Who We Are and How to Reach Us
Gala Spins Casino operates the website gala-spinscasino-uk.com and is the data controller responsible for the personal information you provide when using our services. We are registered at Level 2, Miles Street, Vauxhall, London, SW8 1RZ, United Kingdom, and hold gambling licence number BGC 54743.
If you have questions about how we handle your personal data, wish to exercise any of your rights under UK data protection law, or want to raise a concern, you can contact our team directly:
- Email: care@gala-spinscasino-uk.com
- Phone: +44 151 747 2268
- Post: Level 2, Miles Street, Vauxhall, London, SW8 1RZ, United Kingdom
This Privacy Policy explains what personal data we collect, why we collect it, the legal grounds on which we process it, who we may share it with, how long we keep it, and what rights you have. It applies to all users accessing our platform from the United Kingdom.
Our processing of your personal data is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are also bound by the requirements of the UK Gambling Commission, whose standards form part of our legal obligations as a licensed operator.
The Personal Data We Collect
The information we collect depends on how you interact with Gala Spins Casino. We do not collect more than is necessary for the purposes described in this policy.
Information You Give Us Directly
- Full name, date of birth, and residential address
- Email address and telephone number
- Username and password for your account
- Payment details, including card information, digital wallet identifiers, or cryptocurrency wallet addresses, depending on the method you choose
- Copies of identity documents (such as a passport or driving licence) and proof of address submitted for identity verification
- Source of funds documentation, where we are required to request this under our licence conditions
- Responsible gambling preferences and self-imposed limits you set through your account
- Communications you send to our customer support team, including live chat transcripts and emails
Information We Collect Automatically
- IP address and approximate geographic location
- Device type, operating system, and browser version
- Pages visited on our website, time spent on each page, and navigation paths through the site
- Game session data, including the titles played, bet amounts, session duration, and outcomes
- Login timestamps and account activity logs
- Cookies and similar tracking technologies (described further in our Cookie Policy)
Information We Receive From Third Parties
- Identity verification results from fraud prevention databases and Know Your Customer (KYC) providers
- Credit reference data, where permitted, to assess affordability or financial risk in line with UKGC requirements
- Information from GamStop or other self-exclusion registers, to confirm whether you have excluded yourself from gambling services
- Payment processing data from our payment service providers, including transaction confirmation and fraud signals
Why We Process Your Data and Our Legal Basis for Doing So
Under UK GDPR, we must have a lawful basis for processing personal data. The table below sets out each purpose, the data involved, and the legal ground we rely on.
Registering and Managing Your Account
When you create an account, we use your name, date of birth, address, email address, and contact number to set up and maintain your player account. The legal basis is contract performance: we cannot provide our services without this information.
Identity Verification and Age Checks
The UK Gambling Commission requires us to verify that every player is aged 18 or over before they can deposit or play. We use your identity documents, date of birth, and information from third-party verification services to complete this check. The legal basis is legal obligation. We cannot waive or delay this process.
Processing Payments and Transactions
We process your payment details and transaction history to handle deposits and withdrawals. Accepted methods at Gala Spins Casino include Visa, Mastercard, Apple Pay, Google Pay, Bitcoin, Ethereum, and USDT. The legal basis is contract performance.
Preventing Money Laundering and Fraud
As a licensed gambling operator, we are required under the Proceeds of Crime Act 2002, the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017, and UKGC Licence Conditions to monitor transactions and player behaviour for signs of financial crime. This may involve checking your information against fraud prevention databases, verifying your source of funds, and reviewing gambling patterns. The legal basis is legal obligation and, where applicable, legitimate interests in protecting our platform and other users from financial harm.
Responsible Gambling Monitoring
We have a duty under UKGC Social Responsibility Code Provisions to identify players who may be experiencing harm from gambling. We monitor session length, frequency, betting patterns, and other behavioural signals to flag potential problem gambling activity. This allows us to make contact with affected players, apply account restrictions, or refer players to support organisations such as BeGambleAware and Gambling Therapy. The legal basis is legal obligation and legitimate interests in preventing gambling-related harm.
Customer Support
When you contact us by email at care@gala-spinscasino-uk.com, by phone on +44 151 747 2268, or via live chat, we retain a record of those communications to resolve your query and to improve our service. The legal basis is legitimate interests in providing effective customer care and maintaining a record of account-related interactions.
Marketing Communications
If you have opted in to receive promotional messages from us, we will send you information about bonuses, new games, and offers by email or other electronic means. You can withdraw this consent at any time by clicking the unsubscribe link in any marketing email or by contacting us directly at care@gala-spinscasino-uk.com. The legal basis is consent. Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.
We do not send direct marketing by electronic means without your consent, and we do not sell your personal data to third parties for their own marketing purposes.
Improving Our Platform and Personalising Your Experience
We analyse how players use our website and mobile application to identify areas for improvement, test new features, and ensure the platform performs reliably. Where we personalise game recommendations or promotional content, we use account activity and preferences data to do so. The legal basis is legitimate interests in operating a functional and competitive online casino.
