Reliance forms the foundation of our relationship with players at Book of Slots, https://book-of.eu/. This data retention policy describes how we manage, retain, and eventually remove your personal information. We operate under UK data protection laws, such as the UK GDPR and the Data Protection Act 2018. Being transparent about our data handling is a legal duty, but we also see it as a vital part of our offering. We strive for you to experience our games knowing your privacy is taken seriously.

What constitutes a Data Retention Policy?

A Data Retention Policy represents a written document. It sets out how long an organisation retains different types of personal data and the legal reasons for keeping it. This is a key part of sound data governance. It stops us from keeping information forever, or for longer than we actually need it. At Book of Slots, we have set specific retention periods for all your data. This covers your account details, transaction history, support conversations, and gameplay records. This organised method reduces risk, enhances data security, and demonstrates we comply with the law for our players and regulators like the UK Gambling Commission.

Information Protection During Retention

Maintaining your personal data secure is our priority for its entire lifecycle. We implement strong technical and organisational measures to safeguard the information we hold. This shields it from unauthorised entry, change, disclosure, or destruction. Our actions include encrypting data when it’s moving and when it’s stored. We maintain strict access controls so employees only see what they require for their job. We also utilize advanced network security. These protocols are tested and updated regularly to counter new threats. Your data remains secure whether we are using it today or checking it for a regulatory check in several years’ time.

Core Data Categories and Keeping Periods

We group personal data into categories so we can use suitable retention timelines. The particular length of time depends on why we processed the data and the legal, regulatory, and business needs we must meet. These periods can change if the law changes. If that happens, we will update this policy and let you know about any significant changes.

Profile and Identity Verification Data

This covers information you gave us when you registered and verified your account. It includes your name, date of birth, address, and copies of documents like a passport or driving licence. We keep this data for as long as your account is open, and for a set time after it closes.

Post-Account Closure Retention

After an account is closed, by you or by us, we must keep identity and verification data for at least five years from the closure date. The UK Gambling Commission’s Licence Conditions and Codes of Practice (LCCP) mandate this. It aids with responsible gambling oversight, fraud prevention, and any regulatory investigations that might happen after an account is no longer active.

Financial and Transaction Records

This category contains every deposit, withdrawal, bonus claim, and wager. Detailed transaction histories are vital for financial audits, solving disputes, and giving you a clear record of your activity. Financial and gambling regulations heavily determine how long we keep this data.

Meeting Regulatory Requirements

We retain full financial transaction data for a minimum of six years from the transaction date. This matches standard UK tax and accounting law. For some records, the UKGC might require us to keep them even longer. We always observe the strictest applicable timeframe to ensure full compliance and to shield both you and our business.

User Interaction and Support Data

We keep records of your conversations with our customer support team, whether by live chat, email, or phone. This enables us maintain service quality and train our staff. It also lets us resolve ongoing issues and improve the player experience. We treat these records with the same confidentiality as all your personal data.

Generally, we keep support logs for three years from the date of the interaction. This gives us time to look back at previous conversations if you need more help, and to detect trends in player queries. If a communication is part of a dispute or complaint that could lead to legal action, we might retain those specific records longer. This aligns with UK time limits for making legal claims.

Policy Updates and Contact Information

We might update this Data Retention Policy from time to time. Changes might represent shifts in our processes, technology updates, or new legal requirements. The most recent version will always be posted on our website. We will tell you about any important changes that affect how we handle your data. If you have inquiries about this policy, our retention practices, or your data rights, please contact our Data Protection Officer. We are here to work with you, resolve concerns, and provide you with clear, timely details about how we protect your personal information.

Legal Grounds for Data Retention

UK data protection law requires a valid legal reason for us to handle and retain your personal data. Our main reasons are to fulfil a contract with you, to comply with legal rules, and for our legitimate business interests. For example, we maintain your basic account details to deliver the gaming service you requested. That fulfils our contract. At the same time, laws implemented by the UKGC require us to keep financial transaction records for several years to prevent money laundering. When we depend on legitimate interests, like preventing fraud, we carefully weigh them against your rights. We ensure any data we keep is proportionate.

Your Rights and Data Deletion

You have a claim to erasure, at times termed the ‘right to be forgotten’. This is a crucial part of UK data protection law. But this right has limits. You can ask us to erase your personal data. However, we may have to refuse if we need to keep the data to follow a legal duty. Our licensing conditions from the UKGC are one example. We also are required to retain data to establish, exercise, or defend legal claims. If we have to keep data for these overriding reasons, we commit to only use it for those specific purposes. The data will be safeguarded and access will be restricted.

Časté dotazy

How come does Book of Slots have to hold my data after I shut down my account?

The UK Gambling Commission under regulations mandates us to hold specific data, like identity and transaction records, for a specified time after an account is closed. This aids responsible gambling monitoring, helps prevent fraud, and aids with any future regulatory investigations. For core account data, this retention period is typically five years.

May I submit a request for early deletion of my personal data?

You can always make a request for erasure. But UK gambling and financial regulations frequently mean we are unable to comply right away. For instance, we may not delete your transaction history before the required six-year period is over. The law obligates us to keep it for auditing and compliance.

By what means is my data safeguarded during the retention period?

We apply strict security measures for the full time we keep your data. These encompass encryption, tight access controls, and secure storage systems. We conduct regular security audits to make sure these protections keep strong against new threats. Your information is secure from unauthorised access, whether it’s in active use or stored away.

Which happens to my data when the retention period expires?

After the retention period for a specific type of data ends, we safely and permanently delete it. Sometimes we anonymise it as an alternative. Anonymisation means modifying the data so it can no longer be linked back to you. Thereafter, it could be used for internal statistical analysis.

Is it true that Book of Slots disclose my retained data with third parties?

We only share data when it’s required. This includes sharing with payment processors to manage our service, or with authorities like the UK Gambling Commission when the law mandates it. Any third party we collaborate with must adhere to strict contractual rules to protect your data. They can solely use it for the designated, lawful purpose we agreed on.

How can I find out what data you hold on me?

You have a right to access your personal data. To exercise this right, you can submit us a Subject Access Request (SAR). We will then furnish a copy of the information we hold about you. We do not impose a fee for this and will usually respond within one month. This allows you view exactly what data is in our records.

At what location can I find the most up-to-date version of this policy?

The most recent version of our Data Retention Policy is constantly available on our website. It’s a wise idea to check it now and then. If we make any big changes that impact how we process your data, we will notify you. This maintains you informed about our privacy practices.