1. Who We Are

Rocksteady Club is an online casino operated by Rocksteady Entertainment N.V. and licensed by the UK Gambling Commission (licence number 000-039483-R-319422-001). We are committed to protecting your personal data and handling it responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what data we collect, why we collect it, and your rights.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity data: full name, date of birth, username and copies of identity documents.
• Contact data: email address, telephone number and postal address.
• Payment data: payment method details (such as Visa, Mastercard, PayPal or bank account information), transaction history, deposit and withdrawal records.
• Device and technical data: IP address, browser type and version, operating system, device identifiers and login timestamps.
• Usage data: pages visited, games played, session duration, betting and wagering history, and interactions with our platform.
• Communications data: records of your correspondence with our support team, including live chat transcripts.

3. Why We Collect Your Data and Our Legal Bases

We process your personal data for the following purposes, each supported by a lawful basis under UK GDPR:

1. Account creation and management – to register your account and provide our services. Legal basis: performance of a contract.
2. Know Your Customer (KYC) and Anti-Money Laundering (AML) checks – to verify your identity and comply with our legal obligations under the Proceeds of Crime Act 2002 and UK Gambling Commission requirements. Legal basis: legal obligation.
3. Processing payments – to handle deposits and withdrawals securely via your chosen payment method. Legal basis: performance of a contract.
4. Responsible gambling – to monitor your activity, apply self-exclusion tools, and fulfil our duty of care obligations as required by the UK Gambling Commission. Legal basis: legal obligation and legitimate interests.
5. Marketing communications – to send you promotional offers, bonuses and updates about Rocksteady Club, but only where you have given us your explicit consent. You may withdraw consent at any time. Legal basis: consent.
6. Fraud prevention and security – to detect and prevent fraudulent activity and protect our platform. Legal basis: legitimate interests.

4. How Long We Keep Your Data

We retain your personal data for as long as your account is active and for a minimum of five years after account closure, in line with our AML and regulatory obligations. Payment records are kept for at least five years. Marketing preferences are held until you withdraw consent. Where data is no longer required, it is securely deleted or anonymised.

5. Who We Share Your Data With

We do not sell your personal data. We may share it with trusted third parties only where necessary:

• Payment providers: Visa, Mastercard, Apple Pay, PayPal, Paysafecard and bank transfer processors, to complete transactions securely.
• Regulators and law enforcement: the UK Gambling Commission, HMRC, and other authorities where we are legally required to disclose information.
• Identity verification services: third-party KYC and AML providers to fulfil our compliance obligations.
• Technology and platform partners: service providers who support the operation of our website, apps and customer support systems, all bound by data processing agreements.

6. Cookies

We use cookies and similar tracking technologies on our website and mobile platform (available on iOS and Android) to keep you logged in, remember your preferences, analyse site usage and deliver relevant content. You can manage your cookie preferences through our cookie banner or your browser settings. Disabling certain cookies may affect the functionality of the site.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access – request a copy of the data we hold about you.
• Right to rectification – ask us to correct inaccurate or incomplete data.
• Right to erasure – request deletion of your data where there is no lawful reason for us to keep it.
• Right to restrict processing – ask us to limit how we use your data in certain circumstances.
• Right to data portability – receive your data in a structured, machine-readable format.
• Right to object – object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent – withdraw marketing consent at any time without affecting prior processing.

8. How to Exercise Your Rights

To make a data request or raise a privacy concern, please contact our Data Protection team by emailing us through the support address available in the Help section of the Rocksteady Club website. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be communicated to you via email or a notice on the Rocksteady Club platform. The current version will always be available on our website. This policy was last reviewed in 2024.