Privacy Policy — Gala Casino

Gala Casino collects identity data (name, date of birth, address), contact details (email, phone), payment information (card tokens, e-wallet IDs, bank references), KYC and source-of-funds documents, gameplay logs, session metadata, IP address, device fingerprint and marketing-consent records. This data is processed by LC International Limited as data controller under UK GDPR.

Identity verification (KYC) is a legal requirement under the UK Gambling Commission Licence Conditions & Codes of Practice (LCCP) and Anti-Money Laundering regulations. Gala Casino must confirm you are 18+, UK-resident, and not self-excluded before allowing play or processing withdrawals. Documents requested typically include a passport or driving licence plus a recent utility bill or bank statement.

KYC records, transaction histories and gameplay logs are kept for a minimum of five years after account closure, as required by the UKGC and HMRC anti-money-laundering rules. Marketing-consent records are retained only for as long as your consent is active. After the relevant retention period expires, data is securely deleted or anonymised.

Yes. Under UK GDPR you have the right of access and can submit a Data Subject Access Request (DSAR) at any time. Gala Casino must respond within one calendar month. Contact the Data Protection Officer via the support channels published on galacasino.com. Your DSAR will cover all personal data held, including KYC documents, transaction history, gameplay logs and marketing-consent records.

You can exercise your right to erasure, but it is subject to legal retention obligations. KYC documents, financial records and gameplay logs must be kept for at least five years under UKGC and AML law, even after account closure. Data that is not subject to a legal retention obligation — such as marketing-preference records or surplus analytics data — can be deleted on request.

Marketing is sent only with your explicit consent. You can withdraw consent at any time from the Communications Preferences area inside your account, by clicking the unsubscribe link in any marketing email, or by contacting customer support. Withdrawal of marketing consent does not affect your ability to continue playing. Strictly necessary service emails (e.g. transaction confirmations) are not affected.

Data is shared only with vetted processors needed to operate the service: payment providers, KYC and identity-verification specialists, fraud-detection suppliers, game studios, CRM/analytics platforms and, where legally required, the UKGC and other regulators. Some processors operate outside the UK; such transfers are protected by UK adequacy regulations or Standard Contractual Clauses. Your data is never sold to third parties.

Gala Casino uses three categories of cookies: strictly necessary (keep you logged in, protect against fraud — cannot be disabled); analytics (pseudonymised tracking via tools such as Google Analytics to improve the platform); and marketing (advertising cookies loaded only after you consent on the cookie banner). You can review or update your cookie preferences at any time via the consent banner or browser settings.

For DSARs, erasure requests or any privacy concern, contact the DPO via the support channels published on galacasino.com. If your complaint is not resolved satisfactorily, you can escalate to the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113. Gambling-licence concerns can be raised with the UK Gambling Commission at gamblingcommission.gov.uk (UKGC licence #39521).