Privacy Policy

This Privacy Policy outlines how we collect, use, protect, and share your personal information when you access and use our online gaming platform. We are committed to maintaining the highest standards of data protection in accordance with UK legislation, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. By using our services, you consent to the practices described in this policy. We encourage you to read this document carefully to understand how your personal information is handled throughout your gaming experience.

1. General Provisions

Our commitment to protecting your privacy is fundamental to our operations as a licensed online gaming operator in the United Kingdom. We act as the data controller for all personal information collected through our platform and associated services. This policy applies to all users who register accounts, make deposits, participate in gaming activities, or interact with our customer support services. We process personal data lawfully, fairly, and transparently, ensuring that data collection is limited to what is necessary for legitimate business purposes. Our legal basis for processing includes contractual necessity, legal compliance, legitimate interests, and your explicit consent where required. We maintain detailed records of all data processing activities and regularly review our practices to ensure continued compliance with applicable regulations.

2. Information We Collect

We collect various types of personal information necessary to provide our gaming services, ensure regulatory compliance, and maintain platform security. The scope of data collection depends on how you interact with our services and the specific features you utilize.

Data Category	Examples	Collection Method	Purpose
Personal Identification	Full name, date of birth, address, phone number, email address	Registration forms, verification documents	Account creation, identity verification, compliance
Financial Information	Payment card details, bank account information, transaction history	Payment processors, deposit/withdrawal forms	Processing transactions, anti-money laundering
Technical Data	IP address, device information, browser type, operating system	Automated collection via cookies and logs	Security, fraud prevention, platform optimization
Gaming Activity	Game preferences, betting patterns, session duration, win/loss records	Platform interactions, gameplay tracking	Responsible gaming, service improvement

3. Cookies and Tracking Technologies

Our platform utilizes various cookies and tracking technologies to enhance your gaming experience, maintain security, and analyze platform performance. We employ both first-party and third-party cookies with different functions and retention periods. Essential cookies are necessary for basic platform functionality and cannot be disabled without affecting service availability. Analytical cookies help us understand user behavior and improve our services, while marketing cookies enable personalized content delivery and promotional communications. You can manage cookie preferences through your browser settings, though disabling certain cookies may limit platform functionality. We also use pixel tags, web beacons, and similar technologies to track email engagement and monitor security threats. Session cookies are automatically deleted when you close your browser, while persistent cookies remain until their expiration date or manual deletion.

4. How We Use Your Information

Personal information collected through our platform serves multiple legitimate business purposes essential for operating a licensed gaming service in the UK. We utilize your data to create and maintain user accounts, process financial transactions, and provide access to our gaming products. Regulatory compliance represents a significant aspect of data usage, including identity verification, age verification, and anti-money laundering monitoring. We analyze gaming patterns and user behavior to identify potential problem gambling indicators and implement appropriate responsible gaming interventions. Marketing communications, promotional offers, and personalized content delivery rely on profile information and gaming preferences. Customer support services require access to account information, transaction history, and communication records to resolve inquiries effectively. Platform security measures involve continuous monitoring of user activity, device information, and access patterns to detect fraudulent behavior and unauthorized access attempts.

5. Legal Basis for Processing

Our data processing activities are grounded in specific legal bases as defined by GDPR and UK data protection legislation. Contractual necessity justifies processing required to provide gaming services, process payments, and maintain user accounts as outlined in our terms of service. Legal compliance obligations mandate identity verification, age verification, anti-money laundering monitoring, and regulatory reporting to the UK Gambling Commission and other relevant authorities. Legitimate interests support fraud prevention, platform security, service improvement, and direct marketing activities, balanced against potential impacts on user privacy rights. Explicit consent governs optional data processing activities such as marketing communications, promotional notifications, and enhanced personalization features. We regularly assess the appropriateness of our legal bases and adjust processing activities accordingly. Users maintain the right to withdraw consent at any time for processing activities based on this legal ground.

6. Data Sharing and Third Parties

We share personal information with carefully selected third parties only when necessary for legitimate business purposes and in accordance with strict data protection standards. Payment processors receive financial information required to execute deposits, withdrawals, and transaction verification procedures. Identity verification services process documentation and personal details to confirm user eligibility and prevent underage gambling. Marketing partners may receive limited demographic and preference data to deliver targeted promotional content and special offers. Technical service providers, including hosting companies and software developers, access certain data categories to maintain platform functionality and security. Regulatory authorities receive information as required by licensing conditions and legal obligations. We maintain comprehensive data processing agreements with all third parties, ensuring equivalent protection standards and limiting data usage to specified purposes. Cross-border data transfers are conducted using appropriate safeguards and adequacy decisions where applicable.

