Privacy Policy at Gamblits Casino
This Privacy Policy explains what personal data we collect when you play at Gamblits Casino, why we collect it, how long we keep it and the rights you hold over it. We operate under licence ALSI-202501157-FI3 issued by the Anjouan authority and apply GDPR-aligned standards to every player account.
The Data We Collect
We collect only the data needed to run your account, verify your identity and meet our regulatory duties. When you register, we ask for your full name, email address, phone number, date of birth and residential address.
- Identity data: name, date of birth, nationality, residential address, email, phone number.
- Verification documents: government-issued ID, proof of address no older than 3 months, payment method confirmation.
- Transaction data: deposits, withdrawals, bets, winnings, bonuses claimed, payment method details.
- Technical data: IP address, device type, operating system, browser, language preference, session timestamps.
- Gameplay behaviour: games played, wagering patterns, session length, responsible-gambling indicators.
- Marketing preferences: which channels you consented to and which promotions you engage with.
How We Use Your Data
Every use of your data maps to a specific purpose. We create and manage your account, process deposits and withdrawals, verify your identity before your first payout, and monitor activity for fraud and money laundering.
We also use gameplay data to support responsible gambling, including enforcing deposit limits, loss limits and self-exclusion requests you have made. Marketing messages go out only where you have consented, and you can withdraw that consent at any time from your account settings or by contacting support at [email protected].
- Account creation, login and account administration.
- KYC verification before your first withdrawal.
- Payment processing for deposits and payouts of up to £5,500 per day.
- Fraud prevention, AML monitoring and dispute handling.
- Responsible-gambling monitoring and enforcement of your limits.
- Marketing communications, strictly with your consent.
- Compliance with legal and regulatory obligations.
Our Legal Bases
Contract. Processing your identity, transaction and gameplay data is necessary to perform our agreement with you: without it we cannot open an account, accept a £20 minimum deposit or pay out winnings.
Legal obligation. Anti-money-laundering and gambling regulations require us to verify your identity, retain transaction records for at least 5 years and report suspicious activity to the relevant authorities.
Legitimate interest. We rely on legitimate interest for fraud prevention, security monitoring, service improvement and aggregate analytics, always balanced against your rights and limited to what is necessary.
Consent. Marketing emails, SMS and promotional push messages are sent only with your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing already carried out.
How Long We Keep It
Retention depends on the type of data and the reason we hold it. We never keep personal data longer than the purpose requires, and we delete or anonymise it when the retention period ends.
| Data category | Retention period |
|---|---|
| KYC verification documents | 5 years after account closure |
| Transaction and wagering records | Minimum 5 years, per regulatory requirements |
| Account and identity data | Duration of the account, then 5 years |
| Marketing preferences and consents | Until you withdraw consent or request deletion |
| Technical and device logs | Up to 12 months, then deleted or anonymised |
| Support correspondence | Up to 3 years after the final exchange |
Sharing With Third Parties
We never sell your personal data. We share it only with parties who help us operate Gamblits Casino, each bound by data-processing agreements that prohibit use of your data for their own purposes.
- Payment processors handling Visa Debit, Mastercard Debit, PayPal, Skrill, Neteller, Trustly and cryptocurrency transactions.
- KYC and AML verification providers that check your ID documents and address proof.
- Game and platform providers that receive only the technical identifiers needed to deliver gameplay.
- The Anjouan licensing authority and other regulators, where reporting is legally required.
- Analytics providers that help us understand site usage in aggregate.
- Professional advisers such as auditors and lawyers, under confidentiality obligations.
Your Rights Over Your Data
You control your personal data. Submit any request through [email protected] or via live chat, available 24/7. We respond within one month and may ask for ID to confirm you are the account holder.
If you believe we have mishandled your data, you may lodge a complaint with your national data protection authority. Exercising any right below is free and never affects your gameplay or balances.
- Access: obtain a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion where no legal retention duty applies.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing communications at any time.
- Right to complain: escalate to your data protection authority.
Cookies and Tracking
We use cookies to keep you logged in, remember your currency preference and measure site performance. Essential cookies run by default; analytics and marketing cookies load only after you accept them in the cookie banner, and you can change your choices at any time.
Full details of each cookie category, its purpose and lifespan are set out on our dedicated Cookies Policy page.
Security Measures We Apply
All traffic between your device and our servers is encrypted with TLS, and stored payment credentials are held in tokenised form, never as raw card numbers. Access to player data is restricted to trained staff who need it for their role, with every access logged and reviewed.
If a personal data breach occurs that risks your rights, we notify the competent supervisory authority within 72 hours and inform affected players directly where the risk is high.
Frequently Asked Questions
How do I request a copy of my data?
Email [email protected] with the subject line Data Access Request. We verify your identity and send your data in a machine-readable format within one month.
Can I delete my account and all my data?
Yes. We delete account and marketing data on request, but transaction and KYC records must be retained for at least 5 years after account closure to comply with gambling and AML regulations.
Do you share my data with game providers?
Only the minimum technical identifiers required to deliver gameplay. Providers never receive your full KYC documents or payment details.
How do I stop marketing messages?
Withdraw consent in your account settings, click the unsubscribe link in any email, or ask our 24/7 live chat team. Processing stops immediately.