Identity Data
Examples: Name, date of birth, address
Purpose: Account registration, age and identity verification
Lawful Basis: Contract; Legal obligation
UK GDPR and DPA 2018 in plain English
Privacy Policy
What personal data Lottoland UK (run by EU Lotto Limited) collects when you play, why, who sees it and how to use your rights under UK GDPR. A summary of the brand's own policy on lottoland.co.uk.
UK GDPRand DPA 2018
EU Lottodata controller
Legalretention periods
ICOescalation route
Categories of Third-Party Recipients
What this summary covers
UK GDPR Summary
UKGC Account: 38991
This page is a plain-English summary of the Lottoland UK Privacy Policy. Your data is handled by EU Lotto Limited (Gibraltar company no. 109514, Suite A, Ocean Village Promenade, Gibraltar GX11 1AA), which holds UK Gambling Commission licence 000-038991-R-319408-020 (account 38991). For UK customers the relevant rules are UK GDPR and the Data Protection Act 2018, and the Information Commissioner's Office (ICO) is the supervisory authority.
Below you will find what is collected, why, the lawful bases under Article 6 UK GDPR, how long data is kept, who it may be shared with and how to use your rights. The binding text is the Privacy Policy on lottoland.co.uk/privacy, linked at the bottom of this page; use this summary to find your way around it.
Important Notice
This page is a summary for information only. It does not replace the official Lottoland UK Privacy Policy and is not a contract. If the two differ, the policy published by EU Lotto Limited on lottoland.co.uk prevails. Read the full version before you hand over personal data.
Read the full Privacy Policy on lottoland.co.uk
Limited data may be shared with the following kinds of recipients so Lottoland UK can run the service, meet legal duties and protect players. The official policy lists them in full.
Recipient Category · Why Data May Be Shared
Lottoland Group companiesInternal administration, shared platform services
ID verification & fraud prevention agenciesKYC, age verification, AML and fraud screening
Credit reference and identity agencies (UK customers)Identity confirmation and account checks
Marketing service providersSending opted-in promotional communications
IT & system administration providersHosting, security, technical support
Professional advisersLegal, banking, audit and tax advice
Regulators & authoritiesWhere legally required (e.g. UKGC, ICO, HMRC, courts)
Your Data Rights as a Lottoland UK Player
As a UK data subject you have the statutory rights below. Send a request through the contact form in the Lottoland Help Centre (help.lottoland.co.uk) and ask for Data Protection. Legal exceptions apply, for example where records must be kept for anti-money-laundering reasons.
| Right | What It Means | How to Exercise |
|---|---|---|
| Access | Request a copy of the personal data held about you | Help Centre contact form, marked as a data request |
| Rectification | Correct inaccurate or incomplete information | Update in your account or use the Help Centre form |
| Erasure | Request deletion (subject to legal retention rules) | Request through the Help Centre form |
| Restriction | Limit how data is processed in defined circumstances | Request through the Help Centre form |
| Portability | Receive data in a structured, machine-readable format | Request through the Help Centre form |
| Objection | Object to direct marketing or legitimate-interests processing | Use unsubscribe links or the Help Centre form |
| Automated decisions | Right to human review of solely automated decisions | Request through the Help Centre form |
| Withdraw consent | Where processing is based on consent, you may withdraw it at any time | Account preferences or the Help Centre form |
Swipe the table sideways on a phone to see every column.
How Long Lottoland UK Keeps Your Data
Data is kept only as long as it is needed for its purpose or as gambling, anti-money-laundering and tax law require. The exact periods are set in Lottoland's official policy; the table shows the logic.
| Data Category | Retention Period | Reason |
|---|---|---|
| Basic customer information | For the period anti-money-laundering law requires after account closure | AML / counter-terrorism financing obligations |
| Contract-related data | For as long as legal claims could arise after the account ends | Establishing or defending legal claims |
| Transaction & financial records | Statutory minimum | Tax, accounting and regulatory reporting |
| Marketing preferences | Until consent is withdrawn | Consent-based processing under UK GDPR |
| Technical / log data | As long as necessary | Security, fraud prevention, analytics |
Swipe the table sideways on a phone to see every column.
