Popular Games
Privacy Policy
Version: 1.0 Last Updated: 17 August 2026
This Privacy Policy ("Policy") explains how Tasty Bingo Casino ("we", "us", "our") collects, uses, shares, and protects personal information when you visit and use our website at tastybingocasino.org.uk (the "Website") and all associated services.
We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and fair manner, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy. By using our Website and Services, you acknowledge that you have read and understood this Policy.
1. Introduction
1.1. Who We Are
Tasty Bingo Casino is the operator of the Website accessible at tastybingocasino.org.uk. We act as the data controller in respect of the personal data we collect and process in connection with the Services we offer.
1.2. Scope of This Policy
This Policy applies to:
- All registered Players who hold an Account on the Website;
- All visitors to the Website, whether registered or not;
- Individuals who communicate with us by email, telephone, live chat, or other means.
1.3. Contact Details
For all data protection and privacy-related enquiries, please contact our Data Protection Officer (DPO) at:
- Email: [email protected]
- Website: tastybingocasino.org.uk
2. Data We Collect
We collect the following categories of personal data:
2.1. Data You Provide to Us
- Identity Data: Full legal name, date of birth, gender;
- Contact Data: Email address, telephone number, postal address;
- Account Data: Username, password (stored in encrypted form), Account preferences;
- Verification Data: Copies of identity documents, proof of address, and source of funds documentation provided during KYC checks;
- Financial Data: Payment method details (card numbers are not stored in full; we use tokenisation), transaction history, deposit and withdrawal records;
- Communications Data: Records of emails, chat transcripts, and other correspondence between you and us.
2.2. Data We Collect Automatically
- Technical Data: IP address, browser type and version, operating system, device identifiers;
- Usage Data: Pages visited, links clicked, time spent on pages, Games played, betting history, session durations;
- Cookie Data: Information collected through cookies and similar tracking technologies (see Section 6 for full details).
2.3. Data We Receive from Third Parties
- Fraud prevention and identity verification agencies;
- Payment processors and financial institutions;
- Credit reference agencies (where applicable);
- Marketing analytics partners;
- Self-exclusion scheme operators (e.g., GamStop).
3. How We Use Your Data
We use your personal data for the following purposes:
3.1. Account and Service Delivery
- To register and manage your Account;
- To verify your identity and age in compliance with regulatory requirements;
- To process deposits, withdrawals, and other financial transactions;
- To provide you with access to Games, promotions, and other Services.
3.2. Legal and Regulatory Compliance
- To fulfil our obligations under applicable anti-money laundering (AML) and counter-terrorism financing (CTF) laws;
- To conduct Know Your Customer (KYC) checks;
- To monitor transactions for fraud, suspicious activity, and problem gambling indicators;
- To comply with requests from regulatory bodies and law enforcement agencies.
3.3. Customer Support
- To respond to your enquiries and resolve complaints;
- To send you service-related notifications, including account updates and security alerts.
3.4. Marketing and Communications
- To send you promotional offers, news, and updates about our Services, where you have provided your consent or where we have a legitimate interest to do so;
- To personalise your experience on the Website.
You may opt out of marketing communications at any time by clicking "unsubscribe" in any marketing email or by contacting us at [email protected].
3.5. Responsible Gambling Monitoring
- To identify and support Players who may be at risk of problem gambling;
- To apply and monitor protective measures, including deposit limits and self-exclusion.
3.6. Analytics and Website Improvement
- To analyse how Players use the Website in order to improve its functionality and content;
- To conduct internal research and performance analytics.
4. Legal Bases for Processing
We process your personal data on the following legal bases under UK GDPR:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (Article 6(1)(b)) |
| Payment processing | Performance of a contract (Article 6(1)(b)) |
| KYC and AML compliance | Legal obligation (Article 6(1)(c)) |
| Fraud prevention and security | Legitimate interests (Article 6(1)(f)) |
| Responsible gambling monitoring | Legal obligation / Legitimate interests (Article 6(1)(c)/(f)) |
| Marketing communications | Consent (Article 6(1)(a)) / Legitimate interests (Article 6(1)(f)) |
| Website analytics and improvement | Legitimate interests (Article 6(1)(f)) |
| Compliance with legal orders | Legal obligation (Article 6(1)(c)) |
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. You may contact our DPO to obtain further details of this assessment.
