Table of Content
Our Identity
The entity operating this platform acts as the Data Controller for your personal information. As the data controller, we determine how and why we process your information in accordance with our relationship with you, as outlined in this Policy. Together with our joint controller, we manage the protection and handling of the information you provide to us.
For enquiries about this Policy, such as exercising your data rights, please contact our Data Protection Officer by email at [email protected].
Categories of Personal Information We Collect
Information You Provide Directly
Depending on how you engage with our services, we may collect the following types of personal information:
Account Registration Information: When creating an account on our website, you'll need to provide details such as your email address, date of birth, nationality, telephone number, gender, full name, National Insurance number, postcode, and chosen username. We'll also automatically capture your IP address and geolocation information during registration.
Verification Information: To fulfil our verification and Know Your Customer (KYC) obligations, for age and identity confirmation, anti-money laundering compliance, and/or to meet licensing or regulatory requirements, we collect items such as your passport/driving licence number, proof of address, National Insurance number, source of wealth/funds documentation, bank details, and financial records/statements.
Transaction Information: For processing deposits and withdrawals from your account, we may collect your banking information, including account numbers, sort codes, IBAN details, and payment processor information. This information may also support KYC and anti-money laundering compliance.
Information Collected Automatically
Device Information: We collect information about the hardware and software you use to access our services, such as IP address, operating system version, and unique device identifiers.
Usage and Log Information: To better understand how you use our services and improve them, we automatically record your interactions. Our systems log activity when you use the platform, including content viewed, advertisement interactions, searches performed, and social media shares related to our website, session times, pages visited, referring/exit pages, and time spent on pages. Some of this information is collected through cookies and similar technologies.
Location Information: When you use our services, we may collect or infer your approximate location.
Information Obtained from Third Parties
To improve and personalise our services and/or comply with regulations, we may obtain your information from external sources. These sources may include:
- Publicly available sources such as Companies House records, online searches, social media platforms, digital and print media, etc.
- Commercial databases and third-party organisations, such as banks, credit reference agencies, anti-fraud services, and regulatory bodies. These help us verify information and investigate suspicious activity, particularly for fraud and money laundering prevention.
- Inferred Information: We may derive additional information from the data mentioned above, such as inferring your interests and gaming preferences from pages visited and games played.
- Publicly shared information, including content on social media platforms, linked accounts (e.g., Facebook or Google), and other publicly available online sources.
Purposes for Collecting Your Information
We use the personal information we collect to:
- Provide our services to you.
- Respond to your enquiries or concerns.
- Conduct testing, analysis, debugging, and research to develop and improve our services.
- Identify, prevent, and address threats from harmful activities, fraud, and illegal conduct.
- Send promotional materials, updates, and personalised communications to you.
- Handle disputes, including investigations by authorities or regulators.
- Comply with legal and regulatory obligations.
- Maintain service security and operations, such as ensuring website availability, protecting systems and assets from threats and unauthorised access.
Legal Basis for Processing Your Information
Under the UK GDPR and relevant data protection laws, we only process your information when we have a valid legal basis. Multiple bases may apply in some instances. Our primary legal bases include:
Contract Performance and Formation
We process information to perform or enter into contracts with you, such as managing your account, communicating according to our terms, etc.
Legal Compliance
Processing your information may be necessary to comply with legal obligations. Activities may include:
- Verifying age and identity under KYC/AML regulations.
- Using IP addresses to determine location and legal jurisdiction.
- Risk management, including preventing problem gambling and promoting responsible gaming.
- Securing networks and information.
- Responding to legal requests such as court orders or warrants.
- Preventing crimes involving money laundering, terrorism financing, fraud, or cyber crimes.
- Filing regular reports to meet financial, operational, and legal requirements.
- Processing your data rights requests.
Legitimate Interests
Where appropriate, we process information to protect our legitimate interests, those of others, or operational requirements, provided they don't override your fundamental rights. Examples include:
- Pursuing legal claims and defending against legal or administrative proceedings.
- Implementing security measures to prevent crime, protect assets, intellectual property, and ensure website functionality.
