Privacy Policy

What personal data we collect

We collect personal data when you create an account, use our services, contact us, make payments or interact with our website. We only ask for information that is relevant to operating a safe and lawful online casino service. Some information is provided by you, while other information is collected automatically from your device and your use of your account.

Account and identity information

• Your name, date of birth, residential address, email address and other contact details.
• Your account username, account settings, responsible gambling choices and communications with us.
• Identity documents and information used to confirm your identity, age and address when verification is required.
• Information about your source of funds or other financial circumstances where this is needed for compliance, safer gambling or fraud prevention.

Transactions and account activity

We collect details of deposits, withdrawals, winnings, payment activity, bonuses and other account transactions. Payment details may be processed by the relevant payment provider, and we may receive the information needed to confirm and record the transaction. We also keep records of customer support messages, account changes, verification requests and safer gambling interactions.

Device and usage data

When you use our website, we may collect your IP address, device type, operating system, browser details, language settings, approximate location, login information and information about how you use the site. This can include pages visited, session times, error reports and security events. We use this information to keep the website working, protect accounts and understand technical problems.

Why we use your data

We use your personal data to provide the services you request and to operate your account responsibly. We do not use your data for purposes that are incompatible with the reasons explained in this policy.

• To create, maintain and administer your account, including processing deposits, withdrawals and other transactions.
• To provide customer support, respond to your questions and send important service messages.
• To verify your age and identity, confirm account information and meet account security requirements.
• To prevent, detect and investigate fraud, money laundering, theft, payment abuse, collusion and other unlawful or harmful activity.
• To apply responsible gambling controls, understand gambling patterns and help protect customers from gambling-related harm.
• To meet our legal, regulatory, tax, accounting and reporting duties, including responding to lawful requests for information.
• To maintain, secure and improve our website, systems and customer services, and to identify faults or misuse.
• To send information about offers, services or promotions where you have opted in to receive that type of communication.

You can change your marketing choices at any time. Service messages relating to your account, transactions, security or legal obligations may still be sent where they are necessary to provide the service or keep your account safe.

Our legal bases under UK GDPR

UK data protection law requires us to have a lawful reason for using personal data. The reason depends on what we are doing and the information involved. In plain terms, we use the following legal bases:

• Contract: we need to use your data to open and operate your account, provide the services you request and process your transactions.
• Legal obligation: we must use and retain some information to meet gambling, anti-money laundering, fraud prevention, financial, tax, accounting and other legal duties.
• Legitimate interests: we may use data where it is reasonably necessary for security, fraud prevention, service administration, system improvement, customer support and responsible operation of the business. We balance these interests against your rights and expectations.
• Consent: in some cases, we ask for your permission, such as for certain marketing communications or optional cookies. You can withdraw consent at any time, although this does not affect processing that took place before withdrawal.

Where we ask for information that is required to meet a legal duty or provide the contract, you may not be able to open or continue using your account if you do not provide it. We will explain this where it applies.

Who we share your data with

We share personal data only where it is necessary to operate your account, protect our services, meet our legal duties or provide a service on our behalf. We require service providers to handle information securely and only for the purposes we authorise.

• Payment providers, so that deposits and withdrawals can be authorised, processed, confirmed and protected against misuse.
• Identity-verification providers, so that we can confirm your age, identity, address and other account information.
• Fraud-prevention and security providers, which help identify suspicious activity, protect accounts and prevent financial crime.
• Technology, hosting, communications and customer-support providers that help us run the website and provide services to you.
• Professional advisers, auditors or insurers where access is necessary for their work and permitted by law.
• Regulators, law enforcement bodies, courts or other authorities where we are legally required or permitted to disclose information.

We may also share information when necessary to enforce our terms, protect the rights and safety of customers or the public, investigate suspected wrongdoing or establish, exercise or defend legal claims. We do not sell your personal data.

How long we keep your data

We keep personal data for as long as your account is open and for the period required afterwards by applicable law, regulatory requirements, accounting rules, dispute handling needs and our legitimate business purposes. The length of time depends on the type of information and why it was collected.

For example, account, transaction, identity and communications records may need to be retained after an account is closed so that we can meet legal duties, prevent fraud, resolve disputes and demonstrate that we operated the service responsibly. We do not keep data for longer than necessary for the relevant purpose.

When information is no longer needed, we will securely delete it, anonymise it or securely restrict access to it. Some information may remain in secure backups for a limited period while those backups are replaced or deleted through our normal systems.

We use technical and organisational measures to protect personal data from unauthorised access, loss, alteration or disclosure. These measures include access controls, security monitoring and procedures for handling suspected data incidents. No online service can guarantee that security risks will never occur, so please keep your login details confidential and tell us promptly if you suspect unauthorised account activity.

Your privacy rights and cookies

Depending on the circumstances, you have rights over the personal data we hold about you. These rights are subject to legal conditions and exceptions, so a request may not always be granted in full.

• Access: ask for a copy of the personal data we hold about you and information about how we use it.
• Correction: ask us to correct information that is inaccurate or incomplete.
• Erasure: ask us to delete personal data where there is no good reason for us to keep using it.
• Restriction: ask us to limit how we use your data in certain circumstances.
• Objection: object to processing based on our legitimate interests, or object to direct marketing.
• Data portability: ask for certain information in a structured, commonly used and machine-readable format where the law provides this right.
• Withdraw consent: withdraw permission where we rely on consent, without affecting earlier processing.

How to make a privacy request

To use your rights, write to support@goldennugget-casino.co.uk. You can also contact us through the live chat on the site. Please tell us what you are asking for and provide enough information for us to identify your account. We may ask for additional information to confirm your identity before releasing or changing personal data.

We aim to respond within the time required by data protection law. If you are not satisfied with how we handle your personal data or your request, you can complain to the Information Commissioner's Office.

Cookies

We use cookies and similar technologies to keep the website secure, operate account functions, remember preferences, understand site usage and support selected communications. Some cookies are necessary for the service, while others may be optional and controlled through the available settings. For more information about the cookies we use and your choices, please see our Cookie Policy.