Privacy Policy
This Privacy Policy governs the collection, processing, and protection of personal information by our online gaming platform operating under the regulatory framework of the United Kingdom Gambling Commission. We are committed to maintaining the highest standards of data protection in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. Last updated: January 28, 2026.
Information We Collect
Our platform collects various categories of personal information necessary for providing secure gaming services and complying with regulatory obligations. The scope of data collection is designed to ensure responsible gambling practices while maintaining operational efficiency and legal compliance.
| Data Category | Information Types | Collection Purpose |
|---|---|---|
| Personal Identification | Full name, date of birth, address, phone number | Account verification and regulatory compliance |
| Financial Information | Payment method details, transaction history, withdrawal preferences | Processing deposits and withdrawals securely |
| Gaming Activity | Game preferences, betting patterns, session duration | Personalised experience and responsible gambling monitoring |
| Technical Data | IP address, device information, browser type, cookies | Platform security and performance optimisation |
We implement automated systems to monitor gaming behaviour patterns for signs of problematic gambling, ensuring compliance with our duty of care obligations under UK gambling legislation.
Legal Basis for Processing
Our data processing activities operate under multiple legal foundations as defined by UK data protection legislation. Primary processing occurs under contractual necessity for account management and service delivery. Legitimate interest forms the basis for fraud prevention, security monitoring, and platform improvement initiatives.
Regulatory compliance represents a legal obligation requiring extensive data retention and reporting to the UK Gambling Commission. Consent-based processing applies to marketing communications and optional service enhancements. We maintain detailed records of all processing activities and their corresponding legal justifications.
Data Usage and Purposes
Personal information serves multiple operational and regulatory functions within our gaming ecosystem. Account verification processes utilise identification data to prevent underage gambling and ensure regulatory compliance with Know Your Customer requirements.
- Age verification and identity confirmation procedures
- Financial transaction processing and fraud prevention
- Responsible gambling monitoring and intervention systems
- Customer support and dispute resolution services
- Platform security and anti-money laundering compliance
- Game personalisation and user experience enhancement
- Regulatory reporting and audit trail maintenance
Our responsible gambling framework continuously analyses gaming patterns to identify potential signs of gambling-related harm, triggering appropriate intervention measures when necessary.
Data Sharing and Third Parties
We maintain strict controls over data sharing practices, limiting disclosure to essential service providers and regulatory authorities. Payment processors receive financial information necessary for transaction processing under contractual data protection agreements.
The UK Gambling Commission and HM Revenue and Customs may receive player data as required by regulatory obligations and tax legislation. Age verification services process identification information to ensure compliance with underage gambling prevention requirements.
Technical service providers, including hosting companies and security specialists, access limited data categories under comprehensive data processing agreements. We conduct regular audits of all third-party relationships to ensure ongoing compliance with data protection standards.
Data Security Measures
Our security infrastructure employs industry-leading technologies and practices to protect personal information against unauthorised access, disclosure, or misuse. Multi-layered security protocols encompass both technical and administrative safeguards.
- Advanced encryption protocols for data transmission and storage
- Secure socket layer technology for all financial transactions
- Regular penetration testing and vulnerability assessments
- Access controls and employee authentication systems
- Automated fraud detection and prevention mechanisms
- Regular security audits and compliance monitoring
- Incident response procedures and breach notification protocols
Our data centres maintain ISO 27001 certification and undergo continuous security monitoring to detect potential threats or unauthorised access attempts.
Cookie Policy and Tracking
Our platform utilises various cookie technologies to enhance user experience, maintain security, and comply with regulatory requirements. Essential cookies enable core platform functionality, including session management and security features.
Performance cookies collect anonymous usage statistics to optimise platform performance and identify technical issues. Functional cookies remember user preferences and settings to provide personalised gaming experiences. Marketing cookies, deployed with explicit consent, enable targeted promotional communications.
Users can modify cookie preferences through browser settings or our dedicated cookie management interface. Disabling certain cookies may impact platform functionality and user experience quality.
User Rights and Control
Under UK data protection legislation, users possess comprehensive rights regarding their personal information. We provide accessible mechanisms for exercising these rights through dedicated customer support channels.
- Right to access personal data and processing information
- Right to rectification of inaccurate or incomplete data
- Right to erasure under specific circumstances
- Right to restrict processing activities
- Right to data portability in structured formats
- Right to object to certain processing activities
- Right to withdraw consent for marketing communications
Account holders can request self-exclusion or account closure at any time, triggering secure data retention procedures in compliance with regulatory requirements. We respond to all data subject requests within statutory timeframes.
Data Retention Policies
Our retention schedules balance operational requirements with privacy principles and regulatory obligations. Account information remains active during the customer relationship and for specified periods following account closure.
Transaction records are retained for seven years to comply with anti-money laundering legislation and tax requirements. Gaming activity logs are maintained for regulatory reporting and responsible gambling monitoring purposes. Marketing data is deleted promptly following consent withdrawal or account closure.
We implement automated deletion procedures to ensure timely data disposal when retention periods expire, unless legal obligations require extended preservation.
International Data Transfers
Limited data transfers to third countries occur under appropriate safeguards as required by UK data protection legislation. We utilise adequacy decisions, standard contractual clauses, and certification schemes to ensure equivalent protection standards.
Payment processing services may involve transfers to countries with adequate data protection frameworks. We maintain detailed transfer impact assessments and implement supplementary measures where necessary to ensure data security during international transmission.
All international transfer arrangements undergo regular review to ensure ongoing compliance with evolving data protection requirements and regulatory guidance.
Contact Information and Complaints
Our dedicated data protection team handles all privacy-related inquiries, complaints, and data subject requests through multiple communication channels. We maintain comprehensive records of all privacy interactions and resolution outcomes.
Users experiencing data protection concerns can escalate complaints to the Information Commissioner’s Office if internal resolution attempts prove unsatisfactory. We cooperate fully with regulatory investigations and implement recommended improvements promptly.
This Privacy Policy undergoes regular review and updates to reflect evolving legal requirements, operational changes, and industry best practices. Material changes are communicated through prominent platform notifications and direct customer communications.