Complying With Legal and Regulatory Obligations
We are required to retain certain records and to respond to lawful requests from the UK Gambling Commission, His Majesty’s Revenue and Customs, law enforcement, courts, and other regulatory authorities. The legal basis is legal obligation.
Sharing Your Personal Data
We do not sell your personal data. We share it only where necessary and only with the categories of recipients listed below. All third parties who receive your data on our behalf are required to handle it in accordance with UK GDPR and are bound by appropriate contractual safeguards.
Identity Verification and Fraud Prevention Providers
We use third-party KYC and anti-fraud services to verify your identity, check your age, and screen against financial crime databases. These providers access only the data needed to carry out their verification function and are not permitted to use it for their own purposes.
Payment Service Providers
We share payment-related data with our payment processors to facilitate deposits and withdrawals. The specific data shared depends on your chosen method and is limited to what is technically required to complete the transaction.
Game Software Providers
The games on our platform are supplied by studios including Play’n GO, Evolution, Pragmatic Play, PG Soft, Playtech Live, Spribe, BGAMING, Evoplay, and others. Some of these providers may process limited gameplay data as part of delivering their games. This processing is governed by their own data processing agreements with us.
Responsible Gambling Services
We share data with self-exclusion schemes, including GamStop, to ensure that players who have requested exclusion are not permitted to access our platform. We may also share information with BeGambleAware and Gambling Therapy where a player has sought their support or where we refer a player for assistance.
Regulatory and Law Enforcement Authorities
We disclose personal data to the UK Gambling Commission, HMRC, the National Crime Agency, the police, or other competent authorities where we are legally required to do so. This includes suspicious activity reporting obligations under anti-money laundering legislation.
Professional Advisers
We may share data with our legal advisers, auditors, and insurers where necessary for the conduct of our business, subject to confidentiality obligations.
Business Transfers
If Gala Spins Casino undergoes a merger, acquisition, or transfer of assets, your personal data may form part of the transferred assets. We will notify affected users in advance where this is legally required.
International Data Transfers
Some of our third-party providers, including certain game studios and technology partners, are based outside the United Kingdom. Where personal data is transferred to a country that the UK has not recognised as providing an adequate level of data protection, we put appropriate safeguards in place. These typically take the form of UK International Data Transfer Agreements or Standard Contractual Clauses approved for use under UK law, which impose binding data protection obligations on the receiving party.
You may request details of the safeguards we have in place for any specific transfer by contacting us at care@gala-spinscasino-uk.com.
How Long We Keep Your Data
We do not keep personal data for longer than is necessary for the purpose for which it was collected, subject to any legal obligations that require retention for a longer period.
Account and Transaction Records
Under UKGC Licence Conditions and the Money Laundering Regulations, we are required to retain player account data, identity verification records, and transaction history for a minimum of five years from the date your account is closed or from the date of the relevant transaction. In some circumstances, such as where an account is involved in an ongoing investigation, this period may be extended.
Responsible Gambling Records
Records of self-exclusion requests, deposit limits, session reminders, and any responsible gambling interactions are retained for a minimum of five years to allow us to honour historical exclusions and to satisfy regulatory audit requirements.
Customer Support Communications
Chat logs, emails, and call records related to customer support queries are retained for three years, unless a longer period is required by law or the records relate to an unresolved dispute.
Marketing Data
If you withdraw your consent to receive marketing, we remove you from our active mailing lists promptly. We retain a record of your opt-out to ensure we do not inadvertently contact you again.
Technical and Analytical Data
Log files and website analytics data are retained for up to thirteen months in aggregate form, after which they are deleted or anonymised.
Cookies and Tracking Technologies
Gala Spins Casino uses cookies and similar technologies on its website and mobile application. Cookies allow us to keep you logged in between sessions, remember your preferences, analyse how the site is used, and deliver relevant promotional content.
You can control which cookies are set through the cookie consent banner displayed when you first visit our site, and you can update your preferences at any time through the settings in your browser or device. Please note that refusing certain cookies may affect the functionality of the site, including your ability to stay logged in or access certain features.
For a full breakdown of the cookies we use, their purpose, and how to manage them, please read our Cookie Policy.
Your Rights Under UK Data Protection Law
As a UK resident, you have the following rights in relation to your personal data. These rights are not absolute and may be subject to exemptions in certain circumstances, particularly where we are processing data to comply with a legal obligation or to prevent and detect crime.
Right to Be Informed
You have the right to clear, transparent information about how your personal data is used. This Privacy Policy is our primary means of fulfilling that obligation.
Right of Access
You can request a copy of the personal data we hold about you. This is sometimes called a Subject Access Request (SAR). We will respond within one month of receiving your request.
Right to Rectification
If any of the personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it. You can update basic account information directly through your account settings, or contact us for assistance with records you cannot amend yourself.
Right to Erasure
Also known as the right to be forgotten, this allows you to request the deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn the consent on which processing was based. This right does not apply where we are required by law to retain the data, as is the case with account and transaction records under the Money Laundering Regulations.
Right to Restrict Processing
You can ask us to pause the processing of your personal data in certain situations, such as where you dispute the accuracy of data we hold, while we investigate the matter.
