Privacy Policy

What personal data we collect

We are the controller of the personal data you give us and of the data we record while you use your account with us. We collect what we need to run the account, to meet the duties that come with holding a gaming licence, and to keep the site safe for everyone who plays here.

Account and contact details

Your name, date of birth, home address, e-mail address and mobile number.
The username, password and security details you set when registering.
Your contact preferences and the safer gambling limits shown in your account.

Identity and verification documents

Before a first withdrawal, and at other points where we are required to check an account, we ask for documents that confirm who you are, how old you are and where you live. These are usually photo identification, proof of address and proof that the payment method belongs to you. We also keep a record of each check we carry out and its outcome.

Transactions and play

Deposits, withdrawals, amounts, dates and the payment method details shown in the cashier.
Games opened, stakes, outcomes, bonus use and session length.
Messages you send us by e-mail or live chat, and our replies.

Device and usage data

Your IP address, the approximate location taken from it, your device type, operating system and browser.
Pages you open, features you use and the time you spend on the site.
Cookie identifiers and similar technical markers.

Why we use your personal data and the legal bases for it

We use your personal data for the purposes below and for nothing else without telling you first.

To open, run and secure your account with us, and to process deposits, withdrawals and gameplay.
To confirm that you are aged 18 or over and that your identity and address are as you have told us.
To prevent and detect fraud, collusion, bonus abuse and money laundering.
To meet our legal duties, including anti-money-laundering checks, record keeping and the conditions attached to our gaming licence.
To apply our safer gambling duties, including the limits and exclusions you set and those recorded by self-exclusion schemes.
To answer your questions and look into any complaint you raise.
To send offers and account news by e-mail, SMS or push message where you have opted in.

Age checks and safer gambling

Our services are for adults aged 18 and over only, and some of the data we collect exists purely so we can prove that. You can set deposit limits, take a time-out or self-exclude at any time in your account. Free, confidential support is available from GambleAware, GamCare, the National Gambling Helpline and GamStop.

The legal bases under UK GDPR

UK data protection law requires us to have a reason, called a legal basis, for each use of your data. In plain words, these are the bases we rely on.

What we use your data for	Legal basis	What that means
Opening and running your account, paying out winnings	Performance of a contract	We cannot provide the services described in our terms without it.
Age and identity checks, anti-money-laundering duties, record keeping	Legal obligation	The law and our licence conditions require these checks of us.
Fraud prevention, site security, internal records and advice	Legitimate interests	We need to protect players and the site, and we weigh this against your privacy.
Marketing by e-mail, SMS or push message	Your consent	You chose to opt in and can withdraw that consent at any time.

Who we share your personal data with

We do not sell your personal data. We share it only where it is needed for the purposes set out above, and only with parties who are bound to keep it secure and to use it for the agreed purpose:

Payment providers and banks, so that deposits and withdrawals can be processed and matched to your account.
Identity-verification and fraud-prevention partners, who confirm the details you give us and flag patterns linked to fraud or money laundering.
Platform, game and communication suppliers, who operate parts of the service on our behalf under our instructions.
Self-exclusion and safer gambling schemes, including GamStop, so that an exclusion is applied to your account with us.
Regulators, police, tax and other public bodies, where the law, a court order or our licence conditions require disclosure.
Professional advisers, such as auditors and lawyers, under a duty of confidentiality.

Where a supplier is based outside the United Kingdom, we transfer data only when approved safeguards are in place, such as the standard contract terms recognised under UK data protection law.

How long we keep your personal data

We keep your personal data for as long as your account with us is open, and afterwards for the period that the law and our licence conditions require. The period depends on the type of record:

Account, verification and transaction records are kept for the retention period set by gambling and anti-money-laundering legislation after an account closes.
Records of a self-exclusion are kept for the length of the exclusion and the minimum period that applies after it ends.
Support messages and complaint files are kept for as long as we need them to settle the matter and to show how it was handled.
Device and usage data is kept for a shorter period and is then deleted or stripped of the details that identify you.

When a period ends, we delete the data or anonymise it so that it can no longer be linked to you.

Your rights and how to use them

Under UK data protection law you hold the rights below. Using them is free, and we reply within the time the law allows, normally one month.

Access - ask for a copy of the personal data we hold about you.
Correction - have inaccurate or incomplete details put right.
Erasure - ask us to delete data we no longer have a reason to keep. We cannot delete records we are required by law to retain.
Restriction and objection - ask us to pause a particular use, or object to a use based on our legitimate interests.
Portability - receive the data you gave us in a commonly used electronic format.
Withdraw consent - stop marketing at any time in your account settings or by using the unsubscribe option in any message.

To use any of these rights, write to support@casinorichyleo.co.uk or speak to our team on the live chat on the site. Data protection questions can also be sent to privacy@casinorichyleo.co.uk. We may ask you to confirm your identity first, so that personal data is never sent to the wrong person.

If you are unhappy with how we have handled your data or your request, you can complain to the Information Commissioner's Office. We would ask you to contact us first, so that we can look into the matter and put it right where we can.

Cookies, security and changes to this policy

We and our suppliers use cookies and similar technologies to keep you signed in, remember your settings, measure how the site is used and, where you agree to it, show offers chosen for you. You can set your preferences when you first visit and change them at any time in the cookie settings on the site. The categories we use, what each one does and how long it lasts are set out in our Cookie Policy.

We protect your data with encryption in transit, access limited to staff who need it for their work, and regular checks of our systems and suppliers. No system is completely secure, so please keep your password private and tell us at once if you think someone else has used your account.

We update this policy when our practices or the law change. The version shown on this page is the one that applies, and we tell you about significant changes by e-mail or by a notice in your account before they take effect.

Worth a spin