Privacy Policy – Nine Casino
This Privacy Policy explains how personal data is collected, used and protected in connection with your use of Nine Casino. Protecting your data is a priority, and processing is carried out in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Below we describe what data is collected, the purposes of processing and the rights available to you. By using the platform, you acknowledge the practices described here. For related rules, see the Terms & Conditions and Responsible Gambling pages.
1. Data we collect
We may process several categories of personal data, including:
- Identity and age data (name, date of birth, ID documents)
- Contact information (email, postal address, phone number)
- Payment and transaction data (debit card, PayPal, deposits and withdrawals)
- Location data used to confirm you are in the United Kingdom
- Technical usage data such as device information, IP address and activity logs
Identity data is needed in particular to meet UKGC verification, affordability and anti-money-laundering obligations before processing withdrawals.
2. Cookies and tracking technologies
Cookies and similar technologies are used to operate and improve the service. Some cookies are strictly necessary for the platform to function, while analytics, marketing and functional cookies are used only with your consent where consent is required. You can manage cookie settings from your browser at any time.
| Cookie type | Purpose | Consent |
|---|---|---|
| Strictly necessary | Login, security and core site functions | Not required |
| Analytics | Measuring how the site is used | Required |
| Marketing | Relevant promotions and measurement | Required |
| Functional | Remembering preferences and settings | Required |
3. Purposes and legal basis
Under UK GDPR, data is processed on the following legal bases: performance of a contract (providing the services), legal obligation (UKGC and anti-money-laundering rules), legitimate interests (fraud prevention and platform security) and consent (analytics and marketing). Where consent is required, it can be withdrawn at any time with future effect.
4. Data retention
Personal data is kept only for as long as necessary for the stated purposes or in line with applicable retention obligations. Regulatory record-keeping requirements mean account, transaction and verification records are typically retained for up to 5 years after an account is closed. Once the purpose no longer applies and retention periods expire, data is deleted or anonymised.
5. Data sharing
Personal data is shared only where necessary to provide the service, meet a legal obligation or where consent has been given. Service providers acting on the operator's behalf are bound by contractual data protection obligations. Data is not sold or shared with unauthorised third parties for advertising purposes.
6. Your rights
Under UK GDPR you have rights including access, correction, deletion, restriction of processing, data portability and the right to object to processing. You may also withdraw consent at any time where processing is based on consent.
6.1 Exercising your rights
To exercise your rights, contact the operator through the support channels shown on the platform. You also have the right to lodge a complaint with the UK data protection authority, the Information Commissioner's Office (ICO) at ico.org.uk.
7. Data security
Technical and organisational measures, including SSL encryption of data in transit, are applied to protect personal data against unauthorised access, loss or misuse. These measures are reviewed and updated in line with current standards.
8. Contact and complaints
For any question about the processing of your personal data or to exercise your rights, contact the operator through the help and contact section of the platform. Complaints can also be raised with the Information Commissioner's Office (ICO).