Privacy Policy

This Privacy Policy governs the collection, use, processing, and protection of personal information provided by users of our online gaming platform. We are committed to maintaining the highest standards of data protection in accordance with UK Data Protection Act 2018, General Data Protection Regulation (GDPR), and guidelines established by the UK Gambling Commission. This policy outlines our practices regarding personal data handling, user rights, and security measures implemented to safeguard your information while using our gaming services.

Information We Collect

We collect various types of personal information necessary to provide secure and compliant gaming services. The data collection occurs through multiple channels including account registration, gameplay activities, payment processing, and website interactions. Our data collection practices are designed to ensure regulatory compliance while enhancing user experience and maintaining platform security.

Data Type	Examples	Collection Method
Personal Identification	Full name, date of birth, address, phone number	Account registration, verification processes
Financial Information	Payment card details, bank account information, transaction history	Deposit and withdrawal transactions
Technical Data	IP address, browser information, device specifications, cookies	Website usage, automated collection
Gaming Activity	Game preferences, betting patterns, session duration, winnings	Platform interaction, gameplay monitoring

We also collect information through cookies and similar tracking technologies to enhance website functionality and personalise user experience. This includes session cookies for maintaining login status, preference cookies for storing user settings, and analytical cookies for understanding user behaviour patterns. Additionally, we may collect information from third-party sources including payment processors, fraud prevention services, and identity verification providers to ensure platform security and regulatory compliance.

Purpose and Legal Basis for Processing

We process personal data for specific purposes with appropriate legal basis under UK and EU data protection legislation. Our primary processing activities include account management, payment processing, regulatory compliance, fraud prevention, and customer support services. Each processing activity is conducted with explicit legal justification ensuring transparency and lawfulness.

Contract performance for providing gaming services, processing payments, and maintaining user accounts
Legal compliance including anti-money laundering checks, responsible gambling monitoring, and regulatory reporting
Legitimate interests for fraud prevention, platform security, marketing communications, and service improvement
Consent for optional marketing communications, promotional offers, and enhanced personalisation features
Vital interests protection in cases involving player welfare concerns or emergency situations
Public interest tasks including cooperation with law enforcement and regulatory investigations

We conduct regular assessments to ensure processing activities remain proportionate and necessary for stated purposes. Data minimisation principles are applied to limit collection and processing to information directly relevant to service provision and regulatory requirements. Where processing relies on legitimate interests, we balance our interests against user privacy rights to ensure fair and transparent data handling.

Data Sharing and Third-Party Disclosure

We share personal information with selected third parties essential for service delivery, regulatory compliance, and platform security. All data sharing arrangements are governed by strict contractual obligations ensuring recipient organisations maintain appropriate security standards and data protection measures. We do not sell personal information to third parties for marketing purposes.

Our primary data sharing categories include payment processors for transaction handling, identity verification services for compliance checks, customer support platforms for service delivery, and regulatory bodies for licensing requirements. We may also share information with law enforcement agencies when legally required or to prevent fraudulent activities.

Licensed payment service providers for secure transaction processing and fraud prevention
Identity verification specialists for age verification and anti-money laundering compliance
Customer service platforms for efficient query resolution and technical support
Regulatory authorities including UK Gambling Commission for compliance reporting
Professional advisors including legal counsel and auditing firms for business operations
Technology service providers for platform maintenance, security monitoring, and data analytics

International data transfers occur only with adequate protection measures including Standard Contractual Clauses, adequacy decisions, or other approved safeguards. We maintain records of all data sharing arrangements and regularly review third-party compliance with data protection obligations.

Data Security and Protection Measures

We implement comprehensive technical and organisational security measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. Our security framework incorporates industry-standard encryption protocols, access controls, monitoring systems, and incident response procedures designed to maintain data integrity and confidentiality.

Technical security measures include SSL encryption for data transmission, secure database storage with encryption at rest, multi-factor authentication for administrative access, and regular security vulnerability assessments. We maintain segregated network environments with restricted access controls and comprehensive logging mechanisms for security monitoring.

Advanced encryption standards for data transmission and storage protection
Multi-layered firewall systems and intrusion detection mechanisms
Regular penetration testing and vulnerability assessments by certified security professionals
Automated backup systems with secure off-site storage and recovery procedures
Staff training programmes covering data protection principles and security protocols
Incident response procedures for rapid containment and remediation of security breaches

Organisational measures include comprehensive staff training on data protection principles, clear access control policies limiting data access to authorised personnel, regular security audits and compliance assessments, and established incident response procedures. We maintain detailed logs of data access and processing activities to ensure accountability and facilitate regulatory compliance monitoring.

User Rights and Data Control

Under UK data protection legislation, users possess specific rights regarding their personal information. We are committed to facilitating the exercise of these rights through transparent processes and reasonable response timeframes. Users may contact our Data Protection Officer to request information about data processing activities or exercise their statutory rights.

The right of access enables users to obtain confirmation of data processing activities and receive copies of personal information held about them. Rectification rights allow users to request correction of inaccurate or incomplete personal data. Erasure rights, subject to legal and regulatory obligations, permit users to request deletion of personal information in specific circumstances.

Access rights to obtain information about data processing and copies of personal data
Rectification rights to correct inaccurate or incomplete personal information
Erasure rights to request deletion of personal data where legally permissible
Portability rights to receive personal data in structured, machine-readable formats
Restriction rights to limit processing activities in specific circumstances
Objection rights to challenge processing based on legitimate interests or direct marketing

We respond to rights requests within one month of receipt, though complex requests may require extended timeframes with appropriate communication. Identity verification may be required to prevent unauthorised access to personal information. Where requests are refused due to legal obligations or legitimate grounds, we provide clear explanations and information about complaint procedures.

Data Retention and Deletion

We retain personal information for periods necessary to fulfil processing purposes, comply with legal obligations, and resolve disputes. Retention periods vary depending on data types, regulatory requirements, and business needs. We regularly review stored information to ensure continued relevance and compliance with retention policies.

Account information is retained for the duration of active account status plus additional periods required for regulatory compliance, typically five years following account closure. Financial transaction records are maintained for seven years in accordance with UK financial regulations and anti-money laundering requirements. Marketing communication preferences are retained until withdrawal of consent or account closure.

Active account data retained throughout account lifecycle and compliance periods
Financial records maintained for seven years following final transaction
Customer communication records kept for three years for service quality purposes
Technical logs and security data retained for two years unless extended for investigations
Marketing consent records maintained until withdrawal or account termination
Responsible gambling data retained for extended periods to support player protection measures

Automated deletion processes ensure timely removal of information exceeding retention periods. However, certain data may be retained longer where required for legal proceedings, regulatory investigations, or ongoing disputes. We maintain comprehensive retention schedules documenting specific timeframes for different data categories and regularly audit compliance with established deletion procedures.