Privacy Policy

1. Introduction to Data Protection at Rabbit Road

At Rabbit Road Casino, we recognize that your privacy is not merely a legal requirement; it is a fundamental pillar of the trust you place in us. As a premier provider of online gaming services in the United Kingdom, we are committed to being transparent about how we collect, use, and protect your personal information. This Privacy Policy is designed to provide you with a comprehensive understanding of our data processing practices, your rights as a “Data Subject,” and the rigorous security measures we employ to keep your information safe from unauthorized access or disclosure.

Rabbit Road Gaming Limited (referred to in this policy as “we,” “us,” “our,” or “the Company”) acts as the “Data Controller” for your personal information. This means we are responsible for deciding how and why your data is used. Our operations are governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We ensure that every piece of data processed on our platform is handled with integrity, confidentiality, and accountability.

By registering an account and using our services, you acknowledge that your personal data will be handled as described in this policy. We encourage you to read this document in full to ensure you are comfortable with our practices. If you have any questions, our dedicated Data Protection Officer (DPO) is available to assist you at privacy@rabbitroad.co.uk.

2. The Categories of Data We Collect

To provide a regulated and secure gambling environment, Rabbit Road Casino must collect various types of personal data. The scope of data collection is determined by our legal obligations to the UK Gambling Commission (UKGC) and our commitment to preventing financial crime. We categorize the data we collect into several key segments.

2.1 Identity and Contact Data

During the registration process, we collect information that identifies who you are. This includes your full name (including any middle names), date of birth, gender, and your current UK residential address. We also collect contact details such as your verified email address and mobile phone number. This information is critical for establishing your account and ensuring that we can communicate with you regarding service updates or security alerts.

2.2 Financial and Transactional Data

Because we facilitate real-money gambling, we must process financial information. This includes details about the payment methods you use (such as debit card numbers, bank account details, and e-wallet identifiers) and a complete history of your transactions on our platform, including deposits, withdrawals, and wagers. In accordance with Anti-Money Laundering (AML) laws, we may also collect “Source of Wealth” documentation, such as pay slips or dividend statements, to verify the legitimacy of your funds.

2.3 Technical and Usage Data

When you access our website or mobile application, our systems automatically collect technical information. This includes your IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform. We also track how you use our site—such as which games you play, the duration of your sessions, and your betting patterns. This data helps us optimize the user experience and detect potential fraudulent activity or markers of gambling harm.

3. How and Why We Use Your Information

We do not collect data arbitrarily. Every piece of information we process is tied to a specific purpose and a legal basis under the UK GDPR. The primary reason we process your data is to fulfill our contract with you and to comply with our statutory licensing conditions.

3.1 Identity Verification and KYC

Under the Social Responsibility Code of the UKGC, we have a “Know Your Customer” (KYC) obligation. We use your Identity and Contact data to verify that you are at least 18 years old and that you reside in the United Kingdom. This involves cross-referencing your details with national databases and electronic verification services. This is a mandatory step that must be completed before you are permitted to gamble or deposit funds.

3.2 Prevention of Financial Crime

The gambling industry is a high-risk sector for money laundering and terrorist financing. Therefore, we use your Financial and Transactional data to monitor for suspicious activity. If our heuristic systems detect patterns that suggest money laundering, we are legally required to report this to the National Crime Agency (NCA). We also share data with credit reference agencies like Experian or Equifax to perform “soft” identity checks that do not affect your credit score.

3.3 Marketing and Personalization

If you have provided your explicit “opt-in” consent, we may use your data to send you promotional offers, bonuses, and updates about the Rabbit Road brand. We use your Usage data to ensure that these offers are relevant to your playstyle. You have the right to withdraw this consent at any time through your account settings or by clicking the “unsubscribe” link in any marketing email.

4. Sharing Your Data with Third Parties

Rabbit Road Casino does not sell your personal data to marketing companies. However, we do share your information with specific, trusted third parties to facilitate our operations and meet our legal requirements.

4.1 Regulatory and Law Enforcement Agencies

We are legally obligated to share data with the UK Gambling Commission and the Information Commissioner’s Office (ICO) upon request. In cases of suspected criminal activity, we share information with the National Crime Agency (NCA) and other law enforcement bodies. Under the Proceeds of Crime Act 2002, these disclosures are mandatory and do not require player consent.

