Your privacy and your data

This Privacy Policy explains what personal data we at Allbritish Casino collect when you play with us, why we collect it, who we share it with and how long we keep it. It applies to every visitor who registers an account on allbritishcasino.org.uk.

The data we collect

When you open an account, make a deposit or simply browse our site, we collect only the data we need to run the service lawfully and safely. The exact categories depend on how you use Allbritish Casino.

• Identity data: your name, date of birth, email address, phone number and residential address.
• Verification documents: copies of your photo ID (passport or driving licence), proof of address and proof of payment method, required by our KYC checks before your first withdrawal.
• Transaction data: deposits, withdrawals, payment method details and wagering history.
• Technical data: IP address, device identifiers, browser type, operating system and approximate location.
• Gameplay behaviour: games you play, bets placed, session times, wins, losses and bonus usage.
• Marketing preferences: which promotions you opted in to receive and how you interacted with them.

How we use your data

We process your data to create and manage your account, verify your identity under KYC rules, process deposits and withdrawals, and meet our legal and regulatory obligations as a licensed operator.

We also use gameplay and transaction data to detect fraud and money laundering, to monitor responsible-gambling indicators, and to personalise your experience. Marketing messages are sent only where you have consented or where another lawful basis applies.

• Account creation, login and customer support (24/7 via live chat or email).
• Identity verification, AML screening and fraud prevention.
• Payment processing for deposits from £10 and withdrawals of up to £10,000 per day.
• Responsible-gambling monitoring, including deposit and loss limits, session reminders, time-out and self-exclusion tools.
• Marketing and promotions, only with your consent or where permitted.
• Compliance with the MGA licence MGA/B2C/211/2011 and other legal obligations.

Our legal bases for processing

Contract. We process your identity, transaction and gameplay data to perform the agreement you enter when you register with us. Without this data we cannot open or maintain your account.

Legal obligation. Anti-money-laundering and gaming regulations require us to verify your identity, monitor transactions and report suspicious activity to the relevant authorities. This basis covers your verification documents and transaction records.

Legitimate interest. We rely on legitimate interest for fraud prevention, security monitoring, service improvement and aggregated analytics, always balanced against your rights and expectations of privacy.

Consent. Marketing emails, promotional offers and non-essential cookies are processed only with your consent, which you may withdraw at any time without affecting the lawfulness of earlier processing.

How long we keep your data

We retain each category of data only as long as necessary for the purpose it was collected for, or as long as regulators require. Gambling legislation obliges us to keep transaction and account records for at least five years after your account closes, so we cannot delete those on request.

Who we share data with

We never sell your personal data. We share it only with processors and partners who need it to deliver the service, all bound by data-processing agreements that meet GDPR standards.

• Payment processors handling your deposits and withdrawals, such as card schemes, e-wallet and banking providers.
• KYC and AML verification providers that check your documents and screen against sanctions lists.
• Game providers (Evolution, Pragmatic Play, Play'n GO and others) that receive a pseudonymous player identifier for session integrity.
• Regulators and law-enforcement bodies, including the Malta Gaming Authority, where legally required.
• Analytics and IT service providers operating under strict data-processing terms.
• Marketing platform providers, only where you have consented to receive promotions.

Your rights under GDPR

You control your data. Under GDPR you can exercise the following rights at any time, free of charge, by contacting our data protection officer.

If we cannot resolve a privacy concern to your satisfaction, you have the right to lodge a complaint with your national data protection authority.

• Access: obtain a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion where no legal retention duty applies.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdrawal of consent: stop marketing and non-essential cookie processing at any time.
• Complaint: escalate to the relevant data protection authority.

Cookies and similar tracking

Our site uses essential cookies to keep you logged in and secure your sessions, plus optional analytics and marketing cookies that we set only with your consent via the cookie banner.

For the full list of cookies, their purposes and lifespans, see our dedicated Cookies Policy, where you can also change your preferences at any time.

How we protect your data

All traffic between your device and our servers is encrypted with TLS. Data at rest is encrypted, and access to personal data is restricted to trained staff who need it for their role, under strict access controls and audit logging.

If a personal data breach occurs that poses a risk to your rights, we notify the competent supervisory authority within 72 hours and inform affected players without undue delay, as GDPR requires.

Contact our data protection officer

For any privacy question, data request or complaint, write to our data protection officer at [email protected] or reach our support team 24/7 via live chat or [email protected]. We answer data requests within one month of receiving valid identification.

Frequently Asked Questions

Can I delete all my data from Allbritish Casino?

You can request erasure of marketing data immediately. Transaction and KYC records must be kept for at least five years after account closure under gambling regulations, after which they are deleted automatically.

Do you share my data with advertisers?

No. We never sell personal data. Marketing partners only process your data if you have consented to receive promotions, and always under GDPR-compliant agreements.

How quickly do you respond to data requests?

We respond within one month of receiving your request and valid identification, extending by two further months only in complex cases, and we tell you if we do.