1. Who We Are and How to Reach Us
Grosvenor Casino Online operates this website at https://grosvenor-online-casino-uk.com/ and is the data controller responsible for your personal information. This means we decide why and how your data is collected and used.
Our registered address is Level 4, 275 Grays Inn Road, London, WC1X 8QB, United Kingdom. If you have any question about how we handle your personal information, or if you wish to exercise any of your rights, you can contact us directly:
- By email: connect@grosvenor-online-casino-uk.com
- By telephone: +44 20 3585 1715
- By post: Level 4, 275 Grays Inn Road, London, WC1X 8QB, United Kingdom
- Via our Contact Us page
We are registered with the UK Gambling Commission under account number 57924, licence reference 034161-R-315519-012. Our processing of personal data is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where applicable, we also comply with the Privacy and Electronic Communications Regulations (PECR).
2. The Information We Collect About You
The type of information we collect depends on how you interact with Grosvenor Casino Online. We collect data in several ways: directly from you when you register or use our services, automatically as you browse and play, and from third parties as part of our legal obligations.
2.1 Information You Provide Directly
- Full name, date of birth and residential address, provided at registration for age verification and identity purposes
- Email address and telephone number
- Username and account credentials
- Payment details, including debit card numbers (stored in tokenised form), PayPal account references, Skrill or Neteller identifiers, and bank account details where applicable
- Documents you submit for identity verification, such as a passport, driving licence, utility bill or bank statement
- Communications you send to our support team, whether by live chat, email or telephone
- Responsible gambling preferences and limits you set within your account, including deposit limits, loss limits, session time limits and self-exclusion requests
- Information you provide if you make a complaint or respond to a survey
2.2 Information We Collect Automatically
- IP address, device type, browser type and operating system
- Session data, including the time you log in, the duration of each session, and which games you access
- Wagering history, win and loss records, and betting patterns
- Deposit and withdrawal transaction records
- Cookies and similar tracking technologies (covered separately in Section 10)
- Geolocation data sufficient to confirm you are accessing the platform from within a permitted territory
2.3 Information from Third Parties
- Identity and age verification data from credit reference agencies and electronic identity verification providers used as part of our Know Your Customer (KYC) process
- Fraud and anti-money laundering screening data from specialist screening services
- Self-exclusion status data from GamStop, the national self-exclusion register operated under UK Gambling Commission requirements
- Data from payment processors confirming the status of transactions
- Publicly available information or information from law enforcement where we are legally required to cross-reference it
3. Why We Use Your Information and Our Legal Basis for Doing So
UK GDPR requires us to identify a lawful basis every time we process personal data. The bases we rely on are: performance of a contract, compliance with a legal obligation, our legitimate interests, and in specific circumstances, your consent. Below we set out each purpose alongside the basis we rely on.
3.1 Creating and Managing Your Account
When you register, we process your name, date of birth, address and contact details to set up and maintain your account. This is necessary to perform the contract between you and Grosvenor Casino Online. Without this information, we cannot provide the service.
3.2 Age and Identity Verification
Under the Gambling Act 2005 and UKGC licence conditions, we are legally required to verify that every player is aged 18 or over before allowing real money play. We process your personal details and, where required, copies of identity documents to satisfy this obligation. This processing is carried out on the basis of compliance with a legal obligation.
3.3 Anti-Money Laundering and Counter-Terrorism Financing
The Proceeds of Crime Act 2002, the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, and UKGC social responsibility and anti-money laundering codes impose specific obligations on licensed gambling operators. We are required to monitor transactions, conduct source of funds checks in certain circumstances, and file reports where we have grounds for suspicion. This processing is a legal obligation. We may not be able to inform you when this type of processing is taking place, as doing so could constitute a tipping-off offence under UK legislation.
3.4 Processing Deposits and Withdrawals
We process your payment details to handle deposits and withdrawals and to carry out fraud prevention checks. This is necessary both to perform the contract with you and to comply with financial services and gambling legislation.
3.5 Responsible Gambling Monitoring
Our UKGC licence conditions require us to identify players who may be experiencing harm and to take appropriate action. We process your gaming behaviour, session data and account activity to monitor for indicators associated with problem gambling, such as extended session lengths, rapidly escalating stakes or repeated attempts to withdraw funds. We also process data received from GamStop to prevent access for self-excluded players. This processing is carried out partly as a legal obligation and partly on the basis of our legitimate interest in protecting vulnerable players from harm.
