Privacy Policy

1. Introduction

1.1 Hotstreak Casino ("we", "us", "our") is the data controller responsible for your personal data collected through hotstreakcasinouk.com ("the Site").

1.2 This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Site and Services.

1.3 We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

2.1 Personal Information: Name, email address, date of birth, postal address, telephone number, and government-issued identification documents.

2.2 Financial Data: Payment card details, bank account information, e-wallet identifiers, and transaction history.

2.3 Usage Data: IP address, browser type, device information, pages visited, time spent on pages, referring URLs, and gameplay activity.

2.4 Cookie Data: Information collected through cookies and similar tracking technologies (see Section 9).

3. How We Collect Data

3.1 Directly from you: When you register an account, make deposits or withdrawals, contact customer support, or update your profile.

3.2 Automatically: Through cookies, server logs, and analytics tools when you browse or interact with the Site.

3.3 From third parties: Identity verification services, payment processors, fraud prevention agencies, and regulatory bodies.

4. Purpose of Processing

We process your personal data for the following purposes:

• Account Management: Creating and maintaining your account, verifying your identity, processing transactions.
• Legal Compliance: Meeting regulatory obligations including anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming requirements.
• Marketing: Sending promotional communications (with your consent), personalising offers, and improving our Services.
• Fraud Prevention: Detecting and preventing fraudulent activity, multi-accounting, and bonus abuse.
• Service Improvement: Analysing usage patterns, conducting research, and enhancing the user experience.

5. Legal Basis (UK GDPR)

5.1 Consent: For marketing communications and non-essential cookies. You may withdraw consent at any time.

5.2 Contract: Processing necessary to fulfil our contractual obligations to you (e.g., account management, transaction processing).

5.3 Legitimate Interest: Fraud prevention, security, service improvement, and business analytics, balanced against your rights and freedoms.

5.4 Legal Obligation: Processing required to comply with applicable laws and regulations, including AML, KYC, and gambling regulations.

6. Data Sharing

6.1 We may share your personal data with the following categories of recipients:

• Payment processors: To facilitate deposits and withdrawals.
• Identity verification providers: To meet KYC and AML obligations.
• Regulatory bodies: Including the UK Gambling Commission (UKGC) as required by law.
• Law enforcement: When required by court order or legal process.
• Service providers: Hosting, analytics, and customer support platforms operating under data processing agreements.

6.2 We do NOT sell, rent, or trade your personal data to third parties for marketing purposes.

7. Data Retention

7.1 We retain your personal data for as long as your account is active, plus a minimum of 5 years after account closure to comply with regulatory requirements.

7.2 Financial transaction records are retained for a minimum of 7 years in accordance with anti-money laundering regulations.

7.3 Upon expiry of the retention period, your data will be securely deleted or anonymised.

8. Your Rights (UK GDPR)

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data where no legitimate reason for continued processing exists.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Restriction: Request restriction of processing in certain circumstances.

8.2 To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Cookies

9.1 Essential Cookies: Required for the Site to function properly. These cannot be disabled. They include session management, security tokens, and load balancing.

9.2 Analytics Cookies: Help us understand how visitors interact with the Site. We use these to improve functionality and user experience. You may opt out via your browser settings.

9.3 Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness. These require your explicit consent.

9.4 You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Site functionality.

10. Security Measures

10.1 We implement industry-standard security measures to protect your data, including 256-bit SSL/TLS encryption for all data transmissions.

10.2 Access to personal data is restricted to authorised personnel on a need-to-know basis, with multi-factor authentication required for administrative access.

10.3 We conduct regular security audits and penetration testing to identify and address vulnerabilities.

11. International Data Transfers

11.1 Your personal data is primarily stored and processed within the United Kingdom and European Economic Area (EEA).

11.2 Where data is transferred outside the UK/EEA, we ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office (ICO), or other appropriate safeguards.

11.3 We will not transfer your data to any country that does not provide an adequate level of data protection without implementing appropriate safeguards.