7. International Data Transfers

Some of our service providers and business partners are located outside the United Kingdom and European Economic Area, necessitating international data transfers subject to specific protection measures. We ensure adequate protection through various mechanisms including adequacy decisions, standard contractual clauses, and certification schemes recognized by UK data protection authorities. All international transfers are documented and regularly reviewed to maintain compliance with evolving regulatory requirements. We provide clear information about transfer destinations and protection measures upon request. Data subjects maintain full rights regarding internationally transferred data, including access, rectification, and complaint procedures. We minimize international transfers by utilizing UK-based service providers wherever possible and implementing data localization strategies for sensitive information categories. Regular audits and assessments verify the ongoing adequacy of protection measures for transferred data.

8. Data Security Measures

Protecting your personal information represents a fundamental priority implemented through comprehensive technical and organizational security measures designed to prevent unauthorized access, disclosure, alteration, or destruction. Our security framework encompasses multiple layers of protection tailored to different data categories and risk levels.

Advanced encryption protocols protect data both in transit and at rest, utilizing industry-standard algorithms and key management procedures
Multi-factor authentication systems secure account access and administrative functions, reducing unauthorized access risks
Regular security audits and penetration testing identify potential vulnerabilities and ensure continuous protection improvements
Employee training programs educate staff on data protection responsibilities, security procedures, and incident response protocols
Access controls limit data access to authorized personnel based on job responsibilities and business requirements
Backup and disaster recovery procedures ensure data availability and integrity during system failures or security incidents
Monitoring systems detect suspicious activities, unauthorized access attempts, and potential security breaches in real-time
Secure development practices integrate privacy and security considerations into platform updates and new feature implementations

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and protect our legitimate interests. Account information remains active during the period of service usage and for a reasonable period thereafter to address potential disputes or regulatory inquiries. Financial transaction records are retained for seven years following the completion of transactions to meet anti-money laundering and tax reporting requirements. Gaming activity data is maintained for five years to support responsible gaming analysis and regulatory compliance obligations. Marketing consent records are retained until withdrawal or for three years following the last interaction, whichever occurs first. Technical logs and security data are typically retained for one year unless specific incidents require extended preservation for investigation purposes. Upon account closure, we implement a graduated deletion process, removing non-essential data immediately while preserving compliance-related information for the required retention periods.

10. Your Data Protection Rights

Under UK data protection legislation, you possess comprehensive rights regarding your personal information that we are committed to facilitating through clear procedures and reasonable response timeframes. These rights empower you to maintain control over your data and ensure transparent processing practices.

Right of access allows you to request copies of your personal data and information about how it is processed
Right to rectification enables correction of inaccurate or incomplete personal information in our systems
Right to erasure permits deletion of personal data under specific circumstances, subject to legal retention requirements
Right to restrict processing allows you to limit how we use your personal information in certain situations
Right to data portability enables transfer of your data to another service provider in a structured, machine-readable format
Right to object provides the ability to oppose processing based on legitimate interests or for direct marketing purposes
Rights related to automated decision-making protect against solely automated processing that significantly affects you
Right to withdraw consent allows cancellation of consent-based processing activities at any time

11. Responsible Gaming and Data Protection

Our responsible gaming commitments are intrinsically linked to data protection practices, utilizing personal information to identify concerning patterns and implement appropriate player protection measures. We monitor gaming behavior, spending patterns, and session duration to detect potential indicators of problem gambling and gambling addiction. Automated systems flag unusual activity for manual review by trained specialists who may implement deposit limits, session reminders, or temporary account restrictions. Self-exclusion requests trigger immediate account suspension and data retention for the specified period to prevent circumvention attempts. We maintain detailed records of all responsible gaming interventions to track effectiveness and demonstrate regulatory compliance. Collaboration with external organizations such as GamCare and BeGambleAware may involve sharing limited information to provide appropriate support services. All responsible gaming data processing is conducted with the utmost sensitivity and professional confidentiality to protect user welfare while maintaining privacy rights.

12. Contact Information and Complaints

We encourage open communication regarding privacy concerns, data protection inquiries, or requests to exercise your rights under applicable legislation. Our dedicated data protection team is available to address questions, process requests, and resolve any issues related to your personal information. You can contact us through multiple channels including email, telephone, or written correspondence, with response commitments typically within 30 days for standard inquiries and one month for formal rights requests. If you are not satisfied with our response to privacy concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters. We provide clear escalation procedures and maintain detailed records of all privacy-related communications to ensure consistent and professional handling. Regular policy updates and communication regarding significant changes ensure ongoing transparency about our data protection practices and your rights as a user of our gaming platform.