Confidence forms the foundation of our relationship with players at Book of Slots book-of.eu. This data retention policy describes how we handle, keep, and ultimately delete your personal information. We work under UK data protection laws, covering the UK GDPR and the Data Protection Act 2018. Being clear about our data handling is a legal obligation, but we also view it as a key part of our service. We strive for you to enjoy our games aware your privacy is taken carefully.
What is a Data Retention Policy?
A Data Retention Policy is a formal document. It defines how long an organisation holds onto different types of personal data and the legal reasons for keeping it. This is a key part of sound data governance. It prevents us from storing information forever, or for longer than we truly need it. At Book of Slots, we have set specific retention periods for all your data. This encompasses your account details, transaction history, support conversations, and gameplay records. This organised method minimises risk, boosts data security, and shows we comply with the law for our players and regulators like the UK Gambling Commission.
Core Data Categories and Keeping Periods
We organize personal data into categories so we can set suitable retention timelines. The particular length of time depends on why we processed the data and the legal, regulatory, and business needs we must meet. These periods can change if the law changes. If that happens, we will update this policy and let you know about any significant changes.
Profile and Identity Verification Data
This contains information you gave us when you registered and verified your account. It covers your name, date of birth, address, and copies of documents like a passport or driving licence. We keep this data for as long as your account is open, and for a set time after it closes.
After Account Closure Retention
After an account is closed, by you or by us, we must keep identity and verification data for at least five years from the closure date. The UK Gambling Commission’s Licence Conditions and Codes of Practice (LCCP) mandate this. It assists with responsible gambling oversight, fraud prevention, and any regulatory investigations that might happen after an account is no longer active.
Financial and Transaction Records
This category includes every deposit, withdrawal, bonus claim, and wager. Detailed transaction histories are crucial for financial audits, solving disputes, and giving you a clear record of your activity. Financial and gambling regulations heavily influence how long we keep this data.
Satisfying Regulatory Requirements
We keep full financial transaction data for a minimum of six years from the transaction date. This matches standard UK tax and accounting law. For some records, the UKGC might require us to keep them even longer. We always follow the strictest applicable timeframe to ensure full compliance and to safeguard both you and our business.
User Interaction and Support Data
We maintain records of your conversations with our customer support team, whether by live chat, email, or phone. This assists us maintain service quality and train our staff. It also lets us resolve ongoing issues and improve the player experience. We treat these records with the same confidentiality as all your personal data.
Generally, we keep support logs for three years from the date of the interaction. This provides us time to look back at previous conversations if you need more help, and to detect trends in player queries. If a communication is part of a dispute or complaint that could lead to legal action, we might preserve those specific records longer. This complies with UK time limits for making legal claims.
Your Entitlements and Erasure of Information
You have a entitlement to erasure, sometimes referred to as the ‘right to be forgotten’. This is a crucial part of UK data protection law. But this right carries limits. You can request us to delete your personal data. However, we could have to decline if we must to keep the data to follow a legal duty. Our licensing conditions from the UKGC are one example. We also are required to retain data to formulate, exercise, or defend legal claims. If we are obliged to keep data for these overriding reasons, we promise to only use it for those specific purposes. The data will be secured and access will be controlled.
Our Justification for Data Retention
UK data protection law requires a valid legal reason for us to handle and store your personal data. Our main reasons are to fulfil a contract with you, to obey legal rules, and for our legitimate business interests. For example, we hold your basic account details to provide the gaming service you requested. That satisfies our contract. At the same time, laws implemented by the UKGC mandate us to keep financial transaction records for several years to prevent money laundering. When we base on legitimate interests, like preventing fraud, we carefully weigh them against your rights. We ensure any data we keep is proportionate.
Data Security In Retention
Keeping your personal data safe is our main concern for its entire lifecycle. We implement strong technical and organisational measures to protect the information we keep. This shields it from unauthorised intrusion, change, disclosure, or destruction. Our measures include encrypting data when it’s moving and when it’s stored. We maintain strict access controls so employees only see what they need for their job. We also use advanced network security. These protocols are tested and updated regularly to counter new threats. Your data stays secure whether we are using it today or examining it for a regulatory check in several years’ time.
Policy Updates and Contact Information
We might update this Data Retention Policy periodically. Changes might represent shifts in our operations, technology updates, or new legal obligations. The newest version will always be posted on our website. We will inform you about any important changes that influence how we process your data. If you have inquiries about this policy, our retention practices, or your data rights, please contact our Data Protection Officer. We are here to work with you, handle concerns, and provide you with clear, timely updates about how we protect your personal information.
Časté dotazy
How come does Book of Slots have to retain my data after I terminate my account?
The UK Gambling Commission by law requires us to retain particular data, like identity and transaction records, for a specified time after an account closes. This supports responsible gambling monitoring, helps prevent fraud, and helps with any future regulatory investigations. For core account data, this retention period is usually five years.
Is it possible to I ask for early deletion of my personal data?
You can always make a request for erasure. But UK gambling and financial regulations often mean we may not comply right away. For instance, we cannot delete your transaction history before the required six-year period is over. The law requires us to keep it for auditing and compliance.
In what way is my data secured during the retention period?
We implement strict security measures for the whole time we store your data. These cover encryption, tight access controls, and secure storage systems. We carry out regular security audits to make sure these protections stay strong against new threats. Your information is protected from unauthorised access, whether it’s in active use or stored away.
Which happens to my data when the retention period expires?
When the retention period for a specific type of data ends, we reliably and completely delete it. At times we anonymise it instead. Anonymisation means changing the data so it can no longer be linked back to you. Thereafter, it could be used for internal statistical analysis.
Is it true that Book of Slots share my retained data with third parties?
We only share data when it’s necessary. This covers sharing with payment processors to run our service, or with authorities like the UK Gambling Commission when the law mandates it. Any third party we work with must adhere to strict contractual rules to secure your data. They can only use it for the designated, lawful purpose we agreed on.
By what method can I learn what data you store on me?
You possess a right to access your personal data. To use this right, you can submit us a Subject Access Request (SAR). We will then provide a copy of the information we keep about you. We do not ask for payment for this and will usually respond within one month. This enables you see exactly what data is in our records.
Where can I view the most up-to-date version of this policy?
The latest version of our Data Retention Policy is always available on our website. It’s a good idea to examine it now and then. If we make any big changes that impact how we process your data, we will notify you. This maintains you aware about our privacy practices.
