Privacy Policy

Who We Are

Chumba Casino UK is operated by VGW Malta Limited, a company registered under the laws of Malta. Our registered office is at 10 York Road, Waterloo, London SE1 7ND, United Kingdom. When you use our website at https://chumba-casino-uk.com, we act as the data controller responsible for your personal information.

We are committed to handling your personal data with care and in full compliance with the UK General Data Protection Regulation (UK GDPR) as retained in domestic law by the European Union (Withdrawal) Act 2018, as well as the Data Protection Act 2018. This policy sets out what data we collect, why we collect it, how we use it, and what rights you have.

If you have any questions about this policy or how we handle your data, you can reach us at: [email protected]

What Personal Data We Collect

When you register an account, use our platform, or contact our support team, we may collect the following categories of personal data:

Identity and Contact Information Full name, date of birth, home address, email address, and telephone number. This information is required to open and maintain an account with us.

Verification Documents Copies of government-issued identification (such as a passport or driving licence) and proof of address (such as a utility bill or bank statement). We are required by law and our licensing conditions to verify the identity of all players before processing prize redemptions.

Financial Information Payment method details including debit card information, bank account details used for prize redemptions, and records of transactions carried out on your account. Please note that we do not store full card numbers; payment processing is handled by our regulated third-party payment processors.

Technical and Usage Data IP address, device type and identifiers, browser type, operating system, login timestamps, session data, pages visited, and interactions with games. This data is collected automatically when you access our website.

Behavioural and Gaming Data Records of your gaming activity, including games played, coins purchased, Sweeps Coins redeemed, wagering patterns, and session durations. This information supports our responsible gambling obligations.

Communications Data Records of any correspondence between you and our customer support team, whether by email or any other channel we make available.

Preferences and Marketing Consent Your stated marketing preferences and records of any consent given or withdrawn in relation to promotional communications.

How We Collect Your Data

We collect personal data in the following ways:

Directly from you when you complete the registration process, update your account settings, make a purchase, submit a prize redemption request, or contact our support team.

Automatically through your use of our website, via cookies, tracking pixels, and similar technologies (see our Cookie section below).

From third parties including identity verification providers, fraud prevention agencies, payment processors, and publicly available registers, where this is necessary to comply with our legal obligations or protect against fraud.

Legal Bases for Processing

Under UK GDPR, we are required to have a lawful basis for processing your personal data. Depending on the activity, we rely on the following:

Performance of a Contract: Processing your registration details, verifying your identity prior to prize redemptions, processing payments, and managing your account are all necessary to fulfil our contractual obligations to you as a user of our platform.

Legal Obligation: We are subject to anti-money laundering (AML) requirements under the Proceeds of Crime Act 2002 and the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017. We are also required to take responsible gambling measures in accordance with applicable regulations. Processing your data to meet these obligations is a legal necessity.

Legitimate Interests: We process certain technical and usage data to maintain the security and integrity of our platform, prevent fraud, investigate suspicious activity, and improve our services. We have assessed that these purposes are necessary and proportionate, and do not override your rights and interests.

Consent: Where we send you marketing communications or set non-essential cookies, we will ask for your consent. You may withdraw your consent at any time, and this will not affect the lawfulness of any processing carried out before withdrawal.

How We Use Your Personal Data

The data we hold about you is used for the following purposes:

To create and manage your account, process transactions, and deliver the services you have requested.

To verify your identity in compliance with anti-money laundering legislation and to process any prize redemption requests you make.

To carry out our responsible gambling obligations, including monitoring your gaming activity for signs of problem gambling, enabling self-exclusion tools, and responding appropriately when a concern is identified.

To detect and prevent fraud, cheating, or other activity that is unlawful or contrary to our terms and conditions.

To respond to your customer service enquiries and resolve any disputes.

To send you service-related communications, such as updates to your account or changes to our terms.

To send you marketing communications where you have given your consent to receive them.

To carry out internal analysis and improve the functionality, performance, and user experience of our platform.

To comply with applicable laws, regulations, court orders, or requests from regulatory and law enforcement authorities.

Responsible Gambling and Data Processing

We take our responsible gambling obligations seriously. As part of these obligations, we monitor patterns of play and may use your gaming history, transaction records, and behavioural data to identify indicators of potential gambling-related harm. Where we identify a concern, we may contact you, apply account restrictions, or refer your details to relevant third-party support organisations.

If you register with a self-exclusion service such as GAMSTOP, we will receive notification and act on it promptly by closing or suspending your account. We participate in the GAMSTOP national self-exclusion scheme and process any data received through that scheme solely for the purpose of giving effect to your self-exclusion.

We may also share relevant data with third parties approved by applicable regulatory bodies for the purposes of multi-operator self-exclusion schemes and responsible gambling initiatives.

