Your Privacy at Allbritish Casino
This Privacy Policy explains what personal data we collect when you play at Allbritish Casino, why we collect it, who we share it with and the rights you hold over it. We operate under licence MGA/B2C/211/2011, issued by the Malta Gaming Authority to L&L Europe Ltd, and we process your data in line with the UK GDPR and the Data Protection Act 2026.
What Data We Collect
We only collect data we need to run your account, meet our licence obligations and keep you safe. That data falls into the categories below.
- Identity data: your name, date of birth, email address, phone number and residential address.
- Verification documents: photo ID (passport or driving licence), proof of address and proof of payment method, collected during KYC checks before your first withdrawal.
- Transaction data: deposits and withdrawals, payment method details, amounts in GBP and timestamps.
- Technical data: device type, operating system, IP address, browser type and approximate location.
- Gameplay behaviour: games played, session times, bet and win history, bonus usage and tournament entries.
- Marketing preferences: whether you have opted in to emails, SMS or on-site promotions, and how you engage with them.
How We Use Your Data
We use your data to create and run your account, verify your identity under KYC rules, process your deposits and withdrawals in GBP, and meet the reporting duties attached to our MGA licence.
- Account creation, login and account management.
- Identity, age and payment-method verification (KYC).
- Payment processing and anti-fraud screening.
- Responsible-gambling monitoring, including deposit limits, loss limits, session reminders and self-exclusion tools.
- Marketing, only where you have given consent, covering our 10% weekly cashback, daily tournaments and seasonal prize draws.
- Legal and regulatory obligations, such as anti-money-laundering reporting and dispute handling.
Our Legal Bases
Contract. We process your data to set up and operate your player account and to pay out winnings. Without this data we cannot offer you the service you signed up for.
Legal obligation. Our MGA licence and anti-money-laundering law require us to verify your identity, monitor transactions and retain records. You cannot opt out of processing that law compels.
Legitimate interest. We rely on legitimate interest to prevent fraud, detect bonus abuse, secure our platform and analyse aggregated gameplay data to improve our games and services. We weigh this interest against your rights and keep it to the minimum needed.
Consent. For marketing messages and non-essential cookies we ask for your explicit consent. You can withdraw it at any time by changing your communication settings or contacting [email protected].
How Long We Keep It
We keep each category of data only as long as we need it. Gambling regulations require transaction and KYC records to be held for at least 5 years after your last activity. Marketing data is deleted as soon as you withdraw consent or your account closes. We will tell you exactly what we hold.
| Data category | Retention period |
|---|---|
| Transaction and KYC records | Minimum 5 years after last activity |
| Account and identity data | Life of the account, then 5 years |
| Gameplay history | 5 years, for dispute and audit purposes |
| Marketing preferences | Until you withdraw consent or account closure |
| Technical and device logs | Up to 12 months |
| Verification documents | Deleted after checks, or retained 5 years if required |
Who We Share It With
We never sell your personal data. We share it only with partners who need it to deliver the service, and always under strict data-processing agreements. You can reach our support team 24/7 via live chat or at [email protected] if you want details of the categories involved.
- Payment processors handling your Visa Debit, Mastercard, Trustly, Skrill, Neteller and bank transfer transactions.
- KYC and AML verification providers who check your ID, address and payment method.
- The Malta Gaming Authority and other regulators or law-enforcement bodies, where legally required.
- Analytics and platform providers who help us understand site performance in aggregated form.
- Game providers, who receive only the minimum data needed to run your sessions.
Your Rights Over Data
Under UK GDPR you control your data. You can exercise any of the rights below at no cost by emailing [email protected] or our Data Protection Officer. We respond within one month, extended by two further months for complex requests.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete data where no legal retention duty applies.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing at any time via account settings or the unsubscribe link.
- Complain: raise a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies and Tracking
We use essential cookies to keep you logged in and your session secure, plus optional analytics and marketing cookies that only load with your consent. You can review every cookie, its purpose and its lifespan on our dedicated cookies page, and change your choices there at any time. Our mobile-optimised site works fully in your browser, so nothing is stored on your device beyond what you permit.
How We Protect Your Data
All traffic between your device and our servers runs over TLS encryption. Access to player data is limited to trained staff who need it for their role, protected by multi-factor authentication and logged for audit. Verification documents are stored in encrypted form and are not visible to other players under any circumstances.
If a personal-data breach occurs that poses a risk to your rights, we notify the ICO within 72 hours and inform affected players directly where the risk is high. Our incident-response team tests these procedures regularly.
Contact Our DPO
Our Data Protection Officer answers privacy questions, handles data-subject requests and oversees this policy. Email [email protected] and we will respond within one month. This policy was last reviewed in 2026; check this page for updates because we review it at least annually.
Frequently asked questions
Do you share my data with game providers?
Only the minimum needed to run your session, such as an anonymous player ID. Providers like Evolution and Play'n GO never receive your full identity or payment details.
How do I stop marketing emails?
Use the unsubscribe link in any email, switch off marketing in your account settings, or email [email protected]. We stop immediately, though transactional messages such as withdrawal confirmations must continue.
Why do you keep my ID documents?
Our MGA licence requires us to verify identity before your first withdrawal and to retain KYC records for at least 5 years after your last activity, even if you close your account.
Can I get a copy of my gameplay history?
Yes. Submit an access request to [email protected] or [email protected] and we will provide your data, including gameplay records, within one month.