Privacy Policy
How Lotto land casino (operated by EU Lotto Ltd) collects, uses, and protects your personal data under UK GDPR and the Data Protection Act 2018.
Privacy Policy Sections
This page is a plain-English summary of the Lotto land casino Privacy Policy. The data controller is EU Lotto Ltd (company number 109514, registered at Suite A, Ocean Village Promenade, Ocean Village, Gibraltar GX11 1AA), licensed and regulated by the Gambling Commission for Great Britain under account number 38991. We process your personal data in line with UK GDPR and the Data Protection Act 2018, with the Information Commissioner's Office (ICO) as the supervisory authority for UK customers.
This summary covers what personal data is collected, why it is processed, the lawful bases under Article 6 UK GDPR, how long it is kept, who it may be shared with, and the rights you can exercise as a data subject. It is intended to help you orient yourself quickly. For the full legal text, please refer to the official policy on lottoland.co.uk linked at the bottom of this page.
Personal Data, Purpose and Lawful Basis (UK GDPR Art.6)
The table below lists the categories of personal data EU Lotto Ltd processes about UK players, illustrative examples, the purposes for which it is processed, and the lawful basis under Article 6 of the UK GDPR.
| Data Category | Examples | Purpose | Lawful Basis |
|---|---|---|---|
| Identity Data | Name, date of birth, gender, nationality, tax ID | Account registration, age and identity verification | Contract; Legal obligation |
| Contact Data | Postal address, email, phone number | Account communications, customer support, KYC | Contract; Legitimate interests |
| Financial Data | Bank details, payment card information | Processing deposits, paying winnings, AML checks | Contract; Legal obligation |
| Transaction Data | Bets, games played, deposits, withdrawals, purchases | Operating the service, fraud detection, regulatory reporting | Contract; Legal obligation |
| Technical Data | IP address, device identifiers, browser type | Site security, geo-restrictions, performance analytics | Legitimate interests |
| Profile Data | Username, password, account preferences | Authentication, personalised account experience | Contract |
| Usage Data | Website / app activity, games played, session timings | Service improvement, responsible gambling monitoring | Legitimate interests |
| Marketing & Comms Data | Marketing preferences, contact channel choices | Sending offers, newsletters, product updates | Consent |
Data Retention Periods
Personal data is kept only for as long as necessary for the purpose for which it was collected, or as required by gambling, anti-money-laundering and tax law. The headline retention windows are summarised below.
| Data Category | Retention Period | Reason |
|---|---|---|
| Basic customer information | At least 5 years after account closure | AML / counter-terrorism financing obligations |
| Contract-related data | Up to 6 years post-termination | Establishing or defending legal claims |
| Transaction & financial records | Statutory minimum (typically 5 years) | Tax, accounting and regulatory reporting |
| Marketing preferences | Until consent is withdrawn | Consent-based processing under UK GDPR |
| Technical / log data | As long as necessary | Security, fraud prevention, analytics |
Categories of Third-Party Recipients
EU Lotto Ltd does not sell personal data. Limited data may be shared with the following categories of recipients to operate the service, comply with the law, and protect customers.
| Recipient Category | Why Data May Be Shared |
|---|---|
| Lottoland Group companies | Internal administration, shared platform services |
| ID verification & fraud prevention agencies | KYC, age verification, AML and fraud screening |
| Credit reference agencies (UK customers) | Identity confirmation and affordability checks |
| Marketing service providers | Sending opted-in promotional communications |
| IT & system administration providers | Hosting, security, technical support |
| Professional advisers | Legal, banking, audit and tax advice |
| Regulators & authorities | Where legally required (e.g. UKGC, ICO, HMRC, courts) |
Your Rights Under UK GDPR & DPA 2018
As a data subject in the UK, you have the following statutory rights. They can be exercised free of charge by contacting the Data Protection Officer, subject to legal exceptions (for example, AML retention obligations).
| Right | What It Means | How to Exercise |
|---|---|---|
| Access | Request a copy of the personal data held about you | Email the DPO at [email protected] |
| Rectification | Correct inaccurate or incomplete information | Update via account settings or contact the DPO |
| Erasure | Request deletion (subject to legal retention rules) | Written request to the DPO |
| Restriction | Limit how data is processed in defined circumstances | Written request to the DPO |
| Portability | Receive data in a structured, machine-readable format | Request via the DPO |
| Objection | Object to direct marketing or legitimate-interests processing | Use unsubscribe links or contact the DPO |
| Automated decisions | Right to human review of solely automated decisions | Written request to the DPO |
| Withdraw consent | Where processing is based on consent, you may withdraw it at any time | Account preferences or contact the DPO |
Complaints & the ICO
Step 1 — Contact the DPO
- Email: [email protected]
- Address: Suite A, Ocean Village Promenade, Ocean Village, Gibraltar GX11 1AA
- EU Lotto Ltd will normally respond within one month, in line with UK GDPR.
Step 2 — Escalate
- UK supervisory authority: Information Commissioner's Office (ICO) — ico.org.uk
- Helpline: 0303 123 1113
- Gibraltar regulator: Gibraltar Regulatory Authority (GRA), [email protected]
Cookies in Brief
Lottoland uses cookies and similar technologies for authentication, security, performance analytics and (with your consent) advertising. Non-essential cookies are only set after you consent via the on-site cookie banner, in line with the Privacy and Electronic Communications Regulations (PECR) and UK GDPR. You can change your preferences at any time through the cookie settings link in the site footer.
Important Notice
This page is a summary intended for informational purposes only. It does not replace the official Lottoland UK Privacy Policy and is not a contract. In case of any conflict, the official policy published by EU Lotto Ltd prevails. Please always read the full version before submitting personal data.
Read the full Privacy Policy on lottoland.co.ukPrivacy Policy FAQ
What personal data does Lottoland UK collect?
EU Lotto Ltd collects identity and contact details (name, date of birth, address, email, phone), account and payment data, device and usage information, and verification documents required by UK Gambling Commission rules. Full categories are listed in the official lottoland.co.uk privacy policy.
What are my GDPR rights as a player?
Under UK GDPR you have the right to access your data, request correction or erasure, restrict or object to processing, and data portability. Some rights are limited where Lottoland is required to retain records to meet UKGC, anti-money-laundering and tax obligations.
How does Lottoland UK use cookies?
Lottoland uses strictly necessary cookies for login, security and fraud prevention, plus analytics and (with consent) advertising cookies. Non-essential cookies are only set after you opt in via the on-site banner, in line with PECR and UK GDPR, and you can change preferences at any time.
Does Lottoland share data with third parties?
EU Lotto Ltd shares data with payment providers, KYC and identity-verification suppliers, fraud and game-integrity partners, the UK Gambling Commission and other regulators, and group companies. Sharing is limited to what is needed for the service or required by UK law.
How long is my data retained?
Account, transaction and verification records are typically retained for at least five years after account closure to comply with UKGC licence conditions and anti-money-laundering law. Marketing and cookie data are kept for shorter periods set out in the official privacy policy.
Who do I contact about privacy queries?
Privacy queries and GDPR requests should go to the EU Lotto Ltd Data Protection Officer via the contact details on lottoland.co.uk/privacy. UK players can also complain to the Information Commissioner's Office (ICO) at ico.org.uk if a concern is not resolved.