Privacy Policy

We collect information that you provide to us and information created when you use your account. We also collect information needed to keep our services secure and compliant. We only ask for data that is relevant to the purpose for which we collect it.

Information you provide

• Account details, including your name, date of birth, email address, username and other details used to create and manage your account.
• Contact and preference information, including your communication choices and any information you give our support team.
• Identity documents and information from those documents when we need to verify your identity, age or address.
• Payment and transaction information, including deposits, withdrawals, account balances, payment method details and records of activity.
• Information about safer gambling settings, such as deposit limits, time-outs, self-exclusion requests and other account controls.

Information collected when you use our services

• Device and technical information, such as your IP address, device type, operating system, browser settings, language and time zone.
• Usage information, including pages visited, actions taken, login details, session information and interactions with our website.
• Communications and records of support conversations, including messages sent through live chat or by email.

Some information is required to open or maintain an account. This includes the details needed for identity, age and payment checks. If you do not provide them, we may be unable to provide some or all account services.

We use personal data for clear and lawful purposes connected with providing our services. We hold a gaming licence and must verify accounts and keep appropriate records. Our main purposes include:

• To create, operate and administer your account, process transactions, provide customer support and keep our records accurate.
• To verify your age and identity, confirm account information and carry out checks before or after certain account activity.
• To detect and prevent fraud, money laundering, account misuse, payment abuse and other unlawful or harmful activity.
• To meet our legal and regulatory duties, respond to lawful requests, enforce our terms and protect our rights, services and players.
• To understand how our website is used, maintain its security, fix faults and improve its performance and accessibility.
• To send offers, service messages or other marketing where you have opted into receiving them, subject to your communication choices.

Legal bases under UK GDPR

UK GDPR requires us to have a lawful basis for using personal data. The basis depends on the purpose. In plain words, we may use your data because it is needed to provide the service you have asked for, because the law requires us to do so, because we have a legitimate business or security interest that is not overridden by your rights, or because you have given consent.

• Contract: we use information needed to open and run your account, provide account services and process your instructions.
• Legal obligation: we use information where gambling, financial crime, tax, accounting, data protection or other legal duties require us to do so.
• Legitimate interests: we may use data to secure our services, prevent fraud, support players, manage our business and improve systems, while considering your rights.
• Consent: where we ask for consent, you can withdraw it at any time. Withdrawal does not affect processing that took place before you withdrew consent.

We do not sell your personal data. We share it only where there is a lawful reason or where it is necessary to provide our services. We also share it where this is needed to protect players and meet our obligations.

• Payment providers, so deposits, withdrawals, refunds and other transactions can be authorised and processed.
• Identity-verification partners, so we can confirm your age, identity and account information.
• Fraud-prevention and financial crime partners, so we can identify unusual activity and reduce the risk of fraud, money laundering and account abuse.
• Regulators, law enforcement bodies or other public authorities where the law requires or permits us to provide information.

We may also share information with service providers that help us operate our website, systems, customer support and security. These providers must handle information according to our instructions and appropriate confidentiality and security requirements. We limit access to people and organisations that need the information for a defined purpose.

We keep personal data only for as long as it is needed for the purposes described in this policy. When deciding how long, we consider the nature and sensitivity of the information and why we collected it. We also consider whether there is an ongoing account or dispute, and whether legal or regulatory duties require continued storage.

• We generally keep account information while your account is open and for the period the law requires afterwards.
• Transaction, identity and security records may need to be kept after account closure to meet legal duties, prevent fraud and deal with disputes or investigations.
• When information is no longer needed, we delete it, anonymise it or securely dispose of it in line with our procedures.

We use reasonable technical and organisational safeguards to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These safeguards include access controls, security monitoring and processes for handling incidents. No online service can be guaranteed completely secure, so you should keep your login details confidential and tell us promptly if you suspect unauthorised access to your account.

Depending on the circumstances, UK GDPR gives you rights over your personal data. These rights are subject to legal conditions and exceptions. For example, we may need to keep certain information to meet a legal duty.

• Access: ask for a copy of personal data we hold about you and information about how we use it.
• Correction: ask us to correct information that is inaccurate or incomplete.
• Erasure: ask us to delete your personal data where there is no lawful reason for us to keep or use it.
• Objection: object to processing based on our legitimate interests, or object to direct marketing at any time.
• Restriction and portability: in some circumstances, ask us to limit how we use your data or provide certain information in a usable format.

To use a right, write to support@ojo-casino.org.uk and tell us what you are asking for, with enough information for us to understand your request and locate your account. We may need to confirm your identity before responding, so that we do not disclose personal data to the wrong person. We will handle your request within the period required by applicable law. You can also contact privacy@ojo-casino.org.uk about privacy questions, and our live chat is available on the site for general support.

If you are unhappy with how we use your personal data, please contact us first. We will do our best to resolve your concern. You also have the right to complain to the Information Commissioner’s Office, which is the UK supervisory authority for data protection matters.

We use cookies and similar technologies to operate our website, remember settings, support security, understand usage and improve how our services work. Some cookies may be necessary, while others depend on your choices. Our Cookie Policy explains the cookies we use, their purposes and how you can manage your preferences.