Our Privacy Policy in Plain English
This policy explains what personal data we collect when you play at Supercat Casino, why we hold it, who sees it and for how long. Read it alongside our Cookies Policy.
Data We Collect About You
We only collect what we need to run your account, verify your identity and meet our legal obligations. The categories below cover everything we hold.
- Identity data: your name, date of birth, email address, phone number and residential address.
- Verification documents: ID document, proof of address and payment method evidence for KYC checks.
- Transaction data: deposits, withdrawals, bets, winnings and bonuses, including amounts in GBP, EUR, USD or BTC.
- Device and connection data: IP address, device type, browser and approximate location.
- Gameplay behaviour: games played, session times, stakes and loss patterns used for responsible-gambling monitoring.
- Marketing preferences: which communications you have opted into and which you have declined.
How We Use Your Data
Every use we make of your data maps to a specific purpose. We do not sell your data and we do not profile you beyond fraud prevention and affordability checks.
We use your data to create and manage your account, process deposits and withdrawals, carry out KYC verification before your first withdrawal, prevent fraud and bonus abuse, monitor play for signs of harmful gambling, send marketing messages where you have consented, and comply with our legal and regulatory duties.
Why the Law Lets Us
UK GDPR requires a legal basis for each processing activity, and ours fall into four categories.
- Contract: account management, deposits, withdrawals and gameplay require processing to deliver the service you signed up for.
- Legal obligation: KYC, AML checks, transaction reporting and record-keeping are mandated by gambling and anti-money-laundering law.
- Legitimate interest: fraud prevention, security monitoring and aggregated service analytics rely on our legitimate interest in running a safe casino.
- Consent: marketing emails, SMS and personalised offers are sent only where you have actively opted in.
How Long We Keep It
Retention depends on the type of data and the rules that apply to it. Gambling regulation requires us to keep transaction and KYC records for at least five years after account closure.
| Data category | Retention period |
|---|---|
| Identity and account data | 5 years after account closure |
| Transaction and KYC records | 5 years after account closure, or longer if a regulator requires it |
| Verification documents | 5 years after account closure |
| Device and security logs | 12 months |
| Marketing preferences | Until you withdraw consent or ask us to delete them |
| Self-exclusion records | Kept for the duration required by self-exclusion rules |
Who Else Sees It
We share your data only with processors and authorities that need it, under contracts that restrict what they may do with it. Categories, not names, are listed here.
- Payment processors handling your Visa, Mastercard, Trustly, Skrill, Neteller or Bitcoin transactions.
- KYC and AML verification providers checking your documents and screening against sanctions lists.
- Regulators and law enforcement where disclosure is legally required.
- Analytics providers measuring site performance in aggregate.
- Game and platform providers supplying the 3,000+ titles in our lobby, who receive only the technical data needed to deliver gameplay.
Your Rights Over Data
You control your data. Email [email protected] or use live chat, available 24/7, and we will respond within one month.
- Access: get a copy of the data we hold about you.
- Rectification: correct anything inaccurate or incomplete.
- Erasure: ask us to delete data we no longer need, subject to regulatory retention.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing at any time via account settings or unsubscribe links.
- Complain: raise a concern with the Information Commissioner's Office (ICO), the UK data protection authority.
Cookies and Tracking
We use cookies for sessions, security, site performance and, with your consent, marketing analytics. Full details of each cookie, its purpose and its lifespan sit in our Cookies Policy, where you can change your preferences at any time.
How We Protect You
All traffic to supercatcasino.uk runs over TLS encryption, and payment details are handled exclusively by certified payment processors. Access to your data is limited by role-based controls, and our systems are monitored continuously for suspicious activity.
If a personal data breach occurs that risks your rights, we will notify the ICO within 72 hours and inform affected players without undue delay.
Frequently Asked Questions
Who do I contact about my data?
Email our data protection officer at [email protected] or use 24/7 live chat. We reply to rights requests within one month.
Can I stop marketing emails?
Yes. Withdraw consent at any time via account settings or the unsubscribe link. Marketing data is deleted unless we must keep records of your consent withdrawal.
Why do you need my ID before withdrawal?
UK gambling and AML rules require KYC verification before your first withdrawal. We keep those records for at least five years after your account closes.
Do you sell my data?
No. We share it only with the processors and regulators listed in this policy, under strict contractual limits.
What happens if there is a data breach?
We notify the ICO within 72 hours where required and tell affected players directly if the breach risks their rights.