Privacy Policy

We collect information that is needed to create and operate your account, process your activity and meet our legal and security responsibilities. Some information is provided by you directly. Other information is created when you use our website, cashier or customer support services.

The information we may collect includes the following:

• Account details, such as your name, date of birth, address, email address, username and other details needed to set up and manage your account.
• Identity and age information, including documents or information used to confirm who you are, your age and your entitlement to use our services.
• Transaction details, including deposits, withdrawals, payment information, account balances, game activity and records of transactions made through your account.
• Communications, including messages sent to our support team, records of live chat conversations and information you provide when you ask us for help.
• Device and usage data, such as your IP address, device type, browser, operating system, general location information, login details, pages viewed, actions taken and information about how you use our website.
• Account and safer gambling information, including limits, time-outs, self-exclusion choices and other settings or information needed to support your use of the service.

You should provide information that is accurate and keep it up to date. We may ask you to provide additional information or documents if your details change, if we need to complete an identity check, or if a transaction or account activity requires further information.

Please do not send information that we have not asked for. If you provide personal data about another person, you must have a lawful reason and permission to share it with us where this is required.

We use personal data for clear and necessary purposes connected with providing our services. We do not use your information for purposes that are incompatible with the reason it was collected unless the law allows us to do so.

1. To create, maintain and administer your account, including helping you sign in, updating your details and providing customer support.
2. To process deposits, withdrawals and other transactions, and to keep accurate financial and account records.
3. To verify your age and identity, confirm that your account information is accurate and carry out the checks needed before or during the use of our services.
4. To prevent, identify and investigate fraud, money laundering, theft, abuse of our services and activity that may breach our terms or applicable law.
5. To meet legal, regulatory, accounting, tax, reporting and responsible gambling duties that apply to our services.
6. To protect the security of our website, systems, staff, customers and business, including detecting unusual activity and managing access to your account.
7. To understand how our website and services are used, maintain performance, fix faults and improve the way our systems work.
8. To send information about offers or services where you have opted in to receive those communications. You can change your communication choices or withdraw consent at any time.
9. To respond to questions, complaints, rights requests and other messages you send to us.

If you choose not to provide information that is necessary for an account, identity check, payment or legal obligation, we may be unable to open or maintain your account, process a transaction or provide part of the service. We will explain what is needed where this affects you.

UK GDPR requires us to have a lawful basis before we use personal data. The basis depends on what we are doing and why the information is needed. In plain terms, our main bases are:

• Contract: we need to use certain information to open and operate your account, provide the services you request, process transactions and apply the terms that govern your account.
• Legal obligation: we use information when the law requires us to do so. This may include age and identity checks, records of transactions, fraud prevention, money laundering controls, safer gambling duties and responding to lawful requests.
• Legitimate interests: we may use information where it is reasonable and necessary for us to run, secure and improve our services, protect our customers, prevent misuse and manage our business. Before relying on this basis, we consider your interests, rights and expectations.
• Consent: in some situations, we ask for your permission, such as where we send certain marketing communications or use optional cookies. You can withdraw consent at any time. Withdrawal does not affect processing that took place before you withdrew it.

Where we use your information for more than one purpose, more than one legal basis may apply. We may also use information where it is necessary to establish, exercise or defend legal claims, or where another lawful basis under UK GDPR applies.

Our services are for people aged 18 or over. We use age and identity information to help confirm that customers meet this requirement. If we identify information suggesting that an account may have been used by someone under 18, we may suspend the account and carry out appropriate checks.

Who may receive your data

We share personal data only where there is a lawful reason and where the information is needed for a stated purpose. We take steps to ensure that recipients handle your information securely and consistently with applicable data protection requirements.

• Payment providers: to process deposits and withdrawals, verify payment activity, prevent payment fraud and resolve transaction issues.
• Identity-verification providers: to help confirm your identity, age and account information using the documents or details needed for the relevant check.
• Fraud-prevention and security providers: to identify suspicious activity, protect our systems, prevent misuse and support investigations.
• Service providers: where needed to provide technical, operational, customer support, hosting, communications or security services on our behalf.
• Regulators, law enforcement and public authorities: where disclosure is required or permitted by law, or where it is needed to prevent or investigate crime, fraud or other unlawful activity.
• Professional advisers and other authorised recipients: where necessary for legal, accounting, compliance, insurance or business administration purposes, subject to appropriate safeguards.

We do not sell your personal data. We may combine information from your account, transactions, device and usage activity where this is necessary for security, legal compliance, service administration or other purposes explained in this Privacy Policy.

How long we keep your data

We keep personal data for as long as your account is open and for the period required afterwards by law, regulatory duties, accounting requirements, dispute handling, fraud prevention or the establishment and defence of legal claims. The exact period depends on the type of information and the reason it was collected.

When information is no longer needed, we delete it or make it anonymous so that it can no longer be connected to you. Some information may remain in secure backups for a limited period while those backups are replaced or securely deleted. If you close your account, we may still retain certain records for the period required by law.

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration or disclosure. No online service can guarantee complete security, so you should keep your login details private and contact us promptly if you think your account has been accessed without permission.

Your data protection rights

Subject to legal conditions and exceptions, you may have the following rights under UK data protection law:

• Access: ask for a copy of the personal data we hold about you and information about how we use it.
• Correction: ask us to correct information that is inaccurate or complete information that is incomplete.
• Erasure: ask us to delete personal data where there is no good reason for us to continue using it. This right is not absolute, and we may need to keep information to meet legal or other valid requirements.
• Objection: object to certain uses of your personal data, including uses based on legitimate interests or direct marketing.
• Restriction: ask us to limit how we use your information in certain circumstances, such as while the accuracy of information is being checked.
• Data portability: where the legal requirements are met, ask to receive certain information in a structured, commonly used and machine-readable format.
• Withdraw consent: where we rely on your consent, withdraw it at any time. This does not affect the lawfulness of use before consent was withdrawn.

To use your rights, write to support@goodwin-casino.co.uk. For privacy-specific questions, you may also write to privacy@goodwin-casino.co.uk. We may ask for information needed to confirm your identity before completing a request. This protects your personal data and helps prevent unauthorised access.

We aim to respond within the time required by applicable law. If you are unhappy with how we use your information, please contact us first so that we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office.

Cookies

We use cookies and similar technologies to operate our website, remember choices, maintain security, understand usage and support certain features. Some cookies are necessary for the website and account to work, while others may be optional. More information about the types of cookies we use and the choices available to you is set out in our Cookie Policy.

Contacting us

If you have a question about this Privacy Policy, your account information or the way we handle personal data, contact us at support@goodwin-casino.co.uk or use the live chat on the site. We may update this Privacy Policy when our services, legal obligations or data handling practices change. The current version applies from the date it is made available on the site.