About this privacy document

This Privacy Policy explains how Basswin handles personal information for the online casino and sportsbook services in the United Kingdom. It covers the collection, processing, protection, disclosure and destruction of data. Processing is based on consent where required, and may also rely on contract, legal obligation or legitimate interests. The document sets out user rights and how to exercise them under applicable laws. It applies to information collected through the website, mobile applications and related online tools.

Personal data collected and how it is protected

Data collected

  • Identification and contact details: name, date of birth, address, email, telephone number.
  • Verification records: identity documents, proof of address, age verification outcomes.
  • Account and usage information: usernames, preferences, responsible gambling settings, self-exclusion data, communication history.
  • Transaction and payment information: deposits, withdrawals, billing details processed by regulated payment providers.
  • Technical information: device identifiers, IP address, browser type, operating system, online activity logs and cookies.

Why it is collected

  • To open and manage accounts, deliver services and process transactions.
  • To meet legal duties, including age verification, anti-money laundering checks and responsible gambling obligations.
  • To prevent fraud, secure the websites and ensure platform integrity.
  • To provide support, resolve issues and improve the user experience.

Protection measures

  • Encryption in transit and at rest for appropriate data categories.
  • Access controls, role-based permissions and multi-factor authentication for staff.
  • Network monitoring, logging, regular security testing and independent audits.
  • Data minimisation, retention limits and structured incident response.
  • Payment processing handled by PCI DSS compliant providers.

User rights

  • Access, rectification, erasure, restriction and portability of personal data.
  • Object to direct marketing and certain types of profiling.
  • Withdraw consent at any time where consent is the legal basis.
  • Lodge a complaint with the Information Commissioner’s Office.

Compliance

  • Processing follows UK GDPR, the Data Protection Act 2018 and Gambling Commission requirements, including the Licence Conditions and Codes of Practice.

How personal information is used

Purposes and legal bases

  • Account provision and service delivery: creating accounts, enabling gameplay and bets, customer support. Legal basis: contract.
  • Payments and withdrawals: processing transactions and chargebacks. Legal basis: contract and legal obligation.
  • Verification, security and fraud prevention: identity, age and affordability checks, risk scoring, sanctions screening. Legal basis: legal obligation and legitimate interests.
  • Responsible gambling: limits, self-exclusion, interventions. Legal basis: legal obligation and public interest in regulatory compliance.
  • Service improvement and analytics: performance monitoring, troubleshooting, aggregate statistics. Legal basis: legitimate interests.
  • Marketing: emails, in-site messages or push notifications subject to consent or soft opt-in where permitted. Users can opt out at any time.
  • Legal and regulatory compliance: reporting, audits and dispute handling. Legal basis: legal obligation.

Transparent processing

  • Processing is proportionate, limited to the stated purposes and supported by documented safeguards.
  • No decision producing legal or similarly significant effects is based solely on automated processing without appropriate human review where required by law.

Access, updates and deletion of data

How to exercise rights

  • Access or update details through account settings where available or contact the support channels listed on the websites.
  • Submit a request to access, correct or delete data. Proof of identity may be required for security.
  • Responses are provided within one month, or longer for complex requests as permitted by law.

Correction and deletion

  • Incorrect information can be updated or rectified.
  • Deletion requests are honoured where no legal obligation requires continued retention. Records may be retained for anti-money laundering, tax, regulatory and dispute purposes.

Security and payments

  • By using the services, users consent to security checks, identity verification and processing of payment information by payment service providers and verification partners.
  • Providers act as independent controllers or processors depending on the service delivered, and apply appropriate safeguards.

Children’s information and age restrictions

  • Services are intended for persons aged 18 or over in line with the Gambling Act 2005.
  • Age cannot be confirmed without documents. Verification is required before account access and withdrawals.
  • If a minor’s data is identified, the account is closed, any balance is handled according to applicable rules, and personal data is deleted or minimised subject to legal retention requirements.
  • Parents or guardians may request deletion of a minor’s information using the contact options provided on the websites.

Transfers of data outside the United Kingdom

  • Personal data may be processed in other countries where partners, processors or data centres operate.
  • By using the site, users consent to such international transfers for the purposes described in this document.
  • Safeguards used include adequacy regulations, UK International Data Transfer Addendum or standard contractual clauses, plus technical and organisational measures.
  • All partners are required to maintain confidentiality, apply security controls and process information only on documented instructions or under their own legal duties where applicable.

Cookies and similar technologies

  • Cookies are small text files stored on a device by websites to remember preferences and enhance online services.
  • Uses include statistics, behaviour analysis, personalisation, security and site improvement.
  • Categories include essential cookies, analytics, functionality and advertising technologies. Some are placed by trusted third parties.
  • Retention: up to 1 year, after which they expire or are anonymised. Users can manage or delete cookies through browser settings or the on-site controls where provided.
  • Disabling certain cookies may affect features that rely on them.

Acceptance and the version that applies

  • Using the site means full acceptance of this Privacy Policy and any terms referenced in it.
  • The current version published on this page prevails over prior versions.
  • Continued use after updates indicates acceptance of the revised document. Users should review this page periodically for changes.
  • Material changes will be signposted in-product or on the websites where practicable.

Sharing information with third parties

  • Personal data may be shared where required by law, for dispute resolution, enforcement of agreements, fraud prevention or to deliver services via payment, identity verification, hosting, analytics and customer support providers.
  • The principal processors and partners are listed on the websites or provided during specific processing. If not listed, users are informed about the purpose and scope unless restricted by law or security.
  • Providing personal data constitutes consent to such sharing where consent is the applicable legal basis. In other cases, sharing is based on contract, legitimate interests or legal obligation.
  • Third parties must protect confidentiality and process information only for the documented purposes.

Updated: