Your Privacy at Blindluck Casino
This Privacy Policy explains what personal data we collect when you play at blindluck-casino.co.uk, how we use it, who we share it with, and the rights you can exercise at any time. We operate under UK GDPR and the Data Protection Act 2018, and we apply the same standards to players accessing us from other jurisdictions.
Data We Collect From You
We collect the data you give us directly, the data generated when you use our services, and the data our payment and verification partners supply. Blindluck Casino collects only what we need to run your account lawfully.
- Identity data: full name, date of birth, email address, phone number, residential address.
- Verification documents: government-issued ID, proof of address, proof of payment method, collected during KYC before your first withdrawal.
- Transaction data: deposits, withdrawals, bets, winnings, bonuses claimed, payment method details.
- Technical data: IP address, device identifiers, browser type, operating system, timestamps.
- Gameplay behaviour: games played, session length, betting patterns, responsible-gambling indicators.
- Marketing preferences: whether you opted in to emails, SMS or push notifications, and how you respond.
How We Use Your Data
We use your data to create and manage your account, verify your identity and age, process deposits and withdrawals, and meet the anti-money-laundering and licensing obligations set by the Anjouan authority under licence ALSI-202502014-FI1.
- Account creation, login and account administration.
- KYC verification and ongoing customer due diligence.
- Payment processing, fraud prevention and detection of bonus abuse.
- Responsible-gambling monitoring, including flags for unusual betting behaviour.
- Marketing communications, only where you have consented.
- Legal and regulatory obligations, including tax and audit requirements.
Our Legal Bases Explained
Contract. We process your identity, account and transaction data because they are necessary to perform our agreement with you. Without them we cannot open an account, settle bets or pay withdrawals.
Legal obligation. KYC documents, transaction records and suspicious-activity reports are processed to comply with anti-money-laundering law and our licence conditions. You cannot opt out of these checks.
Legitimate interest. We process technical and gameplay data to prevent fraud, secure our platform, and monitor for signs of problem gambling. We weigh our interest against your rights and restrict this processing to what is necessary.
Consent. Marketing emails, SMS and personalised offers run only on your consent. You can withdraw it at any time via your account settings or the unsubscribe link in every message.
How Long We Keep Records
We keep each category of data only as long as the law requires or as long as we need it for the purpose we collected it for. When a retention period ends, we delete or anonymise the data securely.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then up to 5 years after closure |
| KYC verification documents | 5 years after the last transaction, per AML rules |
| Transaction and wagering records | Minimum 5 years for regulatory and audit purposes |
| Technical and device logs | Up to 12 months for security analysis |
| Marketing preferences and consent records | Until you withdraw consent, plus evidence of withdrawal |
| Self-exclusion records | Kept for the exclusion period plus 5 years |
Who We Share Data With
We never sell your personal data. We share it only with processors and authorities that need it to deliver a specific function, under written data-processing agreements.
- Payment processors handling your Visa Debit, Mastercard, Trustly, Skrill, Neteller and crypto transactions.
- KYC and AML verification providers that check your documents against sanctions and PEP lists.
- Our licensing authority and regulators, on request or as part of audits and investigations.
- Analytics and platform providers that help us understand site usage in aggregate.
- Professional advisers such as auditors and lawyers, where confidentiality duties apply.
- Game providers and affiliates, strictly in the form of pseudonymised player IDs where needed.
Your Rights Over Your Data
You control your data. Send any request to [email protected] and we will respond within one month, as UK GDPR requires. Identity checks may apply before we release information.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete data where no legal retention duty applies.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing processing at any time.
- Complain: raise a complaint with the Information Commissioner's Office at ico.org.uk.
Cookies and Security Measures
We use essential cookies for login and security, plus optional analytics and marketing cookies set only with your consent. The full cookie inventory, purposes and switch controls are listed on our separate Cookies Policy page.
We protect your data with TLS encryption on every connection, strict role-based access controls, and segregated storage for KYC documents. Our payment pages run encrypted end to end. If a personal data breach occurs, we notify the relevant supervisory authority within 72 hours and inform you directly where the breach poses a high risk to your rights. Our Data Protection Officer can be reached at [email protected] for any privacy question or request.
Changes to This Policy
When we update this Privacy Policy, we publish the new version on this page and change the effective date shown at the top. For material changes that affect how we use your data, we also email registered players at least 14 days before the change takes effect. Continued use of Blindluck Casino after that date means you accept the updated policy.
Keep your contact details current so you receive these notices. If you have questions about anything in this policy, our 24/7 live chat and [email protected] are open around the clock.
Frequently Asked Questions
Does Blindluck Casino sell my personal data?
No. We share data only with payment processors, verification providers, regulators and service partners who need it to perform a specific function, always under data-processing agreements.
Why do you need my ID before my first withdrawal?
Our licence and anti-money-laundering law require us to verify your identity, age and payment method before we release funds. We process these documents within 24 to 48 hours and keep them for 5 years after your last transaction.
How do I stop marketing emails?
Withdraw consent at any time via your account settings or the unsubscribe link in every email. We stop marketing immediately and keep only a record that you opted out.
Can I get a copy of all data you hold about me?
Yes. Email [email protected] with a subject access request and we will send a structured copy within one month, after verifying your identity.