3.6 Customer Support
We retain records of communications with our support team to resolve queries, handle complaints and improve the quality of our service. This is based on our legitimate interest in running an effective customer support operation and, where a contractual dispute is involved, on the performance of the contract.
3.7 Security and Fraud Prevention
We use technical and account data to detect and prevent fraudulent activity, collusion, bonus abuse and other conduct that would breach our terms. This processing is based on legitimate interests: protecting our business and protecting other players from fraudulent activity.
3.8 Regulatory Reporting and Record-Keeping
UKGC licence conditions require us to maintain detailed records of transactions and player activity and to make these available to regulators upon request. Certain data must be retained for specified minimum periods. This processing is a legal obligation.
3.9 Marketing Communications
Where you have opted in to receive marketing from us, we send emails, SMS messages and push notifications about promotions, bonus offers, new game launches and events. You can withdraw your consent at any time by using the unsubscribe link in any marketing email, adjusting your notification preferences within your account settings, or contacting us directly at connect@grosvenor-online-casino-uk.com. Withdrawal of consent does not affect the lawfulness of processing before it was withdrawn.
3.10 Personalisation
We use data about your game preferences and activity to show you content that is more likely to be relevant to you, including game recommendations and targeted promotional offers. Where this involves profiling that produces no significant legal or similarly significant effect on you, we do so on the basis of our legitimate interests. You can request that we stop using your data in this way at any time by contacting us.
3.11 Analytics and Platform Improvement
We use aggregated and anonymised data to understand how players use the platform, which games are most popular, where technical issues arise and how to improve the overall experience. Where data is genuinely anonymised, UK GDPR does not apply. Where it remains personal data, we process it on the basis of our legitimate interests in maintaining a functional, well-performing platform.
4. Sharing Your Information with Third Parties
We do not sell your personal data. We share it only where there is a specific reason to do so, as described below.
4.1 Service Providers and Data Processors
We work with third-party companies that provide services on our behalf, including identity verification providers, payment processors, fraud prevention services, customer support software providers, email delivery platforms, and cloud hosting and data storage providers. These companies process data only on our instructions and are bound by data processing agreements that require them to apply appropriate security standards and use your data for no purpose other than the one we specify.
4.2 Game Providers
Our game library is supplied by a number of game studios and live dealer providers, including Evolution Gaming, Playtech Live, Play’n Go, PG Soft, Pragmatic Play, BGaming, Evoplay, Ezugi, and others. When you play a game powered by one of these providers, limited technical data such as your session identifier and wagering activity for that session is transmitted to the provider to enable gameplay. These providers operate under their own regulatory obligations and are prohibited from using that data for independent commercial purposes.
4.3 Regulators and Law Enforcement
We share data with the UK Gambling Commission as required by our licence conditions. We are also required to share data with the National Crime Agency, HM Revenue and Customs, the Financial Conduct Authority and UK law enforcement bodies where we have a legal obligation to do so, for example in connection with a suspicious activity report or in response to a lawful request.
4.4 GamStop
We are integrated with GamStop, the UK’s national gambling self-exclusion scheme. We share data with GamStop to check whether new registrants or returning players are subject to a self-exclusion, and we receive data from GamStop for the same purpose. This sharing is a condition of our UKGC operating licence.
4.5 Credit Reference and Identity Verification Agencies
We use third-party electronic identity verification services to confirm your identity and age during registration and at subsequent points if required by our AML obligations. These checks may leave a soft footprint on your credit file, which does not affect your credit rating and is not visible to other lenders.
4.6 Business Transfers
If Grosvenor Casino Online or any part of our business is sold, restructured or merged with another entity, your personal data may be transferred to the new controller as part of that transaction. You will be notified if such a transfer affects how your data is processed.
5. International Transfers of Personal Data
Some of our third-party service providers operate outside the United Kingdom. Where we transfer your personal data to a country that the UK has not designated as providing an adequate level of protection, we put in place appropriate safeguards before the transfer takes place. These safeguards include the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, which create legally binding obligations on the recipient to protect your data to a standard equivalent to that required under UK GDPR.
You can obtain further information about the specific safeguards we apply to international transfers by contacting us at connect@grosvenor-online-casino-uk.com.
