True Fortune Casino, operated by TrueBet Entertainment, is committed to protecting the privacy and security of your personal data. This Privacy Policy explains in detail what information we collect when you visit casinotruefortune.org.uk or use our services, how we use that information, the legal basis for processing it, who we may share it with, and the rights you have in relation to your personal data. We process personal data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By registering an account, making a deposit, or simply browsing our website, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your data as described herein. We encourage you to read this policy in full and to revisit it periodically, as we may update it from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. If you have any questions or concerns about how we handle your personal data, please contact our Data Protection Officer at [email protected].
1. Data We Collect
When you register an account at True Fortune Casino, we collect personal identification data including your full name, date of birth, residential address, email address, telephone number, and nationality. During financial transactions, we collect payment-related data such as credit or debit card numbers, e-wallet account details, bank account information, and transaction histories. As part of our KYC obligations, we may also collect copies of government-issued photo identification documents, utility bills or bank statements for proof of address, and photographs of payment methods used on our platform.
In addition to data you provide directly, we automatically collect technical and usage data when you access our website. This includes your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URLs, pages visited, time spent on each page, click patterns, and timestamps of all interactions. We use cookies and similar tracking technologies to gather this data, which helps us improve our platform performance, personalise your experience, detect fraud, and comply with our legal and regulatory obligations. Full details about our use of cookies can be found on our dedicated Cookies Policy page.
2. How We Use Your Data
We use your personal data for a range of purposes essential to providing and improving our services. These include creating and managing your player account, processing deposits and withdrawals, verifying your identity in accordance with anti-money laundering regulations, calculating and applying bonuses and promotional offers, communicating important account updates and transactional notifications, and personalising your gaming experience based on your preferences and activity. Your data also enables us to maintain accurate financial records and fulfil our reporting obligations to the Curaçao eGaming Authority.
Beyond core operational purposes, we use your data to enhance the security and integrity of our platform, including detecting and preventing fraud, money laundering, underage gambling, and other prohibited activities. We may analyse aggregated, anonymised usage data to identify trends, improve our game selection, and optimise website performance. If you have opted in to receive marketing communications, we will use your contact information to send you news about promotions, new game releases, and exclusive offers. You can withdraw your marketing consent at any time by clicking the unsubscribe link in our emails or by contacting [email protected].
3. Legal Basis for Processing
Under the UK GDPR, we must have a valid legal basis for processing your personal data. We rely on several legal bases depending on the specific processing activity. Contractual necessity applies when processing is required to fulfil our obligations under the terms and conditions you agreed to when creating your account, including account management, payment processing, and game provision. Legal obligation applies when we are required by law to process your data, such as KYC verification, anti-money laundering checks, and regulatory reporting to the Curaçao eGaming Authority.
Legitimate interest serves as our legal basis when processing is necessary for purposes that are beneficial to our business operations without unduly infringing on your rights, such as fraud prevention, platform security, service improvement, and internal analytics. Where we rely on legitimate interest, we conduct a balancing test to ensure your fundamental rights are not overridden. Consent is our legal basis for optional processing activities, most notably the sending of marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
4. Data Sharing and Third Parties
True Fortune Casino does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, we may share your data with carefully selected third parties where it is necessary to deliver our services and fulfil our legal obligations. These include payment processors and financial institutions that facilitate deposits and withdrawals, game software providers whose platforms host the games you play, identity verification and KYC service providers that help us confirm your identity and age, and cloud hosting providers that securely store our data infrastructure.
We may also disclose your personal data to regulatory authorities, law enforcement agencies, or other government bodies where we are legally obliged to do so or where disclosure is necessary to protect our legal rights, investigate fraud, or respond to a valid legal process. All third-party service providers with whom we share data are bound by strict contractual obligations regarding confidentiality and data security, and they are permitted to use your data only for the specific purposes for which it was shared. We conduct regular due diligence on our third-party partners to ensure they maintain appropriate data protection standards.
5. Data Security Measures
We take the protection of your personal data extremely seriously and have implemented a comprehensive suite of technical and organisational security measures designed to safeguard your information against unauthorised access, alteration, disclosure, or destruction. All data transmitted between your browser and our servers is encrypted using industry-standard SSL/TLS encryption technology with 256-bit encryption keys. Our payment processing systems comply with Payment Card Industry Data Security Standard (PCI-DSS) Level 1 requirements, the highest level of certification available, ensuring your financial data is handled with maximum security.
At an organisational level, access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff members who handle personal data undergo regular training on data protection principles and security protocols. We employ advanced firewall protection, intrusion detection systems, and continuous monitoring to detect and respond to potential security threats in real time. Regular security audits and penetration tests are conducted by independent third-party specialists to identify and address vulnerabilities. Despite these measures, no system can guarantee absolute security, and we encourage you to protect your own data by using strong, unique passwords and keeping your login credentials confidential.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Active account data is maintained for the duration of your account's existence and for a minimum period of five years following account closure, in accordance with anti-money laundering record-keeping requirements under our Curaçao licence. Transaction records are retained for a minimum of seven years to comply with financial reporting obligations. Marketing preferences and consent records are kept for as long as you remain a subscriber, plus two years following withdrawal of consent for audit purposes. After the applicable retention period expires, your data will be securely deleted or irreversibly anonymised.
7. Your Rights
Under the UK GDPR, you have a number of important rights in relation to your personal data. These include the right of access, allowing you to request a copy of all personal data we hold about you; the right to rectification, enabling you to correct any inaccurate or incomplete data; the right to erasure, also known as the right to be forgotten, permitting you to request the deletion of your data in certain circumstances; and the right to restriction of processing, allowing you to limit how we use your data while a dispute is being resolved.
You also have the right to data portability, which enables you to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller. Additionally, you have the right to object to processing based on legitimate interest or for direct marketing purposes. To exercise any of these rights, please submit a written request to [email protected], including sufficient information to verify your identity. We will respond to all valid requests within 30 days. If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.
8. Cookies
True Fortune Casino uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and support our marketing efforts. For comprehensive information about the types of cookies we use, their purposes, retention periods, and how to manage your cookie preferences, please refer to our dedicated Cookies Policy page at casinotruefortune.org.uk/cookies-policy/. You can also control cookie settings through your browser preferences at any time, although disabling certain cookies may affect the functionality and performance of our website.
