Privacy Notice

Retention and protection

Your details stay with us while your account is open and for as long as the purposes described here need them. Legal duties, anti-money-laundering rules among them, can make that period longer. Once the account is closed and neither the law nor our business still needs the data, we delete it or strip it of anything that points back to you.

Administrative, technical and physical safeguards are used against unauthorized access, loss, theft, misuse, disclosure, alteration and destruction. No system is completely secure, and internet transmission or storage cannot be guaranteed to be absolutely secure. We continue to assess and improve our security practices.

International transfers

Your personal data may be processed in countries outside the European Union or European Economic Area. Before transferring it to an affiliate or third party, we put appropriate safeguards in place. Examples are a destination country that the European Commission treats as adequately protective, Standard Contractual Clauses approved by the Commission, or another legally recognized safeguard.

Purposes and legal bases

We process data to provide our services, answer requests, support your account, improve products, test and troubleshoot features, and understand how our services are used. It also helps us prevent fraud and illegal activity, manage risk, resolve disputes, meet legal and regulatory duties, maintain technical availability, and protect our systems and intellectual property.

Contract is one legal basis. We use data to enter into or perform our agreement with you, including creating and supporting your account and communicating about duties under the Terms.

Legal obligations provide another basis. These activities include age and identity checks, due diligence, determining location and applicable requirements, anti-money-laundering work, responsible-gambling risk management, network and information security, regulatory reporting, responding to legal processes, crime prevention and handling requests about your data rights.

Legitimate interests may support processing when your rights, freedoms and interests do not outweigh our interests or those of a third party. Examples include defending legal claims, preventing fraud and cheating, protecting assets and systems, maintaining technical availability, managing our relationship with you, improving services, conducting analytics and research, segmenting customers for risk management, and recommending games or features from your playing behaviour.

With your consent, we may send marketing by e-mail, text, phone call or notification. Consent may also cover personalized offers, targeted advertising, assessment of marketing effectiveness, and participation in competitions, tournaments, rewards, loyalty schemes or promotional events.

Data we collect

When you sign up, you hand us details such as your name, username, e-mail, birth date, gender, phone, country and postcode, as well as a social security number. The sign-up also tells us your internet protocol address and where you are connecting from.

Checks on identity, age, the origin of your money and due diligence can require an ID card, passport or driving licence number, a proof of address, a social security number, details of where your wealth or funds come from, and bank or financial statements. Financial information can include payment-system details and account identifiers needed for deposits, withdrawals and compliance checks.

Technical and usage data is collected automatically. Examples are your internet protocol address, the system and device you use, when your sessions start and end, the pages and links you open, your searches, how you respond to ads, what you share and how long you stay. Part of it comes from cookies and comparable tools, and your rough location may be recorded or worked out from it.

Other information may come from public and government databases, social media, online or printed media, financial and credit institutions, fraud-prevention agencies, public authorities and commercially available databases. We may also receive information you made public or connected through linked accounts. From the data available to us, we may infer interests and game preferences.

Your choices and rights

You can ask to see the data we hold about you and how we use it. You can ask us to fix details that are wrong or incomplete, to erase data we have no strong legal or business reason to keep, and in some situations to limit how we use it.

You can also ask for a copy of your data in a common electronic format that another provider can read, and object to processing based on our legitimate interests or used for direct marketing. If you gave consent, you may take it back whenever you like, and earlier processing stays lawful.

A complaint can also go to the data protection authority of the European Union country where you live or work, or where you think the breach took place. To exercise any of these rights, write to [email protected].

Recipients of personal data

Access may be given internally to authorized employees, contractors, agents, joint controllers, affiliates, subsidiaries and brands within the same operator or business group.

Payment providers and financial institutions may receive account and contact details needed for deposits and withdrawals, as well as identity documents needed for their legal and anti-money-laundering duties. Customer-support providers, communication services, technology suppliers and cloud-hosting providers may process data where needed to deliver, manage or improve our services.

Other recipients can include marketing partners, fraud-prevention agencies, game providers, analytics or data-aggregation providers, law-enforcement bodies, regulators and licensing authorities. Data may also be disclosed in connection with a merger, financing, acquisition, bankruptcy, dissolution, divestiture, transfer or sale involving all or part of the business or its assets.

If you submit a complaint, review or query to a third-party forum, review service or dispute body, we may respond there. We disclose only data proportionate and necessary to identify your account, explain the relevant facts and address the matter you or someone acting for you raised.

If ownership or control of the company changes, personal data may be disclosed during preparation for the transaction or as part of it. A new owner or controller may use the data only under this notice unless you expressly consent to another use.