6. How Long We Retain Your Data
We do not keep personal data for longer than is necessary for the purpose for which it was collected, taking into account our legal and regulatory obligations.
- Account data: Retained for the duration of your account and for a minimum of five years after the account is closed, in line with anti-money laundering legislation and UKGC record-keeping requirements.
- Identity documents and KYC records: Retained for five years from the date of the relevant transaction or the end of the business relationship, whichever is later, as required by the Money Laundering Regulations 2017.
- Transaction records: Retained for a minimum of five years to satisfy AML and UKGC requirements.
- Responsible gambling records: Retained in accordance with UKGC licence conditions, which require records of self-exclusion and player interaction activity to be available to regulators on request.
- Support communications: Retained for three years after the query is resolved, unless the communication relates to a complaint or potential legal dispute, in which case it is retained for six years.
- Marketing consent records: Retained for as long as your account is active and for three years thereafter, to demonstrate consent and handle any related queries.
- Cookies and analytics data: Retention periods vary by cookie type and are set out in our Cookie Policy.
Where data is retained solely to satisfy a legal or regulatory obligation and is no longer needed for operational purposes, we restrict access to it so that it is used only for that compliance purpose.
7. Your Rights Under UK GDPR
UK GDPR gives you a number of rights in relation to your personal data. These are not absolute in every case: some are subject to conditions or exemptions, particularly where we have legal obligations that override them. We describe each right below and what it means in practice.
7.1 The Right to Access
You have the right to ask us whether we hold personal data about you and, if so, to receive a copy of it along with information about how it is processed. This is sometimes called a Subject Access Request. We will respond within one calendar month of receiving a valid request. There is no charge in ordinary circumstances.
7.2 The Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it. We will do so promptly and, where appropriate, notify any third parties to whom we have disclosed the incorrect data.
7.3 The Right to Erasure
You can ask us to delete your personal data in certain circumstances, for example if it is no longer needed for the purpose it was collected or if you withdraw consent and there is no other lawful basis for continued processing. This right does not apply where we are required to retain data by law. We are, for instance, unable to delete transaction records during the mandatory AML retention period.
7.4 The Right to Restrict Processing
You can ask us to limit what we do with your data in certain circumstances, such as while you contest its accuracy or while we are considering an objection you have raised. We will inform you before lifting any restriction.
7.5 The Right to Data Portability
Where we process your data on the basis of consent or contract and by automated means, you have the right to receive a copy of that data in a structured, commonly used and machine-readable format, and to request that we transmit it directly to another controller where this is technically feasible.
7.6 The Right to Object
You have the right to object to processing that is based on our legitimate interests, including profiling for marketing purposes. Where you object to direct marketing, we will stop that processing immediately. Where you object to other legitimate interests processing, we will review whether our interests are overridden by your rights in the specific circumstances.
7.7 Rights Related to Automated Decision-Making and Profiling
We use automated processes as part of our responsible gambling monitoring and fraud detection systems. Where a decision based solely on automated processing produces a legal or similarly significant effect on you, you have the right to request human review of that decision, to express your point of view, and to contest the outcome. If you believe an automated decision has affected you unfairly, contact us using the details in Section 1.
To exercise any of these rights, contact us at connect@grosvenor-online-casino-uk.com or by post at Level 4, 275 Grays Inn Road, London, WC1X 8QB, United Kingdom. We may need to verify your identity before processing your request.
8. The Right to Lodge a Complaint with the ICO
If you are not satisfied with how we have handled your personal data or responded to a request you have made, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection supervisory authority.
The ICO can be contacted at:
- Website: ico.org.uk
- Telephone: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would appreciate the opportunity to address any concern directly before you contact the ICO, but this does not affect your right to complain at any time.
9. Responsible Gambling and the Use of Your Data
Our UKGC licence places specific obligations on us relating to player safety. Some of these obligations require us to process personal data in ways that go beyond what would be necessary simply to deliver the gambling service.
In particular, we use automated monitoring of your account activity to identify patterns that may indicate harmful gambling behaviour. If our systems flag your account, a member of our Safer Gambling team may review your account manually and contact you. This monitoring is carried out on the basis of our legitimate interests in protecting player welfare and in compliance with our legal obligations as a UKGC-licensed operator.
