How we collect and use personal information
Personal information reaches us when you open an account, play, move money, write to support or pass an identity check. We use it to run the service, meet legal obligations and catch misuse, within the frame of the UK GDPR and the Data Protection Act 2018.
- Whatever the registration form asked for. Name, date of birth, where you live, and the account details created along the way.
- How to reach you. In practice that’s the email, plus whatever ends up in your messages to support, we don’t dig further.
- The paper trail any account leaves: money in, money out, which bets went where, what games were opened, which promotions got used.
- Card and wallet details, but only the part without which a payment physically cannot happen, and a confirmation that the method is yours.
- KYC documents. You send them once, they stay within the check.
- The technical stuff every site sees anyway, IP, browser, system, device, when you logged in.
- And a simple yes or no on marketing: whether we may write to you, and where.
When we share information
Sharing happens only for a concrete operational, security or legal reason, and each recipient sees just the slice of data their task requires.
- Payment providers. They see what a deposit or a payout can’t move without, and that’s where it ends.
- If a KYC check is running, the verification service naturally gets the documents and account details tied to that check. No check, no access.
- Technical and security partners keep the platform on its feet, so a narrow slice of data passes through their hands too.
- And the authorities. Either the law directly obliges us to hand something over, or there’s an active investigation into fraud, money laundering or similar, no third scenario.
Your data protection rights
You can ask what we hold about you and have inaccurate details corrected. Depending on the case, the law also gives you deletion, restriction, portability and the right to object to certain uses, direct marketing first of all. One caveat: some records must stay for a set time under legal, security or financial record-keeping rules.
Not happy with how your information was handled? The Information Commissioner’s Office takes complaints at any point.
How we protect your information
Protection is a mix of technology and discipline: SSL encryption on the connection, and internal access to account data only for those whose work requires it.
- Access to account information is earned, not assumed: it sits behind permissions and constant security monitoring.
- Identity and payment checks follow a written procedure. Nobody decides on the fly what to ask for.
- Data has a shelf life here. Once its purpose is gone and the legal retention period runs out, it goes too.
Data controller
The operator behind our platform acts as controller: it decides why data is collected and what happens to it afterwards. For privacy questions or access requests, use the contact channels listed on the site.
International data transfers
Some providers work outside the United Kingdom. Data goes to them only with the safeguards required by data protection rules in place: no proper legal basis and protection mechanism, no transfer.
Changes to this policy
Services and legal duties change, and this policy follows. The version on this page is the one in force, so look through it from time to time.