Confidence forms the foundation of our interaction with customers at Book of Slots. This data retention policy explains how we process, keep, and eventually remove your personal information. We operate under UK data protection laws, such as the UK GDPR and the Data Protection Act 2018. Being clear about our data handling is a legal requirement, but we also see it as a vital part of our operations. We want for you to experience our games aware your privacy is taken seriously.
A Data Retention Policy constitutes a written document. It sets out how long an organisation retains different types of personal data and the legal reasons for retaining it. This is a key part of good data governance. It stops us from keeping information forever, or for longer than we genuinely need it. At Book of Slots, we have set specific retention periods for all your data. This encompasses your account details, transaction history, support conversations, and gameplay records. This organised method minimises risk, improves data security, and demonstrates we comply with the law for our players and regulators like the UK Gambling Commission.
We might update this Data Retention Policy from time to time. Changes may indicate shifts in our processes, technology updates, or new legal obligations. The latest version will always be published on our website. We will notify you about any major changes that impact how we manage your data. If you have questions about this policy, our retention practices, or your data rights, please contact our Data Protection Officer. We are here to assist you, handle concerns, and give you clear, timely updates about how we protect your personal information.
We classify personal data into categories so we can use suitable retention timelines. The specific length of time depends on why we processed the data and the legal, regulatory, and business needs we must meet. These periods can change if the law changes. If that happens, we will update this policy and let you know about any significant changes.
This includes information you gave us when you registered and verified your account book-of.eu. It includes your name, date of birth, address, and copies of documents like a passport or driving licence. We keep this data for as long as your account is open, and for a set time after it closes.
After an account is closed, by you or by us, we must keep identity and verification data for at least five years from the closure date. The UK Gambling Commission’s Licence Conditions and Codes of Practice (LCCP) mandate this. It aids with responsible gambling oversight, fraud prevention, and any regulatory investigations that might happen after an account is no longer active.
This category covers every deposit, withdrawal, bonus claim, and wager. Detailed transaction histories are vital for financial audits, solving disputes, and giving you a clear record of your activity. Financial and gambling regulations heavily determine how long we keep this data.
We keep full financial transaction data for a minimum of six years from the transaction date. This aligns with standard UK tax and accounting law. For some records, the UKGC might ask us to keep them even longer. We always follow the strictest applicable timeframe to ensure full compliance and to safeguard both you and our business.
We store records of your conversations with our customer support team, whether by live chat, email, or phone. This enables us maintain service quality and train our staff. It also enables us resolve ongoing issues and improve the player experience. We handle these records with the same confidentiality as all your personal data.
Generally, we keep support logs for three years from the date of the interaction. This gives us time to look back at previous conversations if you need more help, and to spot trends in player queries. If a communication is part of a dispute or complaint that could lead to legal action, we might retain those specific records longer. This aligns with UK time limits for making legal claims.
UK data protection law requires a valid legal reason for us to process and retain your personal data. Our main reasons are to satisfy a contract with you, to obey legal rules, and for our legitimate business interests. For example, we hold your basic account details to provide the gaming service you requested. That fulfils our contract. At the same time, laws implemented by the UKGC oblige us to keep financial transaction records for several years to prevent money laundering. When we depend on legitimate interests, like preventing fraud, we carefully weigh them against your rights. We ensure any data we keep is proportionate.
Ensuring your personal data safe is our focus for its entire lifecycle. We use strong technical and organisational measures to safeguard the information we keep. This defends it from unauthorised access, change, disclosure, or destruction. Our steps include encrypting data when it’s moving and when it’s stored. We maintain strict access controls so employees only see what they must have for their job. We also use advanced network security. These protocols are evaluated and updated regularly to counter new threats. Your data stays secure whether we are using it today or reviewing it for a regulatory check in several years’ time.
You hold a right to erasure, sometimes referred to as the 'right to be forgotten’. This is a essential part of UK data protection law. But this right has limits. You can petition us to delete your personal data. However, we might have to say no if we require to keep the data to follow a legal duty. Our licensing conditions from the UKGC are one example. We also must to retain data to formulate, exercise, or defend legal claims. If we have to keep data for these overriding reasons, we undertake to only use it for those specific purposes. The data will be secured and access will be restricted.
The UK Gambling Commission by law mandates us to retain specific data, like identity and transaction records, for a set time after an account is terminated. This aids responsible gambling monitoring, assists prevent fraud, and aids with any future regulatory investigations. For core account data, this retention period is generally five years.
You can at any time make a request for erasure. But UK gambling and financial regulations commonly mean we may not comply right away. For instance, we cannot delete your transaction history before the required six-year period is over. The law requires us to keep it for auditing and compliance.
We apply strict security measures for the entire time we store your data. These cover encryption, tight access controls, and secure storage systems. We conduct regular security audits to make sure these protections keep strong against new threats. Your information is protected from unauthorised access, whether it’s in active use or stored away.
After the retention period for a specific type of data finishes, we securely and permanently delete it. Sometimes we anonymise it instead. Anonymisation means changing the data so it can no longer be traced back to you. Following that, it could be used for internal statistical analysis.
We exclusively share data when it’s required. This includes sharing with payment processors to run our service, or with authorities like the UK Gambling Commission when the law mandates it. Any third party we collaborate with must follow strict contractual rules to secure your data. They can exclusively use it for the particular, lawful purpose we agreed on.
You are entitled to a right to access your personal data. To exercise this right, you can submit us a Subject Access Request (SAR). We will then provide a copy of the information we keep about you. We do not charge for this and will typically respond within one month. This allows you see exactly what data is in our records.
The newest version of our Data Retention Policy is always available on our website. It’s a sensible idea to examine it periodically. If we introduce any big changes that affect how we handle your data, we will alert you. This keeps you informed about our privacy practices.