- Managing relationships and improving products.
- Using analytics, aggregation, and research for improvement and marketing purposes.
- Categorising users for risk management, identifying risky behaviours, and promoting responsible gaming.
- Analysing gaming patterns using algorithms to recommend suitable games and features.
- Identifying and preventing activities that undermine service integrity, such as fraud, unauthorised software, unusual behaviours, or deception.
Your Consent
With your permission, we may:
- Send targeted promotional offers via email, SMS, telephone calls, or push notifications.
- Personalise offers based on your gaming history and preferences.
- Use browsing information for relevant advertising.
- Customise and measure marketing to better match your interests.
- Manage your participation in competitions, tournaments, loyalty programmes, and promotions.
Sharing Your Information
We may share your information with the following types of recipients:
- Within our organisation to authorised personnel, related brands, contractors, agents, joint controllers, affiliates, and subsidiaries.
- Banks and payment processors. For transactions, we share with trusted providers: name, date of birth, email address, postal address, telephone number, username. KYC documentation may be shared for their compliance purposes.
- Third-party service providers essential for service delivery, management, and improvement, such as customer support teams, communication services, technology suppliers, and hosting companies.
- Marketing partners.
- Anti-fraud organisations.
- Parties involved in corporate transactions such as mergers, investments, acquisitions, administration, or asset sales.
- Content providers.
- Analytics companies for research, analysis, and service improvements.
- Regulatory authorities, government agencies, and licensing bodies.
If you post complaints, feedback, or questions about our services on external websites (e.g., review platforms, forums, or mediation services), we may respond directly to address them. This could involve sharing limited information to verify your account and provide accurate responses. Such sharing is based on our legitimate interest in maintaining our reputation and resolving issues transparently. We only share information when you've raised a concern publicly, limiting the data to what's necessary for clarification.
Data Retention Period
We'll retain your information whilst your account is active and to achieve the purposes outlined in this Policy.
We may retain it for longer periods if required by law, such as anti-money laundering regulations or other legal obligations.
Following account closure and when there's no further legal or business need, we'll delete or anonymise your information so it cannot be linked back to you.
Your Data Rights
You have specific rights regarding your personal information, including:
- Accessing your information and details about how it's processed.
- Correcting any inaccuracies or incomplete information.
- Deleting information where there are no compelling legal or business reasons for retention.
- Restricting processing under certain circumstances.
- Receiving your information in a portable, structured format for transfer elsewhere.
- Objecting to processing, particularly for legitimate interests or marketing purposes.
- Withdrawing consent at any time, without affecting the lawfulness of previous processing.
- Lodging complaints with the Information Commissioner's Office (ICO) or supervisory authorities in your country of residence, workplace, or where the alleged breach occurred.
To exercise these rights, please contact [email protected] or [email protected].
Tracking Technologies and Cookies
We use cookies, pixels, web beacons, and similar technologies to enhance your website and app experience. On your first visit, we'll request consent for non-essential cookies. Essential cookies required for functionality don't require your consent. Please see our Cookie Policy for detailed information about our use of cookies, their purposes, and how to manage your preferences.
Information Security
Protecting your information is paramount; we employ robust administrative, technical, and physical safeguards against unauthorised access, loss, theft, or misuse. Whilst we implement comprehensive security measures, no system is completely secure, particularly online environments. We cannot guarantee absolute security but continually enhance our practices.
International Data Transfers
Your information may be processed outside the UK and EEA. For transfers to affiliates and third parties, we ensure appropriate protections such as adequacy decisions, standard contractual clauses approved by the UK authorities, or other approved transfer mechanisms.
Change of Ownership
Should our company be sold, merged, or undergo a change of control, your information may be shared during due diligence or as part of the transaction. Any new entity may use your information in accordance with this Policy unless you provide consent for different use.
Contacting Us
For questions about this Policy or our practices, please email [email protected] or [email protected].
Policy Updates
We may update this Policy as technology evolves or legal requirements change. Please review updates periodically. Changes become effective from the date posted on our website.
