Privacy Policy
This privacy policy outlines how Ivy Casino collects, uses, stores, and protects personal information provided by users of our online gaming platform. We are committed to safeguarding your privacy and ensuring that your personal data is handled in accordance with applicable data protection legislation in the United Kingdom, including the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). By accessing or using Ivy Casino, you acknowledge that you have read and understood the terms of this privacy policy.
Information Collection and Usage
Ivy Casino collects various types of information to provide and improve our services. Personal data is collected during account registration, including your full name, date of birth, residential address, email address, and telephone number. We also collect payment information such as card details or e-wallet credentials to process deposits and withdrawals. Technical data is automatically gathered through cookies and similar technologies, including IP addresses, browser type, device information, operating system, and gameplay activity. We use this information to verify your identity, comply with age verification requirements, process financial transactions, prevent fraud and money laundering, improve our gaming platform, and communicate with you regarding your account and promotional offers.
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Personal identifiers | Account creation and verification | Contractual necessity |
| Financial information | Payment processing | Contractual necessity |
| Technical data | Platform improvement and security | Legitimate interests |
| Gameplay records | Regulatory compliance | Legal obligation |
| Marketing preferences | Promotional communications | Consent |
Data Sharing and Disclosure
Ivy Casino may share your personal information with third parties under specific circumstances. Payment service providers process your financial transactions securely. Age verification services confirm that you meet the legal gambling age requirements. Gaming regulators receive information as required by United Kingdom gambling legislation. Technical service providers assist with platform maintenance, customer support, and data storage. We may also disclose information to law enforcement agencies when legally required or to prevent illegal activities. We do not sell your personal data to third parties for marketing purposes. All third-party service providers are contractually obligated to maintain the confidentiality and security of your information and may only use it for the specific purposes we have designated.
Data Security and Retention
We implement industry-standard security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include SSL encryption for data transmission, secure servers with firewall protection, regular security audits and vulnerability assessments, restricted access to personal data on a need-to-know basis, and mandatory staff training on data protection principles. Your password is stored using one-way hashing algorithms. Despite these precautions, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security. We retain your personal data for as long as your account remains active. Following account closure, we retain certain records for seven years to comply with financial and regulatory obligations. Marketing data is retained until you withdraw consent. Technical logs are typically stored for twelve months unless required for ongoing security investigations.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account information | Duration of active account | Service provision |
| Financial records | 7 years post-closure | Regulatory compliance |
| Marketing consent | Until withdrawal | Legal requirement |
| Technical logs | 12 months | Security monitoring |
| Gameplay history | 7 years | Dispute resolution |
Your Privacy Rights
Under UK data protection law, you have several rights regarding your personal information. You may request access to the personal data we hold about you and receive a copy in a commonly used electronic format. You have the right to request correction of inaccurate or incomplete information. You may request deletion of your personal data, subject to our legal and regulatory obligations. You can object to processing based on legitimate interests or withdraw consent for marketing communications at any time. You have the right to restrict processing in certain circumstances and to lodge a complaint with the Information Commissioner’s Office if you believe your data protection rights have been violated. To exercise any of these rights, contact our Data Protection Officer using the details provided on our website. We will respond to verified requests within one month. Certain requests may require identity verification to prevent unauthorised access to your information. You can update your marketing preferences through your account settings or by clicking the unsubscribe link in promotional emails.