PayAndPlay Casino Privacy Policy
This policy explains how PayAndPlay handles personal information when you register, play, make payments or contact us. It covers the Great Britain service operated by PayAndPlay Entertainment UK Ltd. Your data helps us run your account, complete required checks and respond to questions. It also gives you rights, including access to your records and control over marketing.
About This Privacy Policy
The policy applies to our website, mobile website and app. It covers account holders, people who contact support and visitors whose devices send technical information. Read the Cookie Policy for cookies and similar storage. Each service provider's own notice explains processing for which that provider is independently responsible.
Who Controls Your Personal Data
PayAndPlay Entertainment UK Ltd. is the controller for personal data used to operate our Great Britain service. Email support@payandplay.casino with “Data protection” in the subject for a privacy enquiry or rights request. Our company details are listed on the About Us page.
Personal Data We Collect
We collect contact and identity details, payment records, game activity, device data and messages sent to us. The fields depend on the task: a support enquiry doesn't require every record needed for a verified account. Where information is required for registration or a legal check, we explain that in the request.
Registration Information
Registration records include your legal name, date of birth, home address, email address and mobile number. We also hold account identifiers, login credentials in protected form and the dates you accept account terms. Linked sign-in services provide the identifiers needed to connect your login to the account.
Identity Verification Data
Verification records include the identity and address documents you submit, check results and the reason for a further review. Financial checks can include payslips or statements showing where funds came from. We request documents through the secure account area rather than asking you to attach them to an ordinary support email.
Payment Information
Payment records include amounts, currency, dates, status, transaction references and identifiers for the card, bank or wallet used. Payment providers process the credentials needed to authorise their services. We don't ask you to share your bank login password with casino support.
Gaming & Transaction Data
We record stakes, wins, game titles, round IDs, bonus awards and wagering progress. Transaction history also records deposits, withdrawals and balance adjustments. These records help settle games, answer payment questions and review complaints. They also support legal checks and our assessment of gambling-related harm.
Device & Technical Data
Technical records include IP address, device type, operating system, browser or app version, login times and error reports. We use these records to maintain sessions, investigate access issues and protect accounts. Optional tracking depends on the cookie preferences you set.
Communication Data
We keep emails, chat messages, complaint records and support notes. A record includes the date, subject and steps taken to answer the enquiry. Don't send passwords or one-time codes. If a message contains unnecessary sensitive information, we restrict it and remove it when no valid retention reason remains.
How We Collect Your Data
You provide information through forms, uploads, payments and messages. Our systems generate account, game and technical records as you use the service. Banks, payment providers and verification services also supply confirmation details or check results. We link these records to the account or transaction they concern.
How We Use Your Personal Data
We use personal data to operate accounts, process payments, settle games, meet legal duties and protect players. We also respond to support requests and send opted-in marketing. The purpose determines which records are needed and which staff or providers can access them; not every recipient receives your full account file.
Account Management
We use registration details and login identifiers to create your account, provide access and maintain settings. Account history helps us apply limits and respond to requests. This processing is needed to provide the service covered by your account agreement.
Identity & Age Verification
We check identity information to confirm your name, age and address before gambling. We also use check results to prevent accounts being opened with another person's details. This processing supports gambling-law and financial-crime obligations. An incomplete required check can prevent us from enabling the account.
Processing Payments
We use transaction amounts, payment identifiers and verification results to request deposits and withdrawals, reconcile balances and investigate failures. Data is shared with the provider handling that payment. The processing supports the account agreement and applicable financial-crime requirements.
Fraud Prevention & Security
We review login patterns, device information, payment activity and linked account signals to detect fraud or unauthorised access. Records of a suspected issue support investigation and dispute handling. We rely on legal obligations and our legitimate interest in protecting accounts, assessed against the impact on individuals.
Responsible Gambling
We review spending, play patterns, limits, contacts and exclusion records to identify harm and apply player protection measures. That can lead to contact, restricted offers or restricted gambling access. Processing for these checks supports our regulatory duties. Relevant health information receives additional controls and a separate lawful-condition assessment where required.
Customer Support
We use messages, account records and transaction references to investigate your question and explain the result. Access depends on the enquiry: a payment review needs different records from an app fault. Support processing relies on the account agreement or our legitimate interest in answering visitors' enquiries.
Marketing Communications
We send casino offers only through the channels you've agreed to receive. Your preferences are recorded by channel, and you can withdraw consent in account settings or through the message's unsubscribe link. Essential account notices aren't promotional messages and continue when needed to run the account.
