Privacy Policy

Last Updated: January 2025

This Privacy Policy explains how CasinoLab ("we", "us", "our") collects, uses, stores, and protects personal data when you use our website at casinolab.click. We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

CasinoLab is an online casino and sports betting platform licensed by the UK Gambling Commission. For the purposes of UK GDPR, CasinoLab is the data controller responsible for your personal data.

If you have questions about how we handle your data, you can contact our Data Protection Officer by email at [email protected].

2. Data We Collect

We collect data in two ways: information you provide directly, and information we gather automatically when you use our site.

2.1 Data You Provide

• Full name, date of birth, and residential address
• Email address and telephone number
• Username, password, and security questions
• Payment details including card numbers and bank account information (processed securely via PCI-DSS compliant providers)
• Identity documents submitted during KYC verification (passport, driving licence, utility bill)
• Correspondence sent to our customer support team

2.2 Data Collected Automatically

• IP address and approximate geolocation
• Device type, browser version, and operating system
• Pages visited, time on site, and click behaviour
• Session duration and referring URLs
• Cookies and similar tracking technologies (see Section 8)

3. How We Use Your Data

We process your personal data for the following purposes:

• Account registration and identity verification (KYC)
• Processing deposits and withdrawals
• Providing customer support and resolving disputes
• Detecting and preventing fraud and money laundering
• Complying with our UKGC licence obligations and responsible gambling requirements
• Sending transactional communications (account notifications, deposit confirmations)
• Sending marketing communications where you have opted in
• Improving site performance and user experience

4. Legal Basis for Processing

We rely on the following legal bases under UK GDPR to process your personal data:

• Contract performance — processing required to provide you with an account and casino services
• Legal obligation — KYC verification, anti-money laundering checks, and UKGC regulatory reporting
• Legitimate interests — fraud prevention, security monitoring, and site analytics
• Consent — marketing emails and optional cookies where we have asked for your agreement

5. Sharing Your Data

We do not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary:

• Payment processors and banking partners for transaction handling
• Identity verification and KYC providers
• The UK Gambling Commission and other regulatory bodies as required by law
• Fraud prevention agencies and credit reference agencies
• IT service providers who process data on our behalf under data processing agreements
• Law enforcement authorities where required by court order or legal obligation

6. Data Retention

We retain account data for a minimum of five years after account closure to comply with anti-money laundering regulations and UKGC licence conditions. Payment records are kept for six years in line with HMRC requirements. Where data is no longer required, we delete or anonymise it securely.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data where no legal obligation requires us to keep it
• Restriction — ask us to limit processing in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests or for direct marketing
• Withdraw consent — withdraw consent for marketing or optional cookies at any time

To exercise any of these rights, email [email protected] with your full name and account email address. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data correctly.

8. Cookies

CasinoLab uses cookies and similar technologies to operate the site and improve your experience. Cookies are small text files stored on your device.

• Essential cookies — required for login sessions, security, and site functionality. These cannot be disabled.
• Analytics cookies — help us understand how users navigate the site. Used with your consent.
• Marketing cookies — used to serve relevant promotions. Used with your consent.

You can manage cookie preferences through your browser settings or through our consent tool. Disabling non-essential cookies will not affect your ability to use the core platform.

9. Security

We use SSL encryption for all data transmitted between your browser and our servers. Sensitive data including payment details is processed through PCI-DSS compliant payment providers. Access to personal data within our organisation is restricted on a need-to-know basis.

10. International Transfers

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the ICO or transfers to countries with an adequacy decision from the UK government.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or by prominent notice on the site. The date at the top of this page reflects when the policy was last revised.

12. Contact

For any data protection queries, contact our Data Protection Officer at [email protected]. For general support, use the live chat on the main platform.