If you request a self-exclusion through your account settings, we share your details with GamStop so that the exclusion is registered across all UKGC-licensed operators in the UK. We also check the GamStop register when processing new registrations. Records of self-exclusion requests are retained in accordance with UKGC requirements, even after an exclusion period has ended and an account has been reopened following the applicable review process.
If you need support with your gambling, the following organisations offer free, confidential help:
- GamCare – free helpline: 0808 8020 133 (24 hours, 7 days a week)
- BeGambleAware
- Gambling Therapy
10. Cookies and Similar Technologies
We use cookies and similar technologies on grosvenor-online-casino-uk.com to make the site work, to remember your preferences, and to understand how the site is being used. Some cookies are strictly necessary for the platform to function; others require your consent before we set them.
The main categories of cookies we use are:
- Strictly necessary cookies: These are essential to the operation of the site, for example to maintain your login session and to keep your account secure. They do not require consent.
- Functional cookies: These remember your preferences, such as language or game display settings, to improve your experience when you return.
- Analytics cookies: These help us understand which parts of the site are used most and how players move through the platform. The data collected is used in aggregated form.
- Marketing and targeting cookies: These track your activity to allow us and our advertising partners to show you relevant offers and content. These cookies are only set with your consent.
When you first visit the site, you are presented with a cookie consent banner that allows you to choose which categories of non-essential cookies to accept. You can change your choices at any time through your browser settings or by revisiting the cookie preference centre on the site. For full details of every cookie we use, including the specific names, providers and retention periods, please see our Cookie Policy.
11. Marketing: Your Choices and How We Contact You
We send marketing communications only to players who have given their consent to receive them. Marketing messages include information about current promotions, reload bonuses, free spin offers, new game launches and relevant events.
We may contact you by email, SMS or push notification, depending on the preferences you selected when you registered or updated in your account settings.
To stop receiving any or all marketing from us:
- Use the unsubscribe link at the bottom of any marketing email we send you
- Log in to your account and update your communication preferences in the account settings section
- Email us directly at connect@grosvenor-online-casino-uk.com with a clear request to opt out
Opting out of marketing does not affect service communications, which we may still send you in connection with your account, transactions, security alerts or changes to our terms and policies. You cannot opt out of these while your account is active.
12. Security
We apply technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure or destruction. These measures include SSL/TLS encryption on all data transmissions between your browser and our servers, tokenisation of payment details, access controls that limit who within our organisation can view sensitive data, and regular internal reviews of how data is handled.
No method of storing or transmitting data over the internet is completely immune to risk. We take the protection of your information seriously and review our security practices on an ongoing basis. If you have reason to believe your account has been compromised, contact us immediately at connect@grosvenor-online-casino-uk.com or by telephone on +44 20 3585 1715.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of it and, where required, notify affected individuals without undue delay.
13. Children and Age Restrictions
Grosvenor Casino Online is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18, and we carry out age verification checks on every new account before real money play is permitted. If we discover that we have inadvertently collected personal data from a person under 18, we will delete that data promptly and close the account.
If you believe a minor has accessed our platform or provided us with their data, please contact us immediately at connect@grosvenor-online-casino-uk.com.
14. Links to Third-Party Websites
From time to time, our site may contain links to external websites, including those of game providers, payment processors or support organisations. This Privacy Policy applies only to grosvenor-online-casino-uk.com. We are not responsible for the privacy practices of third-party websites and recommend that you read their privacy policies before providing any personal data.
15. Changes to This Privacy Policy
We review and update this Privacy Policy whenever our practices change, when there are changes to applicable legislation, or when required by regulatory guidance. Where changes are material, we will inform you by email or by displaying a notice on the site before the changes take effect. Your continued use of the platform after that point indicates your acceptance of the updated policy.
The current version of this policy is always available at https://grosvenor-online-casino-uk.com/.
16. Contact Us
For any question, request or concern relating to this Privacy Policy or to the way we handle your personal data, please get in touch using any of the following:
- Email: connect@grosvenor-online-casino-uk.com
- Telephone: +44 20 3585 1715
- Post: Grosvenor Casino Online, Level 4, 275 Grays Inn Road, London, WC1X 8QB, United Kingdom
- Online: Contact Us page
We aim to respond to all written enquiries within five working days. For subject access requests and other formal rights requests, we will respond within one calendar month as required by UK GDPR.