1. Introduction
Shaftesbury Casino has long recognised that individuals with whom we conduct business value their privacy. However, in order to conduct global business in this increasingly electronic economy, the collection of personal information is often necessary and desirable. Shaftesbury Casino’s goal is to balance the benefits of e-commerce with the right of individuals to prevent the misuse of their personal information.
We encourage you to read this notice (“Privacy Notice”) carefully as it contains important information regarding to the basis on which we collect personal data about you and how it will be processed by us as the “Data Controller”. By engaging with our site, you acknowledge you have read and understood this Privacy Policy.
We decide the purpose and means of processing the data and by doing so we will comply with all applicable data protection laws, including the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).
2. Who are we?
We, Shaftesbury Casino, is a limited company registered in England and Wales under registration number 10071143. Our registered office address is 377 High Street, West Bromwich, England, B70 9QW. We are registered with supervisory authority, Information Commissioner’s Office (ICO) with the registration number ZB114047.
Our Data Protection Officer (DPO)
If you have any concerns about how your personal data is used or to exercise any of your rights, including submitting a subject access request, please contact our DPO on the following:
Email: jaanamerilepp@shaftesburycasino.co.uk
Post: Data Protection Officer, 377 High Street, West Bromwich, England, B70 9QW
3. Collecting Information About You
We hold your personal information only as long as we have a valid legal reason to do so, which includes providing you with the services you have requested, meeting our legal and regulatory obligations, resolving disputes and enforcing our agreements.
The length of time for which we keep different types of personal information can vary, depending on why we originally obtained them, the reason we process them and the legal requirements that apply to them. When setting our data retention and deletion timescales we take into account a range of factors including applicable regulations and standards relating to gambling and gaming, anti-money laundering, taxation, payment processing and complaint handling, the need to prevent or detect crime or other misuse of our services, the audit requirements. To fulfil our requirements, some of your personal data will need to be retained for a period of time after you cease to be a customer. When we no longer need it to fulfil the above requirements, we delete it securely or anonymize it.
We collect your personal data when:
-
You register to become a member
-
You visit our casino
-
You visit our website
-
You register to use the WI-FI in any of our premises
-
CCTV and FR security recordings
-
You sign up to receive marketing about our services
-
You are taking part in any of our promotions
-
You are taking part in any of our social media platforms
-
When you interact with us in any way
-
When you request information in relation to events/bookings
Information you provide to us
We collect information about you when you use our services. Some of it is provided directly, when you register for an account with us, deposit funds or play one of our games. Other information will be collected as you interact with us, such as requesting to join our mailing lists, verbal or written communications between you and us or taking part in customer satisfaction surveys. We also collect information about the way you interact with us through our social media channels.
We are required to comply with anti-money laundering and responsible gambling legislation therefore, sometimes we may request proof of identity and source of funds information from you, which you must provide to us. Please note that the failure to provide such information upon request may result the termination of the business relationship.
Information we collect from your device
We collect information from your device when visiting our website relating to the web address that you arrive from or click through to, pages viewed, page response times, download errors, the length of time you spend on certain pages, page interaction information such as, but not limited to, scrolling and clicks and methods used to browse away from our pages. In general, you can visit our website without divulging any personal information. However, there are areas of this site that require this information to complete their customisation functions, and may not be available to those choosing not to reveal the information requested.
Payment Information
In order for you to use some of our services we may collect payment information from you including your debit card number and bank account details.
Information collected from third parties
We are required by law to comply with legal and regulatory obligations which include fraud prevention and anti-money laundering. To enable us to provide you with our services we may have to obtain data from third party sources. This data will be protected in the same manner as the data supplied by yourself. We may obtain information from external sources such Acuris Risk Intelligence which may use your data to compare against any database - public or otherwise.
Where a customer self-excludes through the national self-exclusion scheme (SENSE), we will receive a notification of this, which will only be used to ensure their wish to self-exclude is applied. We may subscribe to additional self-exclusion schemes in future and will update this policy accordingly.
We must comply with legal obligations to promote responsible gambling, consider our customers financial ability to gamble and prevent our services from being used for illegal purposes. If we identify activity on your account that could present a risk or we believe you have provided false
information, we will look at publicly available information about you, such as social media accounts, property ownership details, Companies House and insolvency register to verify the information provided to us.
CCTV and Facial Recognition
We use CCTV surveillance systems to monitor all gaming areas and other public areas in order to protect us and our customers against potential violations of criminal or civil law. CCTV footages are generally retained for period of 30 days but may be longer for example in case it has been archived following a particular incident or in case you have self excluded yourself from gambling.
Facial Recognition technology uses algorithms to extract data points from your face to create a digital signature of your face. Facial Recognition is used throughout the casino premises to maintain the integrity of the customers admitted. Facial Recognition is used to prevent admission of any persons whom may be barred, suspended, resigned, self-excluded, locally self-excluded, or those customers that have entered in to the SENSE scheme. This includes persons that have entered in to the SENSE scheme at another casino operator.
