Privacy Policy

This Privacy Policy outlines how we collect, use, process, and protect your personal information when you access and use our online gaming platform. As a licensed gambling operator in the United Kingdom, we are committed to maintaining the highest standards of data protection in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all relevant gambling regulations. By using our services, you acknowledge that you have read, understood, and agree to the practices described in this policy. Last updated: January 28, 2026.

1. Information We Collect

We collect various types of personal information to provide you with our gaming services, ensure regulatory compliance, and maintain a safe and secure gaming environment. The information we gather falls into several categories, each serving specific purposes related to your gaming experience and our legal obligations.

Personal identification information forms the foundation of your account and includes your full name, date of birth, gender, postal address, email address, and telephone number. This information is essential for account verification, age verification to comply with UK gambling laws, and communication regarding your account and services.

Financial information encompasses payment card details, bank account information, transaction history, deposit and withdrawal records, and payment method preferences. We process this information to facilitate secure financial transactions, comply with anti-money laundering regulations, and maintain accurate records of your gaming activity.

We also collect technical information through your use of our platform, including:

  • Device information such as IP addresses, browser types, operating systems, and device identifiers
  • Website usage data including pages visited, time spent on pages, click patterns, and navigation paths
  • Gaming activity records including games played, betting patterns, session duration, and gameplay preferences
  • Location data derived from IP addresses to ensure compliance with geographical restrictions
  • Communication records including customer service interactions, chat logs, and correspondence

Additionally, we may collect information from third-party sources such as identity verification services, fraud prevention agencies, and payment processors to enhance security measures and comply with regulatory requirements. This information helps us verify your identity, prevent fraudulent activities, and ensure responsible gambling practices.

2. How We Use Your Information

We process your personal information for multiple legitimate purposes, each designed to enhance your gaming experience while maintaining compliance with UK gambling regulations and data protection laws. Our use of your information is always proportionate, necessary, and aligned with the purposes for which it was collected.

Account management represents a primary use of your personal information, encompassing account creation, verification, maintenance, and customer authentication. We use your details to establish your identity, verify your age and legal capacity to gamble, and maintain accurate account records throughout your relationship with us.

Financial transaction processing requires us to use your payment information to handle deposits, withdrawals, and other financial operations securely. This includes processing payments, preventing fraudulent transactions, maintaining transaction records, and ensuring compliance with financial services regulations.

Regulatory compliance necessitates the use of your information for various legal and regulatory purposes:

  • Age verification to ensure all players meet the minimum gambling age of 18 years
  • Anti-money laundering checks and suspicious activity monitoring
  • Responsible gambling measures including deposit limits and self-exclusion programs
  • Reporting to regulatory authorities as required by the UK Gambling Commission
  • Maintaining audit trails and compliance records

We utilise your gaming data to personalise your experience, recommend relevant games and promotions, analyse gaming patterns for product improvement, and detect unusual activity that might indicate problem gambling or fraudulent behaviour. This analysis helps us provide better services while maintaining a safe gaming environment.

Marketing and communication activities may involve using your contact information to send promotional materials, inform you about new games or features, provide account updates, and deliver customer service communications. You maintain full control over marketing preferences and can opt out at any time.

3. Legal Basis for Processing

Under UK GDPR, we must have a valid legal basis for processing your personal information. We rely on several legal bases depending on the type of processing activity and the nature of the information involved. Understanding these legal foundations helps explain why we collect and use your information in specific ways.

Contractual necessity serves as our primary legal basis for most processing activities. When you create an account and use our services, you enter into a contractual relationship with us. Processing your information becomes necessary to perform this contract, including account management, payment processing, game provision, and customer support services.

Legal compliance obligations require us to process certain information to meet our regulatory duties as a licensed gambling operator. The UK Gambling Commission mandates specific data collection and processing activities, including customer verification, transaction monitoring, and responsible gambling measures. We cannot provide gambling services without fulfilling these legal requirements.

Legitimate interests provide the legal basis for processing activities that benefit both you and us, such as fraud prevention, security measures, product improvement, and certain marketing activities. We carefully balance our legitimate interests against your privacy rights, ensuring that our processing activities remain fair and proportionate.

In limited circumstances, we may seek your explicit consent for specific processing activities, particularly for optional services or marketing communications. When we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing based on consent before withdrawal.

4. Information Sharing and Disclosure

We maintain strict controls over the sharing and disclosure of your personal information, ensuring that any sharing serves legitimate purposes and complies with applicable data protection laws. We never sell your personal information to third parties for their marketing purposes, and we limit sharing to specific circumstances that support our service provision and legal obligations.

Service providers and business partners receive access to your information only when necessary to deliver our services effectively. These third parties include payment processors, identity verification services, customer support platforms, and technology infrastructure providers. All third parties operate under strict contractual obligations to protect your information and use it only for specified purposes.

