Confidence forms the core of our interaction with players at Book of Slots. This data retention policy explains how we process, keep, and finally remove your personal information. We work under UK data protection laws, including the UK GDPR and the Data Protection Act 2018. Being open about our data handling is a legal obligation, but we also consider it as a key part of our service. We aim for you to experience our games understanding your privacy is taken carefully.
Your Rights and Data Deletion
You have a claim to erasure, at times called the ‘right to be forgotten’. This is a key part of UK data protection law. But this right carries limits. You can petition us to remove your personal data. However, we may have to decline if we must to keep the data to adhere to a legal duty. Our licensing conditions from the UKGC are one example. We also must to retain data to formulate, exercise, or defend legal claims. If we are obliged to keep data for these overriding reasons, we undertake to only use it for those specific purposes. The data will be safeguarded and access will be limited.
Policy Changes and Contact Details
We might update this Data Retention Policy periodically. Changes might represent shifts in our operations, technology updates, or new legal duties. The latest version will always be published on our website. We will inform you about any important changes that influence how we process your data. If you have questions about this policy, our retention practices, or your data rights, please contact our Data Protection Officer. We are here to work with you, resolve concerns, and give you clear, timely information about how we protect your personal information.
Data Security During Retention
Ensuring your personal data safe is our main concern for its entire lifecycle. We implement strong technical and organisational controls to protect the information we store. This shields it from unauthorised access, change, disclosure, or destruction. Our actions include encrypting data when it’s moving and when it’s stored. We enforce strict access controls so employees only see what they need for their job. We also utilize advanced network security. These protocols are evaluated and updated regularly to address new threats. Your data remains secure whether we are using it today or reviewing it for a regulatory check in several years’ time.
Core Data Categories and Retention Periods
We organize personal data into categories so we can use suitable retention timelines. The specific length of time depends on why we processed the data and the legal, regulatory, and business needs we must meet. These periods can shift if the law changes. If that happens, we will update this policy and let you know about any significant changes.
Profile and Identity Verification Data
This contains information you gave us when you registered and verified your account. It encompasses your name, date of birth, address, and copies of documents like a passport or driving licence. We keep this data for as long as your account is open, and for a set time after it closes.
After Account Closure Retention
After an account is closed, by you or by us, we must keep identity and verification data for at least five years from the closure date. The UK Gambling Commission’s Licence Conditions and Codes of Practice (LCCP) mandate this. It aids with responsible gambling oversight, fraud prevention, and any regulatory investigations that might happen after an account is no longer active.
Financial and Transaction Records
This category covers every deposit, withdrawal, bonus claim, and wager. Detailed transaction histories are crucial for financial audits, solving disputes, and giving you a clear record of your activity. Financial and gambling regulations heavily affect how long we keep this data.
Meeting Regulatory Requirements
We store full financial transaction data for a minimum of six years from the transaction date. This complies with standard UK tax and accounting law. For some records, the UKGC might demand us to keep them even longer. We always follow the strictest applicable timeframe to ensure full compliance and to safeguard both you and our business.
User Interaction and Support Data
We store records of your conversations with our customer support team, whether by live chat, email, or phone. This helps us maintain service quality and train our staff. It also lets us resolve ongoing issues and improve the player experience. We handle these records with the same confidentiality as all your personal data.
Generally, we retain support logs for three years from the date of the interaction. This provides us time to look back at previous conversations if you need more help, and to spot trends in player queries. If a communication is part of a dispute or complaint that could lead to legal action, we might preserve those specific records longer. This matches UK time limits for making legal claims.
FAQ
Why does Book of Slots need to hold my data after I shut down my account?
The UK Gambling Commission legally obligates us to retain particular data, like identity and transaction records, for a specified time after an account is closed. This supports responsible gambling monitoring, helps prevent fraud, and aids with any future regulatory investigations. For core account data, this retention period is typically five years.
Can I request early deletion of my personal data?
You can always make a request for erasure. But UK gambling and financial regulations often mean we may not comply right away. For instance, we may not delete your transaction history before the required six-year period is over. The law obligates us to keep it for auditing and compliance.
In what way is my data safeguarded during the retention period?
We enforce strict security measures for the whole time we keep your data. These cover encryption, tight access controls, and secure storage systems. We conduct regular security audits to make sure these protections stay strong against new threats. Your information is protected from unauthorised access, whether it’s in active use or stored away.
What happens to my data when the retention period expires?
When the retention period for a specific type of data ends, we reliably and completely delete it. Occasionally we anonymise it as an alternative. Anonymisation means modifying the data so it can no longer be connected back to you. After that, it may be used for internal statistical analysis.
Is it true that Book of Slots disclose my retained data with third parties?
We only share data when it’s necessary. This encompasses sharing with payment processors to operate our service, or with authorities like the UK Gambling Commission when the law requires it. Any third party we collaborate with must follow strict contractual rules to protect your data. They can exclusively use it for the specific, lawful purpose we agreed on.
How can I learn what data you hold on me?
You are entitled to a right to access your personal data. To exercise this right, you can submit us a Subject Access Request (SAR). We will then provide a copy of the information we maintain about you. We do not ask for payment for this and will usually respond within one month. This lets you review exactly what data is in our records.
Where can I find the most up-to-date version of this policy?
The latest version of our Data Retention Policy is continuously available on our website. It’s a wise idea to review it periodically. If we implement any big changes that affect how we manage your data, we will alert you. This maintains you informed about our privacy practices.
Our Justification for Data Retention
UK data protection law requires a valid legal reason for us to manage and retain your personal data. Our main reasons are to meet a contract with you, to follow legal rules, and for our legitimate business interests. For example, we maintain your basic account details to deliver the gaming service you requested. That fulfils our contract. At the same time, laws enforced by the UKGC require us to keep financial transaction records for several years to combat money laundering. When we rely on legitimate interests, like preventing fraud, we carefully evaluate them against your rights. We make sure any data we keep is proportionate.
What constitutes a Data Retention Policy?
A Data Retention Policy is a official document. It defines how long an organisation retains different types of personal data and the legal reasons for keeping it. This is a key part of good data governance. It stops us from keeping information forever, or for longer than we truly need it. At Book of Slots, we have set specific retention periods for all your data. This encompasses your account details, transaction history, support conversations, and gameplay records. This structured method minimises risk, improves data security, and shows we comply with the law for our players and regulators like the UK Gambling Commission.
