Privacy Policy
This Privacy Policy governs the collection, processing, and protection of personal information by our online gaming platform operating within the United Kingdom. By accessing our services, you acknowledge and consent to the practices described herein, which comply with applicable UK data protection legislation including the Data Protection Act 2018 and UK General Data Protection Regulation. Last updated: January 23, 2026
Information We Collect
We collect various categories of personal information necessary for providing secure and compliant gaming services. The collection occurs through direct user input, automated systems, and third-party verification services mandated by UK gambling regulations.
| Data Type | Examples | Collection Method |
|---|---|---|
| Personal Identifiers | Full name, date of birth, address, phone number | Registration form, verification process |
| Financial Information | Payment card details, bank account information, transaction history | Payment processors, account deposits/withdrawals |
| Technical Data | IP address, device information, browser type, session logs | Automated collection via cookies and tracking technologies |
| Gaming Activity | Bet amounts, game preferences, win/loss records, session duration | Gaming platform interactions, responsible gambling monitoring |
- Identity verification documents including passport, driving licence, or utility bills
- Communication records including chat logs, email correspondence, and customer service interactions
- Geolocation data to ensure compliance with UK territorial restrictions
- Marketing preferences and communication consent records
- Device fingerprinting data for fraud prevention and security purposes
Legal Basis for Processing
Our processing activities rely on multiple legal bases under UK data protection law. Primary justifications include contractual necessity for service provision, legal compliance with gambling regulations, legitimate business interests, and explicit user consent where required.
Contractual necessity applies to account management, payment processing, and core gaming functionality. We cannot provide services without processing essential personal information including identity verification, age confirmation, and financial transaction data.
- Performance of contract for account creation, game access, and payment processing
- Legal obligation compliance including anti-money laundering checks and responsible gambling monitoring
- Legitimate interests for fraud prevention, security measures, and service improvement
- Explicit consent for marketing communications and non-essential data processing
- Vital interests protection in cases of suspected problem gambling or self-harm risk
Purposes of Data Processing
Personal information serves multiple essential functions within our gaming ecosystem. Primary purposes include regulatory compliance, security maintenance, service personalisation, and customer support provision.
Regulatory compliance requirements mandate extensive data collection and retention. UK Gambling Commission regulations necessitate comprehensive player verification, transaction monitoring, and responsible gambling assessment procedures that rely heavily on personal information analysis.
- Account registration and ongoing customer due diligence procedures
- Age verification and prevention of underage gambling access
- Financial transaction processing including deposits, withdrawals, and bonus allocation
- Game outcome generation and fair play assurance mechanisms
- Responsible gambling monitoring and intervention when necessary
- Anti-fraud detection and prevention through behavioural analysis
- Customer support services and dispute resolution processes
- Marketing communications delivery based on preferences and consent
- Service improvement through usage analytics and performance monitoring
- Legal compliance reporting to regulatory authorities as required
Data Sharing and Third Parties
Personal information may be shared with carefully selected third parties essential for service operation and regulatory compliance. All sharing arrangements include strict confidentiality provisions and data protection safeguards aligned with UK standards.
Payment service providers receive financial information necessary for transaction processing. These partnerships involve established financial institutions and licensed payment processors operating under UK regulatory oversight and maintaining equivalent data protection standards.
- Licensed payment processors for deposit and withdrawal handling
- Identity verification services for regulatory compliance checks
- Software providers for game platform operation and maintenance
- Customer support platforms for enhanced service delivery
- Marketing service providers operating under strict data processing agreements
- Legal advisors and auditors for compliance and regulatory matters
- Regulatory authorities when legally required for investigation or compliance purposes
- Law enforcement agencies pursuant to valid legal requests or court orders
International Data Transfers
Certain service providers may process personal information outside the United Kingdom. All international transfers comply with UK data protection requirements through adequacy decisions, standard contractual clauses, or equivalent protection mechanisms.
European Economic Area transfers benefit from adequacy recognition under UK law. Transfers to other jurisdictions require additional safeguards including binding corporate rules or certification schemes ensuring equivalent protection levels.
