Last Updated: 24 May 2024
At TweedBet Casino (operating via tweedbetcasino.uk), we are resolutely committed to protecting and respecting your privacy. This Official Privacy Policy details how we, as a licensed online casino operator, collect, store, process, and protect your personal data when you visit our website, register an account, or utilise our gambling services.
Our Casino adheres strictly to the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the rigorous standards mandated by the UK Gambling Commission (UKGC). Please read this document carefully to understand our practices regarding your personal data.
1. Data Controller
For the purposes of applicable data protection legislation, the Data Controller is TweedBet Casino Limited. Whenever we use "we", "us", "our", or "Our Casino" in this policy, we are referring to TweedBet Casino Limited, which is responsible for the security and management of your personal data.
If you have any questions regarding this Privacy Policy or wish to exercise your legal rights, please contact our Data Protection Officer (DPO) at [email protected].
2. The Data We Collect About You
We may collect, use, store, and transfer various kinds of personal data about you, which we have categorised as follows:
- Identity Data: First name, maiden name, last name, username or similar identifier, marital status, title, date of birth, and gender.
- Contact Data: Billing address, residential address, email address, and telephone numbers.
- Financial Data: Bank account and payment card details (note: we do not store full card numbers; these are tokenised and processed by secure PCI-DSS compliant providers).
- Transaction & Gaming Data: Details about payments to and from you, your wagering history, gameplay data, login records, and deposit/withdrawal limits.
- Compliance Data: Information required to meet Anti-Money Laundering (AML) and Know Your Customer (KYC) obligations, such as copies of your passport, driving licence, utility bills, and source of funds declarations.
- Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, and platform.
- Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties, as well as your communication preferences.
3. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- To Fulfil Our Contract: To register you as a new player, manage your account, process bets, and execute deposits and withdrawals.
- To Comply with Legal Obligations: To verify your age and identity, prevent fraud and money laundering, and monitor your account for responsible gambling purposes. Identifying signs of problem gambling is a legal mandate we take very seriously to ensure your safety.
- Legitimate Interests: To improve our website, products/services, marketing, customer relationships, and to protect our business from fraudulent activities.
- Consent: To send you promotional offers, bonuses, and free spin communications (you may withdraw your consent at any time via your account settings).
4. Disclosures of Your Personal Data
To provide our services and fulfil our regulatory obligations, we may share your data with the following third parties:
- Regulatory and Law Enforcement Agencies: Including the UK Gambling Commission (UKGC), the National Crime Agency (NCA), and the Information Commissioner's Office (ICO).
- Identity Verification and AML Agencies: Credit reference agencies and fraud prevention agencies used to verify your identity and ensure the legitimacy of funds.
- Service Providers: Payment gateways, game providers, and IT infrastructure hosting providers operating under strict data processing agreements.
- Responsible Gambling Organisations: In specific circumstances where we believe there is a risk to your wellbeing, we may share limited data with national registers such as GAMSTOP.
5. Data Security
We have implemented state-of-the-art security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. All traffic to and from TweedBet Casino is secured using 256-bit SSL encryption. Furthermore, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know, and they are subject to a strict duty of confidentiality.
6. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. Under UK gambling and AML regulations, we are legally required to retain basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for a minimum of five years after they close their account.
7. Your Legal Rights
Under the UK GDPR, you possess rights concerning your personal data, which include the right to:
- Request access: Obtain a copy of the personal data we hold about you.
- Request correction: Have any incomplete or inaccurate data we hold about you corrected.
- Request erasure: Ask us to delete or remove personal data where there is no good reason for us continuing to process it (subject to our legal data retention obligations).
- Object to processing: Object to processing of your data where we are relying on a legitimate interest (or those of a third party).
- Request restriction: Ask us to suspend the processing of your personal data in certain scenarios.
- Withdraw consent: Withdraw consent at any time where we are relying on consent to process your personal data (e.g., direct marketing).
If you wish to exercise any of the rights set out above, please contact our DPO. You will not have to pay a fee to access your personal data. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
8. Complaints
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). However, we would appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.