Privacy Policy
Boomerang casino is committed to protecting the privacy and security of personal information provided by our users. This privacy policy outlines how we collect, use, store, and protect your data when you access our online gaming platform. We adhere to all applicable data protection regulations in United Kingdom, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood the terms set out in this Boomerang casino privacy policy.
Information We Collect
When you register and use our platform, we collect various types of personal information necessary to provide our gaming services and comply with legal obligations. We gather identification details including your full name, date of birth, residential address, email address, and telephone number during the account creation process. Financial information such as payment card details, bank account information, and transaction history is collected to process deposits and withdrawals. We also collect technical data automatically through cookies and similar technologies, including your IP address, browser type, device information, operating system, and gameplay patterns. Communication records with our customer support team are retained for quality assurance and dispute resolution purposes. Additionally, we may request documentation for identity verification purposes, such as copies of passports, driving licences, utility bills, and payment method verification documents to comply with anti-money laundering regulations and safe gaming requirements.
How We Use Your Information
Your personal data is processed for specific legitimate purposes related to operating our online gaming platform. We use your information primarily to create and manage your gaming account, process financial transactions including deposits and withdrawals, and verify your identity and age to ensure compliance with gambling regulations. The data enables us to provide customer support services, respond to enquiries, and resolve any technical issues or disputes that may arise. We analyse gameplay patterns and account activity to promote safe gaming practices and identify potential problem gambling behaviours. Your information helps us comply with legal and regulatory obligations, including anti-money laundering checks, fraud prevention, and reporting requirements to relevant authorities. We may use your contact details to send important account notifications, security alerts, and updates about our services. Marketing communications are only sent with your explicit consent, and you retain the right to opt out at any time through your account settings or by contacting our support team.
Data Sharing and Third Parties
We implement strict controls regarding the sharing of your personal information with external parties. Your data may be shared with carefully selected service providers who assist in operating our platform, including payment processors, identity verification services, and technical infrastructure providers. These third parties are contractually bound to process your information only as instructed and maintain appropriate security measures. We share information with regulatory bodies and licensing authorities as required by law, including the UK Gambling Commission and relevant financial crime prevention agencies. In cases where legal obligations require disclosure, we may provide information to law enforcement agencies, courts, or other governmental authorities. We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Any data transfers outside the United Kingdom are conducted in accordance with UK GDPR requirements, ensuring adequate protection through approved mechanisms such as Standard Contractual Clauses or adequacy decisions.
Data Security and Retention
We employ robust technical and organisational measures to safeguard your personal information against unauthorised access, loss, or misuse. Our security infrastructure includes industry-standard SSL encryption for data transmission, secure server environments with firewall protection, and regular security audits conducted by independent specialists. Access to personal data is restricted to authorised personnel only, who are bound by confidentiality obligations and receive regular training on data protection practices. We maintain detailed audit logs of system access and data processing activities to detect and respond to potential security incidents. Your financial information is processed through PCI DSS compliant payment systems that meet stringent security standards. We retain your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy and comply with legal requirements. The specific retention periods vary depending on data type and regulatory obligations.
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Account information | Duration of account plus 7 years | Regulatory compliance |
| Transaction records | 7 years from transaction date | Anti-money laundering regulations |
| Identity verification documents | 7 years from account closure | UK Gambling Commission requirements |
| Marketing consent records | Until consent withdrawn plus 3 years | GDPR compliance |
| Customer support communications | 6 years from last contact | Contract and legal claims |
Your Rights and Choices
Under UK data protection legislation, you possess several rights regarding your personal information held by Boomerang casino. You have the right to access the personal data we hold about you by submitting a subject access request, which we will respond to within one month. You may request correction of inaccurate or incomplete information, and we will update our records accordingly following appropriate verification. In certain circumstances, you have the right to request deletion of your personal data, though this may be limited by our legal obligations to retain information for regulatory compliance purposes. You can object to processing of your data for direct marketing purposes at any time, and we will cease such processing immediately. The right to data portability allows you to receive your personal information in a structured, commonly used format for transmission to another service provider where technically feasible. You may restrict processing of your data in specific situations, such as when contesting accuracy or lawfulness of processing. To exercise any of these rights, contact our Data Protection Officer through the details provided in your account settings or by emailing our dedicated privacy team. If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. We regularly review and update this privacy policy to reflect changes in our practices, legal requirements, or operational needs, and any modifications will be communicated through our platform with the effective date clearly indicated.