Privacy Policy for Genting Casino Bournemouth under UK GDPR

1. Introduction

This Privacy Policy sets out how Genting Casino Bournemouth collects, uses, stores, shares and protects personal data relating to individuals who interact with the service. It applies to customers, registered account holders and visitors who provide personal information in connection with casino operations.

Genting Casino Bournemouth acts as the data controller for personal data processed under this policy. Data processing activities are conducted in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where operations are subject to oversight by the UK Gambling Commission, applicable licence conditions are also observed, including those relating to fair and transparent terms and practices.

Questions about the handling of personal data or requests to exercise rights under UK GDPR may be directed to the Data Protection Officer at [email protected].

2. Personal Data Collected

The following categories of personal data are collected and processed, depending on the nature of the interaction:

Identity and contact data: full name, date of birth, address, email address, telephone number
Account information: username, account history, login records
Transactional data: payment records, transaction amounts, dates
Gambling activity data: betting history, session data, game participation records
Compliance and regulatory data: identity verification documents, source of funds information, anti-money laundering (AML) and counter-terrorism financing (CTF) records
Responsible gambling data: self-exclusion records, affordability assessments, interaction flags
Technical data: IP address, device identifiers, browser type, cookie data
Marketing preferences: communication opt-in or opt-out status

Sensitive personal data as defined under Article 9 of UK GDPR is not knowingly collected or processed unless required by law or processed with explicit consent.

3. Lawful Bases for Processing

Personal data is processed only where a lawful basis exists under UK GDPR. The main bases relied upon are:

Performance of a contract: processing necessary to operate an account, verify identity and provide access to services
Compliance with a legal obligation: processing required to meet obligations under gambling legislation, anti-money laundering regulations and other applicable law
Legitimate interests: processing for fraud prevention, security monitoring and protection of operations and customers, where such interests are not overridden by the rights and freedoms of the data subject
Consent: in specific cases such as certain marketing communications or non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal

4. Use of Personal Data

Personal data is used for the following purposes:

Creating and managing accounts and verifying identity in line with legal and regulatory obligations
Processing transactions and maintaining accurate financial records
Monitoring gambling activity for responsible gambling compliance, including identifying patterns that may indicate harm and applying self-exclusion or other intervention measures where required
Conducting anti-money laundering and counter-terrorism financing checks as required by law
Detecting and preventing fraud, cheating and other unlawful activity
Communicating about accounts, including service updates and responses to enquiries
Sending marketing communications where consent has been provided or where there is a legitimate interest and no opt-out has been exercised
Complying with requests from regulators, law enforcement or other authorities with lawful authority to require disclosure

Personal data is not sold. Data is shared only where necessary and only with the following categories of recipients:

Group companies within the Genting UK structure, where relevant to the operation of accounts or compliance obligations
Payment processors and financial institutions involved in processing transactions
Identity verification and fraud prevention service providers
Responsible gambling service providers, including operators of self-exclusion schemes such as GAMSTOP
Regulators and law enforcement authorities, including the UK Gambling Commission and the Information Commissioner’s Office (ICO), where disclosure is required or permitted by law
Legal and professional advisers where necessary for the conduct of legal proceedings or regulatory matters

All third parties with whom data is shared are required to handle that data in accordance with applicable data protection law.

6. Data Retention

Personal data is retained for as long as necessary to fulfil the purposes for which it was collected and in accordance with legal and regulatory obligations. In practice, this typically involves retaining account and transaction records for a defined period following account closure or the end of the business relationship. Retention periods may be extended where data is required in connection with ongoing legal proceedings, regulatory investigations or dispute resolution.

When data is no longer required, it is deleted or anonymised in a secure manner.

Under UK GDPR, data subjects have the following rights in relation to their personal data:

Right to be informed: to receive clear information about how personal data is processed, as set out in this policy
Right of access: to request a copy of the personal data held (Subject Access Request)
Right to rectification: to request correction of inaccurate or incomplete personal data
Right to erasure: to request deletion of personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected
Right to restriction of processing: to request limitation of processing in certain circumstances
Right to data portability: to receive personal data in a structured, commonly used format and, where technically feasible, have it transmitted to another controller in certain circumstances
Right to object: to object to processing based on legitimate interests, including direct marketing
Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time

To exercise any of these rights, contact the Data Protection Officer at [email protected]. Verified requests will be handled within one month of receipt, in accordance with UK GDPR requirements.

8. Cookies and Technical Data

Cookies and similar tracking technologies are used on digital platforms operated by Genting Casino Bournemouth. Non-essential cookies are only placed with the user’s consent. Cookie preferences may be managed at any time through the relevant settings on the site.

Further details on the types of cookies used and their purposes are provided in a separate Cookie Notice.

9. Complaints

If there are concerns about the handling of personal data, a complaint may be raised with the UK Information Commissioner’s Office (ICO), the supervisory authority for data protection in the United Kingdom. The ICO can be contacted via ico.org.uk or by telephone using the ICO helpline.

Before contacting the ICO, users are encouraged to contact Genting Casino Bournemouth directly so that the issue can be addressed at a local level where possible.

10. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in data processing activities, legal obligations or regulatory requirements. The current version of the policy is made available on the website. Where changes are material, reasonable steps will be taken to notify users.

11. Contact

Data Protection Officer
Genting Casino Bournemouth
Email: [email protected]

Privacy Policy for Genting Casino Bournemouth