Party Disclosures
We share personal data with carefully selected third parties only when necessary for service provision, legal compliance, or legitimate business operations. All data sharing arrangements are governed by comprehensive data processing agreements ensuring recipient compliance with UK data protection standards.
Regular disclosures occur with payment processors for transaction handling, identity verification services for compliance checks, customer support providers for service delivery, and regulatory authorities for licensing obligations. We may also share data with legal advisors, auditors, and law enforcement agencies when legally required or justified by legitimate interests.
Data transfers to third countries outside the UK are conducted only with appropriate safeguards, including adequacy decisions, standard contractual clauses, or other legally recognised transfer mechanisms. We maintain detailed records of all international transfers and regularly review their necessity and proportionality.
6. Data Retention Policies and Schedules
Personal data retention periods are determined by regulatory requirements, business necessity, and legal obligations. We maintain comprehensive retention schedules ensuring data is kept only as long as required for the original processing purpose or legal compliance.
- Account information is retained for five years following account closure to meet gambling commission requirements
- Financial records including transaction data are preserved for seven years for anti-money laundering compliance
- Identity verification documents are maintained for the duration of the customer relationship plus five years
- Marketing consent records are kept until withdrawal or seven years following last interaction
- Technical logs and security data are retained for two years unless required for ongoing investigations
- Customer communication records are preserved for three years to support dispute resolution and service improvement
Upon expiry of applicable retention periods, data is securely destroyed using certified deletion methods ensuring complete removal from all systems and backup storage locations.
7. Security Measures and Data Protection
We implement comprehensive technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework is regularly reviewed and updated to address emerging threats and maintain industry-leading protection standards.
Technical safeguards include advanced encryption for data transmission and storage, multi-factor authentication systems, regular security assessments, intrusion detection monitoring, and secure development practices. Organisational measures encompass staff training programmes, access control procedures, incident response protocols, and regular security audits conducted by independent specialists.
All employees with access to personal data undergo background checks and receive comprehensive data protection training. Access permissions are strictly controlled using role-based principles ensuring individuals can only access data necessary for their specific responsibilities.
8. Individual Rights and Control Mechanisms
As a data subject under UK data protection legislation, you possess several fundamental rights regarding your personal information. We are committed to facilitating the exercise of these rights through clear processes and reasonable timeframes.
- Right of access to obtain copies of personal data we hold about you and information regarding processing activities
- Right of rectification to correct inaccurate or incomplete personal information
- Right of erasure to request deletion of personal data in specific circumstances, subject to legal and regulatory constraints
- Right to restrict processing where you contest data accuracy or object to processing activities
- Right to data portability allowing transfer of personal data to alternative service providers in structured formats
- Right to object to processing based on legitimate interests or for direct marketing purposes
- Rights related to automated decision-making including profiling activities that produce legal or similarly significant effects
Requests to exercise these rights can be submitted through our dedicated privacy contact channels. We will respond within one month, with possible extensions where requests are complex or numerous.
9. Cookies and Tracking Technologies
Our platform utilises various cookies and similar tracking technologies to enhance user experience, maintain security, and analyse service performance. We provide comprehensive information about cookie usage through our dedicated cookie policy and consent management system.
Essential cookies are necessary for basic platform functionality including session management, security features, and payment processing. These cookies do not require explicit consent as they are strictly necessary for service provision. Performance cookies help us understand platform usage patterns and identify areas for improvement, while marketing cookies enable personalised advertising and campaign effectiveness measurement.
You maintain control over non-essential cookie preferences through browser settings or our consent management interface. However, disabling certain cookies may impact platform functionality and your overall user experience.
10. International Data Transfers
While we primarily process data within the United Kingdom, certain business operations may require international data transfers to provide comprehensive gambling services. All transfers are conducted with appropriate safeguards ensuring equivalent protection standards.
We utilise various transfer mechanisms including European Commission adequacy decisions for countries with recognised data protection standards, standard contractual clauses approved by UK authorities, and certification schemes providing appropriate safeguards. Regular reviews ensure continued adequacy of transfer arrangements and compliance with evolving regulatory requirements.
Where transfers occur to countries without adequacy decisions, we implement additional safeguards including enhanced contractual protections, regular monitoring, and impact assessments to ensure your privacy rights remain protected throughout the transfer process.
11. Contact Information and Complaints Procedure
We maintain dedicated channels for privacy-related inquiries, rights requests, and complaint resolution. Our data protection officer is available to address concerns and provide guidance regarding your privacy rights and our processing activities.
Privacy inquiries should be directed to our designated contact channels, providing sufficient detail to enable prompt and accurate responses. We are committed to resolving concerns within established timeframes and maintaining transparent communication throughout the resolution process.
If you remain unsatisfied with our response to privacy concerns, you retain the right to lodge complaints with the Information Commissioner’s Office, the UK’s supervisory authority for data protection matters. We will cooperate fully with any regulatory investigations and implement recommended improvements to our privacy practices.