4.2 Service Providers and Financial Institutions

We utilize third-party vendors to provide technical infrastructure, payment processing, and customer support. These companies are “Data Processors” and are contractually bound to process your data only according to our strict instructions. We also share data with banks and e-wallet providers to process your withdrawals and verify that the payment methods you use are in your own name.

4.3 Interactive Transparency Meter

We believe in total transparency. Use the tool below to visualize the balance between user privacy and regulatory transparency as mandated by British law. Moving the slider simulates how increasing regulatory requirements affects the amount of data we are required to share with authorities.

5. Data Retention and Deletion

We do not keep your information indefinitely. We only retain your personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

5.1 Statutory Retention Periods

Even if you close your account, we are required by UK Anti-Money Laundering (AML) regulations to keep your identification and financial records for a minimum of five years. This is to ensure that investigations can be conducted into past transactions if required by the authorities. Once this legal period has expired, your data is either permanently deleted from our secure servers or irreversibly anonymized.

6. Your Rights Under the UK GDPR

As a resident of the United Kingdom, you possess powerful rights regarding your personal information. Rabbit Road Casino is committed to helping you exercise these rights easily.

6.1 Right of Access (Subject Access Request)

You have the right to request a copy of all the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within one month of receiving your request. We do not charge a fee for this service unless the request is clearly unfounded or excessive.

6.2 Right to Erasure (“Right to be Forgotten”)

You can ask us to delete your data in certain circumstances—for example, if the data is no longer necessary for the purposes for which it was collected. However, as mentioned previously, this right is not absolute and is often overridden by our legal obligations to retain records for the UKGC and AML purposes.

7. Data Security and International Transfers

Security is the bedrock of the Rabbit Road platform. We employ Tier-IV data centers and biometric access controls to protect our physical servers. All digital data is encrypted using 256-bit SSL technology. We also perform regular “Penetration Testing” to identify and patch vulnerabilities before they can be exploited by malicious actors.

7.1 International Data Transfers

While we primarily store data within the UK and the European Economic Area (EEA), some of our technical partners may operate in countries outside these regions. Whenever we transfer your data outside the UK, we ensure a similar degree of protection by implementing specific safeguards, such as the UK Government’s “Standard Contractual Clauses” (SCCs) or by ensuring the country has been granted an “Adequacy Decision.”

8. Cookies and Tracking

Rabbit Road Casino uses cookies to distinguish you from other users and to provide a personalized experience. We use “Strictly Necessary” cookies for site functionality and security, and “Analytical” cookies to help us improve our service. You can manage your cookie preferences through the banner that appears when you first visit our site.

9. Contacting Our Data Protection Team

If you have any concerns about how your data is being handled, or if you wish to exercise any of your rights, please contact us. We would appreciate the opportunity to resolve any issues directly with you before you approach the Information Commissioner’s Office.

10. Detailed Cookie Policy and Tracking Technologies

In accordance with the Privacy and Electronic Communications Regulations (PECR), Rabbit Road Casino provides a detailed breakdown of how we use cookies and similar technologies. Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit our platform. They serve various functions, such as remembering your preferences, enabling secure login, and helping us understand how you interact with our gaming library. We utilize both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your device for a set period or until you delete them).

10.1 Strictly Necessary Cookies

These cookies are essential for the operation of Rabbit Road Casino. They enable core functionality such as security, network management, and accessibility. Without these cookies, you would not be able to log in to your account, make deposits, or play games. These are activated by default under the legal basis of “Contractual Necessity” and do not require your prior consent, although you can disable them via your browser settings (which may result in the site failing to function correctly).

10.2 Analytical and Performance Cookies

We strive to provide the most fluid gaming journey on the Rabbit Road. To achieve this, we use analytical cookies to collect information on how visitors use our site. For instance, we track which pages are visited most frequently and if users receive error messages. All information collected by these cookies is aggregated and, therefore, anonymous. We use this data strictly to improve how our website works. These are only deployed if you grant us explicit consent via our cookie banner.

11. Data Processing for Responsible Gambling: Markers of Harm

As a holder of a UKGC operating license, Rabbit Road Casino has a legal and moral obligation to monitor player behavior for “Markers of Harm” (MoH). This involves the sophisticated processing of your usage and transactional data to identify potential signs of gambling addiction or financial distress. This processing is conducted under the legal basis of “Public Interest” and “Compliance with a Legal Obligation.”