Complaints & the ICO
Step 1 - Contact Lottoland
- Contact: Help Centre contact form, marked as a data protection query
- Address: Suite A, Ocean Village Promenade, Ocean Village, Gibraltar GX11 1AA
- UK GDPR gives a data controller one month to respond to a request.
Step 2 - Escalate to the ICO
- UK supervisory authority: Information Commissioner's Office (ICO) - ICO contact page
- Gibraltar regulator: Gibraltar Regulatory Authority (GRA) - gra.gi, for data matters that fall under Gibraltar law
Cookies in Brief
Lottoland uses cookies and similar technologies for login, security, performance analytics and, with your consent, advertising. Under PECR and UK GDPR, non-essential cookies need your consent through the cookie banner on lottoland.co.uk, and you can change your choice later in the cookie settings there.
Personal Data, Purpose and Lawful Basis (UK GDPR Art.6)
The table lists the kinds of personal data an online casino account involves, with examples, the purpose and the lawful basis under Article 6 UK GDPR. The examples are illustrative; the exact list is in Lottoland's own policy.
Contact Data
Examples: Postal address, email, phone number
Purpose: Account communications, customer support, KYC
Lawful Basis: Contract; Legitimate interests
Financial Data
Examples: Payment card or bank details
Purpose: Processing deposits, paying winnings, AML checks
Lawful Basis: Contract; Legal obligation
Transaction Data
Examples: Bets, game activity, deposits, withdrawals
Purpose: Operating the service, fraud detection, regulatory reporting
Lawful Basis: Contract; Legal obligation
Technical Data
Examples: IP address, device identifiers, browser type
Purpose: Site security, geo-restrictions, performance analytics
Lawful Basis: Legitimate interests
Profile Data
Examples: Username, account preferences
Purpose: Authentication, personalised account experience
Lawful Basis: Contract
Usage Data
Examples: Website / app activity, games played, session timings
Purpose: Service improvement, responsible gambling monitoring
Lawful Basis: Legitimate interests
Marketing & Comms Data
Examples: Marketing preferences, contact channel choices
Purpose: Sending offers, newsletters, product updates
Lawful Basis: Consent
Lottoland UK Privacy Policy FAQ
What personal data does Lottoland UK collect?
An account involves identity and contact details, payment and transaction data, device and usage information, and the verification documents that UK Gambling Commission rules require. The full categories are listed in Lottoland's official privacy policy.
What are my GDPR rights as a player?
Under UK GDPR you can ask for access to your data, correction or erasure, restriction or objection to processing, and portability. Some rights are limited where Lottoland must keep records for UKGC, anti-money-laundering and tax reasons. Send requests through the Help Centre contact form.
How does Lottoland UK use cookies?
Lottoland uses necessary cookies for login, security and fraud prevention, plus analytics and, with consent, advertising cookies. Non-essential ones are set only after you opt in through the banner on lottoland.co.uk, and you can change your choice later.
Does Lottoland share data with third parties?
Data can go to payment providers, identity-verification and fraud-prevention suppliers, group companies, and regulators such as the UK Gambling Commission. Sharing is limited to what the service or the law requires; the official policy has the full list.
How long is my data retained?
Account, transaction and verification records are kept for the period UKGC licence conditions and anti-money-laundering law require. Marketing and cookie data follow the shorter periods set out in the official privacy policy.
Who do I contact about privacy queries?
Use the contact form in the Lottoland Help Centre (help.lottoland.co.uk) and mark it as a data protection query; the official policy at lottoland.co.uk/privacy has the formal details. If the concern is not resolved, UK players can complain to the Information Commissioner's Office (ICO) through ico.org.uk.
What to do next
Ready to Play at Lottoland casino?
Your account, your data and your limits all sit in one place at Lottoland, under UK Gambling Commission account 38991. When you have read the policy, the quickest way in is to open your Lottoland account
18+. This page is a summary - the binding document is on lottoland.co.uk.
- EU Lotto Limited is the controller
- Rights exercised in your account
- ICO is the UK regulator