Legal Basis for Processing
We rely on contract for account services, legal obligations for required checks, consent for optional marketing and tracking, and legitimate interests for proportionate security and support activity. A purpose can require a distinct basis from another use of the same record. We assess special-category data separately; ordinary account consent isn't treated as blanket permission for sensitive-data processing.
Payment Providers
Payment providers receive the identifiers, amount, currency and account details needed for the transaction and related checks. These include the bank or wallet used through Open Banking, Trustly, PayPal or a supported card route. We also exchange payment status and references to reconcile your balance.
Game Providers
Game providers receive an account reference and the information needed to run and settle a session, including stakes, results and technical session data. They don't need your complete verification file to supply a game. Provider records help investigate a disputed or interrupted round.
Verification Providers
Verification services receive identity details and requested evidence needed to perform age, identity, address or financial checks. They return results and match information. We limit the request to the check being performed and review the provider's role and retention terms before sharing records.
Technology & Hosting Providers
Hosting, security and support-system providers process records needed to store data, maintain the platform and handle enquiries. Access is limited by service role and contract. We review these arrangements and remove access when a provider no longer needs it to supply the service.
International Data Transfers
Transfers outside the UK require a lawful transfer route before they occur. We use applicable adequacy regulations or approved safeguards with the required transfer assessment. Contact our data-protection team for the countries, recipients and safeguards relevant to your records, or to request a copy of the applicable protection.
How Long We Keep Your Data
Our schedule retains core account and transaction records for six years after closure, KYC evidence for five years after the relationship ends, support correspondence for two years after resolution and security logs for 12 months. A documented legal hold pauses deletion for affected records. Exclusion records remain for the exclusion period and any justified compliance period. We review retained records and delete or anonymise them when their purpose ends.
How We Protect Your Data
We protect data with encryption, access controls, secure sessions and staff permissions tied to job roles. Access is reviewed and removed when no longer needed. We investigate suspected breaches and notify affected people and authorities when law requires. No online system is immune from incidents, so keep your login details private too.
Your Privacy Rights
Contact support@payandplay.casino to exercise a privacy right. We verify the requester before releasing or changing account records. We normally respond within one month, subject to lawful extensions or pauses explained to you. Rights depend on the processing involved; if a request cannot be met in full, we explain the reason and complaint route.
Right of Access
You can ask for a copy of your personal data and information about its use. Tell us the records or period you want if you know them; a broad request is still a request. We protect other people's information when preparing the response.
Right to Rectification
Ask us to correct inaccurate details or complete an incomplete record. We may need evidence for a legal name, birth date or address change. A historical transaction isn't rewritten merely because current contact information changes; we keep an accurate record of the correction.
Right to Erasure
You can ask us to erase data where the legal conditions apply. Closing an account doesn't require immediate deletion of every record. Financial-crime duties, exclusion enforcement or legal claims can require retention. We identify any records kept and explain why the exemption applies.
Right to Restrict Processing
You can request restricted processing in the circumstances set by data-protection law, including while we assess a disputed accuracy issue. Restriction limits use of the affected data rather than automatically deleting it. We explain any activity that must continue under a legal exception.
Right to Data Portability
Where the right applies, you can receive data you provided in a structured, commonly used, machine-readable format. It covers eligible automated processing based on consent or contract. You can also ask us to send that data to another controller when technically feasible.
Right to Object
You can object to processing based on legitimate interests by explaining your circumstances. We assess the objection and stop unless a lawful overriding reason applies. An objection to direct marketing doesn't need that balancing test: we stop the marketing concerned.
Marketing Preferences
Change channel preferences in your account or use the unsubscribe option in a message. Withdrawing consent doesn't affect the lawfulness of earlier processing. We keep the minimum suppression record needed to respect your preference. Account-security and transaction notices continue when required.
Automated Decision-Making
Automated checks flag unusual logins, payments and play patterns for review. Our account-restriction process includes human review before a solely automated flag becomes a final decision with a significant effect. You can ask support to explain and review a restriction, provide your view and challenge inaccurate information.
Children & Underage Users
The service is for adults aged 18 and over. We do not knowingly provide gambling accounts to children. If a record indicates an underage user, we restrict access and investigate. We retain only the information justified by safeguarding, legal duties and the handling of the incident.
Changes to This Privacy Policy
We update this policy when data practices or legal requirements change. Material changes are notified through the account or your registered contact details before the new processing starts where required. A new policy doesn't convert an old marketing refusal into consent.
Contact Us About Your Data
Email support@payandplay.casino with “Data protection” in the subject for access, correction, deletion or a privacy complaint. Don't include passwords or login codes. You can also complain to the UK's Information Commissioner's Office. Contacting us first gives us a chance to investigate, but doesn't remove your right to approach the ICO.