Our Privacy Policy Explained
This Privacy Policy explains what personal data we collect when you play at Casinolab Casino, why we collect it, how long we keep it and the rights you hold over it. It applies to every visit to casinolab-casino.uk and every account you hold with us.
What Data We Collect
Categories of personal data
To open and operate your account we collect the following categories of information. We only request what is necessary for the purposes described in this policy.
- Identity data: your full name, date of birth, email address, telephone number and residential address.
- Verification documents: government-issued ID, proof of address and payment method verification, required under our KYC procedure before your first withdrawal.
- Transaction data: deposits, withdrawals, bonuses claimed, wagering records and game outcomes.
- Technical data: IP address, device identifiers, browser type, operating system and approximate location derived from your IP.
- Gameplay behaviour: bets placed, games played, session duration, win and loss history, and responsible-gambling indicators.
- Marketing preferences: which channels you consent to receive promotions through, and your opt-in and opt-out history.
How We Use Your Data
We process your personal data for a defined set of purposes, each tied to a legal basis set out below. We never sell your data or use it for purposes outside this list without telling you first.
- Creating and managing your player account and authenticating your logins.
- Carrying out KYC and anti-money-laundering checks, including verification of ID, address and payment method.
- Processing deposits and withdrawals and preventing payment fraud.
- Monitoring play for responsible-gambling purposes, including reality checks and self-exclusion enforcement.
- Sending you marketing messages where you have consented, and honouring your opt-outs.
- Meeting legal and regulatory obligations, including reporting to the licensing authority.
Our Legal Bases for Processing
Contract
We process your data to perform the contract between us when you register, deposit and play. Without identity and transaction data we cannot provide your account or pay out winnings.
UK gambling regulation and AML law require us to verify your identity, retain transaction records for at least five years and report suspicious activity. These obligations override deletion requests for the affected data.
We rely on legitimate interest for fraud prevention, security monitoring, service improvement and aggregated analytics. We balance these interests against your rights and keep the processing proportionate.
Marketing emails, SMS and promotional free spin offers are sent only with your consent. You may withdraw consent at any time without affecting the lawfulness of earlier processing.
How Long We Keep It
We retain each category of data only as long as necessary for the purpose it was collected for, subject to regulatory minimums. Identity and transaction records are held for a minimum of five years after account closure, as required for audit and AML purposes.
| Data category | Retention period |
|---|---|
| Identity and account data | 5 years after account closure |
| Transaction and wagering records | 5 years after account closure, regulatory minimum |
| KYC verification documents | 5 years after account closure |
| Technical and device data | Up to 13 months |
| Marketing preferences | Until you withdraw consent or object |
| Support correspondence | 2 years after resolution |
Who We Share Data With
We share personal data only with parties who need it to deliver our service, and always under data processing agreements that meet UK GDPR standards. Categories of recipients include:
- Payment processors handling your Visa Debit, Mastercard, e-wallet and crypto transactions.
- KYC and AML verification providers that check your identity documents and screening status.
- The Curaçao licensing authority and other regulators where reporting is legally required.
- Analytics and hosting providers operating under strict data processing terms.
- Game providers where outcome data must be reconciled, limited to the minimum necessary.
- Professional advisers such as auditors and lawyers, and authorities where disclosure is compelled by law.
Your Rights Over Your Data
Under UK GDPR you hold the following rights over your personal data. To exercise any of them, contact our data protection officer using the details below; we respond within one month.
- Access: obtain a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion where no legal obligation requires retention.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest, including profiling.
- Withdrawal of consent: stop marketing at any time via account settings or unsubscribe links.
- Complaint: lodge a complaint with the Information Commissioner's Office (ico.org.uk).