What People Assume and What the Notice Says
Most of us carry a few comfortable assumptions about how our data is handled. Some of them hold up; some don’t. Here they are, side by side with what the notice actually says.
| The assumption | What the notice says |
| “They only know what I typed into the form.” | Device, usage and location data are recorded automatically, and data may also come from public and commercial sources |
| “My details stay inside the casino.” | They may be shared with payment providers, service suppliers, marketing partners, fraud-prevention agencies and authorities |
| “Marketing comes with the account.” | Direct marketing and personalised offers depend on your consent, which you can withdraw |
| “When I close my account, everything is deleted.” | Data may be kept longer where the law requires, for example under anti-money-laundering rules |
| “My data is completely safe.” | Safeguards are described, but the notice says plainly that no system is fully secure |
| “What I post on a review site is between me and that site.” | The operator may disclose limited account details in order to respond to a public complaint |
None of this is meant to alarm you – it’s simply more accurate than the assumptions. If one of those rows surprised you, that’s the section of the notice to read in full.
What’s Collected, in Plain Words
There are really three layers. The first is what you hand over yourself: at registration, your email, full name, date of birth, country, phone number, gender, postal code and username; later, for verification, an identity document, proof of address, information about the source of your funds and financial statements; and for payments, your IBAN or payment system details. The second layer is what’s recorded without you doing anything – your IP address, device and operating system, the pages you view, when your sessions start and how long they last. The third is what comes from elsewhere: public databases, credit and financial institutions, fraud-prevention agencies and anything you’ve made public on social media.
The notice adds that the operator may draw inferences from all this, such as which games you’re likely to prefer, that gaming behaviour is analysed by machine-learning algorithms to recommend games, and that customers are grouped in order to identify potentially harmful behaviour. The general terms mention two further things worth knowing: identity checks may be carried out by third-party verification providers, and extra security checks can include a phone call or face verification. It’s a fair amount of information, and it’s worth pausing over before you decide to share it.
Who Else Sees It
The operator acts as the data controller, together with a joint controller, though the notice doesn’t name the company. Inside the group, your data can be seen by authorised staff, related brands and affiliates. Outside it, the notice lists payment providers and financial institutions (which may also receive your verification documents), suppliers of support, messaging, technology and hosting services, marketing partners, analytics companies, game providers, fraud-prevention agencies, and law enforcement and regulatory bodies. Data may be processed outside the EU and EEA, with safeguards such as Standard Contractual Clauses. If a particular recipient concerns you, the Data Protection Officer is the person to ask.
Your Rights
You aren’t a passenger in all this. The notice, which is written with reference to the GDPR, gives you a set of rights over your data:
- to see what’s held about you and how it’s used;
- to have inaccurate or incomplete details corrected;
- to ask for erasure where there’s no compelling reason to keep the data;
- to have processing restricted in certain circumstances;
- to receive your data in a portable, machine-readable format;
- to object to processing based on legitimate interests or to direct marketing;
- to withdraw consent at any time;
- to complain to a supervisory authority, which the notice describes in terms of EU member states.
To use any of them, you write to [email protected] or to the Data Protection Officer at [email protected]. The notice doesn’t say how quickly you’ll get a reply. If you’re not sure which right fits your situation, just describe what you want in your own words and ask.
If You Want Your Data Removed
This is the question people care about most, so let’s take it step by step. What follows is our reading of how the notice and the terms fit together, not a procedure the operator has published:
- Withdraw your balance first – under the general terms, an account can only be closed once it’s at zero with no withdrawals pending;
- Ask for the account to be closed by email to [email protected];
- Write to [email protected] and request erasure of your personal data;
- Ask for confirmation of what has been deleted and what is being kept, and why.
It’s important to be realistic about the last step. The notice says data is kept for as long as you hold an account, and longer where legal obligations such as anti-money-laundering rules require it; only when no legal or business need remains is it deleted or anonymised. So some records will probably stay on file for a time even after you’ve gone. That’s worth knowing before you register, not after.
Cookies and Marketing
Two things are entirely in your hands from the first visit. The site uses cookies, tags, pixels and similar technologies; strictly necessary ones run regardless, but the rest need your consent, which you’re asked for when you first arrive and can change later in the Cookie Settings. Marketing works the same way – emails, texts, calls and personalised offers depend on consent, and withdrawing it doesn’t affect anything done before. If you’d prefer a quiet inbox and less tracking, simply decline both at the start.
A closing thought. The notice may be updated as technology and the law change, and it’s on you to look at it again from time to time. Your data is also used to manage risk and support responsible gaming, which is a useful reminder that gambling carries real risk and promises nothing. Before you register, deposit or play, please confirm for yourself that it’s permitted in your jurisdiction – and if you do go ahead, set your cookie and marketing choices first, and keep the Data Protection Officer’s address somewhere safe.