Privacy Policy

We collect personal data when you create an account, use our website, contact us or make transactions. Personal data is information that identifies you or could reasonably be connected with you. We collect and use this information only for clear and lawful purposes connected with providing our services, protecting our customers and meeting our legal duties.

Account and identity details

When you open and use an account, we may collect your name, date of birth, address, email address, username, account credentials, account status and information about your preferences. We may also collect information you provide when you contact customer support, including the details in your messages and any information needed to identify your account.

We may ask for identity documents or other information to confirm your age, identity and address. This can include information shown on an identity document, a document used as proof of address, a photograph or other information needed for a verification check. We may also collect information about your account restrictions, deposit limits, time-outs, self-exclusion choices and other safer gambling settings where this is needed to operate your account responsibly.

Transactions and account activity

We collect information about deposits, withdrawals, payments, bonuses, wagers, game activity and account balances. Payment information may include details needed to process a transaction and to confirm that the payment method can be used by you. We do not need to store all payment information ourselves, and some payment details may be handled by the payment provider used for the transaction.

Device and usage data

When you visit or use our website, we may collect technical and usage information such as your IP address, device type, operating system, browser type, language settings, approximate location, unique device identifiers, pages visited, buttons used, dates and times of access, and information about errors or interruptions. We use this information to keep the website working, understand how it is used, protect accounts and investigate unusual activity.

Some data is provided directly by you. Other data is created when you use your account or collected from service providers that help us verify identity, process payments, prevent fraud or protect our systems. If you do not provide information that is necessary for an account or transaction, we may not be able to open the account, complete the transaction or provide the requested service.

We use personal data for the purposes below. UK GDPR requires us to have a lawful basis for each purpose. In plain terms, this means we must have a valid legal reason for collecting and using your information.

• To run your account and provide our services. We use your details to create and maintain your account, provide access to games and account features, process deposits and withdrawals, answer questions, communicate with you and keep records of your account. The legal basis is that the processing is necessary to provide the service you ask for and to perform our agreement with you.
• To verify your age and identity. We use account information and identity documents to confirm that you meet the requirements to use our services and that your account is being used by you. The legal basis may be our legal obligations and our legitimate interest in protecting accounts and preventing misuse.
• To prevent fraud, money laundering and other harmful activity. We use information about your identity, transactions, devices and account activity to identify suspicious behaviour, protect our customers, secure our systems and support safer gambling. The legal basis may be a legal obligation or our legitimate interest in preventing crime and protecting our business and customers.
• To meet our legal and regulatory duties. We may keep records, carry out checks, respond to lawful requests and provide information to competent authorities where required. The legal basis is that we must comply with a legal obligation.
• To improve and secure our website. We use technical and usage data to find faults, test changes, manage capacity, protect our website and understand how our services are used. The legal basis is generally our legitimate interest in operating a secure and reliable service.
• To send offers and other marketing communications. We send marketing messages only where you have opted in or where another lawful permission allows us to do so. You can change your marketing choices at any time. Where consent is required, consent is the legal basis. You can withdraw that consent without affecting processing that took place before you withdrew it.

Where we rely on legitimate interests, we consider the effect of the processing on you and use that basis only where our interests are not outweighed by your rights and freedoms. You may object to processing based on legitimate interests, as explained below. Withdrawing consent does not make earlier processing unlawful, and some data may still need to be retained or used because another legal basis applies.

We share personal data only where there is a lawful reason to do so and only to the extent needed for the relevant purpose. We require service providers that process data for us to keep it secure and to use it only in line with our instructions and applicable law.

• Payment providers may receive the information needed to authorise deposits, process withdrawals, prevent payment abuse and resolve transaction issues.
• Identity-verification providers may receive identity details and documents so that checks can be completed and account information can be confirmed.
• Fraud-prevention and security partners may receive information about devices, transactions and account activity to help identify suspicious behaviour, protect our systems and prevent misuse.
• Regulators, law enforcement bodies and other competent authorities may receive information where we are required or permitted to provide it by law, or where disclosure is necessary to protect our rights, customers or the public.
• Professional and technical service providers may receive limited information when they provide services such as hosting, security, customer support, communications, auditing or legal advice.

We do not share more information than is reasonably necessary for the purpose. We do not sell your personal data. If information is transferred or accessed outside the United Kingdom, we use appropriate safeguards required by applicable data protection law before the transfer takes place.

We may also share information where you ask us to do so, where you have given permission, or where disclosure is needed to enforce our terms, investigate suspected wrongdoing, protect someone from harm or defend a legal claim.

We keep personal data for as long as your account is open and for the period required afterwards by applicable law, regulatory duties, accounting requirements, dispute handling or the establishment, exercise or defence of legal claims. The length of time depends on the type of information and the reason it was collected. When information is no longer needed, we securely delete it, anonymise it or make it unavailable for ordinary use.

Closing your account does not always mean that every record can be deleted immediately. We may need to keep transaction, identity, account security and responsible gambling records for a legally required period. We may also retain limited information where needed to remember a self-exclusion request, prevent a new account from being opened improperly, deal with a complaint or meet another legal duty.

We use suitable technical and organisational measures to protect personal data from loss, unauthorised access, alteration, disclosure and destruction. These measures may include access controls, secure systems, authentication processes, monitoring, staff training and procedures for handling security incidents. No online service can guarantee complete security, so you should keep your account credentials confidential and tell us promptly if you believe your account has been accessed without permission.

Your data protection rights

Depending on the circumstances, you have the following rights under UK data protection law:

• Access: ask for a copy of the personal data we hold about you and information about how we use it.
• Correction: ask us to correct information that is inaccurate or incomplete.
• Erasure: ask us to delete personal data where there is no good reason for us to keep using it.
• Objection: object to processing based on legitimate interests, including direct marketing, in the circumstances allowed by law.
• Restriction: ask us to limit how we use your data while a concern about accuracy, lawfulness or another matter is considered.
• Portability: ask for certain data that you provided to us in a structured, commonly used and machine-readable format, where this right applies.
• Withdraw consent: withdraw consent where we rely on consent for a particular use of your data.

To use your rights, write to support@toptallycasino.co.uk and explain what you are asking for. Please provide enough information for us to identify your account and understand your request. We may need to ask for additional information to confirm your identity before releasing or changing personal data. This protects your information from unauthorised requests.

We will respond within the period required by law. Some rights are not absolute, and we may refuse or limit a request where an exception applies, such as a legal duty to retain information, the need to protect another person's privacy or the need to establish or defend a legal claim. If you are not satisfied with how we handle your data request, you can complain to the Information Commissioner's Office.

We use cookies and similar technologies to keep the website secure, remember settings, support account functions, understand usage and improve performance. Some cookies are necessary for the website to operate, while others may be used only with your permission where required. You can manage available cookie choices through your browser or the controls we provide. Our Cookie Policy explains the types of cookies we use, their purposes and how you can manage them.

If you have a question about this Privacy Policy, want help with a data protection request or are concerned about how we use your information, contact us at support@toptallycasino.co.uk or use the live chat on the site. Please do not send unnecessary identity documents or sensitive information through an ordinary message. We will tell you how to provide information securely if it is needed for your request.