Key Privacy Principles
We follow GDPR core rules for all data handling:
Lawfulness & Transparency: Clear consent and purposes from the start, no misleading practices.
Data Minimization: Only collect essentials like name, email, DOB, address, and verification docs (ID, proof of address).
Accuracy & Storage Limits: Data is corrected quickly; retained 5-10 years post-account closure for legal reasons, then securely deleted.
Integrity & Security: SSL encryption for payments, secure storage for sensitive info, and protections against fraud/AML risks.
How We Protect Your Data
Technical Safeguards: Secure servers, cookies for safe sessions, call recording for compliance (with notification), and no sensitive data requests (e.g., health unless voluntary for responsible gaming).
Third-Party Sharing: Limited to trusted providers (e.g., payment processors, AML verifiers) with contracts like EU Standard Contractual Clauses for non-EEA transfers. Never sold.
Automated Monitoring: Flags fraud or problem gambling ethically, without full profiling.
Your Rights & Controls
Contact our DPO at [email protected] to access, correct, delete (subject to retention), or object to processing. Withdraw marketing consent anytime via account settings or unsubscribe links.