Regulatory authorities may receive your information when required by law or regulation. The UK Gambling Commission and other relevant authorities may request access to player information for licensing compliance, investigation purposes, or regulatory monitoring. We cooperate fully with legitimate regulatory requests while protecting your privacy rights.

Legal disclosure may occur in response to valid legal processes such as court orders, subpoenas, or law enforcement requests. We also reserve the right to disclose information when necessary to protect our rights, investigate fraud, ensure platform security, or comply with legal obligations.

In the event of business restructuring, merger, acquisition, or asset sale, your information may be transferred to the relevant third parties, subject to appropriate privacy protections and regulatory approvals. We would notify you of any such transfer and ensure continued protection of your personal information.

5. Data Security and Protection

We implement comprehensive security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our security framework encompasses technical, physical, and administrative safeguards designed to maintain the confidentiality, integrity, and availability of your data throughout its lifecycle.

Technical security measures form the backbone of our data protection strategy. We employ industry-standard encryption protocols to protect data in transit and at rest, including SSL/TLS encryption for all communications and advanced encryption standards for stored data. Our systems undergo regular security assessments, penetration testing, and vulnerability scanning to identify and address potential security risks.

Access controls ensure that only authorised personnel can access your personal information, and only to the extent necessary for their job functions. We implement multi-factor authentication, role-based access controls, and regular access reviews to maintain appropriate security levels across our organisation.

Our security measures include:

  • Advanced firewall and intrusion detection systems to monitor and prevent unauthorised access
  • Regular security audits and compliance assessments conducted by independent third parties
  • Secure data centres with physical access controls and environmental monitoring
  • Employee training programs focused on data protection and security best practices
  • Incident response procedures for rapid detection and containment of security breaches
  • Regular backup and disaster recovery testing to ensure data availability

Despite our comprehensive security measures, no system can guarantee absolute security. We continuously monitor emerging threats and adapt our security measures accordingly. In the unlikely event of a security incident affecting your personal information, we will notify you and relevant authorities as required by law, providing clear information about the incident and any recommended actions.

6. Your Privacy Rights

Under UK GDPR and the Data Protection Act 2018, you possess several important rights regarding your personal information. These rights empower you to control how your information is processed and ensure transparency in our data handling practices. We are committed to facilitating the exercise of these rights while maintaining the security and integrity of our systems.

The right of access allows you to obtain confirmation of whether we process your personal information and, where applicable, receive a copy of that information along with details about our processing activities. You can request information about the purposes of processing, categories of data involved, recipients of your information, and retention periods.

The right to rectification enables you to request correction of inaccurate or incomplete personal information. We encourage you to keep your account information up to date and will promptly correct any errors you identify or we discover.

The right to erasure, sometimes called the “right to be forgotten,” allows you to request deletion of your personal information under certain circumstances. However, this right is not absolute, particularly in the gambling industry where we must maintain certain records for regulatory compliance and responsible gambling purposes.

Additional rights include:

  • Right to restrict processing in specific circumstances, such as during disputes about data accuracy
  • Right to data portability, allowing you to receive your personal information in a structured, commonly used format
  • Right to object to processing based on legitimate interests, including direct marketing activities
  • Rights related to automated decision-making and profiling, including the right to request human review

To exercise any of these rights, contact our Data Protection Officer through the designated channels provided in your account settings or customer service portal. We will respond to your requests within the timeframes required by law, typically within one month, and may request additional information to verify your identity before processing your request.

7. Data Retention and International Transfers

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, and protect our legitimate interests. Our retention practices reflect the requirements of UK gambling regulations, which mandate specific retention periods for different types of information.

Account information and transaction records are typically retained for a minimum of five years after account closure, as required by anti-money laundering regulations and gambling compliance requirements. Gaming activity logs and customer communications may be retained for shorter periods unless required for ongoing investigations or dispute resolution.

Marketing preferences and communication records are retained until you withdraw consent or request deletion, subject to any overriding legal obligations. Technical information such as logs and analytics data is generally retained for shorter periods and may be anonymised or pseudonymised where possible.

International data transfers may occur when we engage service providers or business partners located outside the United Kingdom. We ensure that all international transfers comply with UK data protection laws through appropriate safeguards such as adequacy decisions, standard contractual clauses, or other approved transfer mechanisms.

When transferring data internationally, we:

  • Assess the data protection laws and practices of the destination country
  • Implement appropriate technical and organisational measures to protect transferred data
  • Require contractual commitments from recipients to maintain equivalent protection standards
  • Monitor ongoing compliance with transfer requirements and safeguards

We regularly review our retention schedules and international transfer arrangements to ensure continued compliance with evolving legal requirements and best practices. Our commitment to data protection extends throughout the entire lifecycle of your personal information, from collection through final disposal, ensuring that your privacy remains protected at every stage of our relationship.