Privacy Policy
This Privacy Policy explains what personal data we at Blindluck Casino collect, why we collect it, who we share it with, and the rights you have over it. It applies to every visitor and registered player using blindluckcasino.co.uk.
What Data We Collect
We collect only the data we need to run your account, verify your identity and meet our legal obligations. The categories below cover everything we hold on you as a Blindluck Casino player.
- Identity data: your name, date of birth, email address, phone number and residential address.
- Verification documents: government-issued ID, proof of address and proof of payment method, submitted during KYC before your first withdrawal.
- Transaction data: deposits, withdrawals, wagering history, bonuses claimed and payment method details.
- Technical data: IP address, device type, browser and operating system, collected via cookies and server logs.
- Gameplay behaviour: games played, stakes, session times, win and loss patterns, and responsible-gambling indicators.
- Marketing preferences: whether you opted in to receive offers, and which channels you chose.
How We Use Your Data
We use each category of data for a specific purpose, and never for anything beyond the purposes listed here without asking you first.
Account creation and management: setting up your player account, authenticating logins and processing your deposits and withdrawals through Visa Debit, Trustly, Skrill, cryptocurrencies and other supported methods.
Verification: running KYC checks within 24 to 48 hours before your first withdrawal, as required by our Anjouan licence.
Fraud prevention: spotting duplicate accounts, chargeback abuse, payment fraud and collusion between accounts.
Responsible-gambling monitoring: detecting signs of problematic play so we can offer deposit limits, session reminders or self-exclusion through GAMSTOP, GamCare and BeGambleAware tools.
Marketing: sending you promotions such as our Monday reload or Friday free spins drops, only where you have consented.
Legal obligations: responding to regulators, tax authorities and lawful requests.
Our Legal Bases
Contract. We process your identity, transaction and gameplay data to create and operate your account. Without this data we cannot offer you the service you signed up for.
Legal obligation. Anti-money-laundering and licensing rules force us to verify your identity and retain transaction records for at least five years. We cannot disable these checks even if you ask us to.
Legitimate interest. We rely on this basis for fraud prevention, security monitoring and aggregated analytics that keep Blindluck Casino safe and functional. We weigh our interest against the impact on your privacy each time we invoke it.
Consent. Marketing communications and non-essential cookies are processed only with your consent. You can withdraw it at any time, and we stop the processing from that moment onward.
How Long We Keep It
We retain each category only as long as the purpose requires, then delete or anonymise it. The table below shows the retention period per data type.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then up to 5 years for regulatory record-keeping |
| Verification (KYC) documents | At least 5 years after account closure, per AML rules |
| Transaction data | Minimum 5 years, as required by our licence |
| Gameplay and session logs | Up to 5 years for fraud and dispute resolution |
| Marketing preferences | Until you withdraw consent or delete your account |
| Technical and cookie data | Up to 24 months, depending on cookie type |
Who We Share It With
We never sell your personal data. We share it only with processors and authorities that need it to deliver our service or that we are legally required to inform.
Payment processors handling your deposits and withdrawals, including card schemes, e-wallet providers and crypto payment infrastructure.
KYC and AML verification providers that check your documents against sanctions and identity databases.
Game and platform providers that host the games you play and receive your player ID and session data.
Our licensing authority and law-enforcement or tax bodies when legally demanded.
Analytics providers that help us measure site performance in aggregate form.
Your Rights Over Data
You control your personal data. Under data-protection law you can exercise the following rights at any time by emailing [email protected].
Access: request a copy of the personal data we hold on you.
Rectification: correct inaccurate or incomplete data.
Erasure: ask us to delete data we no longer have grounds to keep, noting that transaction and KYC records must be retained for the statutory 5-year period.
Portability: receive your data in a structured, machine-readable format.
Objection: object to processing based on legitimate interest.
Withdrawal of consent: stop marketing and optional cookies at any time, without affecting the lawfulness of earlier processing.
Complaint: lodge a complaint with your national data protection authority if you believe we mishandled your data.
Cookies and Tracking
We use essential cookies to keep you logged in and secure your session, plus optional analytics and marketing cookies that load only after you consent. The cookie banner lets you accept, reject or adjust your choices, and you can change them later from the Cookies page, where you will find the full list of cookies we set and their lifespans.
How We Protect Your Data
All traffic between your device and our servers is encrypted with TLS. Stored data is protected by access controls: only staff who need it for verification, support or fraud analysis can reach it, and every access is logged. We run regular security reviews and patch our infrastructure continuously.
If a personal-data breach occurs, we notify the relevant supervisory authority within 72 hours of becoming aware of it, and we inform you directly where the breach poses a high risk to your rights.
Contact Our Data Officer
Our Data Protection Officer answers questions about this policy and handles data-subject requests. Write to [email protected] and we will respond within 30 days, usually sooner. Blindluck Casino operates under Blindluck Entertainment N.V., Anjouan licence ALSI-202502014-FI1, and this policy was last reviewed in 2026.
Frequently Asked Questions
Can I delete all my data from Blindluck Casino?
You can request erasure at any time. We delete account and marketing data, but KYC documents and transaction records must be kept for at least 5 years after account closure under anti-money-laundering rules.
Do you share my data with anyone else?
Only with the parties listed in this policy: payment processors, KYC and AML verification providers, game platform providers, analytics services, and regulators or authorities when legally required. We never sell your data.
How do I stop marketing emails?
Unsubscribe via the link in any marketing email, or withdraw consent from your account settings. You can also email [email protected] and we will stop marketing communications immediately.
Why do you need my ID before withdrawal?
Our Anjouan licence requires identity verification before your first withdrawal. We check a government ID, proof of address and proof of payment method, usually within 24 to 48 hours.