Privacy policy

Information We Collect & Why We Collect It

Operating an online gambling platform in the United Kingdom requires strict adherence to data protection, anti-money laundering, and responsible gambling regulations. To comply with legal obligations and to provide secure services, we collect several categories of personal data.

Personal Identification Information

When you create an account, we may collect:

• Full name
• Date of birth
• Residential address
• Email address
• Phone number
• Government-issued ID (for verification)

This information helps us verify your identity, confirm your age (18+), and comply with UK Gambling Commission (UKGC) regulations.

For more information about UK licensing and compliance standards, see:

Financial Information

To process deposits and withdrawals, we may collect:

• Payment card details (processed securely via encrypted gateways)
• Bank account details
• Transaction history
• Source of funds documentation (where required)

This data is necessary for:

• Secure payment processing
• Anti-money laundering (AML) compliance
• Fraud detection

UK AML requirements are governed in part by HM Treasury and related frameworks. See:

Technical & Usage Data

When you use our platform, we automatically collect:

• IP address
• Device type
• Browser type
• Operating system
• Log files
• Cookies and tracking technologies
• Session duration
• Gameplay patterns

This data helps us:

• Improve website performance
• Prevent fraud
• Ensure responsible gambling protections
• Detect suspicious activity

Responsible Gambling Data

As a UK-facing operator, we are required to monitor gambling behaviour to promote safer play. We may collect:

• Deposit frequency
• Loss patterns
• Time spent playing
• Self-exclusion status
• Interaction records with support

For national self-exclusion schemes, see:

Categories of Data & Legal Basis (UK GDPR)

How We Use & Protect Your Information

Data Usage Principles

We process personal data under the following principles:

• Lawfulness, fairness, transparency
• Purpose limitation
• Data minimisation
• Accuracy
• Storage limitation
• Integrity and confidentiality

These principles are mandated under UK GDPR and enforced by the Information Commissioner’s Office (ICO).

Security Measures

We implement:

• SSL encryption (TLS 1.2+)
• Secure server environments
• Two-factor authentication (2FA)
• Firewalls & intrusion detection systems
• PCI-DSS compliant payment processors
• Restricted internal data access

Data Retention

We retain personal data only as long as necessary for:

• Legal compliance (e.g., AML regulations)
• Tax and accounting obligations
• Regulatory audit requirements

UK gambling license conditions may require retention periods of up to 5 years or more.

Interactive Data Flow Overview

Below is a visual representation of how your data moves within our system.

Data Sharing & International Transfers

We may share data with:

• Payment providers
• Identity verification services
• AML monitoring providers
• Fraud prevention agencies
• UK regulators

All third parties are required to:

• Maintain confidentiality
• Implement appropriate safeguards
• Comply with UK GDPR

International transfers (if applicable) are conducted using:

• Standard Contractual Clauses
• Adequacy decisions
• Binding corporate rules

Third-Party Categories & Safeguards

Your Rights Under UK GDPR & How to Contact Us

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, individuals located in the United Kingdom are granted specific rights regarding their personal data. Monopoly Casino is committed to ensuring that these rights are respected, facilitated, and processed within statutory timeframes.

Your Data Protection Rights

You have the right to:

Right of Access

You may request confirmation of whether we process your personal data and obtain a copy of the information we hold about you.

Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to request correction.

Right to Erasure (“Right to Be Forgotten”)

You may request deletion of your personal data where:

• The data is no longer necessary for its original purpose
• You withdraw consent (where applicable)
• Processing is unlawful
• We are legally required to erase the data

Please note that regulatory retention requirements under UK gambling and AML legislation may override deletion requests for specific time periods.

Right to Restrict Processing

You may request limitation of data processing under certain circumstances, such as when accuracy is contested or processing is unlawful.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to request transfer to another provider where technically feasible.

Right to Object

You may object to processing based on legitimate interests, including profiling or direct marketing communications.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the UK supervisory authority: <a href=»https://ico.org.uk/» rel=»nofollow noopener noreferrer» target=»_blank»> Information Commissioner’s Office (ICO) </a>

How to Exercise Your Rights

To exercise any of your rights, please contact our Data Protection Team using the details below. We may request identity verification before fulfilling certain requests to protect your privacy and prevent unauthorized disclosures.

Contact Details

Email:
[email protected]

Telephone:
+44 20 7946 0832

We aim to respond to all legitimate data protection requests within one calendar month, as required under UK GDPR. If a request is complex or numerous, we may extend the response period in accordance with applicable law, and you will be notified accordingly.

Regulatory Oversight

Monopoly Casino operates in alignment with UK regulatory expectations and data protection frameworks. For further information about gambling compliance standards, you may refer to:

Identity Verification Before Disclosure

To safeguard your data, we may require reasonable verification measures before providing access, correction, or deletion of personal information. This may include submission of identity documentation or confirmation of account details.

We will never charge a fee for responding to a legitimate request unless it is manifestly unfounded, excessive, or repetitive.