Privacy Policy

What personal data we collect

We collect and use personal data when you create an account, use our services, contact us, make payments or take part in gambling activity. The information we collect depends on how you use the site and the checks that apply to your account. We hold a gaming licence and may need to verify your account before allowing certain activity.

Account and contact details

When you register, we collect information such as your name, date of birth, address, email address, telephone details if provided, username, password and account preferences. We may also record information you give us when you contact support, use live chat, submit a request or tell us about a problem with your account.

Identity and age information

To confirm that you are at least 18 and to meet our legal and regulatory duties, we may ask for identity documents or other evidence. This can include information from documents used to confirm your name, date of birth, address and identity. We may also record the outcome of age, identity, source-of-funds or account security checks.

Payments and transactions

We collect information about deposits, withdrawals, bets, wins, losses, bonuses where applicable, payment methods and transaction status. We do not need to hold the full details of every payment method in order to process a transaction. Payment information may be handled by the payment provider involved, while we keep the records needed to operate your account, prevent misuse and meet our legal duties.

Device and usage data

When you use our website, we may collect technical and usage information such as your IP address, browser type, device type, operating system, language, general location information, pages visited, activity times, referring pages, settings and interactions with the site. We use this information to keep the service working, protect accounts, understand technical problems and improve how our systems operate.

Some information is collected directly from you. Other information is created when you use your account or is supplied by service providers that help us with payments, identity checks, fraud prevention or security. We only ask for information that is relevant to the purposes explained in this policy or required to operate the service lawfully.

Why we use your data and the legal bases

We use personal data for clear and necessary purposes. Under the UK GDPR, we must also have a lawful basis for each main use. In plain words, this means that we must have a recognised legal reason for handling your information.

The purposes for using your information

• To create, administer and secure your account, provide the services you request, process deposits and withdrawals, record transactions and respond to your questions.
• To verify your age and identity, confirm that your account information is accurate and carry out checks before or during the use of certain account functions.
• To detect and prevent fraud, money laundering, unauthorised access, payment misuse, collusion and other activity that could harm you, us or other customers.
• To comply with legal, regulatory, court or law-enforcement requirements, including record keeping, reporting and responsible gambling obligations.
• To protect customers and support safer gambling by applying account controls, deposit limits, time-outs and self-exclusion requests where appropriate. We may use account and gambling activity information to help identify patterns that need attention.
• To send service messages, security notices and other information needed for your account. We may send promotional offers only where you have opted into them or where another lawful permission allows us to do so.
• To maintain, test and improve our website, systems, customer support, fraud controls and information security.

The legal bases we rely on

• Contract: We need to use certain information to set up and operate your account, provide the services you ask for, process transactions and communicate with you about those services.
• Legal obligation: We may need to collect, check and retain information because gambling, financial crime, age verification, tax, accounting or other laws require us to do so.
• Legitimate interests: We may use information where it is reasonably necessary for security, fraud prevention, system administration, customer support, service improvement and the responsible running of the business. We consider the effect on your privacy before relying on this basis.
• Consent: We rely on your consent for some optional activities, such as certain promotional communications or optional cookies. You can withdraw consent at any time, although this does not affect processing that took place before withdrawal or processing that has another lawful basis.

If we ask for information and you do not provide it, we may be unable to open or maintain your account. We may also be unable to complete a transaction, carry out a required check or provide a particular service. We will explain the practical effect where this applies.

Who we share data with and how long we keep it

We share personal data only where there is a business, legal or operational reason to do so. We use appropriate arrangements with service providers and require them to handle information in line with applicable data protection requirements. We do not sell your personal data.

• Payment providers: We share the information needed to authorise deposits, process withdrawals, investigate payment problems and help protect transactions.
• Identity-verification partners: We may share account and identity details with providers that help confirm your age, identity, address or other information needed for account checks.
• Fraud-prevention partners: We may share relevant information with providers that help identify fraud, money laundering, account takeover, payment abuse and other security risks.
• Professional and technical service providers: We may share information with providers that host, maintain, secure or support parts of our systems, where they need it to perform services for us.
• Regulators and public authorities: We may disclose information to regulators, courts, law-enforcement bodies or other authorities where the law requires or permits us to do so.

We may also share information where necessary to protect our legal rights or enforce our terms. The same applies when we investigate suspected unlawful conduct, protect customers or respond to an emergency. We limit the information shared to what is reasonably needed for the relevant purpose.

Retention of your information

We keep personal data for as long as your account is open or as long as it is needed for the purposes described in this policy. After an account is closed, we may retain information for the period required by gambling, anti-money laundering, accounting, tax, dispute-handling or other applicable laws. We may also keep limited information for as long as needed to establish, exercise or defend legal claims, prevent fraud or deal with account restrictions.

When information is no longer needed, we delete it, anonymise it or securely dispose of it in line with our retention processes. Different types of information may be kept for different periods. This is because their legal or operational purposes are not the same.

Your privacy rights and how to contact us

You have rights over the personal data we hold about you, subject to legal exceptions and the circumstances of your request. These rights can include the following:

• Access: You can ask for a copy of the personal data we hold about you and information about how we use it.
• Correction: You can ask us to correct information that is inaccurate or complete information that is incomplete.
• Erasure: You can ask us to delete personal data where there is no good reason for us to keep using it. We may need to retain some information because the law requires it.
• Objection: You can object to processing based on legitimate interests and to direct marketing. We will consider your objection and explain if we need to continue using the information for a lawful reason.
• Restriction: You can ask us to limit how we use your information in certain circumstances, such as while the accuracy of data is being checked.
• Data portability: Where the legal conditions apply, you can ask for certain information in a structured, commonly used and machine-readable format.
• Withdrawal of consent: Where we rely on consent, you can withdraw it at any time.

To use a privacy right, write to support@buffalospinscasino.co.uk or privacy@buffalospinscasino.co.uk. Please provide enough information for us to identify your account and understand your request. We may ask for reasonable information to confirm your identity before releasing or changing personal data. This protects your account from unauthorised requests.

You can also use the live chat on the site for general help, from 6am to 9pm, seven days a week. Live chat may pass a formal privacy request to the appropriate team. Please use the email addresses above when you want to exercise a data protection right or ask a detailed question about your personal data.

If you are not satisfied with how we handle your personal data, please contact us first so we can look into your concern. You also have the right to complain to the Information Commissioner's Office. Making a complaint does not affect any other legal rights you may have.

Cookies

We use cookies and similar technologies to keep the website working, remember selected settings, support account security, understand how the site is used and, where permitted, support optional communications or advertising functions. Some cookies are necessary for the service and others may depend on your choices. More information about the types of cookies we use, their purposes and how to manage your choices is set out in our Cookie Policy.