Casino HSBC UK
This Privacy Policy explains how your personal data is collected, used, and protected when you use our services. Casino HSBC UK is committed to handling your information transparently and in full compliance with UK GDPR and the Data Protection Act 2018. By creating an account and using the platform, you acknowledge the practices described in this document.
1. Who We Are
The platform acts as the data controller responsible for personal information collected through the platform. We are registered with the Information Commissioner's Office (ICO) in accordance with UK data protection legislation. Our operations are licensed by the UK Gambling Commission and the Malta Gaming Authority, both of which impose specific obligations on how we handle player data. If you have any questions regarding data processing, you can reach our dedicated privacy team through the contact details provided at the end of this policy.
2. Information We Collect
HSBC online casino collects personal data through several channels during your use of the platform. The categories of information we gather include:
- Identity data: full name, date of birth, gender, and nationality
- Contact data: email address, phone number, and residential address
- Financial data: payment method details, transaction history, and account balances
- Verification data: copies of identity documents, proof of address, and source of funds where required
- Technical data: IP address, device type, browser information, and operating system
- Usage data: login timestamps, session duration, games played, and betting activity
- Communication data: records of correspondence with our support team
The platform may also collect data indirectly through third-party identity verification providers and fraud prevention services used during the KYC process.
3. How We Use Your Information
Casino HSBC online uses the data collected for the following purposes:
- Account management: creating, maintaining, and securing your player account
- Identity verification: fulfilling KYC obligations required by our regulatory licences
- Transaction processing: handling deposits, withdrawals, and bonus allocations
- Fraud prevention: detecting and investigating suspicious activity on your account
- Regulatory compliance: meeting reporting obligations to the UKGC and other relevant authorities
- Responsible gambling: monitoring play patterns and applying account restrictions where necessary
- Customer support: responding to queries, complaints, and account-related requests
- Marketing: sending promotional communications where you have provided explicit consent
The platform will never use your personal data for purposes incompatible with those listed above without first notifying you and, where required, obtaining your consent.
4. Legal Basis for Processing
Casino HSBC UK processes your personal data on the following legal grounds under UK GDPR:
- Contract performance: processing necessary to operate your account and deliver the services you have signed up for
- Legal obligation: processing required to comply with UKGC licence conditions, anti-money laundering regulations, and tax reporting requirements
- Legitimate interests: fraud detection, security monitoring, and responsible gambling oversight where these interests are not overridden by your rights
- Consent: marketing communications and non-essential cookies, which you can withdraw at any time
Where the platform relies on consent as the legal basis, you retain the right to withdraw that consent without affecting the lawfulness of processing carried out prior to withdrawal.
5. Who We Share Your Information With
HSBC online casino shares personal data only where necessary and with appropriate safeguards in place. Recipients include:
- Regulatory authorities: the UK Gambling Commission, HMRC, and law enforcement agencies where legally required
- Identity verification providers: third-party KYC and AML services used to confirm player identity and source of funds
- Payment processors: financial institutions and payment service providers involved in handling your transactions
- Software providers: game studios may receive aggregated, anonymised data for performance and compliance purposes
- IT and security providers: companies supporting the technical infrastructure and cybersecurity of the platform
The platform does not sell personal data to third parties for commercial purposes. Any third party receiving your data is contractually bound to process it only for the specified purpose and in line with applicable data protection law.
6. Cookies and Tracking Technologies
Casino HSBC online uses cookies and similar tracking technologies to support platform functionality, analyse usage patterns, and deliver relevant content. The categories of cookies in use include:
- Essential cookies: required for the platform to function - login sessions, security tokens, and preference settings
- Analytical cookies: used to measure traffic, session behaviour, and feature usage across the platform
- Marketing cookies: track interactions with promotional content where consent has been provided
- Third-party cookies: placed by integrated services such as live chat tools and payment providers
You can manage cookie preferences through the consent banner displayed on your first visit or by adjusting your browser settings at any time. Disabling essential cookies may affect platform functionality. A full cookie list is available in the Cookie Policy on the platform website.
7. Data Retention
HSBC online casino retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum periods:
- Account data: retained for a minimum of 5 years following account closure, in line with UKGC licence requirements
- Transaction records: kept for a minimum of 5 years to comply with anti-money laundering regulations
- KYC documents: retained for 5 years from the end of the customer relationship
- Support communications: held for 3 years from the date of the interaction
- Marketing consent records: retained for the duration of consent plus 1 year following withdrawal
The platform reviews data holdings periodically and securely deletes information that is no longer required for regulatory, legal, or operational purposes.
8. Data Security
Casino HSBC online implements technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Security practices in place include:
- Encryption: all data transmitted between your device and the platform is protected using TLS encryption
- Access controls: personal data is accessible only to staff with a legitimate operational need
- Two-factor authentication: available for player accounts and mandatory for internal administrative access
- Regular security audits: the platform undergoes periodic penetration testing and vulnerability assessments
- Incident response: a documented process is in place for detecting, reporting, and managing data breaches in line with ICO requirements
In the event of a data breach that poses a risk to your rights, the platform will notify the ICO within 72 hours and inform affected players without undue delay.
9. International Data Transfers
Casino HSBC UK may transfer personal data outside the UK where third-party service providers operate in other jurisdictions. Any such transfer is carried out under appropriate safeguards including:
- UK adequacy decisions: transfers to countries recognised by the ICO as providing an adequate level of data protection
- Standard contractual clauses: legally binding data transfer agreements approved for use under UK GDPR
- Binding corporate rules: where applicable for transfers within corporate group structures
The platform does not transfer data to jurisdictions without an adequate level of protection unless a specific lawful mechanism is in place. You can request details of the safeguards applied to any specific transfer by contacting our privacy team.
10. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data held by HSBC online casino:
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: ask us to correct inaccurate or incomplete information
- Right to erasure: request deletion of your data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations
- Right to restriction: ask us to limit processing of your data in certain circumstances
- Right to data portability: receive your data in a structured, machine-readable format where processing is based on consent or contract
- Right to object: challenge processing carried out on the basis of legitimate interests, including direct marketing
- Rights related to automated decision-making: request human review of any decision made solely by automated means that significantly affects you
To exercise any of these rights, contact our privacy team via the support channels listed on the platform. We will respond within one calendar month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.
