Privacy Policy

What personal data we collect

We collect and use information needed to provide your account, process transactions, meet our legal responsibilities and keep our services secure. We collect information you give us directly, information created when you use your account, and information supplied by providers that help us verify payments, identity or account security.

Account and verification information

• Account details, such as your name, date of birth, email address, username, address and other information submitted during registration or account management.
• Identity documents and verification information, including documents or details used to confirm your identity, age and eligibility to use our services.
• Communications, such as messages sent to customer support, live chat records, complaints, requests and information you provide when you ask us for help.
• Preferences and permissions, including your marketing choices, privacy selections and other settings connected with your account.

Transactions, devices and account use

We collect transaction information, including deposits, withdrawals, payment details, account balances, transaction history and related checks. We do not need to hold your full payment credentials where a payment provider processes them on our behalf, but we may receive information needed to confirm a payment or resolve a payment issue.

When you visit or use our services, we may collect device and usage data. This can include your IP address, browser type, device information, operating system, login times, pages or features used, account activity, error information and similar technical data. We may also collect information from cookies and related technologies, as explained below.

You should provide accurate information and keep it up to date. We may ask for further information if the details on your account are incomplete, inconsistent or need to be confirmed.

Why we use your data and our legal bases

We use personal data only for clear and lawful purposes connected with operating our services, managing your account and meeting our responsibilities. The purpose for which we use information determines the legal basis under the UK General Data Protection Regulation (UK GDPR).

• To provide your account and services. We use your data to create and manage your account, process deposits and withdrawals, provide customer support, record account activity and administer the services you request. This is necessary to perform our contract with you.
• To verify age and identity. We use account details and identity documents to confirm that you are eligible to use our services and that your account information is accurate. We do this to comply with legal and regulatory requirements.
• To prevent fraud, money laundering and misuse. We use information to identify suspicious activity, protect accounts, investigate payment concerns, enforce our terms and reduce risks to you and our services. This may be necessary to meet legal duties and may also be based on our legitimate interests in protecting our business and customers.
• To meet legal duties. We may keep records, respond to lawful requests, carry out required checks and provide information to competent authorities where the law requires it. The legal basis is compliance with a legal obligation.
• To improve security and service operation. We use technical and usage data to maintain our systems, diagnose errors, monitor security, manage capacity and improve how our services operate. We generally rely on legitimate interests, while considering your rights and expectations.
• To send optional offers and information. We send marketing communications only where we have a lawful basis to do so, including where you have opted in. You can withdraw your permission or change your marketing choices at any time. Stopping marketing does not affect essential service messages about your account or transactions.

What the legal bases mean

A contract basis means we need the information to provide the account or service you have requested. A legal obligation basis means a law requires us to collect, use or keep the information. Legitimate interests means we have a reasonable business or security purpose, and we have considered whether that purpose is fair and proportionate to your rights. Consent means you have chosen to allow a specific use, such as certain optional marketing or cookies. Where we rely on consent, you can withdraw it, although this does not affect processing that took place before withdrawal.

Some information is necessary for us to open or maintain an account. If you do not provide information needed for identity, age, payment or legal checks, we may be unable to provide all or part of the services.

Who we share your personal data with

We share personal data only where there is a lawful reason and only the information needed for the relevant purpose. We use confidentiality, security and contractual requirements to help ensure that recipients handle information appropriately.

• Payment providers and financial service providers receive transaction and account information needed to process deposits and withdrawals, confirm payments, manage payment risks and resolve disputes.
• Identity-verification providers may receive identity details and documents needed to confirm your age, identity and account information.
• Fraud-prevention and security partners may receive device, transaction and account information to identify suspicious behaviour, protect our services and prevent misuse.
• Technology, hosting and support providers may process information while providing systems, communications, customer support, security or other services on our behalf.
• Regulators, law enforcement bodies and other authorities may receive information where disclosure is required by law, a lawful request or a legal process.

We may also share information with professional advisers where this is necessary for legal, accounting, compliance, security or business purposes. We do not share more information than is reasonably needed for the relevant purpose. Where another organisation processes information for us, we require it to follow appropriate instructions and safeguards.

How long we keep data and protect it

We keep personal data for as long as your account is open and while it is needed to provide services, handle questions, maintain records or manage an ongoing issue. After an account is closed, we keep certain information for the period required by law and for other legitimate purposes, such as preventing fraud, resolving disputes, enforcing our terms and demonstrating that we met our legal responsibilities.

Different types of information may be kept for different periods. Identity, transaction, payment, account and compliance records can be subject to longer retention requirements. When information is no longer needed, we delete it, anonymise it or securely dispose of it in accordance with our retention procedures. Information held in secure backups may remain until those backups are replaced or securely deleted.

We use administrative, technical and physical safeguards designed to protect personal data from unauthorised access, loss, misuse, alteration or disclosure. These safeguards can include access controls, authentication, secure transmission, monitoring and staff guidance. You are responsible for keeping your account credentials confidential and should contact us promptly if you think your account or information may have been compromised. No online service can be guaranteed to be completely secure.

If we make a material change to this Privacy Policy, we may provide notice through the services or by another appropriate method. The current version applies whenever you use your account, subject to any rights you have under applicable law.

Your rights, choices and cookies

You have rights over the personal data we hold about you, subject to legal conditions and exceptions. These rights can include:

• Access: you can ask for a copy of your personal data and information about how we use it.
• Correction: you can ask us to correct information that is inaccurate or complete information that is incomplete.
• Erasure: you can ask us to delete personal data where there is no lawful reason for us to continue using it.
• Restriction: you can ask us to limit how we use your information in certain circumstances.
• Objection: you can object to processing based on legitimate interests and, in particular, object to direct marketing.
• Data portability: where the legal conditions apply, you can ask to receive certain information in a structured, commonly used and machine-readable format.
• Withdrawal of consent: where we rely on your consent, you can withdraw it at any time.

To use your rights, write to support@rollbit-casino.co.uk and explain what you are asking us to do. You may also contact us through the live chat on the site for help with your request. We may need to confirm your identity before providing information or making changes, so that we do not disclose personal data to the wrong person. We will respond within the time required by applicable data protection law. If you are not satisfied with how we handle your personal data, you can complain to the Information Commissioner's Office.

Cookies are small files or similar technologies stored on your device when you use our services. We use them to keep the site working, remember settings, understand usage and support security, and some optional technologies may be used for other purposes where permitted. Our Cookie Policy explains the types of cookies we use, why we use them and the choices available to you.