Right to Data Portability
Where we process your data by automated means on the basis of your consent or a contract, you can ask us to provide that data to you in a structured, commonly used, machine-readable format. You can also ask us to transfer it directly to another organisation where this is technically feasible.
Right to Object
You can object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. If you object to direct marketing, we will stop processing your data for that purpose immediately. For other legitimate interests purposes, we will consider your objection and cease processing unless we can demonstrate compelling grounds that override your interests.
Rights Related to Automated Decision-Making and Profiling
Where we make decisions about you using solely automated means that produce legal or similarly significant effects, you have the right to request human review of that decision, to express your point of view, and to contest the outcome. Our responsible gambling monitoring systems may involve automated flagging of accounts for review, but material decisions are subject to human oversight.
How to Exercise Your Rights
To exercise any of the rights above, contact us at:
- Email: care@gala-spinscasino-uk.com
- Phone: +44 151 747 2268
- Post: Level 2, Miles Street, Vauxhall, London, SW8 1RZ, United Kingdom
We will respond to verified requests within one calendar month. For complex or multiple requests, we may extend this by a further two months, in which case we will notify you of the extension and the reason for it within the first month.
We will not charge a fee for handling a rights request unless it is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to respond, explaining our reasons.
Complaints
If you are unhappy with how we have handled your personal data, we ask that you contact us in the first instance so we can investigate and attempt to resolve the matter. You can reach our team at care@gala-spinscasino-uk.com or by calling +44 151 747 2268.
If you remain dissatisfied after contacting us, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), which is the supervisory authority for data protection in the United Kingdom.
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Security of Your Personal Data
We take the security of your personal data seriously and have put in place technical and organisational measures designed to protect it against unauthorised access, loss, destruction, or alteration. These measures include:
- Encryption of data in transit using TLS (Transport Layer Security)
- Encryption of sensitive data at rest
- Access controls limiting staff access to personal data to those with a legitimate operational need
- Regular security testing and vulnerability assessments
- Staff training on data protection obligations and information security procedures
- Incident response procedures for identifying, reporting, and managing personal data breaches
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of it, as required under UK GDPR. Where the breach is likely to result in a high risk to you personally, we will also contact you directly without undue delay.
No method of electronic transmission or storage is completely secure. While we use commercially reasonable means to protect your data, we cannot guarantee absolute security. If you suspect your account has been compromised, contact us immediately at care@gala-spinscasino-uk.com or on +44 151 747 2268.
Children and Underage Players
Gala Spins Casino is an adults-only service. You must be aged 18 or over to register, deposit, and play. We do not knowingly collect or process personal data belonging to anyone under the age of 18.
We verify the age of every player before permitting access to real-money gambling, in compliance with UK Gambling Commission requirements. Where we discover that an account has been opened by a person under the age of 18, we will close the account immediately, return any deposits made, and delete any personal data collected, subject to any overriding legal obligation to retain it.
Parents and guardians who believe a child may have accessed our platform should contact us without delay at care@gala-spinscasino-uk.com. We also recommend the use of parental control tools such as those provided by GamCare to restrict children’s access to gambling websites.
Responsible Gambling and Your Data
The UK Gambling Commission’s Social Responsibility Code requires us to use player data actively in protecting individuals from gambling harm. This means we analyse your account activity to identify behavioural indicators associated with problem gambling, including but not limited to significant increases in bet size, extended uninterrupted sessions, frequent deposits following losses, and attempts to close a self-exclusion.
Where such indicators are present, we may:
- Display responsible gambling messaging within your account
- Contact you directly to discuss your gambling activity
- Apply temporary account restrictions pending further review
- Refer you to specialist support services including BeGambleAware (0808 8020 133) and Gambling Therapy
If you have self-excluded from gambling through GamStop, we are legally required to enforce that exclusion. Your exclusion data is shared between registered operators so that your request applies across multiple licensed platforms simultaneously. To register a self-exclusion, visit gamstop.co.uk.
The processing of your data for responsible gambling purposes is carried out under our legal obligation as a UKGC-licensed operator. You cannot opt out of this processing while your account is active, as doing so would prevent us from fulfilling our statutory duties.
Changes to This Privacy Policy
We review this Privacy Policy periodically and update it when our practices change, when we introduce new services, or when we are required to do so by law or regulation. When we make material changes, we will notify you by email or by displaying a prominent notice on gala-spinscasino-uk.com before the changes come into effect.
Continued use of our platform after notification of a material change constitutes your acknowledgement of the updated policy. If you do not agree with any changes, you should stop using our services and may request account closure by contacting us at care@gala-spinscasino-uk.com.
The version of this policy displayed on our website at any given time is the version currently in force.
Further Information and Related Policies
This Privacy Policy should be read alongside our other policies, which together form the full framework governing your use of Gala Spins Casino:
- Cookie Policy – how we use cookies and tracking technologies, and how to manage your preferences
- Terms and Conditions – the contractual terms governing your account and use of our services
- Responsible Gambling – the tools available to help you manage your gambling activity
If you have any questions not addressed in this policy, contact us at care@gala-spinscasino-uk.com or call us on +44 151 747 2268. Our support team is available 24 hours a day, seven days a week.