Privacy Policy
We built CoinPoker around trust, and that extends to how we handle your personal data. This policy explains what we collect, why we collect it, and what rights you hold under the General Data Protection Regulation (GDPR) and applicable UK data protection law. We encourage you to read it carefully before using our platform.
1. Nature and scope of personal data collected
When you create an account with us, we ask for certain details so we can verify your identity and set up your profile correctly. This isn't optional padding — it's information we need to run a secure, compliant platform. Some data comes directly from you, while other data is generated automatically as you use our services.
The categories of personal data we collect include:
- Identity details such as full name, date of birth, and government-issued ID
- Contact information including postal address and phone number
- Financial data linked to deposits, withdrawals, and payment methods
- Account activity, including gameplay history and transaction records
- Technical data such as IP address, device type, and browser information
- Communications you send us through support channels
2. Purposes and objectives of data processing
To process your payments and keep your account functioning properly, we rely on the data described above for a defined set of purposes. We don't collect information speculatively or for undisclosed reasons. Everything we process ties back to running our platform, meeting our legal obligations, or improving the experience you have with us.
We process personal data for the following purposes:
- Verifying identity and age to meet legal and licensing requirements
- Processing deposits, withdrawals, and other financial transactions
- Preventing fraud, money laundering, and unauthorised account access
- Providing customer support and responding to enquiries
- Complying with regulatory, tax, and anti-money laundering obligations
- Sending account notifications and, where consented to, promotional communications
3. Security measures and technical integrity
We maintain a layered approach to data security, combining encryption, access controls, and ongoing monitoring. Personal data is stored on systems protected against unauthorised access, with transmission secured through industry-standard encryption protocols. Access to sensitive information is restricted to staff who need it to perform their roles, and we review our safeguards regularly to address emerging risks.
No system is completely immune to risk, and we're upfront about that. What we can promise is that we take reasonable, documented steps to protect your data and that we investigate any suspected breach without delay, notifying affected users and relevant authorities where required by law.
4. Sharing information with third parties
We want to be clear about who sees your information and why. We don't sell personal data, and we don't share it carelessly. Disclosure only happens where it's necessary to run our platform, meet legal duties, or deliver the services you've asked for.
We may share personal data with the following categories of third parties:
- Payment processors and banking partners to complete transactions
- Identity verification providers to confirm age and identity
- Regulatory bodies and law enforcement where legally required
- IT and hosting providers who support our technical infrastructure
- Professional advisers, including auditors and legal counsel
Each third party is bound by confidentiality and data protection obligations consistent with this policy.
5. Cookie management and similar technologies
Every time you visit our platform, small files called cookies are placed on your device. These help us remember your preferences, keep you securely logged in, and understand how our platform is being used. Some cookies are essential for our services to function, while others support analytics or personalisation.
You can manage cookie preferences through your browser settings at any time, including disabling non-essential cookies. Doing so may affect certain features, such as saved login details or personalised content, but it won't prevent you from using core account functions.
6. Data retention period
Under GDPR, we only keep personal data for as long as it's genuinely needed. Retention periods are tied to specific purposes rather than arbitrary timeframes. Account and transaction data, for example, is typically retained for the duration required by anti-money laundering and gaming regulations, which can extend beyond account closure.
Once data is no longer required for legal, regulatory, or operational reasons, we securely delete or anonymise it. Where retention periods differ depending on the type of data involved, such as identity verification records versus marketing preferences, we apply the longer legally mandated period to that category. This ensures we remain compliant while minimising how long information sits in our systems.
7. User rights over their data
Your data belongs to you, and GDPR gives you meaningful control over it. We've built processes to honour these rights promptly, rather than treating them as a formality. If you want to understand, correct, or limit how we use your information, you have several routes available.
Under applicable data protection law, you have the right to:
- Access the personal data we hold about you
- Request rectification of inaccurate or incomplete data
- Request erasure of your data, subject to legal retention obligations
- Object to certain types of processing, including direct marketing
- Request data portability in a structured, commonly used format
- Withdraw consent at any time where processing relies on consent
If you believe we haven't handled your request properly, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority.
8. International data transfers
To operate as a global platform, we sometimes transfer personal data outside the UK and European Economic Area. This happens when our service providers, payment partners, or infrastructure are based in other jurisdictions. We don't take this lightly, given the different data protection standards that can apply internationally.
Where transfers occur, we rely on recognised legal mechanisms such as Standard Contractual Clauses or adequacy decisions to ensure your data continues to receive a level of protection consistent with GDPR. We also assess third-party partners before sharing data with them, confirming they maintain appropriate safeguards regardless of where they're located.
9. Privacy policy updates
We review this policy periodically to reflect changes in our services, technology, or legal obligations. When updates are made, the revised version is published on our platform with a new effective date. Significant changes affecting how we process your data will be communicated more directly, such as through account notifications.
Continuing to use our platform after updates take effect constitutes acceptance of the revised policy. We'd encourage you to check this page from time to time so you stay informed about how your data is handled.
10. Contact information
If you have questions about this policy, how we process your data, or want to exercise any of your rights, our support team is available to assist. We aim to respond to privacy-related enquiries promptly and to resolve any concerns directly wherever possible.
Responsible Gambling
Gambling should always remain an enjoyable activity, not a source of financial or personal difficulty. If you feel your gambling is becoming a concern, free and confidential support is available through the National Gambling Helpline on 0808 8020 133. We encourage all players to gamble responsibly and to make use of the account controls available on our platform.
Our services are intended for use by individuals aged 18 and over only.