4. How and why we use your personal information
To provide services to you
As applicable, we will use information about you for delivering our service under the agreement between us, including responding to your enquiries; to contact you about matters requiring your attention and providing you with a responsible gaming environment. We may use third parties to assist us with this.
All our services' financial transactions are handled through our payment services providers, who will have access to your payment information.
Processing is necessary for compliance with a legal and regulatory obligations
We are required to record certain information that you provide to us by law. This can be to prevent money laundering and, combating terrorism and proliferation financing.
Your data processing is also necessary for detecting or when we are suspecting problem gambling.
Use of special category data
On occasions you have shared us, directly or indirectly, data such as your physical or mental health, gambling problems you think you may have or other sensitive data we make sure we only use it to provide help and support.
Any other special category data you have given us about yourself such as ethnicity or nationality is only needed to meet the legal or regulatory requirements and will not be used for any other purpose without your consent.
Marketing
We process certain personal data to gather market intelligence, promote products and services and communicate offers to individual customers. We do this in our legitimate Interest of our business marketing and we do this in accordance with the laws relating to marketing directly to individuals.
Your consent preferences
If you wish to alter your consent contact the DPO or Shaftesbury Casino directly. Please be aware it may take a short time to action these preference alterations.
5. How we share your personal data
Compliance with legal obligations
In order to comply with legal or regulatory process we may disclose or share your personal data with any governmental authority including, but not limited to, gaming regulators. This includes companies and organisations to detect and prevent crime and problem gambling.
We will ensure that we only share your data legally and with due regard to your privacy. Any request from statutory bodies will only be granted with a warrant, court order or other legally valid proof of authority.
Sharing your information with third parties
Your personal data will be shared with a third party only to the extent required for the specific purpose mentioned in this Privacy Notice. Some of the third parties we work with are, but not limited to, IT companies who support our IT systems, Direct Marketing Companies and sites such as Google and Bing. We may also share your data with other casinos.
6. Retention of personal data
GDPR states that personal data should be kept for no longer than is necessary for the purposes for which it was collected. However, where the processing is necessary for compliance with a legal obligation or for the purposes of the legitimate interests of the controller then the retention of data will be lawful.
We must keep your records for five years from when our relationship ends (or the date transaction is completed) by law, this includes anti-money laundering regulations.
If we hold any information relating to problem gambling matters or any suspension or termination of your account, we may hold your data for an extended period we reasonably deem necessary.
7. Storage and protection of personal data
Your personal data is stored in secure server and we will take reasonable technical and organisational precautions to prevent misuse and/or loss of your personal data. Please note that no security system can prevent all potential security breaches.
8. Sending personal information outside of the UK or Europe
9. Changes to this Policy Notice
Time to time we may update this privacy notice and change to how we process or look after your personal data. A copy of the latest version can be obtained any time by contacting our DPO at jaanamerilepp@shaftesurycasino.co.uk or by visiting our website.
10. Your rights
Under Data Protection Laws you have several rights regarding the way we process your personal data.
You have the right to access the data we hold about you known as Data Subject Access Request (DSAR). To submit a DSAR please contact the management team or email to PDO at Shaftesbury Casino at jaanamerilepp@shaftesburycasino.co.uk. We may need to verify your identity to do so.
You have the right to rectification. If your personal data is incomplete or inaccurate then you have to right to request this to be corrected.
You have the “right to be forgotten”. In certain circumstances you have the right to erasure of your personal data from our system. We will comply if the processing is no longer necessary in relation to the purpose for which it was originally processed; you withdraw your consent (if the legal basis for processing is based on your consent); you object to processing and there are no legitimate overriding grounds for continuation of the processing; your personal data has been processed unlawfully or; your personal data must be erased in order to comply for legal obligation.
You have the right to restrict processing. If you contest the accuracy of the information, if the processing is unlawful or if we no longer need the information but you require the data to establish, exercise or defend a legal claim, you have the right to restrict processing.
In certain circumstances you have the right to data portability. You can request that we return any personal data you have provided in a structured or machine-readable format or that we transmit this data to another data controller, where technically feasible.
In certain circumstances you have the right object, including where we use it for our legitimate interest or for marketing purposes. In instances where you object, we are obliged to cease our processing of your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
You have the right to withdraw the consent at any time where we are relying on consent to process your personal data however, we then may not be able to provide you certain products, content or services.
You have the right to complain to the UK Data Privacy Regulator (ICO) if you consider our use of your personal data to be unlawful. Please see further information at ICO website https://ico.org.uk/
RESPONSIBLE GAMBLING
To play any of our games at Shaftesbury Casino, you must be aged 18 or over. We operate a Think 25 policy and will require ID to verify your age.
Gambling can be a great way to unwind and have fun, but we encourage our patrons to think before they place their bets. If you believe your gambling habits may be getting out of hand and want advice on how to moderate your gambling, please explore the range of resources listed below.