12. Contact & Complaints

12.1 For any questions about this Privacy Policy or to exercise your data rights, contact our Data Protection Officer:

• Email: [email protected]
• General Support: [email protected]

12.2 If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

13. Affiliate Links and Operator Handoffs

13.1 Hotstreakcasinouk.com may contain clearly labelled links that take an adult visitor to an external casino or service. When a visitor follows such a link, the destination can process account, identity, payment and gambling information under its own privacy notice. This Site does not ask visitors to place passwords, one-time security codes, identity files or complete payment details into an editorial page. Before registration, check the destination address and read the operator's current privacy information, cookie controls and account terms. Closing the external page does not automatically erase information already supplied to that operator.

13.2 An affiliate handoff may use a referral identifier so the destination can recognise the source of the visit. That identifier should not be treated as a casino account number or proof that a promotion is available. Visitors can decline to continue, clear non-essential browser storage where their settings permit it, or open the destination's privacy controls. Questions about data entered after the handoff should be directed to the destination operator using the contact route shown in its verified account area.

14. Search, Device and Security Data

14.1 Normal web requests can include an IP address, browser type, device category, language, approximate region, requested URL, referral page and technical timestamps. These details can help deliver the correct page, protect the Site from automated abuse, investigate errors and understand whether mobile or desktop visitors can use the navigation. They do not by themselves confirm the identity, financial position or gambling activity of a named player. Where analytics or marketing storage requires consent, the relevant choice should be offered before that non-essential storage is used.

14.2 Security logs are kept only for a proportionate period connected to their purpose, then deleted, aggregated or anonymised where appropriate. A visitor should still protect the local device with updates, screen lock and a private connection. If a link, form or message appears to request casino credentials on this Site, do not submit them. Return to the verified destination independently and report the suspicious route with the page address and time, while removing passwords, document numbers and full payment details from screenshots.

15. Children and Age-Restricted Content

15.1 This Site is intended for adults aged 18 or over and does not knowingly seek personal data from children. Casino information, promotions and external account links are not directed at anyone under the legal gambling age. A minor should not attempt registration, use another person's identity or payment method, or ask an adult to open an account on their behalf. If we learn that information belonging to a child was submitted directly to the Site, we will assess the record and take appropriate deletion or restriction steps consistent with legal obligations.

15.2 Parents and guardians can use device-level content restrictions, browser controls and network filters to reduce access to gambling material. A request concerning a child's information should identify the relevant page, approximate submission time and a safe contact method without attaching unnecessary identity documents to an ordinary message. We may need proportionate evidence before acting on a request, but that evidence should be shared only through the secure route provided for the specific case.

16. Data Accuracy, Minimisation and Updates

16.1 We aim to collect only information needed for a stated Site purpose and to keep it accurate for as long as that purpose continues. Visitors should not include casino passwords, authentication codes, full card numbers, complete bank credentials or unrequested identity images in a general contact message. When a correction request concerns the Site, describe the inaccurate record and the change required. When it concerns a casino account created after an external handoff, use that operator's authenticated profile or privacy contact because this Site cannot alter an external account.

16.2 Privacy wording can change when Site features, vendors or legal requirements change. The updated date at the beginning of this policy helps visitors identify the current version. Material changes should be explained in clear language, and consent should be requested again where a new non-essential purpose requires it. Continuing to browse does not turn optional consent into mandatory acceptance. Visitors can revisit cookie settings, unsubscribe from permitted communications and exercise applicable data rights using the routes described in this policy.

17. Practical Privacy Checklist

17.1 Before following a casino link, confirm the domain, open the destination privacy notice and decide which optional cookies or communications are acceptable. Use a private device, unique account password and protected email address. Upload identity material only after reaching a secure request inside the verified operator account. Save transaction or support references without copying complete financial details. Sign out fully on shared hardware and remove saved credentials when the device is no longer controlled by the account holder.

17.2 If something looks wrong, pause before sending more information. Record the relevant URL, time, device and visible error, then contact the responsible Site or operator through its verified channel. A privacy question about editorial browsing is different from a casino account, payment or verification issue, so identify where the information was entered. This separation helps the correct controller find the record and respond without collecting another unnecessary copy of the same personal data.