Privacy policy: the data behind your account

What we collect

Opening an account requires an email address, a password, your name, date of birth and address. Funding it adds payment details. Verifying it adds a photo ID and a proof of address. Playing adds the obvious: game history, session times, deposits, withdrawals and bonus activity.

We also log technical data — IP address, device and browser type, and the pages you open on this site. That is partly security (an account suddenly signing in from another continent is worth a second look) and partly the ordinary business of keeping a website working.

Why we hold it

Three reasons, and they are not equal in weight.

• Because the law requires it. Anti-money-laundering and licensing rules oblige us to know who our players are, to verify their identity before paying them, and to keep those records. This is not optional and it is not something we can waive for a player who would rather we did not.
• Because the account cannot work otherwise. We cannot process a withdrawal to a person whose identity and payment method are unknown to us.
• Because it keeps the account safe. Login patterns and device data are how unauthorised access is spotted.

Who sees it

Payment processors receive what they need to move money. Identity-verification providers receive your documents in order to check them. Our regulator can require access to account records. Game studios receive gameplay data, not your identity.

Nobody buys your data from us, because we do not sell it. If you have opted in to marketing, you will receive offers from us — and you can opt out from your account settings or from the footer of any email, immediately and without argument.

How long we keep it

Account and transaction records are retained for the period our licence and anti-money-laundering obligations require, which continues for some years after an account is closed. That is why closing an account does not erase its history, and why a request to delete everything cannot always be granted in full — the law that forces us to hold it outranks the preference that we should not.

Data no longer required for a legal purpose is deleted or anonymised.

Your rights

• Ask what we hold about you, and receive a copy.
• Have inaccurate details corrected — worth doing before a payout rather than during one.
• Withdraw marketing consent at any time, without affecting your ability to play.
• Request deletion, subject to the retention obligations above.
• Complain to a data protection authority if you believe we have handled your data improperly.

Requests go through live chat or the email address in your account area, and we will ask you to verify your identity before releasing any personal data — otherwise the request itself becomes an attack vector.

Security and cookies

Traffic runs over SSL, passwords are stored hashed rather than in plain text, and payment card details sit with the processor rather than with us. No system is perfect, and anyone claiming otherwise is overselling; what we can say is that the obvious precautions are all in place.

This site uses cookies to keep you signed in, remember your preferences and measure which pages are actually read. Blocking them in your browser is your call — the site will still work, but a session cookie is what keeps you logged in between pages, so blocking that one specifically will make the account unusable. The homepage explains what the account does once you are inside it.