5. Data Sharing & Third Parties
5.1. When We Share Your Data
We do not sell your personal data to third parties. We may share your data with third parties in the following circumstances:
- Service Providers: Companies that provide IT, payment processing, KYC, fraud detection, customer support, and analytics services on our behalf, under strict data processing agreements;
- Game Providers: Software providers whose Games are offered on the Website may receive limited technical data necessary to deliver those Games;
- Regulatory Authorities: We may be required to disclose data to the relevant regulatory bodies, law enforcement agencies, or courts;
- Self-Exclusion Schemes: Data may be shared with national self-exclusion schemes (such as GamStop) as required by applicable regulations;
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the relevant successor entity, subject to this Policy.
5.2. Data Processing Agreements
All third-party service providers who process your data on our behalf are required to enter into a data processing agreement with us and to comply with applicable data protection laws. We do not permit our processors to use your data for any purpose other than those we have specified.
6. Cookies & Tracking Technologies
6.1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently and to provide information to website operators.
6.2. Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for the Website to function; enables login sessions and security features | Session |
| Functional | Remembers your preferences and settings (e.g., language, display) | Up to 12 months |
| Analytics | Collects aggregated data on how the Website is used to improve performance | Up to 24 months |
| Marketing | Tracks browsing activity to deliver relevant advertising and promotions | Up to 24 months |
6.3. Managing Cookies
You can manage your cookie preferences through our cookie consent banner, which is displayed when you first visit the Website. You can also control cookies through your browser settings. Please note that disabling certain cookies may impair the functionality of the Website.
6.4. Third-Party Tracking
We may use third-party analytics services (such as Google Analytics) that use cookies to collect information about how visitors use the Website. This information is aggregated and does not identify individual visitors. These services operate under their own privacy policies.
7. Data Security
7.1. Security Measures
We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers;
- Encryption of sensitive data at rest, including payment information and identity documents;
- Strict access controls limiting staff access to personal data on a need-to-know basis;
- Regular security audits, penetration testing, and vulnerability assessments;
- Incident response procedures to handle any data security breaches promptly and in accordance with legal requirements.
7.2. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with our legal obligations. Where required, we will also notify affected individuals without undue delay.
8. Data Retention
8.1. Retention Periods
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. Our standard retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account and identity data | 5 years after Account closure |
| Transaction records | 7 years from the date of each transaction |
| KYC documentation | 5 years after Account closure or end of the business relationship |
| Customer support communications | 3 years from the date of the last interaction |
| Marketing data (where consent given) | Until consent is withdrawn, then 1 year |
| Cookie / analytics data | Up to 24 months |
After the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you.
9. Your Rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you (a "Subject Access Request" or SAR).
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
- Right to Erasure: You have the right to request that we delete your personal data where it is no longer necessary, or where you withdraw consent (subject to legal retention obligations).
- Right to Restrict Processing: You have the right to request that we limit the processing of your personal data in certain circumstances.
- Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing.
- Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing that significantly affects you, unless this is necessary for a contract or authorised by law.
To exercise any of these rights, please contact our DPO at [email protected]. We will respond to all valid requests within one calendar month.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
10. International Data Transfers
10.1. Transfers Outside the UK
In limited circumstances, your personal data may be transferred to and processed in countries outside the United Kingdom. Where such transfers occur, we ensure that appropriate safeguards are in place, including:
- Adequacy decisions issued by the UK Secretary of State;
- International Data Transfer Agreements (IDTAs) based on the UK's standard contractual clauses;
- Binding Corporate Rules or other legally recognised transfer mechanisms.
10.2. Further Information
For further information about the safeguards we apply to international transfers, please contact our DPO at [email protected].
11. Minors
Our Services are not intended for persons under the age of 18 years. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the associated Account.
If you believe that a minor has registered an Account, please contact us immediately at [email protected].
12. Changes to This Policy
We reserve the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify you by posting a notice on the Website and/or sending an email to the address registered on your Account. The "Last Updated" date at the top of this page will reflect the most recent revision.
We encourage you to review this Policy periodically to stay informed about how we protect your data. Your continued use of the Services following the posting of any changes constitutes your acceptance of those changes.
13. Contact Information
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which we handle your personal data, please contact us:
- Data Protection / Privacy Enquiries: [email protected]
- General Support: [email protected]
- Website: tastybingocasino.org.uk
We take all privacy enquiries seriously and aim to respond within one calendar month of receipt.