Privacy Policy at Pub Casino
This policy sets out what personal data we collect when you play at Pub Casino, why we hold it, who sees it and how long we keep it. It applies to every visitor who registers an account, claims a bonus or simply browses pubcasino.co.uk.
What Data We Collect
We collect only the data we need to run your account, meet our licence obligations and keep our site safe. If you never register, we still record basic technical data such as your IP address, device type and pages viewed.
- Identity data: your name, date of birth, email address, telephone number and residential address.
- Verification documents: photo ID, proof of address and payment method evidence for KYC checks.
- Transaction data: deposits, withdrawals, stakes, winnings and the payment methods you use.
- Technical data: device type, operating system, browser, IP address and session timestamps.
- Gameplay behaviour: games played, bet sizes, session duration, win and loss history.
- Marketing preferences: which channels you opt into, what we send you and how you respond.
How We Use Your Data
Every use of your data maps back to a specific purpose tied to your account or our licence. We do not profile you beyond what responsible gambling and fraud prevention require.
We rely on your data to create and manage your account, verify your identity before your first withdrawal, process payments from a £10 minimum deposit and complete withdrawals within 24 hours. We also monitor play patterns for signs of problem gambling, enforce deposit and loss limits, honour GamStop exclusions and run Slot Races, Daily Cashback and other promotions you have chosen to join.
- Account creation, login and account administration.
- KYC and anti-money-laundering checks required by our MGA licence.
- Payment processing, refunds and dispute handling.
- Fraud prevention and detection of multiple accounts.
- Responsible gambling monitoring and self-exclusion enforcement.
- Marketing communications, only where you have opted in.
- Compliance with legal and regulatory obligations.
Our Legal Bases
Contract
We process your identity, transaction and account data to perform the contract you enter when you register. Without this data we cannot open your account, hold your balance or pay out winnings.
Legal obligation
Verification documents and transaction records are processed because gambling law obliges us to run KYC checks, monitor for money laundering and retain financial records. You cannot opt out of these checks while holding an account.
Legitimate interest
Fraud prevention, site security and aggregated statistics on how our games perform rest on our legitimate interest in operating a safe, honest casino. We balance this interest against your rights and keep it to the minimum needed.
Consent
Marketing emails, SMS and personalised bonus offers run only on your consent. You can withdraw it at any time by clicking the unsubscribe link or contacting support, and we stop sending messages immediately.
How Long We Keep Data
We keep each category of data for the shortest period that satisfies its purpose, then delete or anonymise it. Records tied to money and licence obligations stay longest, as the rules demand.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then up to 5 years after closure |
| Verification documents | Up to 5 years after the check, in line with AML rules |
| Transaction and wagering records | At least 5 years, as required by gambling regulation |
| Technical and log data | Up to 12 months for security and analytics |
| Marketing preferences | Until you withdraw consent or ask us to delete them |
| Self-exclusion records | For the full exclusion period plus 5 years |
Who We Share Data With
We never sell your data. We share it only with parties who deliver a service we cannot run ourselves, and each one is bound by a data processing agreement.
Payment processors handle your card and e-wallet details when you deposit or withdraw. Identity verification providers run the KYC checks on our behalf. The Malta Gaming Authority receives reports as our regulator. Analytics providers help us measure site performance in aggregate. Gambling support schemes such as GamStop receive the data needed to enforce your exclusion.
- Payment processors behind Visa Debit, Mastercard Debit, PayPal, Skrill, Neteller and Trustly.
- KYC and AML verification services.
- Our regulator, the Malta Gaming Authority.
- Analytics and hosting providers under strict contracts.
- GamStop and responsible gambling bodies where required by law.
Your Rights at Pub Casino
UK and EU data protection law gives you direct control over what we hold. Email [email protected] or our data protection officer at [email protected] and we respond within one month.
If you believe we have mishandled your data, you can complain to the Information Commissioner's Office, the UK supervisory authority, at any time. Filing a complaint costs nothing and does not affect your account.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct anything inaccurate or incomplete.
- Erasure: ask us to delete data we no longer need.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: stop marketing at any moment.
- Complaint: escalate to the ICO or your local data authority.
Cookies and Tracking
Our site uses cookies for login sessions, security, basic analytics and, with your consent, marketing measurement. Since our launch in 2023 we have kept cookie use to the minimum that a secure casino site requires.
You control non-essential cookies through the consent banner on your first visit and can change your choices at any time. Full details of each cookie, its purpose and its lifespan are set out on our dedicated Cookies Policy page.
How We Protect Data
All traffic between your device and our servers travels over TLS encryption, and payment details are tokenised so card numbers never sit in our systems in readable form.
Access to personal data is limited to staff who need it for their role, with unique logins, activity logging and regular review of permissions. We test our defences and patch systems on a fixed schedule.
If a breach ever affects your personal data, we notify the Information Commissioner's Office within 72 hours and tell affected players directly where the risk warrants it.
Frequently Asked Questions
Do you sell my personal data to advertisers?
No. We never sell your data. We share it only with payment processors, verification providers, our regulator and analytics services, all under strict processing agreements.
How do I stop marketing emails?
Click the unsubscribe link in any email, adjust the preferences in your account, or email [email protected]. We stop sending marketing immediately once consent is withdrawn.
Why do you need my ID before my first withdrawal?
Our MGA licence requires identity verification to prevent fraud, underage play and money laundering. Documents are checked within 24 to 48 hours and then retained only as long as the rules demand.
Can I get a copy of all data you hold about me?
Yes. Send an access request to [email protected] and we deliver a full copy of your personal data within one month, free of charge.