21 Prive Casino Privacy Policy
Privacy and your casino account
On this website, our privacy page explains how personal information is handled in connection with 21 Prive Casino. The casino account processing described below is the responsibility of White Hat Gaming Limited, the casino operator and data controller.
For questions about this page, contact our support at [email protected]. Requests concerning casino account records should be directed to the operator's data protection team through the account support service.
Information used by the operator
White Hat Gaming Limited processes information supplied during registration, play, payments and support conversations. It also obtains technical information through cookies and server records, and may receive information from third parties or public sources for crime prevention and safer gambling checks.
| Information | Examples |
|---|---|
| Identity and contact details | Name, birth date, username, address, telephone number and email |
| Account and payment records | Wagers, banking details, deposits, withdrawals and information about financial circumstances |
| Support correspondence | Enquiries, complaints and recordings of calls where used for training or resolving issues |
| Device and activity details | IP address, browser, device information, login records and use of the casino website |
| Communication preferences | Choices about promotional messages and contact methods |
Health information and criminal-offence information are handled only exceptionally, for legal or regulatory responsibilities or when supplied by the individual. If information required by law or the account agreement is withheld, the operator may be unable to provide the relevant service and will explain any resulting cancellation.
Why information is processed
The operator uses different legal grounds for different activities:
- Running accounts and processing payments relies on fulfilling the player agreement.
- Identity checks, crime prevention and safer gambling monitoring support legal and regulatory duties.
- Consent applies to activities such as requested push notifications and implementing player-set spending, deposit and loss limits.
- Service analysis, research and quality management rely on legitimate interests, subject to the player's rights and interests.
Safer gambling monitoring can include reviewing previous play, transactions and communications. Information may also be shared with self-exclusion schemes, including GamStop, to apply a player's exclusion.
Sharing information and overseas processing
White Hat Gaming Limited may disclose relevant information to verification providers, financial institutions, regulators and law-enforcement bodies for checks and compliance. Disclosures may also be required by a court or government authority. A sale, merger or similar business transfer can involve transferring information and the associated privacy obligations to the successor.
The operator's international activities may involve processing outside the UK or EU. Its notice describes safeguards, including contractual protections, where destination countries provide less extensive data protection.
Marketing and cookies
The operator's notice allows marketing involving its group, associated brands and business partners, including sharing contact information for that purpose. Promotional communications require your consent. You can stop them through the unsubscribe instructions or by contacting the operator; essential account and service messages may continue.
Cookies and tracking pixels are also described in the operator's notice, including their use for remembering visits, measuring activity and advertising. Browser controls can restrict or remove cookies, although some features may then stop working. See our cookie page for related guidance.
Retention and security
The operator's stated retention period covers use of its service and up to five years afterwards. Information may be deleted earlier when no longer needed. Longer retention can apply where law or regulation requires it, or where the operator reasonably considers it necessary for business or legal purposes. Closing an account therefore does not mean every record is immediately erased.
White Hat Gaming Limited describes security controls and encryption for its service, while acknowledging that online transmission cannot be guaranteed secure. Keep account passwords private and avoid sending payment-card details or other sensitive information in ordinary email.
Your choices and privacy requests
Subject to the relevant conditions, you can ask the operator to:
- Provide access to your information or correct inaccurate records.
- Delete information where there is no continuing justification for keeping it. Legal or regulatory obligations may prevent deletion, with the reason explained when applicable.
- Restrict processing while accuracy or an objection is examined, where unlawful processing should be restricted instead of erased, or where records are needed for legal claims.
- Consider an objection to processing based on legitimate interests, or stop direct marketing.
- Arrange human review of an automated decision.
Some safer gambling controls may automatically restrict or lock an account. You can challenge these decisions and request a person's review. The operator describes human involvement in decisions based on its anti-money-laundering risk assessments.
You may withdraw consent for processing that depends on it. This does not invalidate earlier processing and may affect services that require that consent. The operator's notice also lists data transfer requests but states that its transfer service is unavailable.
The operator may ask for identity confirmation or further details before handling a request. Requests are normally free; clearly baseless, repeated or excessive requests may attract a reasonable charge or be declined. Its stated aim is to answer valid requests within one month, with notice and updates if complexity or multiple requests require longer.
Concerns and further information
Raise account-data concerns with White Hat Gaming Limited's data protection team first. If a concern remains unresolved and you believe the operator has not met its data-protection duties, its notice identifies the Information Commissioner's Office as the UK complaints authority.
Other services have their own privacy notices. Read those notices before giving them personal information. The operator may revise its notice and says it will notify players of significant changes.
For help with this website, use [email protected].