Privacy Policy
This privacy policy outlines how Candyland Casino collects, uses, stores, and protects your personal information when you access and use our online slot gaming platform. We are committed to safeguarding your privacy and ensuring that your personal data is handled in accordance with applicable data protection legislation in the United Kingdom, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
When you register an account, play games, or interact with our services, you entrust us with your information. This document explains what data we collect, the legal basis for processing it, how we use it, and your rights regarding your personal information. We encourage you to read this casino privacy policy carefully to understand our practices.
Information We Collect
Candyland Casino collects various types of personal information necessary to provide our gaming services, comply with legal obligations, and improve your experience. The information we gather falls into several categories depending on how you interact with our platform.
We collect personal identification details when you create an account, including your full name, date of birth, residential address, email address, and telephone number. This information is essential for account verification, age verification to prevent underage gambling, and compliance with anti-money laundering regulations.
Financial information is collected when you make deposits or request withdrawals. This includes payment card details, bank account information, transaction history, and details of deposits and withdrawals. We also maintain records of your gaming activity, including games played, stakes placed, winnings, account balance, and login history.
Technical data is automatically collected when you access our platform, such as your IP address, browser type and version, device information, operating system, time zone settings, and cookie data. Communication records are retained when you contact our customer support team or interact with our marketing communications.
| Data Category | Examples | Purpose |
|---|---|---|
| Personal Identification | Name, address, date of birth, email | Account creation, verification, communication |
| Financial Information | Payment details, transaction history | Processing deposits and withdrawals |
| Gaming Activity | Games played, stakes, winnings | Service provision, responsible gambling monitoring |
| Technical Data | IP address, device information, cookies | Platform functionality, security, analytics |
| Communications | Support tickets, email correspondence | Customer service, record keeping |
How We Use Your Information
The personal information collected by Candyland Casino is processed for specific, legitimate purposes that enable us to operate our gaming platform legally and effectively. We rely on several legal bases for processing your data under UK GDPR, including contractual necessity, legal obligations, legitimate interests, and your consent where required.
Your information is used primarily to provide and manage your gaming account, process your deposits and withdrawals, facilitate gameplay, and maintain accurate records of your transactions. We verify your identity and age to comply with gambling regulations and prevent underage access to our services.
Compliance with legal and regulatory requirements is a fundamental use of your data. This includes fulfilling obligations under anti-money laundering legislation, reporting suspicious activities, responding to regulatory inquiries, and maintaining records as required by the UK Gambling Commission.
We process your information to detect and prevent fraud, protect against unauthorised access, investigate security incidents, and enforce our terms and conditions. Your gaming behaviour is monitored as part of our responsible gambling commitments to identify potential signs of problem gambling and implement appropriate interventions.
Marketing communications may be sent to you based on your preferences, including promotional offers, new game announcements, and updates about our services. You can withdraw consent for marketing at any time through your account settings or by following the unsubscribe links in our communications.
Your data helps us improve our services through analysis of platform usage, customer preferences, and technical performance. This enables us to enhance user experience, develop new features, and optimise our gaming offerings.
Data Sharing and Disclosure
Candyland Casino may share your personal information with third parties under specific circumstances and only to the extent necessary to fulfil the purposes outlined in this privacy policy. We do not sell your personal data to third parties for their marketing purposes.
Payment service providers and financial institutions receive necessary information to process your transactions, verify payment methods, and facilitate deposits and withdrawals. These parties are bound by strict confidentiality obligations and data protection requirements.
Regulatory bodies and law enforcement agencies may receive your information when we are legally obliged to disclose it. This includes the UK Gambling Commission, Her Majesty’s Revenue and Customs, the Financial Conduct Authority, and police services when investigating suspected criminal activity.
Technology service providers who support our platform operations may access your data, including hosting providers, software developers, customer support platforms, and analytics services. These processors are contractually bound to protect your information and use it only for specified purposes.
Identity verification and age verification services receive relevant personal details to confirm your identity and ensure you meet the legal age requirements for gambling. Anti-fraud and security services may access your information to detect suspicious activity and protect against threats.
In the event of a business transfer, merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this document.
| Third Party Category | Purpose of Sharing | Data Protection Measures |
|---|---|---|
| Payment Processors | Transaction processing | PCI DSS compliance, encryption |
| Regulatory Authorities | Legal compliance, licensing | Secure transmission, statutory obligations |
| Verification Services | Identity and age verification | Data minimisation, secure APIs |
| Technology Providers | Platform operations, hosting | Data processing agreements, confidentiality clauses |
| Security Services | Fraud prevention, security monitoring | Access controls, encryption |
Data Security and Retention
Candyland Casino implements robust technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. We recognise that the security of your data is paramount and maintain industry-standard protections throughout our operations.
Our security measures include encryption of data in transit and at rest using SSL/TLS protocols, secure server infrastructure with firewalls and intrusion detection systems, regular security audits and penetration testing, access controls limiting employee access to personal data on a need-to-know basis, and secure authentication procedures for account access.
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory, and contractual obligations. Account information and transaction records are retained for a minimum of six years following account closure to meet anti-money laundering regulations and potential legal claims.
Active account data is maintained throughout your relationship with us and for the required retention period after account closure. Marketing consent records are kept until you withdraw consent, plus a reasonable period to process your request and prevent inadvertent future contact.
Communication records with customer support are typically retained for three years to maintain service quality and resolve disputes. Technical data such as IP addresses and cookie information is generally retained for shorter periods unless required for security investigations or legal proceedings.
When personal information is no longer needed, it is securely deleted or anonymised in accordance with our data retention schedule and disposal procedures. Anonymised data that cannot identify you may be retained indefinitely for statistical and analytical purposes.
Your Privacy Rights
Under UK data protection legislation, you possess several rights regarding your personal information held by Candyland Casino. We respect these rights and have established procedures to enable you to exercise them.
You have the right to access your personal data and obtain confirmation of what information we hold about you, how we use it, and who we share it with. You may request a copy of your personal data, which we will provide in a commonly used electronic format within one month of your request.
The right to rectification allows you to request correction of inaccurate or incomplete personal information. We will update your records promptly upon verification of the correct information.
You may exercise your right to erasure, also known as the right to be forgotten, in certain circumstances, such as when the data is no longer necessary for the purposes collected, you withdraw consent, or you object to processing. However, this right is not absolute and may be limited by our legal obligations to retain certain records.
The right to restrict processing enables you to request that we limit how we use your data in specific situations, such as when you contest the accuracy of the data or object to processing. During restriction, we may store your data but not actively use it without your consent.
You have the right to data portability, allowing you to receive your personal data in a structured, machine-readable format and transmit it to another service provider where technically feasible.
The right to object permits you to oppose processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
You can withdraw consent at any time where we rely on consent as the legal basis for processing. This does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, contact our Data Protection Officer using the details provided on our website. We will respond to your request within one month, though this may be extended by two additional months for complex requests. If you are dissatisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Commissioner’s Office, the UK’s supervisory authority for data protection.
We may update this Candyland Casino privacy policy periodically to reflect changes in our practices, legal requirements, or operational needs. Material changes will be communicated through prominent notices on our platform or direct communication to your registered email address. Continued use of our services following notification of changes constitutes acceptance of the updated privacy policy.