Log inSign up

Our Privacy Policy

This Privacy Policy explains what personal data we at Allright Casino collect when you play with us, why we collect it, how long we keep it and the rights you have over it. It applies to allright-casino.co.uk and covers every interaction you have with our platform, from registration to withdrawal.

The Data We Collect

We collect only the data we need to run your account, meet our licence obligations and keep our platform safe. That collection starts at registration and continues for as long as your account remains open.

  • Identity data: your name, date of birth, email address, phone number and residential address.
  • Verification documents: government-issued ID, proof of address dated within the last 3 months and proof of payment method, submitted before your first withdrawal.
  • Transaction data: deposits, withdrawals, bonuses claimed, wagering activity and payment method details.
  • Technical data: IP address, device type, browser, operating system and approximate location.
  • Gameplay behaviour: games played, session duration, bets placed and win/loss history.
  • Marketing preferences: your choices regarding promotional emails, SMS and on-site offers.

How We Use Your Data

We use your personal data to open and maintain your account, verify your identity before your first withdrawal, process deposits and withdrawals, and prevent fraud and money laundering on our platform.

We also monitor gameplay patterns to support responsible gambling, including deposit limits, session reminders and self-exclusion tools. Where you have given consent, we use your email address to send bonus offers and tournament news, and you can withdraw that consent at any time. Finally, we use your data to meet our legal obligations as a MGA-licensed operator, including reporting to regulators where the law requires it.

Contract. We process your data to set up and run your player account, deliver our games and pay out winnings. Without this data we cannot provide the service you signed up for.

Legal obligation

Our MGA licence requires us to verify your identity, apply anti-money-laundering checks and retain transaction records. We cannot legally operate without doing so, so this processing is not optional.

Legitimate interest

We rely on legitimate interest to prevent fraud, detect multi-accounting, secure our platform and monitor for signs of problem gambling. We weigh this interest against your rights and only process what is necessary for these purposes.

Consent

For marketing communications and non-essential cookies, we ask for your explicit consent. You can refuse without affecting your account, and you can withdraw consent at any time via your account settings or a link in our emails.

How Long We Keep It

We keep each category of data only as long as we need it. Regulatory rules require us to hold transaction and verification records for at least 5 years after your last activity, even if your account has been closed in the meantime.

  • Identity and account data: for the life of your account, then up to 5 years after closure.
  • KYC documents: retained for 5 years after your last transaction, as required by our licence.
  • Transaction data: a minimum of 5 years for anti-money-laundering and audit purposes.
  • Gameplay records: up to 5 years to support dispute resolution and regulatory checks.
  • Marketing preferences: until you withdraw consent or ask us to delete them.
  • Technical logs: up to 12 months for security and troubleshooting.

Who We Share It With

We never sell your personal data. We share it only with partners who help us operate Allright Casino, and each one is bound by a data-processing agreement that limits what it can do with your information.

  • Payment processors handling your Visa Debit, Trustly, Skrill, Neteller and other deposit or withdrawal methods.
  • Identity verification and AML screening providers who check your KYC documents.
  • Game and platform providers who host the 4,200 titles in our lobby.
  • The Malta Gaming Authority and other regulators, when the law requires disclosure.
  • Analytics providers who help us understand site performance, under strict data minimisation settings.

Your Rights Over Your Data

You are in control of your personal data. Wherever UK GDPR applies, you can exercise the following rights at any time by contacting our support team at [email protected], available 24/7.

  • Access: request a copy of the personal data we hold about you.
  • Rectification: correct data that is inaccurate or incomplete.
  • Erasure: ask us to delete your data where no legal retention duty applies.
  • Portability: receive your data in a structured, machine-readable format.
  • Objection: object to processing based on legitimate interest.
  • Withdraw consent: opt out of marketing at any time.
  • Complain: raise a complaint with the Information Commissioner's Office (ICO) if you believe we have mishandled your data.

Cookies and Tracking

We use strictly necessary cookies to keep you logged in and secure your session, plus optional analytics and marketing cookies that only load with your consent. You can change your cookie choices at any time from the cookie banner or your browser settings. Full details of every cookie we set, including its purpose and lifespan, are in our separate Cookies Policy.

How We Protect Your Data

All traffic between your device and our servers is encrypted with TLS, and payment details are handled exclusively by certified payment providers so that card and wallet data never sit on our systems in plain form.

Access to player data inside our organisation is limited by role-based permissions, with staff trained on data protection and subject to confidentiality obligations. We log all access to sensitive records and review those logs regularly. If a personal data breach ever occurs, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and we will inform you directly if the breach is likely to result in a high risk to your rights.

Contact Our Data Officer

Our Data Protection Officer oversees all privacy matters at Allright Casino. If you have a question about this policy, want to exercise one of your rights or have concerns about how your data is handled, write to [email protected] and we will respond within 30 days, usually much sooner. You can also reach our 24/7 support team at [email protected] for faster help with account-related requests. We may update this policy as our practices change, and we will post any revision on this page with a new effective date of 2026.

Frequently asked questions

Do you share my data with third parties for advertising?

No. We never sell your personal data. We share it only with payment processors, verification providers, regulators and analytics partners who need it to run our service, each under strict contractual limits.

How long do you keep my verification documents?

Our licence requires us to retain KYC documents for at least 5 years after your last transaction. After that retention period ends, we delete them securely.

Can I get a copy of all the data you hold about me?

Yes. Email [email protected] with your request and we will send you a copy of the personal data linked to your account, typically within 30 days.

How do I stop marketing emails?

Use the unsubscribe link in any promotional email or change your preferences in your account settings. Marketing data is then removed from our mailing lists immediately.

What happens to my data if I close my account?

We delete what we can, but transaction and verification records must be kept for a minimum of 5 years to comply with anti-money-laundering law and our MGA licence conditions.