- Adequacy decision countries receive data without additional restrictions
- Standard contractual clauses govern transfers to non-adequate jurisdictions
- Binding corporate rules apply to multinational service provider arrangements
- Certification schemes provide alternative adequacy demonstrations
- Explicit consent covers specific transfer scenarios where other safeguards are unavailable
Data Retention Periods
Retention periods vary based on data type, regulatory requirements, and business necessity. UK gambling regulations mandate minimum retention periods for certain categories, while data protection law requires deletion when no longer necessary for original purposes.
Financial transaction records require seven-year retention for anti-money laundering compliance. Identity verification documents must be retained for five years following account closure to satisfy regulatory audit requirements and potential investigation needs.
- Account information retained for five years after permanent closure
- Financial transaction records maintained for seven years per AML regulations
- Gaming activity logs stored for five years for regulatory compliance
- Communication records kept for three years for dispute resolution purposes
- Marketing data deleted within two years of consent withdrawal
- Technical logs purged after twelve months unless required for ongoing investigations
- Responsible gambling assessments retained permanently for player protection
Security Measures
Comprehensive security frameworks protect personal information through technical, organisational, and procedural safeguards. Multi-layered approaches combine encryption, access controls, monitoring systems, and staff training to maintain data confidentiality and integrity.
Technical measures include industry-standard encryption for data transmission and storage. Advanced firewall configurations, intrusion detection systems, and regular security assessments ensure ongoing protection against evolving cyber threats and unauthorised access attempts.
- SSL/TLS encryption for all data transmission channels
- AES-256 encryption for sensitive data storage systems
- Multi-factor authentication requirements for administrative access
- Regular penetration testing and vulnerability assessments
- Staff training programmes on data protection and security protocols
- Incident response procedures for potential data breaches
- Backup and disaster recovery systems for business continuity
- Physical security measures for server infrastructure and office premises
Your Privacy Rights
UK data protection law grants comprehensive rights regarding personal information processing. These rights enable individuals to maintain control over their data while balancing legitimate business interests and regulatory compliance requirements.
Right to information ensures transparency about data processing activities. Access rights enable individuals to obtain copies of personal information and understand processing purposes, legal bases, and sharing arrangements currently in place.
- Access to personal information copies and processing details
- Rectification of inaccurate or incomplete data records
- Erasure requests where legally permissible and practically feasible
- Processing restriction in specific circumstances defined by law
- Data portability for information provided directly to our services
- Objection to processing based on legitimate interests
- Automated decision-making protection including profiling activities
- Complaint submission to the Information Commissioner’s Office
Cookies and Tracking Technologies
Our platform utilises various cookies and similar technologies for functionality, security, and user experience enhancement. Cookie deployment follows UK regulations requiring appropriate consent mechanisms and clear information about purposes and duration.
Essential cookies enable core functionality including session management, security features, and payment processing. These cookies are necessary for service provision and do not require explicit consent under UK cookie regulations.
- Strictly necessary cookies for authentication and security functions
- Performance cookies for service optimisation and error monitoring
- Functional cookies for personalisation and preference storage
- Marketing cookies for targeted advertising and campaign measurement
- Third-party cookies from embedded services and social media platforms
- Local storage technologies for enhanced user experience delivery
Policy Updates and Contact Information
This Privacy Policy undergoes regular review and updates to reflect regulatory changes, service developments, and evolving data protection practices. Material changes receive appropriate notification through email, platform announcements, or direct communication methods.
Privacy-related inquiries, rights requests, and complaints receive prompt attention through dedicated contact channels. Our Data Protection Officer oversees compliance activities and serves as primary contact for regulatory communications and individual privacy concerns.
- Regular policy reviews to ensure continued compliance and accuracy
- Notification procedures for material changes affecting user rights
- Dedicated privacy contact channels for inquiries and complaints
- Data Protection Officer availability for specialised privacy matters
- Response timeframes aligned with regulatory requirements and best practices
- Documentation procedures for rights requests and resolution outcomes