Privacy Policy for 888 Casino UK | Data Protection

1. Introduction
888 Holdings plc (referred to as «we», «us», or «our») is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website uk.888-play-casino.com (the «Site») and our related gaming services (the «Services»). We are a data controller registered with the UK Information Commissioner’s Office (ICO). By using our Site and Services, you consent to the data practices described in this policy.

2. The Data We Collect About You
We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped as follows:

  • Identity Data: Includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth, gender, copies of identification documents (e.g., passport, driving licence).
  • Contact Data: Includes billing address, delivery address, email address, and telephone numbers.
  • Financial and Transaction Data: Includes bank account and payment card details, deposits, withdrawals, betting history, and winnings.
  • Technical and Usage Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Site. Also includes information about how you use our Site and Services.
  • Profile Data: Includes your username and password, your interests, preferences, feedback, and survey responses.
  • Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.
  • Special Category Data: In limited circumstances and as permitted by law, we may process data concerning health (e.g., for responsible gambling purposes) or biometric data for identification verification.

3. How We Collect Your Personal Data
We use different methods to collect data from and about you including:

  • Direct interactions: You may give us your Identity, Contact, and Financial Data by filling in forms on our Site or by corresponding with us by post, phone, email, or live chat. This includes personal data you provide when you:
    • create an account;
    • deposit funds or place bets;
    • request marketing to be sent to you;
    • enter a competition, promotion, or survey; or
    • give us feedback or contact our customer support.
  • Automated technologies or interactions: As you interact with our Site, we will automatically collect Technical and Usage Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies. Please see our separate Cookie Policy for further details.
  • Third parties or publicly available sources: We may receive personal data about you from various third parties, such as:
    • Identity and Contact Data from data brokers or aggregators.
    • Identity, Contact, and Financial Data from payment service providers.
    • Identity, Contact, and Profile Data from social networks when you connect your account.
    • Technical Data from analytics providers (e.g., Google).
    • Identity and Contact Data from publicly available sources such as the electoral register or Companies House.

4. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • To perform the contract we are about to enter into or have entered into with you (e.g., to open and manage your account, process bets and payments).
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., for fraud prevention, network and information security, marketing our services).
  • Where we need to comply with a legal or regulatory obligation (e.g., anti-money laundering checks, responsible gambling duties, tax reporting).
  • Where you have given us your explicit consent (e.g., for certain marketing communications or processing of special category data).

Purposes for which we will use your personal data:

  • To register you as a new customer.
  • To process and manage deposits, bets, and withdrawals.
  • To manage our relationship with you, including notifying you about changes to our terms or privacy policy.
  • To enable you to partake in a prize draw, competition, or complete a survey.
  • To administer and protect our business and this Site (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data).
  • To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.
  • To use data analytics to improve our Site, Services, marketing, customer relationships, and experiences.
  • To make suggestions and recommendations to you about goods or services that may be of interest to you (marketing).
  • To comply with our legal and regulatory obligations, including age verification, identity verification, fraud prevention, and responsible gambling monitoring.

5. Disclosures of Your Personal Data
We may share your personal data with the following parties for the purposes set out above:

  • Internal Third Parties: Other companies in the 888 Holdings plc Group acting as joint controllers or processors.
  • External Third Parties:
    • Service providers acting as processors who provide IT, payment processing, identity verification, KYC (Know Your Customer), customer support, and system administration services.
    • Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.
    • HM Revenue & Customs, regulators (such as the UK Gambling Commission) and other authorities acting as processors or joint controllers who require reporting of processing activities in certain circumstances.
    • Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.
  • Third Parties for Marketing: We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.

6. International Transfers
We may transfer, store, and process your personal data outside the United Kingdom (UK). Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK Government.
  • Where we use certain service providers, we may use specific contracts approved by the UK Government which give personal data the same protection it has in the UK.

7. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

8. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements. In some circumstances you can ask us to delete your data: see «Your Legal Rights» below.

9. Your Legal Rights
Under certain circumstances, you have rights under UK data protection laws in relation to your personal data:

  • Request access to your personal data (commonly known as a «data subject access request»).
  • Request correction of the personal data that we hold about you.
  • Request erasure of your personal data.
  • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party).
  • Request restriction of processing of your personal data.
  • Request the transfer of your personal data to you or a third party.
  • Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us using the details in section 11.

10. Marketing Preferences
We may use your Identity, Contact, Technical, Usage, and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services, and offers may be relevant for you (marketing). You will receive marketing communications from us if you have requested information from us and you have not opted out of receiving that marketing. You can ask us or third parties to stop sending you marketing messages at any time by logging into the website and checking or unchecking relevant boxes to adjust your marketing preferences or by following the opt-out links on any marketing message sent to you.

11. Contact Us & Complaints
If you have any questions about this Privacy Policy or wish to exercise any of your legal rights, please contact us at:
Data Protection Officer
888 Holdings plc
Willowdale
Millennium Way
Straits
Gibraltar
GX11 1AA
Email: [email protected]

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The historic versions can be obtained by contacting us. We will notify you of any material changes through a notice on our website or via email.