Gambiva Privacy Policy – Data Protection & Cookies

Privacy Policy

1. Nature and scope of personal data collected

Under GDPR and the UK Data Protection Act 2018, we are required to set out exactly what personal data we collect from you when you use our platform. This section lists the categories of information we gather, whether you provide it directly or we collect it automatically during your visit.

We process data in accordance with the principle of data minimisation, meaning we only collect what is necessary to run our services and meet our regulatory obligations. Some information comes from you directly during registration, while other data is generated through your ongoing use of our casino.

Identity details such as full name, date of birth, and nationality
Contact information including postal address and phone number
Financial data linked to deposits, withdrawals, and payment methods
Account activity, including game history and betting patterns
Technical data such as IP address, device type, and browser information
Verification documents submitted for KYC purposes

2. Purposes and objectives of data processing

To run our platform safely and within UK gambling regulations, we process personal data for a defined set of purposes. Each purpose has a lawful basis under GDPR, whether that is contractual necessity, legal obligation, or legitimate interest.

Our processing supports account management, fraud prevention, and compliance with anti-money laundering legislation. We also rely on certain data to personalise your experience and to meet responsible gambling obligations placed on us as an operator.

Creating and managing your player account
Verifying your identity and age in line with licensing requirements
Processing deposits, withdrawals, and payment transactions
Detecting and preventing fraud, money laundering, and abuse
Supporting responsible gambling tools and self-exclusion requests
Communicating important account and service updates

3. Security measures and technical integrity

We want to be clear about the technical and organisational measures we take to protect your data. Security is not an afterthought for us. It sits at the core of how we build and maintain our platform.

We use industry-standard encryption protocols to protect data in transit and at rest, alongside firewalls, intrusion detection systems, and restricted access controls for staff. Our servers undergo regular security testing, and access to personal data is limited strictly to employees who need it to perform their duties. Payment information is handled through PCI DSS compliant processes, and we conduct periodic reviews of our security architecture to identify and address vulnerabilities.

Despite these measures, no system can guarantee absolute security. Should a breach occur that affects your personal data, we will notify you and the relevant supervisory authority as required under GDPR.

When you use our services, certain information needs to pass to trusted partners who help us run the platform. We do not sell personal data, and any sharing that takes place is governed by contractual obligations requiring the same standard of protection we apply ourselves.

Third parties only receive the data necessary for them to perform their specific function. This might include processing a payment, verifying your identity, or helping us meet a legal requirement. We carry out due diligence on every partner before any data sharing arrangement begins, and we review these relationships periodically.

Payment processors and banking partners
Identity verification and KYC service providers
Regulatory bodies and law enforcement agencies where legally required
IT infrastructure and hosting providers
Fraud prevention and anti-money laundering specialists
Marketing and analytics partners, where you have given consent

We use cookies and similar technologies to operate our platform, remember your preferences, and understand how our services are used. Some cookies are essential for the site to function, while others support analytics and marketing activities.

You can manage cookie preferences through your browser settings or the cookie consent tool available on our platform. Disabling certain cookies may affect how parts of our site function, though essential cookies required for account security and gameplay cannot be switched off while you remain a registered player.

6. Data retention period

Your data belongs to you, though we are required to retain certain records for defined periods under gambling and financial regulations. Account and transaction data is typically kept for a minimum of five years after account closure to meet anti-money laundering obligations, after which it is securely deleted or anonymised unless a longer retention period is required by law.

7. User rights over their data

Under GDPR, you hold a number of rights regarding how we process your personal data. These rights exist to give you meaningful control over the information we hold, and we take requests to exercise them seriously.

To make a request, you can contact our support team through the channels listed on our platform. We will respond within one month, as required by law, and may ask you to verify your identity before processing certain requests.

Right of access to the personal data we hold about you
Right of rectification to correct inaccurate or incomplete information
Right of erasure, sometimes known as the right to be forgotten
Right to object to certain types of processing, including marketing
Right to data portability, allowing you to receive your data in a structured format

8. International data transfers

As required by United Kingdom and EU data protection law, any transfer of personal data outside the UK or European Economic Area must meet specific safeguards. We work with service providers in various jurisdictions, which sometimes means your data crosses borders.

Where this happens, we rely on mechanisms such as Standard Contractual Clauses or adequacy decisions recognised under GDPR to ensure your data continues to receive an equivalent level of protection. We assess each transfer arrangement individually and only proceed where appropriate safeguards are confirmed.

9. Privacy policy updates

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal obligations. Where changes are material, we will notify registered players through our platform or by other reasonable means, and the revised version will state the date it takes effect.

10. Contact information

We want to be clear about how you can reach us regarding this privacy policy or any data protection concern. Our support team can be contacted through the official channels listed on our platform, and we encourage you to get in touch if anything in this policy is unclear.

Responsible gambling

We are committed to promoting responsible gambling and supporting players who may need help. If gambling stops being fun or starts affecting your wellbeing, please reach out to GamCare on 0808 8020 133 for free, confidential support. Our platform is intended for use by individuals aged 18 and over only.