h2: Privacy Policy
h2: 1. Nature and scope of personal data collected
When you register an account with ElaraBet, we ask for certain details to set up your profile and keep it secure. This includes information you give us directly, data generated as you play, and technical details collected automatically through your device and browser.
We collect this because gambling regulation requires us to verify who our players are and because we cannot provide our services without a working account. Some of this data comes from you at sign-up, some from your activity on our platform, and some from third parties involved in payments or identity checks. The scope depends on how you use our services, but the categories below cover what we typically gather.
ul:
- Identity details such as full name, date of birth, and residential address
- Contact information including phone number
- Account credentials and verification documents
- Financial and payment information linked to deposits and withdrawals
- Gameplay history, betting patterns, and transaction records
- Technical data such as IP address, device type, and browser information
- Communication records from our support interactions
h2: 2. Purposes and objectives of data processing
To process your payments, verify your identity, and run your account properly, we need to use your personal data for a defined set of purposes. We don't collect information just to have it sitting in a database somewhere.
Our processing is tied to specific legal grounds under GDPR, whether that's performance of our contract with you, our legal obligations as a licensed operator, or legitimate interests such as fraud prevention. Each use of your data maps back to one of these grounds.
ul:
- Creating and managing your player account
- Verifying your identity and age in line with licensing requirements
- Processing deposits, withdrawals, and other financial transactions
- Preventing fraud, money laundering, and unauthorised account access
- Delivering customer support and resolving disputes
- Sending account-related and transactional communications
- Meeting our regulatory and reporting obligations
- Improving our platform through analysis of usage patterns
h2: 3. Security measures and technical integrity
We want to be clear about how seriously we take the protection of your data. Our systems use encryption, firewalls, and access controls designed to keep personal and financial information away from anyone who shouldn't see it.
Access to player data within our organisation is limited to staff who need it to do their job, and that access is logged and reviewed. Payment data in particular is handled through secure, compliant channels, and we run regular checks on our infrastructure to spot weaknesses before they become problems. No system is completely immune to risk, and we won't pretend otherwise, but we treat data security as an ongoing responsibility rather than a box to tick once.
We also require our staff to follow strict internal data handling protocols, and any third party processing data on our behalf must meet equivalent security standards through binding contractual terms. These measures apply across our servers, our payment integrations, and our communication channels alike.
h2: 4. Sharing information with third parties
Under GDPR, we're only permitted to share your personal data where there's a lawful basis for doing so, and we take that restriction seriously. We don't sell player data, and we don't hand it over to advertisers looking to build profiles on you.
That said, running an online casino means working with outside partners who need limited access to specific data to do their part. Payment providers need transaction details to process your deposits. Identity verification services need documents to confirm who you are. Regulators may request records as part of their oversight role. Each of these relationships is governed by data processing agreements that require the same standard of protection we apply ourselves.
ul:
- Payment processors and banking partners
- Identity verification and KYC service providers
- Regulatory bodies and licensing authorities
- IT infrastructure and hosting providers
- Fraud prevention and anti-money laundering services
- Professional advisers where legally required
h2: 5. Cookie management and similar technologies
We use cookies and similar technologies to make our platform work properly and to understand how players use it. Some of these are strictly necessary, like the ones that keep you logged in during a session.
Others help us remember your preferences, measure site performance, or show you relevant promotions. You can manage cookie settings through your browser at any time, and we provide controls within our platform so you can adjust non-essential cookies without affecting core functionality. Blocking certain cookies may limit some features, but your account will still work.
h2: 6. Data retention period
Your data belongs to a record we're obligated to keep for a set amount of time, not forever. We retain personal data for as long as your account is active and for a further period afterwards to meet our legal and regulatory obligations.
Financial and transaction records are typically kept for several years under anti-money laundering rules, even if you close your account. Once the relevant retention period expires and there's no further legal reason to hold the data, we delete or anonymise it securely. Different categories of data may have different retention timeframes depending on the purpose they served.
h2: 7. User rights over their data
When you interact with us, you keep a set of rights over how your data is used, and we want you to actually use them if you need to. These rights exist under GDPR and apply regardless of where you access our platform from.
Exercising these rights is straightforward. You can submit a request through our support channels, and we'll respond within the timeframes required by law, usually within one month. We may need to verify your identity before processing certain requests, particularly ones involving financial or account data.
ul:
- Right to access the personal data we hold about you
- Right to rectification of inaccurate or incomplete information
- Right to erasure, subject to our regulatory retention obligations
- Right to object to certain types of processing
- Right to data portability for information you've provided to us
- Right to restrict processing in specific circumstances
- Right to withdraw consent where processing relies on it
h2: 8. International data transfers
As required by United Kingdom data protection law, we take extra care whenever personal data moves across borders. Some of our service providers operate outside the UK and European Economic Area, which means data occasionally gets transferred internationally.
Where this happens, we rely on recognised safeguards such as standard contractual clauses or adequacy decisions to make sure your data remains protected to a comparable standard, no matter where it's processed. We assess each transfer arrangement individually and only work with partners who can demonstrate appropriate protections are in place.
h2: 9. Privacy policy updates
We want to be clear that this policy isn't static. Laws change, our services evolve, and we update this document when needed to reflect current practices.
When we make material changes, we'll let you know through your account or via a notice on our platform before the changes take effect. Minor updates, like clarifying wording, may not always trigger a direct notification, so we'd encourage checking back occasionally. Continuing to use our services after an update means you accept the revised terms.
h2: 10. Contact information
We provide this document because you have a right to understand how your data is handled, not because regulation forces our hand. If you have questions about this policy or want to exercise any of your rights, our support team is the first point of contact.
Requests relating to data protection are handled by our dedicated team, and we aim to respond promptly and transparently. You can reach us through the support channels listed on our platform, and we'll guide you through whatever process applies to your request.
h2: Responsible gambling and age restriction
Gambling should stay enjoyable, and we want every player on our platform to stay in control of their play. If gambling stops feeling like fun, support is available through GamCare on 0808 8020 133, free and confidential, any time you need it.
Our services are intended strictly for players aged 18 and over. We do not knowingly collect personal data from anyone under this age, and accounts found to belong to minors will be closed immediately.