Confidence forms the core of our relationship with customers at Book of Slots Book Of. This data retention policy describes how we manage, keep, and eventually delete your personal information. We operate under UK data protection laws, covering the UK GDPR and the Data Protection Act 2018. Being open about our data handling is a legal duty, but we also consider it as a vital part of our service. We strive for you to experience our games knowing your privacy is taken diligently.
What is a Data Retention Policy?
A Data Retention Policy constitutes a formal document. It establishes how long an organisation keeps different types of personal data and the legal reasons for retaining it. This is a key part of sound data governance. It prevents us from holding information forever, or for longer than we actually need it. At Book of Slots, we have set specific retention periods for all your data. This covers your account details, transaction history, support conversations, and gameplay records. This organised method minimises risk, improves data security, and proves we comply with the law for our players and regulators like the UK Gambling Commission.
Your Rights and Removal of Data
You hold a right to erasure, at times called the ’right to be forgotten’. This is a key part of UK data protection law. But this right carries limits. You can ask us to delete your personal data. However, we could have to refuse if we require to keep the data to comply with a legal duty. Our licensing conditions from the UKGC are one example. We also must to retain data to set out, exercise, or defend legal claims. If we have to keep data for these overriding reasons, we commit to only use it for those specific purposes. The data will be protected and access will be restricted.
Policy Updates and Contact Details
We might update this Data Retention Policy occasionally. Changes may indicate shifts in our activities, technology updates, or new legal duties. The latest version will always be available on our website. We will notify you about any major changes that impact how we manage your data. If you have questions about this policy, our retention practices, or your data rights, please contact our Data Protection Officer. We are here to collaborate with you, resolve concerns, and give you clear, timely details about how we protect your personal information.
Key Data Categories and Retention Periods
We group personal data into categories so we can use suitable retention timelines. The specific length of time depends on why we processed the data and the legal, regulatory, and business needs we must meet. These periods can change if the law changes. If that happens, we will update this policy and let you know about any significant changes.
Profile and Identity Verification Data
This includes information you gave us when you registered and verified your account. It covers your name, date of birth, address, and copies of documents like a passport or driving licence. We keep this data for as long as your account is open, and for a set time after it closes.
After Account Closure Retention
After an account is closed, by you or by us, we must keep identity and verification data for at least five years from the closure date. The UK Gambling Commission’s Licence Conditions and Codes of Practice (LCCP) mandate this. It helps with responsible gambling oversight, fraud prevention, and any regulatory investigations that might happen after an account is no longer active.
Financial and Transaction Records
This category contains every deposit, withdrawal, bonus claim, and wager. Detailed transaction histories are essential for financial audits, solving disputes, and giving you a clear record of your activity. Financial and gambling regulations heavily affect how long we keep this data.
Satisfying Regulatory Requirements
We retain full financial transaction data for a minimum of six years from the transaction date. This matches standard UK tax and accounting law. For some records, the UKGC might ask us to keep them even longer. We always observe the strictest applicable timeframe to ensure full compliance and to protect both you and our business.
Customer Interaction and Support Data
We maintain records of your conversations with our customer support team, whether by live chat, email, or phone. This assists us maintain service quality and train our staff. It also allows us resolve ongoing issues and improve the player experience. We manage these records with the same confidentiality as all your personal data.
Generally, we keep support logs for three years from the date of the interaction. This provides us time to look back at previous conversations if you need more help, and to identify trends in player queries. If a communication is part of a dispute or complaint that could lead to legal action, we might retain those specific records longer. This matches UK time limits for making legal claims.
Data Safety During Retention
Ensuring your personal data safe is our main concern for its entire lifecycle. We use strong technical and organisational measures to safeguard the information we keep. This protects it from unauthorised intrusion, change, disclosure, or destruction. Our actions include encrypting data when it’s moving and when it’s stored. We maintain strict access controls so employees only see what they must have for their job. We also leverage advanced network security. These protocols are evaluated and updated regularly to address new threats. Your data remains secure whether we are using it today or checking it for a regulatory check in several years’ time.
Legal Grounds for Data Retention
UK data protection law demands a valid legal reason for us to handle and store your personal data. Our main reasons are to fulfil a contract with you, to obey legal rules, and for our legitimate business interests. For example, we hold your basic account details to deliver the gaming service you requested. That satisfies our contract. At the same time, laws upheld by the UKGC mandate us to keep financial transaction records for several years to fight money laundering. When we base on legitimate interests, like preventing fraud, we carefully evaluate them against your rights. We guarantee any data we keep is proportionate.
Časté dotazy
Why does Book of Slots need to retain my data after I close my account?
The UK Gambling Commission legally requires us to hold certain data, like identity and transaction records, for a set time after an account is terminated. This supports responsible gambling monitoring, aids prevent fraud, and assists with any future regulatory investigations. For core account data, this retention period is usually five years.
Is it possible to I submit a request for early deletion of my personal data?
You can at any time make a request for erasure. But UK gambling and financial regulations commonly mean we are unable to comply right away. For instance, we cannot delete your transaction history before the required six-year period is over. The law mandates us to keep it for auditing and compliance.
How is my data protected during the retention period?
We enforce strict security measures for the full time we hold your data. These encompass encryption, tight access controls, and secure storage systems. We carry out regular security audits to make sure these protections stay strong against new threats. Your information is safe from unauthorised access, whether it’s in active use or stored away.
Which happens to my data when the retention period expires?
After the retention period for a specific type of data finishes, we securely and permanently delete it. At times we anonymise it in its place. Anonymisation means modifying the data so it can no longer be traced back to you. After that, it may be used for internal statistical analysis.
Does Book of Slots share my retained data with third parties?
We solely share data when it’s required. This covers sharing with payment processors to operate our service, or with authorities like the UK Gambling Commission when the law mandates it. Any third party we partner with must follow strict contractual rules to safeguard your data. They can exclusively use it for the designated, lawful purpose we agreed on.
How can I learn what data you hold on me?
You are entitled to a right to access your personal data. To use this right, you can submit us a Subject Access Request (SAR). We will then provide a copy of the information we hold about you. We do not charge for this and will normally respond within one month. This enables you view exactly what data is in our records.
At what location can I find the most up-to-date version of this policy?
The newest version of our Data Retention Policy is constantly available on our website. It’s a sensible idea to examine it from time to time. If we implement any big changes that affect how we process your data, we will notify you. This maintains you informed about our privacy practices.