Privacy and Policy
This policy explains how 32Red collects, uses, stores and protects your personal data. We process information in line with UK GDPR and the Data Protection Act 2018, overseen by the Information Commissioner's Office (ICO). Using our services means you understand the practices described here. We act as the data controller for the information you give us when you register and play.
What We Collect
We gather data you provide directly — name, date of birth, address, email, phone and payment details — and data created as you use the site, such as sign-in times, device details, gameplay and transactions. Some identity data is collected to meet our legal age-verification and anti-money-laundering duties. We limit collection to what each purpose genuinely needs.
Why We Process It
Your data lets us open and run your account, handle deposits and withdrawals, verify identity and age, prevent fraud and money laundering, meet licensing duties, provide support, and — where you have opted in — send promotions. Each use rests on a lawful basis: contract, legal obligation, legitimate interests or consent, depending on the activity.
Safer Gambling and Affordability
To support safer gambling, we may review patterns of play and deposits to spot signs of harm and to run proportionate affordability checks. This forms part of our regulatory duty of care and is handled with the same care as all other personal data.
How We Keep It Safe
We apply encryption in transit, access controls and secure storage. Payment information is handled to strict security standards, and internal access is restricted to staff who need it for their role. No system is ever wholly without risk, but we maintain technical and organisational measures suited to the sensitivity of the data.
When We Share Data
We share only where necessary: with payment providers to process transactions, with identity and fraud-prevention partners, with our ADR provider during a dispute, and with regulators where the law requires. We do not sell your personal data, and any partner processing data for us is bound by a data-processing agreement.
How Long We Keep It
We retain your data while your account is active and for a period afterwards to meet legal, regulatory and accounting obligations — anti-money-laundering records, for example, must be kept for a set number of years. Once data is no longer needed, it is securely deleted or anonymised.
Your Rights
Under UK GDPR you can access your data, correct inaccuracies, request erasure where it applies, restrict or object to certain processing, and ask for portability. You may also withdraw marketing consent at any time. Contact support to exercise a right; if our response does not satisfy you, you may complain to the Information Commissioner's Office.
Cookies and Changes
Our use of cookies is covered in the Cookie Policy. We may update this Privacy Policy as the law or our services change; the latest version always sits here with its effective date, and we will communicate any material change to you.