Confidence forms the core of our relationship with customers at Book of Slots. This data retention policy outlines how we process, store, and ultimately dispose of your personal information. We operate under UK data protection laws, covering the UK GDPR and the Data Protection Act 2018. Being transparent about our data handling is a legal obligation, but we also see it as a vital part of our service. We want for you to experience our games knowing your privacy is taken diligently.

What constitutes a Data Retention Policy?

A Data Retention Policy represents a formal document. It defines how long an organisation keeps different types of personal data and the legal reasons for retaining it. This is a key part of good data governance. It stops us from holding information forever, or for longer than we genuinely need it. At Book of Slots, we have set specific retention periods for all your data. This includes your account details, transaction history, support conversations, and gameplay records. This structured method minimises risk, enhances data security, and demonstrates we comply with the law for our players and regulators like the UK Gambling Commission.

Data Safety During Retention

Keeping your personal data safe is our priority for its entire lifecycle. We employ strong technical and organisational measures to guard the information we keep. This protects it from unauthorised access, bookofslots, change, disclosure, or destruction. Our measures include encrypting data when it’s moving and when it’s stored. We apply strict access controls so employees only see what they need for their job. We also utilize advanced network security. These protocols are checked and updated regularly to counter new threats. Your data stays secure whether we are using it today or reviewing it for a regulatory check in several years’ time.

Policy Revisions and Contact Details

We could change this Data Retention Policy periodically. Changes may indicate shifts in our processes, technology updates, or new legal requirements. The most recent version will always be available on our website. We will notify you about any important changes that influence how we process your data. If you have questions about this policy, our retention practices, or your data rights, please contact our Data Protection Officer. We are here to collaborate with you, handle concerns, and provide you with clear, timely details about how we protect your personal information.

Key Data Categories and Keeping Periods

We organize personal data into categories so we can use suitable retention timelines. The specific length of time depends on why we processed the data and the legal, regulatory, and business needs we must meet. These periods can vary if the law changes. If that happens, we will update this policy and let you know about any significant changes.

Profile and Identity Verification Data

This covers information you gave us when you registered and verified your account. It encompasses your name, date of birth, address, and copies of documents like a passport or driving licence. We keep this data for as long as your account is open, and for a set time after it closes.

Post-Account Closure Retention

After an account is closed, by you or by us, we must keep identity and verification data for at least five years from the closure date. The UK Gambling Commission’s Licence Conditions and Codes of Practice (LCCP) mandate this. It aids with responsible gambling oversight, fraud prevention, and any regulatory investigations that might happen after an account is no longer active.

Financial and Transaction Records

This category includes every deposit, withdrawal, bonus claim, and wager. Detailed transaction histories are crucial for financial audits, solving disputes, and giving you a clear record of your activity. Financial and gambling regulations heavily affect how long we keep this data.

Meeting Regulatory Requirements

We keep full financial transaction data for a minimum of six years from the transaction date. This complies with standard UK tax and accounting law. For some records, the UKGC might require us to keep them even longer. We always follow the strictest applicable timeframe to ensure full compliance and to protect both you and our business.

Customer Interaction and Support Data

We store records of your conversations with our customer support team, whether by live chat, email, or phone. This enables us maintain service quality and train our staff. It also enables us resolve ongoing issues and improve the player experience. We treat these records with the same confidentiality as all your personal data.

Generally, we keep support logs for three years from the date of the interaction. This gives us time to look back at previous conversations if you need more help, and to spot trends in player queries. If a communication is part of a dispute or complaint that could lead to legal action, we might keep those specific records longer. This aligns with UK time limits for making legal claims.

Our Legal Basis for Data Retention

UK data protection law demands a valid legal reason for us to process and retain your personal data. Our main reasons are to satisfy a contract with you, to obey legal rules, and for our legitimate business interests. For example, we maintain your basic account details to offer the gaming service you requested. That fulfils our contract. At the same time, laws implemented by the UKGC mandate us to keep financial transaction records for several years to prevent money laundering. When we base on legitimate interests, like preventing fraud, we carefully weigh them against your rights. We guarantee any data we keep is proportionate.

Your Rights and Data Deletion

You hold a claim to erasure, sometimes termed the ‘right to be forgotten’. This is a essential part of UK data protection law. But this right carries limits. You can ask us to erase your personal data. However, we may have to say no if we require to keep the data to follow a legal duty. Our licensing conditions from the UKGC are one example. We also need to retain data to formulate, exercise, or defend legal claims. If we have to keep data for these overriding reasons, we undertake to only use it for those specific purposes. The data will be safeguarded and access will be restricted.

FAQ

For what reason does Book of Slots have to hold my data after I shut down my account?

The UK Gambling Commission legally obligates us to retain certain data, like identity and transaction records, for a fixed time after an account is closed. This facilitates responsible gambling monitoring, helps prevent fraud, and helps with any future regulatory investigations. For core account data, this retention period is generally five years.

Can I request early deletion of my personal data?

You can at any time make a request for erasure. But UK gambling and financial regulations often mean we cannot comply right away. For instance, we cannot delete your transaction history before the required six-year period is over. The law mandates us to keep it for auditing and compliance.

How is my data safeguarded during the retention period?

We enforce strict security measures for the full time we keep your data. These cover encryption, tight access controls, and secure storage systems. We carry out regular security audits to make sure these protections keep strong against new threats. Your information is secure from unauthorised access, whether it’s in active use or stored away.

What happens to my data when the retention period expires?

After the retention period for a specific type of data finishes, we securely and permanently delete it. Sometimes we anonymise it instead. Anonymisation means altering the data so it can no longer be linked back to you. Following that, it might be used for internal statistical analysis.

Does Book of Slots provide my retained data with third parties?

We exclusively share data when it’s required. This includes sharing with payment processors to run our service, or with authorities like the UK Gambling Commission when the law mandates it. Any third party we partner with must adhere to strict contractual rules to safeguard your data. They can exclusively use it for the particular, lawful purpose we agreed on.

How can I find out what data you keep on me?

You are entitled to a right to access your personal data. To exercise this right, you can submit us a Subject Access Request (SAR). We will then supply a copy of the information we maintain about you. We do not impose a fee for this and will normally respond within one month. This enables you view exactly what data is in our records.

On which site can I see the most up-to-date version of this policy?

The latest version of our Data Retention Policy is always available on our website. It’s a good idea to review it periodically. If we implement any big changes that affect how we handle your data, we will notify you. This ensures you informed about our privacy practices.