Gambiva

Privacy Policy

At Gambiva, we take the protection of your personal data seriously. This policy explains how we collect, use, store and protect your information when you use our platform, in accordance with the General Data Protection Regulation (GDPR) and applicable United Kingdom data protection law.

1. Nature and scope of personal data collected

When you create an account with us, we ask for certain information to verify your identity and provide our services lawfully. This is a standard requirement across the gambling industry and forms the basis of a safe, compliant platform. We only collect what we genuinely need to operate your account and meet our regulatory obligations.

The categories of data we process include identity details, financial information and technical data generated as you interact with our platform. Some of this is provided directly by you, while other data is collected automatically through your device or browser. We do not collect more than is necessary for the purposes described in this policy.

  • Identity data: full name, date of birth, residential address
  • Contact data: phone number and postal address
  • Financial data: payment method details and transaction history
  • Verification data: identity documents submitted for KYC checks
  • Technical data: IP address, device type, browser information
  • Usage data: gameplay activity, deposit and withdrawal patterns

2. Purposes and objectives of data processing

To provide our casino services, we need to process your personal data for a defined set of purposes. Each purpose has a lawful basis under GDPR, whether that is contractual necessity, legal obligation or legitimate interest. We do not process data arbitrarily or beyond what each purpose requires.

Our obligations under GDPR mean we must be transparent about why we hold your information. This includes account management, fraud prevention, regulatory reporting and improving the services we offer. We also use data to personalise your experience where you have consented to this.

  • Account creation and identity verification
  • Processing deposits and withdrawals
  • Meeting anti-money laundering and KYC obligations
  • Fraud detection and risk management
  • Customer support and account communications
  • Marketing communications, where consent has been given

3. Security measures and technical integrity

Under GDPR and applicable UK data protection principles, we are required to implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration. We take this obligation seriously across every part of our platform, from account registration through to payment processing.

Our security framework includes encryption of sensitive data in transit and at rest, restricted internal access controls, and regular monitoring of our systems for unusual activity. Staff who handle personal data are trained on confidentiality requirements and bound by strict internal policies. Where third-party providers assist with payment processing or verification, we require them to maintain equivalent security standards.

4. Sharing information with third parties

We share limited personal data with select third parties where this is necessary to operate our platform and comply with regulatory requirements. We do not sell personal data, and any sharing that does occur is governed by contractual safeguards consistent with GDPR obligations.

Third parties we may share data with are carefully selected and subject to data processing agreements. This ensures that your information remains protected even when it leaves our direct control. We only disclose what is strictly necessary for the relevant purpose.

  • Payment service providers and banking partners
  • Identity verification and KYC service providers
  • Regulatory authorities and law enforcement, where legally required
  • IT infrastructure and hosting providers
  • Fraud prevention and risk management services

Your browsing experience on our platform relies on cookies and similar technologies to function correctly and to understand how our services are used. We use essential cookies to keep your session secure, alongside analytics and preference cookies that you can manage through your browser settings or our cookie consent tool. Where consent is required under UK and EU law, we obtain it before non-essential cookies are activated.

6. Data retention period

We want to be clear about how long we keep your information. Personal data is retained only for as long as necessary to fulfil the purposes outlined in this policy, including meeting legal and regulatory retention requirements specific to the gambling sector. Once data is no longer needed, it is securely deleted or anonymised in line with our internal retention schedules.

7. User rights over their data

You have the right to control how your personal data is used, and GDPR grants you a number of specific entitlements in this regard. These rights apply regardless of where your data is processed, and we are committed to responding to any request within the statutory timeframes.

Should you wish to exercise any of these rights, we will verify your identity before acting on the request to protect your account from unauthorised interference. We aim to handle all requests promptly and in accordance with our obligations under applicable data protection law.

  • Right of access to your personal data
  • Right to rectification of inaccurate information
  • Right to erasure, subject to legal retention obligations
  • Right to object to certain processing activities
  • Right to data portability

8. International data transfers

When data moves beyond the United Kingdom or the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent mechanisms recognised under GDPR. This applies where our service providers or infrastructure are located outside these regions, and we take steps to confirm that protections remain consistent with UK data protection standards.

9. Privacy policy updates

We review this policy regularly to ensure it reflects current legal requirements and the way our platform operates. Updates may be made to account for changes in regulation, technology or our internal processes, and we will always publish the revised version on our platform.

Where changes are significant, we will take reasonable steps to notify registered users directly. We encourage you to check this page periodically so you remain informed about how your data is handled.

10. Contact information

There's no ambiguity about how to reach us regarding this policy or any data protection query. Our support team can assist with questions about your rights, our processing practices, or any concerns you may have about how your personal data is handled. Contact details are available through our platform's official support channels.

Responsible Gambling

Gambling should always remain an enjoyable form of entertainment. If you feel your gambling habits are becoming difficult to manage, free and confidential support is available through GamCare on 0808 8020 133. Our platform is intended for use by individuals aged 18 and over only.