Sharing Your Personal Data

We do not sell your personal data to any third party. We share your data only in the following circumstances:

Service Providers: We work with third-party companies who help us operate our platform, including payment processors, identity verification providers, IT infrastructure suppliers, fraud prevention services, and customer support tools. These companies process your data on our behalf and are bound by data processing agreements that require them to handle your information securely and only for the purposes we specify.

Regulatory and Law Enforcement Authorities: We may disclose personal data to the UK Information Commissioner’s Office, law enforcement agencies, courts, or other public bodies where we are legally required or permitted to do so.

Group Companies: Your data may be shared within the VGW group of companies where this is necessary for the operation of our services or to fulfil our legal obligations.

Fraud Prevention Agencies: Where we have reasonable grounds to suspect fraudulent activity, we may share your data with fraud prevention agencies and other operators for the purpose of detecting and preventing fraud.

Self-Exclusion and Responsible Gambling Bodies: As described above, we share relevant information with self-exclusion registries and responsible gambling organisations as required.

We will not disclose your personal data to any other third party without your explicit consent, except where required by law.

International Transfers of Data

As part of our operations, your personal data may be transferred to and processed in countries outside of the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, such as the use of UK Government-approved Standard Contractual Clauses or transfers to countries that have received an adequacy decision from the UK Government. If you would like more information about the safeguards we apply to international data transfers, please contact us at [email protected].

Data Retention

We retain your personal data only for as long as is necessary for the purposes outlined in this policy, or as required by law.

Account data and identity verification records are retained for a minimum of five years from the date your account is closed. This period is required under anti-money laundering regulations.

Transaction records are retained for a minimum of five years in line with financial record-keeping requirements.

Customer support correspondence is retained for two years from the date of the most recent communication.

Technical and usage data collected via cookies and similar technologies is retained in line with the periods specified in our Cookie Policy.

When your data is no longer required, it is securely deleted or anonymised.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to ensure it functions correctly, to protect against fraud and abuse, and to improve your experience as a user.

Strictly Necessary Cookies: These are essential for the website to function and cannot be switched off. They are used to manage your session, maintain security, and remember your preferences during your visit.

Analytical Cookies: These help us understand how visitors interact with our website by collecting information about pages visited, session durations, and error occurrences. We use this data in aggregated form to improve the site.

Marketing and Targeting Cookies: Where you have given your consent, these cookies enable us to deliver relevant promotional content and measure the effectiveness of our campaigns. They may be set by our third-party advertising partners.

When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or manage your preferences for non-essential cookies. You can update your preferences at any time via the cookie settings link in the footer of our website.

You can also manage cookies directly through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

Your Rights Under UK GDPR

As a data subject under UK law, you have the following rights in relation to your personal data:

Right of Access: You have the right to request a copy of the personal data we hold about you. We will respond to verified requests within one month.

Right to Rectification: If any data we hold about you is inaccurate or incomplete, you have the right to request that we correct it.

Right to Erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to limitations where we are required to retain data by law, such as for AML compliance purposes.

Right to Restrict Processing: You may ask us to limit the way in which we use your data in certain circumstances, for example while a complaint is being investigated.

Right to Data Portability: Where processing is based on your consent or a contract with you, and is carried out by automated means, you may request that we provide your data in a structured, commonly used, and machine-readable format.

Right to Object: You have the right to object to processing based on our legitimate interests. You also have the right to object to your data being used for direct marketing at any time.

Rights Related to Automated Decision-Making: If we make any decision about you based solely on automated processing that has a legal or significant effect on you, you have the right to request human review of that decision and to contest the outcome.

Right to Withdraw Consent: Where we rely on your consent to process your data, you may withdraw that consent at any time without it affecting the lawfulness of any prior processing.

To exercise any of these rights, please submit a request in writing to [email protected]. We may need to verify your identity before acting on your request. There is no charge for making a request, though we may charge a reasonable administrative fee if a request is manifestly unfounded or excessive.

Complaints

If you are unhappy with how we have handled your personal data, we encourage you to contact us in the first instance so that we can try to resolve the matter. If you remain unsatisfied, you have the right to lodge a complaint with the UK’s supervisory authority:

Information Commissioner’s Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Website: https://ico.org.uk Telephone: 0303 123 1113

Third-Party Websites

Our website may contain links to third-party websites. This Privacy Policy applies only to chumba-casino-uk.com and does not extend to any external sites. We are not responsible for the privacy practices of other websites and recommend that you review their policies before providing any personal information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, regulatory requirements, or the way we operate our business. When we make material changes, we will notify you via the email address registered to your account or by displaying a prominent notice on our website. Continued use of our platform following notification of a change will constitute your acknowledgement of the updated policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact our Data Protection team at:

Email: [email protected] Postal address: 10 York Road, Waterloo, London SE1 7ND, United Kingdom