Bass Win Casino Privacy Policy
Last Updated: 15 January 2026 | Version: 3.2 | Effective Immediately
Privacy Policy Quick Navigation
1. Introduction & Scope of This Privacy Policy
Bass Win Casino, operated by Secure Gaming Ltd (Company Registration Number: 12345678), is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our gaming services, or interact with our platforms. This policy applies to all services provided by Bass Win Casino under our UK Gambling Commission licence (Account Number: 000-000000-000).
We process personal data in compliance with the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). As a licensed UK gambling operator, we have additional obligations under the Gambling Act 2005 and Licence Conditions and Codes of Practice (LCCP) regarding data processing for age verification, identity verification, and social responsibility purposes.
Important Notice Regarding Policy Updates
We regularly review and update this Privacy Policy to reflect changes in our practices, services, and legal requirements. We will notify you of any material changes through email or prominent notices on our website. Continued use of Bass Win Casino services after such modifications constitutes your acknowledgment and consent to the updated policy. We recommend reviewing this page periodically for the latest information on our privacy practices.
2. Categories of Personal Data We Collect
Bass Win Casino collects various types of personal data to provide our services, comply with legal obligations, and enhance your gaming experience. The specific data we collect depends on your interactions with our services and may include:
| Data Category | Specific Data Types Collected | Collection Method | Purpose Category |
|---|---|---|---|
| Identity & Contact Data | Full name, date of birth, residential address, email address, telephone number, government-issued ID numbers, proof of address documents, photograph for identity verification. | Registration forms, KYC verification, account updates, customer support interactions. | Legal Compliance, Account Management, Age Verification |
| Financial & Transaction Data | Payment method details, bank account information, transaction history, deposit/withdrawal amounts, payment card details (securely tokenised), e-wallet identifiers, account balances. | Payment processing systems, banking interfaces, transaction monitoring systems. | Financial Processing, Fraud Prevention, Regulatory Reporting |
| Gaming & Behavioural Data | Game preferences, betting patterns, session durations, win/loss records, responsible gaming settings, self-exclusion status, bonus usage, loyalty programme participation. | Game servers, behavioural tracking systems, responsible gaming tools, loyalty programme databases. | Service Improvement, Responsible Gambling, Personalised Offers |
| Technical & Device Data | IP address, device type, operating system, browser type, screen resolution, time zone, language settings, mobile network information, unique device identifiers. | Automated collection via cookies, log files, and tracking technologies. | Security, Analytics, Service Optimisation |
| Communications & Marketing Data | Email correspondence, live chat transcripts, telephone recordings, marketing preferences, consent status, opt-in/opt-out choices, survey responses. | Customer support systems, email servers, marketing platforms, feedback forms. | Customer Service, Marketing, Service Enhancement |
Special Category Data Processing
In limited circumstances, Bass Win Casino may process special category data as defined by UK GDPR Article 9. This includes health-related information when you utilise our responsible gambling tools (such as setting deposit limits or self-exclusion) or when we need to process information about gambling addiction as part of our social responsibility obligations. We only process such data with your explicit consent or when necessary to protect your vital interests, and we implement additional security measures for this category of data.
3. How We Use Your Personal Data
Bass Win Casino processes your personal data for specific, legitimate purposes as outlined below. We never sell your personal data to third parties for marketing purposes. Our data processing activities include:
| Processing Purpose | Legal Basis Under UK GDPR | Data Categories Used | Retention Period |
|---|---|---|---|
| Account Registration & Verification | Contractual necessity, Legal obligation (age verification under Gambling Act 2005), Legitimate interest (fraud prevention) | Identity, Contact, Financial | 6 years after account closure (regulatory requirement) |
| Payment Processing & Financial Operations | Contractual necessity, Legal obligation (anti-money laundering), Legitimate interest (fraud detection) | Financial, Transaction, Identity | 7 years for financial records (HMRC requirement) |
| Gaming Service Provision | Contractual necessity, Legitimate interest (service improvement) | Gaming, Technical, Device | 3 years after last activity |
| Responsible Gambling Monitoring | Legal obligation (LCCP requirements), Vital interests (player protection) | Gaming, Behavioural, Special Category | Indefinite for self-exclusion records |
| Marketing Communications | Consent, Legitimate interest (existing customer communications) | Contact, Marketing, Gaming | Until withdrawal of consent or account closure |
| Regulatory Compliance & Reporting | Legal obligation (UKGC requirements), Public interest (crime prevention) | All categories as required | As specified by specific regulations |
| Security & Fraud Prevention | Legitimate interest (security of our systems), Legal obligation (data protection) | Technical, Device, Transaction | 2 years from collection |
4. Legal Basis for Data Processing
Under UK data protection law, we must have a valid legal basis for processing your personal data. Bass Win Casino primarily relies on the following legal bases as defined by UK GDPR:
Contractual Necessity
We process personal data necessary to perform our contract with you when you use Bass Win Casino services. This includes processing for account creation, game provision, payment processing, and customer support. Without this processing, we cannot provide you with our gaming services.
Legal Obligation
As a UK Gambling Commission licensed operator, we have numerous legal obligations requiring data processing. These include age verification, identity verification, anti-money laundering checks, responsible gambling monitoring, and tax reporting. Failure to process data for these purposes would constitute a breach of our licence conditions.
Legitimate Interests
We process data for our legitimate business interests, provided these don't override your rights and freedoms. This includes fraud prevention, network security, service improvement, and direct marketing to existing customers. We conduct legitimate interest assessments for all such processing activities.
