This privacy policy applies to all personal data processed by Snatch Casino in the course of providing online casino services. It covers interactions made through our website and mobile applications. The operator acts as the controller of this personal data under applicable data protection laws. We process this data to provide services, comply with legal obligations and protect our legitimate interests.

The policy extends to all services available on our platform. This includes account registration, deposits, withdrawals and gameplay. It applies whether you play for real money or use demo modes. We maintain this policy on our website. You should review it regularly for updates.

We may update this policy from time to time. Changes take effect when we publish the revised version. The current version governs all processing activities. We provide notice of material changes via email or platform notifications.

We operate under a specific regulatory framework that dictates how we handle data. This framework includes requirements for player protection and anti-money-laundering compliance. We adhere to these rules strictly. Your data rights are protected within this legal structure. We balance operational needs with data subject rights.

We share personal data only with authorised service providers and regulatory bodies. This includes payment processors, identity verification services and game suppliers. We maintain contracts with these entities requiring data protection compliance. They process data only on our instructions for specified purposes. For instance, when you make a deposit, our payment provider receives only the transaction details needed to complete the transfer. They cannot access your gameplay history or personal profile information beyond what is necessary for processing.

Regulatory authorities may access your data when required by law. We comply with requests from gambling commissions and law enforcement agencies. This happens in specific circumstances involving regulatory investigations. We do not share data with unrelated third parties under any circumstances. When a regulator requests transaction records for fraud investigation, we verify the request before disclosure. This protects your information while ensuring legal compliance with gambling regulations.

We do not sell your personal data to data brokers or marketing companies. This is a fundamental principle of our operations. Any data transfer occurs solely to deliver services or meet legal obligations. We maintain strict controls over all data sharing activities. For example, we would never share your betting patterns with external marketing firms. This restriction ensures your gambling behaviour remains confidential and secure from commercial exploitation.

International transfers require appropriate safeguards under data protection law. We use standard contractual clauses where data leaves the European Economic Area. These clauses ensure equivalent protection levels across jurisdictions. We regularly review our international data transfer arrangements. When using cloud services hosted in other countries, we implement additional encryption measures. This ensures your data remains protected even when stored in different geographical locations.

We retain personal data only for as long as necessary to fulfil our purposes. Different data categories have different retention requirements based on their nature. Legal obligations often dictate minimum retention periods for specific records. We maintain these periods even after account closure. For example, even if you delete your account today, we must keep transaction records for seven years. This requirement stems from gambling licensing conditions that mandate comprehensive financial record keeping.

Account data remains active while your profile exists. Transaction records are kept for minimum seven years after the last activity. This supports tax compliance and dispute resolution requirements. Verification documents follow similar retention schedules for regulatory purposes. When you request account closure, we retain essential identification documents to prevent future fraud. This protects both you and our casino from impersonation attempts by former account holders.

Marketing data retention depends on your consent status. We delete marketing contact details when consent is withdrawn. Account data persists regardless of marketing preferences. This separation allows us to maintain service functionality while respecting privacy. If you unsubscribe from our newsletter, we immediately remove your email from marketing lists. Your account login credentials remain active so you can continue playing without receiving promotional emails.

We review retention schedules periodically to ensure compliance. Outdated data is securely deleted or anonymised. Automated systems help us manage these retention policies. We maintain audit trails showing when data was removed. Every deletion request generates a permanent record for regulatory verification. This ensures transparency and demonstrates our commitment to data minimisation principles throughout the retention lifecycle.

We implement appropriate technical and organisational measures to protect personal data. These include encryption, access controls and regular security assessments. We monitor systems for unauthorised access or data breaches. Our security team updates these measures regularly. For example, we conduct penetration testing quarterly to identify potential vulnerabilities before malicious actors exploit them. This proactive approach ensures our security infrastructure evolves with emerging cyber threats.

We maintain incident response procedures for data security events. Any breach is assessed for impact and reported promptly. We notify affected individuals when required by law. Regular audits verify our security controls remain effective. When a system anomaly occurs, our team initiates a 24-hour response protocol. This ensures any potential compromise is contained and addressed before data is exposed to unauthorised parties.

You may complain to Snatch Casino about our data processing. Contact us through our dedicated privacy channel. We investigate all complaints thoroughly and respond in writing. If unresolved, you may escalate to your supervisory authority. We commit to resolving complaints within 30 working days. Our privacy team receives training on data protection regulations to ensure proper handling of all inquiries.

The supervisory authority handles complaints we cannot resolve. They have full investigation powers and enforcement capabilities. You should contact them if our response is unsatisfactory. They maintain guidance on data protection rights. The Gambling Commission can impose significant fines for regulatory breaches. We cooperate fully with their investigations and implement any required corrective measures to maintain compliance with gambling licensing conditions.