Privacy Policy for Grosvenor Casino Broadstairs in the United Kingdom

This Privacy Policy sets out how personal data is collected, used, stored, shared and protected in connection with Grosvenor Casino Broadstairs. It applies to individuals who interact with the service, including registered account holders, visitors and persons who make contact through any official channel. The document is issued in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using the services or submitting personal information, you acknowledge that your personal data will be processed as described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, you should not use the services.

This Privacy Policy may be updated from time to time to reflect changes in law, regulatory guidance or internal practices. The most recent version published on this page will apply. Periodic review of this page is recommended.

1. Who We Are

For the purposes of UK data protection law, Grosvenor Casino Broadstairs is the data controller in respect of personal data processed in connection with its services. As data controller, Grosvenor Casino Broadstairs determines the purposes and means of processing personal data.

The casino operates within the regulatory framework of the UK Gambling Commission and is subject to applicable data protection legislation enforced by the Information Commissioner’s Office (ICO).

Questions about this Privacy Policy or requests to exercise data protection rights should be directed to the contact details set out in Section 9.

2. Data Collected

Personal data is collected only to the extent necessary to provide services, meet legal obligations and comply with regulatory requirements. The categories of personal data that may be collected include:

Identity and contact data: full name, date of birth, address, email address, telephone number and copies of identity documents submitted for verification.
Account and activity data: account registration details, login history, gaming and betting activity, transaction records and account preferences.
Financial data: payment information, deposit and withdrawal history and records required for anti-money laundering (AML) compliance.
Responsible gambling data: self-exclusion status, deposit limits, affordability assessments, cooling-off periods and records of interactions relating to safer gambling.
Technical and device data: IP address, browser type, operating system, session data and cookies where applicable.
Communications data: records of correspondence with customer support, complaints and any other communications submitted through official channels.

Personal data relating to individuals under the age of 18 is not knowingly collected. If it becomes apparent that data has been collected from an individual under 18, the relevant account will be closed and the associated data will be deleted or anonymised without undue delay.

3. Legal Bases for Processing

Personal data is processed only where a lawful basis exists under UK GDPR. Depending on the context, one or more of the following legal bases may apply:

Performance of a contract: processing necessary to open and administer an account and to provide the requested services.
Legal obligation: processing necessary to comply with legal and regulatory requirements, including AML and counter-terrorism financing rules, tax law and Gambling Commission conditions.
Legitimate interests: processing carried out for purposes such as fraud prevention, security monitoring, responsible gambling oversight and improvement of internal processes, where these interests are not overridden by the rights and freedoms of the data subject.
Consent: processing based on explicit consent, for example in relation to certain direct marketing communications. Consent can be withdrawn at any time, without affecting the lawfulness of processing carried out before withdrawal.

4. How Personal Data Is Used

Personal data collected in connection with Grosvenor Casino Broadstairs is used for the following purposes:

To verify identity and age before granting access to gambling services.
To set up, manage and administer user accounts and to process transactions.
To comply with AML, counter-terrorism financing and other legal and regulatory obligations.
To monitor gambling activity for responsible gambling purposes, including the identification of patterns that may indicate harm.
To investigate, handle and resolve complaints or disputes.
To detect, investigate and prevent fraud, cheating and other unlawful or prohibited activity.
To send service-related communications, including account notifications, changes to terms and policy updates.
To fulfil any other legal or regulatory obligation applicable to the operation of the casino.

Personal data is not sold to third parties.

Personal data may be shared with third parties only where necessary, proportionate and permitted by law. Recipients may include:

Regulatory and law enforcement authorities: the UK Gambling Commission, the ICO, HM Revenue & Customs, the police and other public authorities where disclosure is required by law or regulation.
Identity verification and fraud prevention services: third-party providers engaged to verify identity documents and to screen against sanctions, credit reference or fraud prevention databases.
Payment processors: entities involved in processing deposits, withdrawals and other payment-related transactions, to the extent necessary to complete those transactions.
Self-exclusion schemes: where a user is registered with a national self-exclusion programme such as GAMSTOP, relevant data may be shared to implement, maintain and evidence the self-exclusion.
Professional advisers: legal, audit and compliance advisers, subject to appropriate confidentiality obligations.

Third parties engaged to process personal data on behalf of Grosvenor Casino Broadstairs are required to handle it securely and in accordance with applicable data protection law.

6. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory and accounting requirements.

As a general principle, account data and transaction records are kept for a minimum of five years following account closure or the date of the last transaction, in line with AML and regulatory record-keeping obligations. In certain cases, retention may extend to seven years or longer where required by law or where the data is relevant to an ongoing dispute, investigation or regulatory matter.

Responsible gambling data, including self-exclusion records, is retained for the period necessary to implement and demonstrate the relevant restriction and to evidence compliance with Gambling Commission requirements.

When personal data is no longer required for the purposes for which it was collected, it is securely deleted or anonymised.

Under UK GDPR and the Data Protection Act 2018, individuals have the following rights in relation to personal data held about them:

Right to be informed: to receive clear and transparent information about how personal data is processed, as set out in this Privacy Policy.
Right of access: to request a copy of the personal data held (Subject Access Request).
Right to rectification: to request correction of inaccurate or incomplete personal data.
Right to erasure: to request deletion of personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal or regulatory retention requirements.
Right to restriction of processing: to request that processing be limited in certain circumstances, for example while the accuracy of data is being verified.
Right to data portability: to receive personal data in a structured, commonly used and machine-readable format, where processing is based on consent or contract and is carried out by automated means.
Right to object: to object to processing based on legitimate interests, including profiling for direct marketing. Where an objection is made to direct marketing, such processing will cease.

Requests to exercise any of these rights should be submitted using the contact details in Section 9. A response will be provided within one calendar month of receipt of a valid request. Identity verification may be required before a request is processed.

8. Complaints

If you are dissatisfied with the handling of personal data or with the response to a data protection request, a complaint may be lodged with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

ICO website: ico.org.uk
ICO helpline: 0303 123 1113

Use of internal contact channels is encouraged in the first instance so that the issue can be addressed before escalation to the ICO.

9. Contact Details

Questions about this Privacy Policy, requests to exercise data protection rights, and concerns about the handling of personal data should be directed to Grosvenor Casino Broadstairs using the official contact channels published for the casino.

All data protection enquiries are handled in accordance with UK GDPR and the Data Protection Act 2018. Enquiries will be acknowledged and a substantive response provided within the relevant statutory time limits.

Privacy Policy for Grosvenor Casino Broadstairs