11.1 Behavioral Analysis Algorithms

Our systems analyze your betting patterns in real-time. We look for specific triggers, such as a sudden increase in stake sizes, chasing losses, gambling late at night for extended periods, or multiple failed deposit attempts. When our system identifies these markers, it may automatically trigger a “Responsible Gambling Interaction.” This could range from a simple on-screen notification to a temporary suspension of your account until a member of our safety team can conduct a manual review of your activity.

11.2 Financial Vulnerability Checks

Recent updates to the UKGC Social Responsibility Code require us to perform “frictionless” financial vulnerability checks. This involves sharing your basic identity data with credit reference agencies to confirm that your level of gambling spend is proportionate to your estimated discretionary income. These checks are “soft” and do not impact your credit rating, but they are essential for ensuring that the Rabbit Road remains a safe path for all our players.

12. Interactive Data Life Cycle Visualizer

Understanding the journey of your data—from the moment you register until the moment we are legally permitted to delete it—is key to transparency. Use the tool below to see how our retention policies change based on the type of data processed. Move the slider to see how long we keep different records after an account is closed.

13. Automated Decision Making and Profiling

Under the UK GDPR, you have rights regarding automated decision-making and profiling. At Rabbit Road Casino, we use automated systems for two main purposes: Fraud Prevention and Responsible Gambling. Our fraud detection algorithms compare your transaction data against known “Blacklists” and “Mule Account” patterns to protect our community from financial crime.

You have the right to request a manual review of any automated decision that has a significant legal effect on you. For instance, if our system automatically closes your account due to a failed AML check, you may contact our compliance department to provide further context and request that a human operator reconsider the decision. We are committed to ensuring that our AI and algorithmic tools are fair, unbiased, and subject to regular independent audits.

14. Deep Dive into Your Data Rights (DSAR)

While the first part of this policy outlined your basic rights, this section provides a “Deep Dive” into how you can exercise them. The most common request we receive is a Data Subject Access Request (DSAR). When you submit a DSAR, we are required to provide you with all the personal data we hold about you within 30 days.

14.1 What is Included in a DSAR?

A comprehensive DSAR from Rabbit Road Casino will include your registration details, a full log of every bet placed, every win and loss, a history of all chat interactions with our support team, and records of any responsible gambling interactions. We provide this data in a secure, encrypted PDF or CSV format. To submit a request, please visit the “Privacy Center” in your account dashboard or email our DPO directly.

15. Interaction with Marketing and Social Media

Rabbit Road Casino utilizes social media platforms to engage with our community and provide the latest news on game releases. When you interact with our pages on platforms like X (Twitter), Facebook, or Instagram, these platforms also act as data controllers. We recommend reviewing their privacy policies to understand how they use your data for “Lookalike Audience” targeting.

We may use “Custom Audiences” to show you relevant advertisements on social media based on your email address. This is done by uploading a “Hashed” (encrypted) version of your email to the social media platform. If you do not wish to be included in these targeted campaigns, you can opt-out by adjusting your marketing preferences in your Rabbit Road profile or by contacting our support team.

16. Children’s Privacy and Parental Control Tools

The Rabbit Road platform is strictly for adults aged 18 and over. We do not knowingly collect data from children. If we discover that a minor has attempted to register an account, we will immediately purge all related data and report the incident to the relevant child protection authorities if necessary.

We strongly advise parents and guardians to install filtering software on their home networks to prevent minors from accessing gambling content. We recommend using tools like Net Nanny or GamBlock to provide an extra layer of security for your household. You can find more information on protecting children online via the official UKGC guidance.

17. Business Transfers and Corporate Changes

In the event that Rabbit Road Gaming Limited undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the new owner. This is done to ensure the continuity of service and to protect your account balance. However, the new owner will be legally bound by the terms of this Privacy Policy and must continue to treat your data with the same level of protection. We will notify you of any such change via email and provide you with the opportunity to close your account before the transfer occurs.

18. Glossary of Legal and Technical Terms

To help you navigate this policy, we have included a glossary of terms as defined by the UK Information Commissioner’s Office (ICO):

• Data Subject: An identified or identifiable living individual to whom personal data relates. (That’s you).
• Data Controller: The organization that determines the purposes and means of the processing of personal data. (That’s us).
• Data Processor: A third party that processes personal data on behalf of a controller. (e.g., our cloud hosting provider).
• Personal Data: Any information relating to an identified or identifiable living individual.
• Profiling: Any form of automated processing of personal data to evaluate certain personal aspects relating to a natural person.

Last Updated: April 2026
Rabbit Road Compliance & Safety Team