Your Privacy and Your Data
This Privacy Policy explains what personal data Instant Casino collects when you play at instantcasino1.co.uk, why we collect it, who we share it with, and the rights you hold over it. We operate under licence OGL/2024/1788/1030 issued in Curaçao and we process your data in line with GDPR principles because a large share of our players are based in the United Kingdom and the EU.
Data We Collect From You
We collect several categories of personal data, and we only collect what we need to run your account, meet our legal obligations and keep the site safe. The categories below cover everything we hold on you.
- Identity data: your full name, date of birth, email address, phone number and residential address, provided by you at registration.
- Verification documents: government photo ID, proof of address and payment method verification, submitted before your first withdrawal as part of KYC.
- Transaction data: deposits, withdrawals, bets placed, winnings and bonuses, together with payment method details.
- Device and connection data: IP address, device type, operating system, browser and approximate location derived from your IP.
- Gameplay behaviour: games played, session duration, wagering patterns and login history, used for fraud prevention and responsible-gambling monitoring.
- Marketing preferences: your consent status for promotional emails, SMS and on-site offers.
How We Use Your Data
We process your data for seven purposes, each tied to a lawful basis set out in the next section. We never sell your data and we never use it for purposes we have not told you about.
- Creating and maintaining your account, including login and security.
- KYC verification before your first withdrawal, normally processed within 48 to 72 hours.
- Processing deposits and withdrawals through your chosen payment method.
- Fraud prevention, including multi-account detection and payment screening.
- Responsible-gambling monitoring, such as identifying patterns that suggest harm so we can intervene.
- Marketing, only where you have consented, including our 10% weekly cashback and weekend reload offers.
- Meeting legal obligations under our Curaçao licence and applicable gambling regulations.
Our Legal Bases
Contract
We process identity, account and transaction data to perform our contract with you. Without this data we cannot open your account, settle bets or pay withdrawals, so processing is necessary for the agreement you accepted at registration.
Legal obligation
We hold verification documents and transaction records because gambling law requires us to verify your identity, screen against money laundering and keep financial records for at least five years. These obligations override deletion requests for the relevant data.
Legitimate interest
Fraud prevention, site security and responsible-gambling monitoring rest on our legitimate interest in keeping Instant Casino safe and compliant. We balance this interest against your rights and only process what the purpose requires.
Consent
Marketing messages and non-essential cookies run on your consent. You can withdraw that consent at any time through your account settings or the unsubscribe link in any email, and withdrawal takes effect immediately for future processing.
How Long We Keep It
Retention depends on the type of data. Regulatory minimums apply to some categories, while marketing data is deleted as soon as you withdraw consent. The table shows the periods we apply.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then 5 years after closure |
| KYC verification documents | 5 years after account closure |
| Transaction and wagering records | At least 5 years, as required by gambling regulation |
| Device, IP and security logs | 12 months |
| Marketing preferences and history | Until you withdraw consent or delete your account |
| Support correspondence | 24 months after the last message |
Who We Share Data With
We share your data only with parties who need it to deliver our service, and always under written data-processing agreements. We share by category rather than with a long list of brands.
- Payment processors handling your deposits and withdrawals, such as card schemes, e-wallet providers and crypto processors.
- KYC and AML verification providers that check your documents against sanctions and fraud databases.
- The Curaçao licensing authority and other regulators when legally required.
- Analytics and hosting providers that help us run and improve the site, under strict data-processing terms.
- Game providers whose titles you play, receiving only the technical data needed to deliver the game session.
Your Rights Over Your Data
You control your data, and you can exercise the rights below at any time by emailing [email protected]. We respond within one month and may ask for ID to confirm you are the account holder.
- Access: get a copy of the personal data we hold on you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion, subject to regulatory retention duties.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: stop marketing processing at any time.
- Complaint: lodge a complaint with your national data protection authority, including the ICO in the UK.
Cookies and Tracking
We use strictly necessary cookies to keep you logged in and secure your sessions, plus optional analytics and marketing cookies that run only on your consent. You can change your cookie choices any time from the banner or your browser settings. Full details, including the cookie categories and how to block them, are set out on our separate Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers is encrypted with TLS, and payment and verification data is stored encrypted at rest. Access to personal data is limited to staff who need it for their role, logged, and reviewed regularly. If a personal data breach occurs that risks your rights, we notify the relevant supervisory authority within 72 hours and inform affected players directly where the risk is high.
Contacting our DPO
Questions about this policy or your data go to our data protection team at [email protected]. You can also reach our support desk by live chat 24/7 or at [email protected], and we will route your query to the right person.
Frequently asked questions
How long does Instant Casino keep my ID documents?
We retain KYC verification documents for 5 years after your account closes, as gambling regulations require.
Can I get my data deleted?
Yes, you can request erasure at any time. We delete everything except records we must keep for regulatory reasons, such as transaction history held for at least 5 years.
How do I stop marketing emails?
Use the unsubscribe link in any email or change your preferences in your account settings. Withdrawal of consent takes effect immediately for future messages.
Who do I complain to about my data?
Contact us first at [email protected]. If you are not satisfied with our response, you can complain to your national data protection authority, such as the ICO in the UK.