Consent
For certain processing activities, particularly marketing communications to non-customers and some cookies, we rely on your explicit consent. You may withdraw consent at any time through your account settings or by contacting our Data Protection Officer. Withdrawal does not affect the lawfulness of processing before withdrawal.
5. Data Sharing & International Transfers
Categories of Recipients
Bass Win Casino shares personal data with selected third parties only when necessary for specific purposes. All third-party processors are contractually bound to protect your data and use it only for the purposes we specify. We share data with:
| Recipient Category | Purpose of Sharing | Data Protection Safeguards |
|---|---|---|
| Game & Software Providers | Game functionality, random number generation verification, technical support | Data processing agreements, UK/EU based servers, encryption in transit |
| Payment Service Providers | Payment processing, fraud screening, financial transaction verification | PCI DSS compliance, secure data transmission, limited data sharing |
| Regulatory Bodies | UK Gambling Commission reporting, anti-money laundering investigations, regulatory compliance | Legal obligation basis, secure transfer protocols, data minimisation |
| Marketing & Analytics Partners | Service improvement, personalised offers, marketing campaign analysis | Consent-based where required, anonymisation where possible, opt-out mechanisms |
| Professional Advisors | Legal advice, audit services, financial consultancy | Confidentiality agreements, professional secrecy obligations |
International Data Transfers
As Bass Win Casino operates exclusively within the United Kingdom, most data processing occurs within UK jurisdiction. However, in limited circumstances where we use international service providers, we ensure adequate safeguards are in place. For transfers to countries outside the UK without adequacy decisions, we implement Standard Contractual Clauses approved by the UK Information Commissioner's Office and conduct transfer impact assessments to ensure your data receives equivalent protection.
6. Data Security & Protection Measures
Bass Win Casino implements robust technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security framework includes:
| Security Measure | Implementation Details | Protection Level |
|---|---|---|
| Encryption Technologies | TLS 1.3 encryption for all data transmissions, AES-256 encryption for data at rest, tokenisation for sensitive payment data | Military-grade encryption standards |
| Access Controls | Role-based access controls, multi-factor authentication for staff, principle of least privilege, regular access reviews | Strict internal access management |
| Network Security | Firewalls, intrusion detection/prevention systems, DDoS protection, regular security audits, vulnerability scanning | Enterprise-grade network protection |
| Physical Security | Secure data centres with biometric access controls, 24/7 monitoring, environmental controls, disaster recovery facilities | Tier III+ data centre standards |
| Staff Training | Annual data protection training, security awareness programmes, confidentiality agreements, disciplinary procedures for breaches | Comprehensive human factor security |
Despite our extensive security measures, no electronic transmission or storage system can be guaranteed 100% secure. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office within 72 hours as required by UK GDPR.
7. Your Data Protection Rights
Under UK data protection law, you have specific rights regarding your personal data. Bass Win Casino respects these rights and has established procedures to facilitate their exercise:
| Your Right | What This Means | How to Exercise This Right | Potential Limitations |
|---|---|---|---|
| Right of Access | Receive confirmation of whether we process your data and a copy of that data (Subject Access Request) | Submit written request to DPO with proof of identity. No fee usually required. | May be refused if manifestly unfounded or excessive. May be limited by others' rights. |
| Right to Rectification | Correct inaccurate or incomplete personal data we hold about you | Update via account settings or contact customer support with supporting documentation. | Verification requirements may apply. May be limited by regulatory requirements. |
| Right to Erasure | Request deletion of your personal data in specific circumstances | Submit erasure request to DPO with reasons and identity verification. | Not absolute right. May be refused if processing is necessary for legal obligations. |
| Right to Restriction | Temporarily restrict processing of your data in certain situations | Submit restriction request to DPO specifying grounds for restriction. | May affect ability to use certain services during restriction period. |
| Right to Data Portability | Receive your data in structured, commonly used, machine-readable format | Submit portability request to DPO for data provided with consent or under contract. | Only applies to automated processing based on consent or contract performance. |
| Right to Object | Object to processing based on legitimate interests or for direct marketing | Use opt-out mechanisms or submit objection to DPO with specific grounds. | May be overridden by compelling legitimate grounds for processing. |
| Rights Relating to Automated Decision Making | Not be subject to solely automated decisions with legal or significant effects | Request human intervention, express your point of view, or contest decision. | Does not apply if automated decision is necessary for contract or authorised by law. |
Exercising Your Rights
To exercise any of these rights, please contact our Data Protection Officer using the details in Section 9. We will respond within one month of receiving your request, though this may be extended by two months for complex requests. We may need to verify your identity before processing certain requests to protect your data security. If you believe we haven't addressed your concerns adequately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority for data protection issues.
9. Contact Information & Complaints
Data Protection Officer Contact Details
Bass Win Casino has appointed a Data Protection Officer (DPO) to oversee compliance with data protection laws and address any queries or concerns regarding our processing of your personal data.
Data Protection Officer: Mr. James Wilson
Email: [email protected]
Postal Address: Data Protection Officer, Secure Gaming Ltd, 12 Piccadilly, London, W1J 0DH, United Kingdom
Telephone: +44 (0)20 7123 4567 (Monday-Friday, 9:00-17:00 GMT)
For general enquiries not specifically related to data protection, please contact our customer support team through your account or via [email protected].
Supervisory Authority Complaints
If you believe our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/
We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact our DPO first.
This Privacy Policy was last reviewed and updated on 15 January 2026. The next scheduled review is due by 15 July 2026.