Personal data processing conducted under the EU GDPR, directly applicable to players resident in Ireland.
Five categories cover the full scope of collection:
Collection does not extend beyond these categories.
GDPR permits processing only on defined grounds. The mapping used:
| Processing purpose | GDPR basis |
|---|---|
| Account operation, gameplay, payouts | Contract |
| Age verification and KYC | Legal obligation |
| Anti-fraud and anti-money-laundering controls | Legal obligation / legitimate interest |
| Responsible gambling oversight | Legal obligation / legitimate interest |
| Platform security and improvement | Legitimate interest |
| Marketing communications | Consent, revocable at any time |
Revoking marketing consent halts promotional contact without any effect on account standing.
Cookies serve session persistence, preference storage, security and analytics. Essential cookies are a functional prerequisite — disabling them prevents login and play. Non-essential cookies are controllable through standard browser settings.
Disclosure is confined to operational necessity: payment providers receive transaction data required for processing; KYC services receive verification documents to discharge legal identity-check duties; public authorities receive data only under legal compulsion. Personal data is not sold.
Protective measures include SSL encryption of all data in transit and role-restricted internal access to personal data.
Retention follows purpose. Account and transaction records persist for the post-closure periods that anti-money-laundering and licensing rules prescribe. Marketing data is deleted upon consent withdrawal. Data with no remaining legal retention ground is erased or irreversibly anonymised.
Every account holder may exercise, at any time and free of charge:
Responses are issued within GDPR's statutory timeframe, ordinarily one month. Complaints may additionally be lodged with a supervisory authority; for Irish residents, the Data Protection Commission.
Requests should be directed to [email protected] or raised via 24/7 live chat, quoting the account's registered email address. Identity confirmation precedes any data release — a control that exists to prevent disclosure to impersonators.