Overview of this Privacy Policy

WG casino is the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.

Personal data we may collect

• Account and identity information: name, date of birth, address, nationality, ID documents, age verification results.
• Contact details: email, phone, preferred language.
• Account activity: login logs, gameplay and betting history, deposits, withdrawals, transaction references.
• Financial information: payment method details handled by payment providers, limited card or wallet identifiers, fraud and chargeback information.
• Compliance information: know-your-customer checks, sanctions and politically exposed person screening, source of funds and affordability data where required by law or regulation.
• Technical information: IP address, device identifiers, operating system, browser type, geolocation derived from IP, cookies and similar technologies.
• Support and communications: chat, emails, calls, complaints, and dispute records.

Why we collect this information

• To provide and maintain the services, verify identity and age, and enable secure account access.
• To process transactions, detect and prevent fraud, and meet anti-money laundering obligations.
• To comply with Gambling Commission rules, including responsible gambling, self-exclusion checks via GAMSTOP, and affordability assessments where required.
• To improve online performance, content, and user experience through analytics.
• To communicate account updates and service messages, and provide marketing where lawful.

Protection measures

• Encryption in transit and at rest, strict access controls, multi-factor authentication for staff, and network segmentation.
• Regular vulnerability scanning, penetration testing, and security monitoring.
• Supplier due diligence, confidentiality commitments, and data processing agreements.
• Staff training, role-based access, data minimisation, and pseudonymisation where appropriate.
• Incident response procedures, audit logging, and regular policy reviews aligned to recognised standards such as ISO 27001.

Retention

• Personal data is kept only as long as needed for the purposes set out in this policy.
• Regulatory records are generally retained for up to 6 years after account closure or longer where required by law or for the establishment, exercise, or defence of legal claims.

User rights

• Access: request a copy of personal data.
• Rectification: ask to correct inaccurate or incomplete information.
• Erasure: request deletion where legal grounds apply.
• Restriction: limit processing in certain circumstances.
• Portability: receive certain data in a structured, commonly used format.
• Objection: object to processing based on legitimate interests or direct marketing.
• Human review: request review of decisions made solely by automated means that have legal or similarly significant effects.

Legal compliance

• Processing follows the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations, and the Gambling Commission's Licence Conditions and Codes of Practice.

We use personal data for the following purposes, relying on one or more lawful bases:

• Account setup and service delivery, including identity verification and access security. Basis: contract and legal obligation.
• Payments, withdrawals, and chargeback handling. Basis: contract and legitimate interests in fraud prevention.
• Compliance checks such as KYC, AML, sanctions screening, source of funds, and responsible gambling activities including monitoring and self-exclusion checks. Basis: legal obligation and public interest.
• Safety and security, including risk scoring and misuse detection. Basis: legitimate interests and legal obligation.
• Service improvement and analytics to enhance online performance and user experience. Basis: legitimate interests or consent where required.
• Marketing communications by email, SMS, or notifications. Basis: consent or soft opt-in in line with PECR, with the option to opt out at any time.
• Disputes, investigations, and regulatory reporting. Basis: legal obligation and legitimate interests.

Automated decision-making and profiling

• Certain checks use automated tools to protect users and the services from fraud and to meet regulatory duties.
• You may request human review, express your view, and contest a decision that produces legal or similarly significant effects.

WG casino does not sell personal information to third parties.

Exercising your rights

• Email: [email protected] to submit access, correction, deletion, restriction, portability, or objection requests.
• Verification: we may request additional information to confirm identity and protect account security.
• Response time: we aim to respond within one month, subject to allowable extensions for complex requests.
• Fees: no fee is charged unless requests are manifestly unfounded or excessive.
• Complaints: you can contact the Information Commissioner's Office at ico.org.uk if unsatisfied.

Updating your data

• You can review and update profile information in the account settings where available, or contact support for assistance.

Deletion

• We will delete or anonymise data where legal grounds apply and retention duties do not prevent removal.

Security checks and payments

• By using the services, you consent to identity, age, affordability, and fraud checks required by law or regulation.
• Payment information is processed by regulated payment service providers to authorise and settle transactions. WG casino receives only the information necessary to reconcile payments and prevent misuse.

The services are intended for persons aged 18 or over. Accounts for minors are not permitted.

• Age cannot be fully verified without documents. We therefore conduct verification checks and may request proof of identity and age.
• If a parent or legal guardian notifies us that a minor has provided personal information, we will promptly close the account and delete the data where permitted by law.
• Self-exclusion and blocking tools are available in the United Kingdom through GAMSTOP and device-level protections.

Personal data may be processed in other countries where our partners and service providers operate, including cloud hosting, payment processing, and compliance vendors.

• Using the online services constitutes consent to such processing in accordance with this policy.
• Transfers rely on lawful safeguards such as UK adequacy regulations, the International Data Transfer Agreement, and the UK Addendum to Standard Contractual Clauses.
• All recipients are required to protect confidentiality and use the information only for documented purposes.
• Copies of relevant transfer safeguards are available on request, subject to redactions for security and commercial confidentiality.

This document sets out the rules governing the collection, use, disclosure, and protection of personal data on our websites and apps. The legal disclaimer may clarify or limit the scope of certain provisions where the law requires or permits it.

• The policy applies once a user accepts it by signing up, ticking acceptance boxes, or continuing to access the services.
• Nothing in this notice limits rights granted under applicable data protection laws. In the event of conflict, mandatory law prevails.
• Related terms in the general Terms and Conditions also apply to privacy-related matters that arise from service use.

Cookies are small text files placed on a device by websites to store information. We use cookies and similar tools for statistics, behaviour analysis, personalisation, and site improvement.

How we use cookies

• Essential cookies: enable core functions such as security, login, and payment pages.
• Analytics cookies: measure traffic, diagnose errors, and improve content.
• Personalisation cookies: remember preferences and tailor the user experience.
• Marketing cookies: measure the effectiveness of communications where consent is given.

Retention

• Non-essential cookies are stored for up to 1 year unless removed earlier by the user.

Control

• You can manage preferences through the cookie banner or browser settings, and withdraw consent at any time. Disabling certain cookies may affect parts of the services.

Use of the services constitutes full acceptance of this Privacy Policy. The current version of the policy prevails over any previous versions. Continued use after updates indicates acceptance of the revised document. Material changes will be reflected by updating this page and, where appropriate, by sending a notice through the account or by email.

We may share personal data in line with this policy and applicable law.

Typical recipients

• Payment service providers and banks for processing transactions and preventing fraud.
• Identity and compliance partners for KYC, AML, sanctions screening, affordability, and responsible gambling checks including GAMSTOP matching.
• Game content suppliers, platform providers, and hosting partners to deliver services.
• Analytics and communication vendors for service improvement and permitted marketing.
• Professional advisers, auditors, and insurers.
• Dispute resolution bodies, chargeback handlers, law enforcement, regulators, and courts.

Basis for sharing

• Contract performance, legal obligation, and legitimate interests, or consent where required for marketing communications.

Transparency

• An up to date list of key processors and categories of recipients is available in the Help Centre or on request.
• Providing data for a specific feature may indicate consent to the related disclosure where the law requires consent.

The services may contain links to other websites or apps that operate their own privacy policies. WG casino is not responsible for how those sites collect, use, or process personal information. Users should review the privacy notices on any external site and exercise caution before providing data.