Xl Casino Privacy Policy
At Xl Casino we take the privacy of our players seriously. This privacy policy explains how we collect, use, share and protect personal information when you register, play or otherwise interact with our services. The policy is intended to be clear and practical while describing legal and operational commitments.
By using Xl Casino you acknowledge this policy and consent to the processing described, subject to your rights under applicable law. If you are under 18 you must not use our services.
Information We Collect
We collect information that is necessary for account management, payment processing, safe play and compliance with legal obligations. The categories of personal data we may collect include:
- Contact and identity details - name, date of birth, residential address, national identification numbers where verification is necessary.
- Account information - username, password hash, account settings and preferences.
- Financial and transactional data - payment method details, transaction history, deposits, withdrawals and currency used.
- Verification and KYC data - documents and checks used to confirm identity, address and source of funds when required.
- Device and technical data - IP address, device identifiers, browser type, operating system and software versions.
- Usage and gameplay data - game selections, bet amounts, wins and losses, session times and interaction logs.
- Communications - correspondence with our support team, including any information you choose to provide in messages.
- Marketing and preference data - opt-in choices and responses to promotional offers.
- Third-party sources - information obtained from partners, payment providers or publicly available sources to supplement the data above.
How We Use Information
We use collected information to operate and improve our services, protect users and comply with our obligations. Primary purposes include:
- Account operation - to create, manage and administer your account and to provide customer support.
- Payments and withdrawals - to process deposits, payouts, refunds and any chargebacks or disputes.
- Verification and compliance - to perform identity checks, anti-money laundering screening and to meet legal requirements.
- Security and fraud prevention - to detect, prevent and investigate suspicious or prohibited activity.
- Service improvement - to analyze usage patterns, optimise game performance and enhance the user experience.
- Marketing - to send promotional offers and communications where you have given consent, and to personalise content.
- Legal and regulatory - to respond to lawful requests from authorities and to enforce our terms and conditions.
- Research and analytics - to generate anonymised or aggregated insights for internal analysis and product development.
Cookies and Similar Technologies
We and our partners use cookies and similar technologies to enable core site functionality, personalise content and analyse site performance. These technologies help us remember preferences, maintain sessions and deliver relevant promotions.
Typical cookie categories:
- Essential cookies - required to log in, place bets and maintain secure sessions.
- Performance cookies - to measure site usage and identify areas for improvement.
- Functionality cookies - to remember preferences such as language or display settings.
- Advertising and analytics cookies - used by third parties to provide tailored ads and to analyse campaign effectiveness.
You can manage cookie settings through your browser controls and certain device settings. Blocking cookies may affect core functionality of Xl Casino and limit features such as persistent login or personalised offers.
Data Sharing
We only share personal information where it is necessary to provide our services or where required by law. Recipients may include:
- Service providers - companies that support platform operations such as hosting, payment processing, identity verification and customer support.
- Payment partners - banks and payment processors facilitating transactions.
- Security partners - vendors who help detect and prevent fraud and abuse.
- Legal and regulatory authorities - where disclosure is necessary to comply with legal obligations or lawful requests.
- Business transfers - in the event of a merger, acquisition or sale of assets, personal data may be transferred as part of the transaction, subject to confidentiality and contractual protections.
- Aggregated information - anonymised or de-identified data used for analytics and reporting that does not identify individuals.
We require third parties to process data in accordance with contractual terms and to maintain appropriate security safeguards.
Data Security
Protecting personal data is a priority. We employ a combination of technical and organisational measures to safeguard information against unauthorised access, disclosure, alteration and destruction.
- Encryption of sensitive data in transit and where appropriate at rest.
- Access controls - role-based access to systems and data, and principles of least privilege.
- Regular security assessments and logging to detect unusual activity.
- Staff training on data protection responsibilities and incident response procedures.
- Formal processes to handle suspected data breaches promptly, including investigation and notification where required.
No method of transmission or storage is entirely risk free, but we continuously review and improve our controls to mitigate risk.
Data Retention
We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy and to meet legal or regulatory obligations. Retention considerations include:
- Operational needs - to maintain accounts, support transactions and resolve disputes.
- Legal and regulatory obligations - certain information may be retained to comply with tax, anti-money laundering and record-keeping requirements.
- Dispute resolution - data required for investigations or legal claims will be held for an appropriate period.
- Deletion and anonymisation - when data is no longer required it will be securely deleted or irreversibly anonymised.
If you close your account we will retain minimal information to meet any outstanding obligations and to prevent fraud or misuse.
Your Rights
You may have rights in relation to the personal data we hold about you. Depending on applicable law, these rights can include:
- Request access to the personal data we process about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of data where processing is no longer necessary and no legal obligations require retention.
- Request restriction of processing in limited circumstances.
- Object to certain types of processing, including direct marketing where applicable.
- Request portability of data you provided in a structured, commonly used and machine-readable format.
To exercise any of these rights we will ask you to verify your identity for security reasons. Some requests may be subject to legal exemptions or reasonable administrative charges. See the Contact Information section for how to reach our data team.
Third-Party Services
Our platform integrates third-party services such as game providers, analytics tools and payment gateways. Those providers may collect data directly or process data on our behalf under contract. We recommend reviewing the privacy notices of third-party providers used within Xl Casino, as their practices are governed by their own policies.
We seek to work only with third parties that provide appropriate safeguards, but we are not responsible for the privacy practices of external sites or services accessed through our platform.
International Transfers
Personal data may be transferred to and processed in countries outside your home jurisdiction for operational or service reasons. Where transfers are made, we implement safeguards to protect the privacy and security of the data, such as contractual protections or other appropriate measures. Transfers are limited to purposes set out in this policy.
If you have concerns about cross-border transfers, please contact us using the details below for more information about the safeguards in place.
Policy Updates
We may update this privacy policy to reflect changes in our practices or legal requirements. When we make material changes we will notify registered users by email or by posting a prominent notice within the platform. We encourage you to review the policy regularly to stay informed about how we handle personal information.
Changes become effective from the date the revised policy is posted unless otherwise stated.
Contact Information
If you have questions, requests or concerns about this privacy policy or our data practices, please contact our support team at [email protected]. You may also find additional information in your account settings and help pages within the Xl Casino platform.
Last updated: