Your Privacy at Bluebetz Casino
This policy explains what personal data we collect when you play at Bluebetz Casino, why we hold it, how long we keep it and the controls you have over it. It applies to every visit to bluebetz-casino.uk, every account you hold with us and every conversation with our support team.
Data We Collect
We collect only the data we need to run your account, meet our licence obligations under the Malta Gaming Authority and keep the site safe. That splits into seven categories:
- Identity data: your full name, date of birth, email address, phone number and residential address.
- Verification documents: passport, driving licence or national ID copies, plus a recent utility bill or bank statement for proof of address.
- Transaction data: deposits, withdrawals, bonus claims, wagering history and the payment method you used (Visa Debit, PayPal, Skrill and so on).
- Device and connection data: IP address, device type, operating system, browser and approximate location derived from your IP.
- Gameplay behaviour: the games you open, bets you place, sessions you run, wins, losses and loyalty points earned in our Bronze to Diamond programme.
- Marketing preferences: which channels you opted into, which promotions you clicked and whether you redeemed a code such as BLUE100.
- Support communications: live chat transcripts and email correspondence with our 24/7 team.
How We Use Your Data
Each use of your data maps to a specific purpose, never a vague one. When you register, we set up your account and verify you are over 18 and resident in a permitted jurisdiction. The USA, France, Spain, Italy, Netherlands and Belgium are among the restricted territories, so we screen registrations against that list.
Before your first withdrawal we run identity, address and payment verification, and where the law demands it, source-of-funds checks. Your transaction data feeds payment processing and fraud prevention: mismatched cards, unusual betting patterns or multiple accounts under one address get flagged for review. The same behavioural data drives responsible-gambling monitoring, because patterns consistent with harm can trigger a check-in before problems escalate.
- Creating and managing your player account.
- KYC, AML and source-of-funds verification.
- Processing deposits and withdrawals.
- Fraud detection and multi-account prevention.
- Responsible-gambling monitoring and GamStop checks.
- Marketing, only where you have consented.
- Meeting tax, regulatory and audit obligations.
Our Legal Bases
Contract. We process your identity, transaction and account data to open your account, honour bonuses such as the 100% up to £100 welcome offer and pay out withdrawals. Without this data we cannot perform the agreement you signed up to.
Legal obligation. MGA licence conditions and anti-money-laundering law oblige us to verify your identity, retain transaction records for at least five years and report suspicious activity. You cannot opt out of processing the law forces on us.
Legitimate interest. Fraud prevention, security monitoring, aggregated analytics and service improvement all rest on our legitimate interest in running a safe, functioning casino. We balance that interest against your rights and never use this basis for advertising.
Consent. Marketing emails, SMS and personalised offers run only on your consent. You can withdraw it at any time from your account settings or via the unsubscribe link, and withdrawal costs you nothing beyond losing the promotions themselves.
How Long We Keep It
Retention follows the strictest rule that applies to each category. Gaming regulation sets a five-year minimum for transaction and account records, measured from the date your account closes, so we cannot delete betting history on request even though we value your wish to be forgotten.
| Data category | Retention period |
|---|---|
| Identity and verification documents | 5 years after account closure, then deleted |
| Transaction and wagering records | 5 years minimum, per MGA and AML rules |
| Device, IP and security logs | Up to 12 months |
| Marketing preferences and consent records | Until you withdraw consent, plus 2 years for proof of consent |
| Live chat and support tickets | Up to 3 years |
| Closed accounts with no outstanding matters | Data minimised after the 5-year regulatory window |
Who We Share Data With
We never sell your personal data. Sharing happens only with processors and authorities who need it to deliver a service you use or to enforce a rule we operate under. Each processor works under a written contract that binds them to GDPR-level protection.
Payment processors handle your card, e-wallet and bank transfer details to move funds. Identity verification and AML screening providers check your documents against sanctions and fraud databases. Our platform hosts game content from providers including NetEnt, Pragmatic Play, Evolution and Play'n GO, and those providers receive your account ID and game activity, never your full payment details. Analytics services measure site performance on aggregated data. We also disclose data to the Malta Gaming Authority, financial-intelligence bodies and UK gambling-relevant registers such as GamStop where the law or licence requires it, and to payment disputes resolution bodies when you raise a complaint.
Your Rights Over Data
UK and EU data protection law gives you enforceable rights, and we answer every request within one month, extendable by two months only for complex cases with notice to you. Requests are free, though we may charge a reasonable fee for manifestly repetitive ones.
You can ask for a copy of everything we hold (access), correct anything wrong (rectification), or ask us to erase data we hold without a legal reason to keep it (erasure). You can receive your data in a machine-readable format and move it to another operator (portability), object to processing based on legitimate interest, and withdraw marketing consent at any time. Complaints go first to us; if you are not satisfied, you can complain to the Information Commissioner's Office in the UK or your national data protection authority. Reach our Data Protection Officer at [email protected] for any of the above.
Cookies and Tracking
Cookies keep you logged in, hold your session securely, remember your responsible-gambling limits and measure how the site performs. Strictly necessary cookies load without consent; analytics and marketing cookies only run after you accept them in the consent banner, and you can change your choice any time. Full details, including a category-by-category breakdown and how to delete cookies in each browser, sit on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers runs over TLS encryption, and payment card details are tokenised so full card numbers never sit in our systems. Access to player data is role-based: support agents see account details, verification staff see documents, and nobody outside the data team reaches raw behavioural datasets. Every access is logged and audited.
If a breach ever puts your rights at risk, we notify the relevant supervisory authority within 72 hours of becoming aware and tell affected players directly without undue delay. Combined with continuous monitoring, penetration testing and staff training on data handling, these measures cover the full life cycle of your data from registration to deletion. Questions about any of it go to [email protected] or [email protected], answered 24/7.
Frequently Asked Questions
Can I delete my account and all my data immediately?
You can close your account instantly through self-exclusion or by contacting support. Transaction records must then be retained for a minimum of 5 years to satisfy MGA and anti-money-laundering rules, after which they are deleted automatically.
Do you share my data with game providers?
Providers such as NetEnt and Evolution receive your account ID and game activity so your play and balances sync correctly. They never receive your full payment details or verification documents.
How do I stop marketing messages?
Withdraw consent in your account settings or click unsubscribe in any email. We stop marketing immediately and keep a record of your withdrawal as proof of consent handling.
Why do you need my ID before my first withdrawal?
Identity and address verification is a licence and legal obligation. It confirms you are over 18, resident in a permitted country and the rightful owner of the funds, which also protects you from account takeover.
Who do I contact about a privacy concern?
Email our Data Protection Officer at [email protected]. If we cannot resolve the matter, you have the right to complain to the Information Commissioner's Office in the UK or your local data protection authority.