1. Introduction
This Privacy Policy sets out how Grosvenor Casino Southend-on-Sea collects, uses, stores, shares and protects personal data relating to customers, website visitors and other individuals who interact with the service. This document is issued in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By accessing the premises, registering an account or otherwise engaging with the service, you acknowledge that your personal data will be processed as described in this policy. It is recommended that this document is read carefully before any personal information is provided.
2. Data Controller
Grosvenor Casino Southend-on-Sea acts as the data controller in respect of personal data collected through its operations. As data controller, Grosvenor Casino Southend-on-Sea is responsible for determining the purposes and means by which personal data is processed.
Queries relating to this Privacy Policy or to the handling of personal data may be submitted in writing at the registered premises or via the contact details provided in Section 9 of this document.
3. Personal Data Collected
The following categories of personal data are collected and processed:
- Identity information: full name, date of birth, gender
- Contact details: postal address, email address, telephone number
- Identity verification documents: passport, driving licence, proof of address
- Financial and transaction records: payment details, account history, deposit and withdrawal records
- Gambling behaviour data: wagering history, session data, responsible gaming interactions
- Device and usage data: IP address, browser type, access logs
- Occupation and source of funds information, where required for due diligence purposes
- Communications records: correspondence with the customer support team
Special-category personal data is not collected unless required by law or obtained with explicit consent. Any such data is handled in accordance with applicable legal requirements.
4. Purposes and Legal Bases for Processing
Personal data is processed for the following purposes and on the following legal bases under UK GDPR:
Providing gambling services and managing your account
- Legal basis: Performance of a contract
Verifying identity and age in compliance with licensing requirements
- Legal basis: Legal obligation
Conducting anti-money laundering and fraud prevention checks
- Legal basis: Legal obligation / Legitimate interests
Complying with Gambling Commission licence conditions
- Legal basis: Legal obligation
Monitoring gambling behaviour for responsible gaming purposes
- Legal basis: Legal obligation / Legitimate interests
Conducting affordability and due diligence assessments
- Legal basis: Legal obligation / Legitimate interests
Communicating service-related information
- Legal basis: Performance of a contract
Direct marketing and analytics (where applicable)
- Legal basis: Consent / Legitimate interests
Consent is not the sole legal basis for processing personal data. Where processing is based on legitimate interests, those interests are assessed to ensure they are not overridden by your rights and freedoms.
5. Sharing of Personal Data
Personal data may be shared with the following categories of recipients where necessary and lawful:
- Payment processors and financial service providers involved in transaction processing
- Risk management and fraud prevention agencies
- Identity verification and due diligence service providers
- IT infrastructure, analytics and customer service providers
- Companies within the same corporate group, where applicable
- The Gambling Commission and other regulatory authorities
- Law enforcement agencies and public authorities, where required by law or court order
- Sports governing bodies and integrity organisations, in connection with licensing and compliance obligations
Personal data is not sold to third parties. Any sharing of data takes place on the basis of a lawful purpose and, where applicable, is subject to appropriate contractual safeguards.
6. Data Retention
Personal data is retained for as long as necessary to fulfil the purposes described in this policy and to comply with legal and regulatory obligations. In particular:
- Customer account records and transaction data are retained for a minimum of five years following the closure of an account or the end of the relevant business relationship, in accordance with anti-money laundering regulations.
- Identity verification documents are retained for the period required under applicable legislation, including the Money Laundering Regulations.
- Responsible gaming records are retained as required by Gambling Commission licence conditions.
Where retention is no longer required and no legal obligation applies, data is securely deleted or anonymised.
7. Your Rights Under UK Data Protection Law
You have the following rights in relation to your personal data:
- Right to be informed: to receive clear information about how your data is used, as set out in this policy.
- Right of access: to request a copy of the personal data held about you (subject access request).
- Right to rectification: to request correction of inaccurate or incomplete data.
- Right to erasure: to request deletion of your data in certain circumstances, subject to overriding legal obligations.
- Right to restriction: to request that processing of your data is limited in specified situations.
- Right to data portability: to receive your data in a structured, commonly used format where processing is based on consent or contract.
- Right to object: to object to processing based on legitimate interests, including direct marketing.
- Rights related to automated decision-making: to request human review of any automated decisions that significantly affect you.
To exercise any of these rights, contact details in Section 9 should be used. A response will be provided within one calendar month of receiving a request. If you are dissatisfied with the response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters, at ico.org.uk.
8. Data Security
Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, disclosure, alteration or destruction. Access to personal data is restricted to authorised personnel who require it for legitimate operational purposes. All staff with access to personal data are subject to confidentiality obligations.
No transmission or storage system can be guaranteed as completely secure. You are responsible for maintaining the confidentiality of any account credentials associated with the use of the services.
9. Contact Details
Questions, requests or complaints relating to this Privacy Policy or the processing of personal data should be directed to:
Grosvenor Casino Southend-on-Sea
Data Protection Enquiries
Southend-on-Sea, United Kingdom
Requests submitted in writing will be acknowledged and processed in accordance with the timescales set out under UK GDPR.
10. Updates to This Policy
This Privacy Policy may be updated from time to time to reflect changes in data processing practices, legal requirements or regulatory guidance. The current version of this policy is available at the premises and on the official website. Periodic review of this document is recommended in order to remain informed of how personal data is handled.