Your Privacy at Prestige Casino
This Privacy Policy explains what personal data Prestige Casino collects when you register, play or contact us, why we collect it, how long we keep it and the rights you hold over it. It applies to the prestige-casino.me.uk website and to your player account in full.
Data We Collect From You
We collect only the data we need to operate your account lawfully. That covers the details you give us at registration, the records generated when you transact or play, and technical information captured automatically as you use the site.
- Identity data: full name, date of birth, email address, telephone number and residential address.
- Verification documents: copies of your ID, proof of address and payment method, collected during KYC checks.
- Transaction data: deposits, withdrawals, bonuses applied, wagering and game outcomes.
- Technical data: IP address, device type, browser type, operating system and session timestamps.
- Gameplay behaviour: games played, stake sizes, session duration and win/loss history.
- Marketing preferences: which channels you consented to (email, SMS) and any opt-outs you record.
How We Use Your Data
Every use of your data maps to a specific purpose. We create and administer your account, verify your identity and age under our KYC obligations, process deposits and withdrawals, and prevent fraud and bonus abuse. We also monitor play patterns to meet our responsible-gambling commitments, and we send marketing messages only where you have consented.
Where a legal or regulatory obligation applies, such as anti-money-laundering reporting to the Malta Gaming Authority under licence MGA/B2C/147/2000, we use your data to satisfy that obligation. We never sell your personal data.
Our Legal Bases
Contract. We process identity, account and transaction data to perform our agreement with you: opening your account, paying out withdrawals and applying bonuses. Without this data we cannot provide the service.
Legal obligation. Verification documents, transaction records and AML reporting are processed because gambling law requires it. We must retain and, where compelled, disclose these records to regulators.
Legitimate interest. Fraud prevention, security monitoring and service improvement rely on our legitimate interest in running a safe casino. This never overrides your rights over your own data.
Consent. Marketing emails, SMS and non-essential cookies run only on your consent. You may withdraw it at any time without affecting the lawfulness of processing already carried out.
How Long We Keep It
Retention follows the nature of the data and the rules that govern it. We do not keep anything longer than the law allows or the purpose requires.
| Data category | Retention period |
|---|---|
| Identity and account data | Life of the account, then up to 5 years after closure |
| KYC verification documents | 5 years after account closure (regulatory minimum) |
| Transaction and wagering records | Minimum 5 years under AML rules |
| Marketing preferences and consent logs | Until you withdraw consent, plus a short record of the withdrawal |
| Technical and session logs | Up to 12 months, then deleted or anonymised |
Sharing With Third Parties
We share data only with processors and authorities who need it, under written agreements that impose the same protection standards we apply ourselves. We share by category, not indiscriminately.
Payment processors handle your card, e-wallet and bank details to execute deposits and withdrawals. KYC/AML screening providers verify your documents. The Malta Gaming Authority and other competent regulators receive reports where the law requires. Analytics providers process aggregated data to help us improve the site. Our game suppliers, Microgaming and Playtech, receive the minimum account identifiers needed to deliver games to your session.
Your Rights Over Your Data
UK and EU data protection law gives you enforceable rights over the data we hold. We respond to every request within one month, extendable by two further months for complex cases with notice to you.
You also have the right to lodge a complaint with the supervisory authority in your jurisdiction, including the Information Commissioner's Office in the UK.
- Access: obtain a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete records.
- Erasure: request deletion where no legal retention duty applies.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing and optional cookies at any time.
- Complain: escalate to the ICO or your local data protection authority.
Cookies and Tracking
We use strictly necessary cookies to keep you logged in and to maintain site security, plus optional analytics and marketing cookies that load only with your consent via the banner shown on first visit. You can change your cookie choices at any time from the cookie settings link in the site footer. Full details, including the categories and how to block them, are set out on our dedicated Cookies Policy page.
Security Measures We Apply
All traffic between your device and our servers is encrypted with TLS. Payment and verification data are stored encrypted at rest. Access to personal data is limited by role-based permissions, and every access is logged and auditable.
If a personal data breach occurs that poses a risk to your rights, we notify the competent supervisory authority within 72 hours of becoming aware of it, and we inform you directly where the risk is high. Our support team is available 24/7 at [email protected] if you suspect any issue with your account security.
Contact Our Data Officer
Our Data Protection Officer oversees this policy and answers privacy questions. Write to [email protected] for anything covered here, including data subject requests, and we will confirm receipt within five working days. We last reviewed this Privacy Policy in 2026; material changes will be announced on the site before they take effect.
Frequently Asked Questions
How do I request a copy of my data?
Email [email protected] or [email protected] with your account details. We verify your identity and send the data within one month.
Can I delete my account and all my data?
You can close your account at any time. Identity and transaction records are retained for a minimum of 5 years after closure because gambling law requires it; marketing data is deleted as soon as you withdraw consent.
Do you share my data with advertisers?
No. We do not sell personal data. Marketing partners act only under contract, and only where you have consented to receive offers.
Why do you need my ID documents?
Our MGA licence obliges us to verify your age, identity and payment method. Verification is normally completed within 24-48 hours.
How do I stop marketing emails?
Use the unsubscribe link in any email, change your preferences in account settings, or contact support. Consent withdrawal takes effect immediately.