Privacy Policy

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices you have. It applies to our website, account services, and related features. If you have questions or wish to exercise your rights, contact us at [email protected].

Information we collect

We collect information to create and manage your account, provide services, meet legal obligations, and improve our services. The information we may collect includes:

Account and contact information: name, date of birth, email address, phone number, and username.
Registration and verification data: identity and address information you provide to verify your account, including identity documents and photographs where identity checks are required.
Credentials: password and authentication data used to secure your account.
Profile and preferences: language, communication preferences, marketing choices and settings you select.
Device and technical data: IP address, device identifiers, browser type, operating system, mobile identifiers, and technical logs.
Usage and interaction data: pages visited, features used, connection times, and other site activity to help us operate and improve the service.
Communications: copies of your correspondence with us, and records of calls or chats where relevant to service delivery or security.

How we use your information

We use the information we collect for the following purposes:

To set up and manage your account and to provide the services you request.
To verify your identity and comply with legal and regulatory obligations.
To operate, maintain, and improve our website, products, and services.
To monitor and protect our systems, prevent fraud, and keep accounts secure.
To communicate with you about account matters, updates, and support requests.
To send marketing communications where you have given consent or where allowed by law, and to personalise offers and promotions if you opt in.
To support responsible use of our services, including tools such as deposit limits, time-outs, and self-exclusion.
To meet legal obligations and cooperate with regulators, law enforcement, or dispute resolution processes when required.

Legal bases for processing (GDPR)

When we process your personal data under GDPR, we rely on one or more of these lawful bases:

Performance of a contract: to provide the services you request and to administer your account.
Legal obligation: to comply with laws and regulatory requirements that apply to our operations.
Legitimate interests: for fraud prevention, security, business operations, and service improvement, balanced against your rights and freedoms.
Consent: where required for certain activities such as marketing communications or specific verification checks. You can withdraw consent at any time where processing is based on consent.

Sharing and disclosure of data

We may share your personal information with third parties where necessary to provide services, comply with legal obligations, protect rights, or where you have given consent. Such recipients may include:

Providers of services who support our operations (for example, technical and IT service providers, data hosting and analytics providers).
Regulators, legal advisors, courts, or law enforcement where disclosure is required by law.
Fraud prevention, security, and compliance services to detect and prevent unlawful activity and misuse of our services.
Third parties you authorise to access your account or information.

We require third parties who process personal data on our behalf to apply appropriate safeguards and to process data only in accordance with our instructions.

International transfers

Your data may be transferred to and processed in countries outside the United Kingdom or the European Economic Area. Where transfers occur, we will put in place appropriate safeguards such as standard contractual clauses, ensure an adequate level of protection, or rely on other lawful transfer mechanisms to protect your personal data.

Data retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, to comply with legal obligations, to resolve disputes, and to enforce our agreements. When information is no longer required, we securely delete it or anonymise it so it can no longer be associated with you.

Your rights

Under applicable data protection laws, including the GDPR, you have certain rights in relation to your personal data. These include the right to:

Request access to the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data where we no longer have a lawful basis to process it.
Request restriction of processing where you contest accuracy or the processing is unlawful.
Object to processing based on legitimate interests, including profiling for direct marketing.
Request portability of certain personal data you have provided to us in a structured, commonly used format.
Withdraw consent at any time where processing is based on consent (this does not affect processing already carried out lawfully).

To exercise your rights, contact us at [email protected]. We may ask for information to verify your identity before responding to requests. You also have the right to lodge a complaint with a data protection supervisory authority.

Security

We take reasonable measures to protect personal information from unauthorised access, loss, misuse, and alteration. These measures include technical controls such as encryption and access controls, and organisational measures such as staff training and policies. While we strive to protect your data, no system is completely secure, and we cannot guarantee absolute security.

Cookies and similar technologies

We use cookies and similar technologies to make our website work, to analyse site usage, and to support personalised content and marketing (where authorised). Cookies fall into categories such as:

Necessary/essential cookies for core site functions.
Performance and analytics cookies to understand how the site is used and to improve it.
Functional cookies to remember your preferences.
Marketing cookies to deliver relevant content and advertising where you have consented.

You can manage cookie preferences through our cookie settings and via your browser controls. Disabling some cookies may affect how the site functions.

Automated decision-making and profiling

We may use automated systems to help detect fraud, to support responsible-use tools, and to personalise offers. Where automated processing produces a legal effect or similarly significant impact, we will inform you and explain the logic, significance and possible consequences. You may have the right to request human review of such decisions and to object to profiling in certain circumstances.

Children’s privacy

Our services are intended for adults only. We do not knowingly collect personal data from anyone under 18. If we become aware that we hold personal data of a person under 18, we will take steps to delete it unless retention is required by law.

Changes to this policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the effective date and, where appropriate, notify you of significant changes through our website or by other means.

Contact us

If you have questions about this Privacy Policy or wish to exercise your rights, contact our privacy team at [email protected]. Please provide sufficient information for us to identify you and process your request.