Trust forms the core of our connection with users at Book of Slots. This data retention policy describes how we process, store, and ultimately remove your personal information. We work under UK data protection laws, covering the UK GDPR and the Data Protection Act 2018. Being clear about our data handling is a legal obligation, but we also view it as a key part of our service. We aim for you to enjoy our games understanding your privacy is taken carefully.
What constitutes a Data Retention Policy?
A Data Retention Policy constitutes a formal document. It sets out how long an organisation retains different types of personal data and the legal reasons for storing it. This is a key part of sound data governance. It keeps us from storing information forever, or for longer than we truly need it. At Book of Slots, we have set specific retention periods for all your data. This encompasses your account details, transaction history, support conversations, and gameplay records. This systematic method lowers risk, enhances data security, and proves we comply with the law for our players and regulators like the UK Gambling Commission.
Policy Revisions and Contact Info
We could change this Data Retention Policy periodically. Changes may indicate shifts in our operations, technology updates, or new legal obligations. The latest version will always be posted on our website. We will tell you about any significant changes that influence how we process your data. If you have queries about this policy, our retention practices, or your data rights, please contact our Data Protection Officer. We are here to assist you, address concerns, and provide you with clear, timely information about how we protect your personal information.
Our Legal Basis for Data Retention
UK data protection law demands a valid legal reason for us to handle and keep your personal data. Our main reasons are to meet a contract with you, to follow legal rules, and for our legitimate business interests. For example, we hold your basic account details to offer the gaming service you requested. That satisfies our contract. At the same time, laws implemented by the UKGC mandate us to keep financial transaction records for several years to combat money laundering. When we rely on legitimate interests, like preventing fraud, we carefully balance them against your rights. We ensure any data we keep is proportionate.
Information Protection In Retention
Keeping your personal data secure is our priority for its entire lifecycle. We employ strong technical and organisational controls to protect the information we store. This defends it from unauthorised entry, change, disclosure, or destruction. Our steps include encrypting data when it’s moving and when it’s stored. We maintain strict access controls so employees only view what they must have for their job. We also utilize advanced network security. These protocols are checked and updated regularly to counter new threats. Your data remains secure whether we are using it today or reviewing it for a regulatory check in several years’ time.
Your Protections and Removal of Data
You hold a claim to erasure, at times called the ‘right to be forgotten’. This is a essential part of UK data protection law. But this right has limits. You can request us to erase your personal data. However, we could have to say no if we require to keep the data to comply with a legal duty. Our licensing conditions from the UKGC are one example. We also need to retain data to establish, exercise, or defend legal claims. If we have to keep data for these overriding reasons, we commit to only use it for those specific purposes. The data will be secured and access will be limited.
Key Data Categories and Storage Periods
We classify personal data into categories so we can apply suitable retention timelines. The exact length of time depends on why we processed the data and the legal, regulatory, and business needs we must meet. These periods can shift if the law changes. If that happens, we will update this policy and let you know about any significant changes.
Account and Identity Verification Data
This includes information you gave us when you registered and verified your account. It encompasses your name, date of birth, address, and copies of documents like a passport or driving licence. We keep this data for as long as your account is open, and for a set time after it closes.
After Account Closure Retention
After an account is closed, by you or by us, we must keep identity and verification data for at least five years from the closure date. The UK Gambling Commission’s Licence Conditions and Codes of Practice (LCCP) mandate this. It helps with responsible gambling oversight, fraud prevention, and any regulatory investigations that might happen after an account is no longer active.
Financial and Transaction Records
This category includes every deposit, withdrawal, bonus claim, and wager. Detailed transaction histories are essential for financial audits, solving disputes, and giving you a clear record of your activity. Financial and gambling regulations heavily determine how long we keep this data.
Meeting Regulatory Requirements
We retain full financial transaction data for a minimum of six years from the transaction date. This aligns with standard UK tax and accounting law. For some records, the UKGC might ask us to keep them even longer. We always adhere to the strictest applicable timeframe to ensure full compliance and to safeguard both you and our business.
User Interaction and Support Data
We maintain records of your conversations with our customer support team, whether by live chat, email, or phone. This assists us maintain service quality and train our staff. It also lets us resolve ongoing issues and improve the player experience. We treat these records with the same confidentiality as all your personal data.
Generally, we keep support logs for three years from the date of the interaction. This offers us time to look back at previous conversations if you need more help, and to identify trends in player queries. If a communication is part of a dispute or complaint that could lead to legal action, we might preserve those specific records longer. This aligns with UK time limits for making legal claims.
FAQ
How come does Book of Slots need to hold my data after I close my account?
The UK Gambling Commission legally obligates us to keep certain data, like identity and transaction records, for a fixed time after an account closes. This supports responsible gambling monitoring, helps prevent fraud, and assists with any future regulatory investigations. For core account data, this retention period is usually five years.
Is it possible to I submit a request for early deletion of my personal data?
You can at any time make a request for erasure. But UK gambling and financial regulations commonly mean we are unable to comply right away. For instance, we are unable to delete your transaction history before the required six-year period is over. The law mandates us to keep it for auditing and compliance.
How is my data secured during the retention period?
We enforce strict security measures for the full time we keep your data. These cover encryption, tight access controls, and secure storage systems. We conduct regular security audits to make sure these protections stay strong against new threats. Your information is safe from unauthorised access, whether it’s in active use or stored away.
What happens to my data when the retention period expires?
After the retention period for a specific type of data concludes, we reliably and irreversibly delete it. Occasionally we anonymise it instead. Anonymisation means modifying the data so it can no longer be traced back to you. Following that, it might be used for internal statistical analysis.
Is it true that Book of Slots provide my retained data with third parties?
We solely share data when it’s required. This covers sharing with payment processors to run our service, or with authorities like the UK Gambling Commission when the law demands it. Any third party we work with must adhere to strict contractual rules to safeguard your data. They can exclusively use it for the designated, lawful purpose we agreed on.
In what way can I discover what data you hold on me?
You are entitled to a right to access your personal data. To utilize this right, you can submit us a Subject Access Request (SAR). We will then supply a copy of the information we keep about you. We do not charge for this and will normally respond within one month. This enables you see exactly what data is in our records.
At what location can I view the most up-to-date version of this policy?
The most recent version of our Data Retention Policy is continuously available on our website. It’s a wise idea to review it now and then. If we make any big changes that affect how we process your data, we will alert you. This ensures you informed about our privacy practices.
