Our Privacy Policy in Plain English

This policy sets out what personal data we at Allbritish Casino collect when you play with us, how we use it, who we share it with and the rights you have over it. We operate under licence MGA/B2C/211/2011 issued by the Malta Gaming Authority and we process your data in line with the UK GDPR and the Data Protection Act.

The Data We Collect

We collect only the data we need to run your account, verify your identity and meet our regulatory obligations. The categories fall into six groups.

Identity data: your name, date of birth, email address, phone number and residential address.
Verification documents: a photo ID, proof of address and proof of payment method, collected before your first withdrawal as part of our KYC checks.
Transaction data: deposits, withdrawals, bonuses and wagering history, including the payment method used (we accept Visa Debit, Mastercard Debit, Trustly, Paysafecard, Apple Pay, Skrill, Neteller, MiFinity, Jeton, Google Pay and Bank Transfer).
Technical data: your IP address, device type, browser, operating system and session times.
Gameplay behaviour: the games you play, stakes, results, tournament entries and cashback calculations.
Marketing preferences: which communications you have opted into and how you prefer to receive them.

How We Use Your Data

We use each category of data for a specific purpose, and we do not use it for anything beyond those listed here without telling you first.

Creating and managing your account, including your £10 minimum deposit and withdrawal processing.
Verifying your identity and age before your first withdrawal, as required by our MGA licence.
Processing deposits and withdrawals, including the 24-hour e-wallet and 1-3 business day card or bank transfer timescales.
Preventing fraud, bonus abuse and money laundering.
Monitoring your play for responsible-gambling purposes, so we can support you if your gambling patterns change.
Sending you marketing messages where you have given consent, such as news of our 10% weekly cashback (up to £500) or daily tournaments.
Meeting our legal and regulatory obligations to the Malta Gaming Authority and other competent bodies.

Our Legal Bases

Under the UK GDPR we must have a lawful basis for every processing activity. Four bases apply to our relationship with you.

Contract: we process your identity, transaction and account data to open your account, honour your welcome bonus of 100% up to £300 and pay out your withdrawals. Without this data we cannot provide the gambling service you signed up for.

Legal obligation: our MGA licence requires us to verify your age and identity, monitor transactions for money laundering and keep records for a minimum of five years. We process your KYC documents and transaction history on this basis, whether or not you agree.

Legitimate interest: we use technical and gameplay data to detect fraud, secure our platform and improve game performance. We weigh this interest against your rights and carry out balancing tests to keep the processing proportionate.

Consent: we send marketing communications only where you have opted in. You can withdraw that consent at any time by following the unsubscribe link or contacting our support team at [email protected], available 24/7.

How Long We Keep It

We keep each category of data for no longer than the purpose requires. Anti-money-laundering law and our licence conditions set minimum retention periods we cannot shorten, even if you ask.

Transaction and account records: a minimum of five years after your last transaction, as required by our regulatory obligations.
KYC verification documents: five years from account closure or your last withdrawal, whichever is later.
Gameplay and behavioural data: up to five years where linked to regulatory reporting; otherwise 12 months after your last session.
Technical and device logs: up to 12 months for security and fraud investigation purposes.
Marketing preferences: until you withdraw consent or ask us to delete them.
Data of accounts closed at your request: retained for the statutory period in anonymised or restricted form, then permanently deleted.

We never sell your personal data. We share it only with partners who perform services for us or bodies we are legally required to report to, and every partner works under a data-processing agreement that binds them to the same standards we follow.

Payment processors handle your card, e-wallet and bank details to move your funds. KYC and AML providers verify your documents and screen transactions. The Malta Gaming Authority and other regulators receive reports as our licence requires. Analytics providers receive pseudonymised data about site usage. Game providers such as Pragmatic Play, Play'n GO and Evolution receive your player ID so your wagers and results record correctly, but they do not receive your payment details.

Your Rights Over Your Data

You control your data. Whatever your reason, you can exercise any of the rights below by emailing [email protected] or speaking to our live chat, which runs 24/7. We respond within one month, extendable by two months for complex requests.

Access: get a copy of the personal data we hold about you.
Rectification: correct anything that is inaccurate or incomplete.
Erasure: ask us to delete your data, subject to the regulatory retention periods above.
Portability: receive your data in a machine-readable format and transfer it to another operator.
Objection: object to processing based on legitimate interest, including profiling.
Withdrawal of consent: stop our marketing at any time; withdrawal never affects processing already lawfully carried out.
Complaint: complain to the Information Commissioner's Office (ICO) at ico.org.uk or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Cookies and Site Security

We use cookies to keep you logged in, remember your session preferences and measure site performance in pseudonymised form. Our mobile-optimised HTML5 site for iOS and Android depends on essential cookies to function. You manage non-essential cookies through the banner at your first visit and can change your choices anytime; full details sit on our separate Cookies Policy page.

On security, we encrypt data in transit using TLS and at rest with industry-standard encryption. Access to your data is limited by role-based controls, so a support agent sees your account details while payment data stays with the payment processor. We log every access to verification documents. If a breach ever affects your personal data and poses a risk to you, we notify the ICO within 72 hours and tell you directly without undue delay.

Contacting Our Data Team

Questions about this policy, a data request or a privacy concern go straight to our Data Protection Officer at [email protected]. If you prefer, write to our support team at [email protected] and they will route your query to the DPO the same day. We review this Privacy Policy whenever our processing changes, and the version you see here reflects how Allbritish Casino handles your data today.

Frequently Asked Questions

Can I ask you to delete my account data completely?

Yes, you can request erasure at any time. We delete everything we legally can, though anti-money-laundering rules oblige us to keep transaction and verification records for a minimum of five years in restricted form.

Do you sell my personal data to advertisers?

No. We share data only with payment processors, verification providers, regulators and analytics partners, each under a strict data-processing agreement.

How do I stop your marketing emails?

Use the unsubscribe link in any email, contact live chat, or email [email protected]. We stop marketing immediately upon withdrawal of consent.

Who regulates my privacy rights?

The Information Commissioner's Office (ICO) in the UK. You can complain to them at ico.org.uk after raising the matter with us, and we will help you do so.