Privacy Policy

This policy applies when you create or use a Cherry Casino account, contact us, use our website or take part in our services. It describes how we handle information that identifies you or could reasonably be linked to you. We use your personal data to provide and protect your account, meet our legal responsibilities and operate our services responsibly.

We aim to collect only the information we need for a clear purpose. We may update this policy when our services, legal duties or data handling practices change. The current version will apply when you use your account. If you have questions about this policy, you can contact us using support@cherry-casino.co.uk or the live chat on the site.

Account and identity information

When you open or use an account, we may collect your name, date of birth, address and nationality. We may also collect your email address, account login details and other contact information. Details about your preferences, account settings and communications with our support team may be recorded too.

To confirm that you are old enough to use our services and that your account belongs to you, we may ask for identity documents and information taken from those documents. This can include information used to confirm your age, identity and address. We verify your identity before any withdrawal and wherever our legal and operational duties require it.

Transactions and account activity

We collect information about deposits, withdrawals, payments, wagers, winnings, bonuses and other account transactions. We may record the payment method used, transaction status, relevant account balances and information needed to investigate a payment or protect your account. We do not need the same information for every payment method, and some payment details may be handled directly by the payment provider.

Device and usage data

When you access our website or services, we may collect your IP address, device type, operating system, browser type and language settings. We may also record login times, pages viewed, account activity and information about how you use the site. Technical information about errors, security events and the performance of our systems may be collected as well.

We may combine these categories of information where necessary. This helps us provide your account, confirm that activity is genuine, maintain security or meet our legal responsibilities. You should keep the information in your account accurate and tell us if important details change.

We use personal data for specific purposes. Under the UK GDPR, we must have a lawful reason, known as a legal basis, for each use. The reasons we rely on depend on what we are doing and the type of information involved.

• We use data to open, maintain and operate your account, process transactions, provide support and deliver the services you request. This is usually necessary to perform our contract with you.
• We use data to verify your age and identity, monitor account activity and meet duties relating to fraud, money laundering and responsible gambling. These uses may be required by law or necessary to protect our services and customers.
• We use data to prevent fraud, account misuse, payment abuse and other unlawful activity. This is necessary for our legal duties and our legitimate interest in keeping the site and its users safe.
• We use data to keep records, respond to lawful requests, handle disputes and meet other legal or regulatory requirements. These uses are based on our legal obligations.
• We use technical and usage data to maintain security, identify faults, improve how our website works and manage our systems. These uses are generally based on our legitimate interests, balanced against your privacy rights.
• We send marketing offers only where you have opted in or where another lawful permission applies. You can withdraw your consent or change your marketing choices at any time.

What the legal bases mean

• Contract means we need to use the information to provide the account or service you have requested.
• Legal obligation means a law or binding requirement tells us to collect, keep or disclose the information.
• Legitimate interests means we have a proper business or security reason to use the data, and that reason does not unfairly override your rights.
• Consent means you have given permission for a stated use, such as receiving certain marketing messages. You can withdraw consent, although this does not affect use that has another lawful basis.

We may also use account information to support safer gambling controls. These include deposit limits, session-time reminders, time-outs and self-exclusion. If you are concerned about your gambling, support is available from GambleAware, GamCare, GamStop and the National Gambling Helpline.

We share personal data only when there is a proper reason to do so. Examples include providing your account, completing a transaction, protecting the service or meeting a legal duty. We expect organisations that handle data for us to use it only for agreed purposes and to apply appropriate security measures.

• Payment providers, so deposits, withdrawals and other transactions can be processed, supported and protected against payment fraud.
• Identity-verification partners, so we can confirm your age, identity and account information where checks are required.
• Fraud-prevention and risk-management partners, so we can identify suspicious activity, account misuse, payment abuse and other threats.
• Regulators, public bodies, law enforcement agencies or other authorities where disclosure is required by law, a lawful request or a formal legal process.
• Professional or technical service providers that help us maintain secure systems, respond to customers or meet our legal and operational responsibilities, where access is necessary.

We do not share more information than is reasonably needed for the relevant purpose. We do not sell your personal data. If a service provider processes information on our behalf, we remain responsible for setting the purpose and conditions of that processing.

We keep personal data for as long as your account is open and for the period the law requires after the account is closed. The exact period depends on the type of information and why it was collected. It also depends on whether we have an ongoing legal, security or dispute-related reason to keep it.

• Account and contact information may be kept while we provide your account and for the required period afterwards.
• Transaction, identity and account activity records may be retained after closure to meet legal duties, support financial controls and prevent fraud or money laundering.
• Records of support requests, complaints or disputes may be kept for as long as needed to manage the matter and protect our legal position.
• Marketing information is kept in line with your choices and is removed or suppressed when it is no longer needed for the relevant communication.

When personal data is no longer needed, we will securely delete it or make it anonymous so it can no longer be linked to you. Some information may remain in secure backups for a limited period. Those backups are replaced in the normal course of our systems.

How we protect it

We use measures intended to protect personal data from unauthorised access, loss, misuse, alteration or disclosure. These measures include SSL encryption across the site, access controls, account security processes, staff guidance and technical safeguards. No online service can be guaranteed completely secure, so you should keep your login information private and tell us promptly if you suspect unauthorised account activity.

Your rights under UK GDPR

Subject to certain legal limits, you have rights over the personal data we hold about you. These rights help you understand how your information is used. They also let you ask us to correct or change it where appropriate.

• Access: ask for a copy of the personal data we hold about you and information about how we use it.
• Correction: ask us to correct information that is inaccurate or complete information that is incomplete.
• Erasure: ask us to delete personal data where there is no good legal reason for us to keep using it.
• Objection: object to processing based on our legitimate interests, including certain uses of your information for security or administration.
• Restriction: ask us to limit how we use your data in certain circumstances, such as while an accuracy question is being resolved.
• Data portability: ask for certain information supplied by you in a usable electronic format, where this right applies.
• Withdraw consent: change your mind about a use based on consent, including opted-in marketing.

These rights are not absolute. For example, we may need to keep some information to meet legal duties, prevent fraud, maintain transaction records or establish, exercise or defend legal claims. We will explain the reason if we cannot fully comply with a request.

How to use your rights

To make a data protection request, write to support@cherry-casino.co.uk. Please describe the right you want to use and provide enough information for us to identify your account. We may ask for additional information to protect your data from being disclosed to the wrong person. You can also use the live chat on the site for general questions, but formal rights requests should be sent by email.

If you are unhappy with how we use your personal data, please contact us first. This gives us the chance to look into your concern. You also have the right to complain to the Information Commissioner's Office, the UK's data protection authority.

Cookies

We use cookies and similar technologies to keep the site working, remember certain settings, understand usage and support security. The Cookie Policy explains how these technologies work and the choices available to you. It also explains how changing those choices may affect the site.